Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/H7JO-gIl0Bj6nh86Gb0TRMhGuHE.roa
File: H7JO-gIl0Bj6nh86Gb0TRMhGuHE.roa (raw, json)
Hash identifier: u0r0yHY4gAZVAdL4EDi0zIhNAGCD50ehh395WT6RxT0=
Subject key identifier: 1F:B2:4E:FA:02:25:D0:18:FA:9E:1F:3A:19:BD:13:44:C8:46:B8:71
Certificate issuer: /CN=d4375814344df0bf6d017733acdc488f002631b2
Certificate serial: 0194221F32DA2A50AF23BDE1C982E7EE562A
Authority key identifier: D4:37:58:14:34:4D:F0:BF:6D:01:77:33:AC:DC:48:8F:00:26:31:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1DdYFDRN8L9tAXczrNxIjwAmMbI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/H7JO-gIl0Bj6nh86Gb0TRMhGuHE.roa
Signing time: Wed 01 Jan 2025 13:47:37 +0000
ROA not before: Wed 01 Jan 2025 13:47:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9318
IP address blocks: 46.8.99.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:32:da:2a:50:af:23:bd:e1:c9:82:e7:ee:56:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4375814344df0bf6d017733acdc488f002631b2
Validity
Not Before: Jan 1 13:47:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1fb24efa0225d018fa9e1f3a19bd1344c846b871
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b7:f3:b0:33:6c:42:b2:fb:ef:07:8a:ac:ab:
61:38:e7:aa:6f:e2:db:f0:eb:9f:4b:69:04:c2:2b:
2b:e8:6d:d6:8c:ea:af:cf:42:c9:f7:78:de:4a:62:
2d:f1:93:03:9d:de:ec:00:19:c4:b8:52:d2:de:f6:
d2:b9:de:fe:7c:87:f8:ee:74:5c:4a:11:c2:0f:aa:
c1:36:18:cb:05:3c:a4:3b:7b:e9:cf:58:16:35:eb:
0e:4c:7c:b4:5c:19:95:78:d8:8c:4a:39:d0:c0:0b:
58:f2:ad:4a:fb:85:81:fb:ca:69:23:98:b7:dd:46:
4f:1c:52:0c:cd:10:1d:20:3a:a8:ff:5d:72:38:4a:
e9:e2:60:4a:34:6a:50:a8:ea:91:0f:68:9f:15:bc:
a3:ad:96:74:47:8a:c7:ab:08:1b:dc:de:74:f4:51:
39:34:67:d3:e6:bf:0c:ce:5a:e3:22:92:1d:7b:2e:
03:a5:ac:39:2a:b2:36:28:eb:e3:f1:82:71:98:ea:
a7:ad:fa:cd:a1:6d:5c:65:2a:27:c5:4d:df:71:0b:
d7:6c:54:18:91:45:30:37:fc:d9:ec:43:1a:c6:9f:
e6:8f:34:be:6a:d6:28:57:50:85:22:82:aa:ba:9f:
85:34:e2:61:34:09:5e:1f:e7:b3:ff:fc:ee:d8:ea:
f4:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:B2:4E:FA:02:25:D0:18:FA:9E:1F:3A:19:BD:13:44:C8:46:B8:71
X509v3 Authority Key Identifier:
keyid:D4:37:58:14:34:4D:F0:BF:6D:01:77:33:AC:DC:48:8F:00:26:31:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DdYFDRN8L9tAXczrNxIjwAmMbI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/H7JO-gIl0Bj6nh86Gb0TRMhGuHE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/1DdYFDRN8L9tAXczrNxIjwAmMbI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.8.99.0/24
Signature Algorithm: sha256WithRSAEncryption
44:ea:54:6d:04:84:e0:ed:1d:80:c5:0a:5a:33:b6:9a:2b:60:
be:c0:36:f4:b8:ef:46:93:b7:6f:c2:6f:bb:e3:02:e3:00:1f:
2e:8a:a0:9f:6b:b2:d5:4f:8d:a9:61:c7:a2:06:1f:ed:a4:3b:
b2:52:3d:24:69:e8:b4:2b:69:e9:0c:05:61:b4:bc:85:29:90:
f8:04:84:bd:09:a5:cf:3b:b5:5d:cb:b2:0f:fe:ff:b9:1f:52:
6b:7c:5a:a5:bd:6f:10:b3:9e:e2:7a:a5:d6:91:61:86:bd:1c:
19:6b:b8:39:e7:65:42:1f:09:06:52:c6:a2:27:e1:e7:8b:47:
31:58:18:d6:ce:9e:6c:79:18:48:b8:95:69:f2:2a:e8:47:38:
75:21:dd:d0:0c:6a:d8:22:1a:31:83:e4:21:c4:55:b0:d5:a8:
6a:47:b4:5d:71:35:c6:af:fc:c9:41:6e:92:1d:da:51:b0:c2:
4e:4c:29:9a:bd:d1:be:c2:77:ab:83:13:67:1d:ed:43:85:8e:
7e:95:a2:25:1d:50:b2:7e:5f:23:dc:55:38:9b:39:21:04:a1:
56:c6:2f:1b:5e:88:bc:f4:95:05:c2:ac:7d:64:2f:eb:96:0d:
77:f4:e3:78:5d:84:76:11:87:2f:89:05:6d:5f:3f:0f:2b:f5:
d9:da:8c:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:36:27 2025 by rpki-client