Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/cf4ab4-e914-40e1-82df-14dc7ec0495d/1/_GG8qubp_g9Px6E1DCD6hAdsvxo.roa
File: _GG8qubp_g9Px6E1DCD6hAdsvxo.roa (raw, json)
Hash identifier: 7gqHqwq0qb4WMuA79mugfXtlkRY7UZiMzeqs0bw/bLo=
Subject key identifier: FC:61:BC:AA:E6:E9:FE:0F:4F:C7:A1:35:0C:20:FA:84:07:6C:BF:1A
Certificate issuer: /CN=fcd7a721eda459ebdf98e029f87c90a980e81d94
Certificate serial: 01942520A2F7B9BE2060797F4F91B6F62F92
Authority key identifier: FC:D7:A7:21:ED:A4:59:EB:DF:98:E0:29:F8:7C:90:A9:80:E8:1D:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_NenIe2kWevfmOAp-HyQqYDoHZQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/cf4ab4-e914-40e1-82df-14dc7ec0495d/1/_GG8qubp_g9Px6E1DCD6hAdsvxo.roa
Signing time: Thu 02 Jan 2025 03:48:03 +0000
ROA not before: Thu 02 Jan 2025 03:48:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 396982
IP address blocks: 46.235.152.0/21 maxlen: 21
185.180.48.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:20:a2:f7:b9:be:20:60:79:7f:4f:91:b6:f6:2f:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcd7a721eda459ebdf98e029f87c90a980e81d94
Validity
Not Before: Jan 2 03:48:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fc61bcaae6e9fe0f4fc7a1350c20fa84076cbf1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:09:ed:22:3b:27:7e:45:0d:d2:cb:70:44:05:
c4:fb:7e:6b:67:b0:d3:ef:9a:71:96:a6:e7:5d:4c:
62:e5:02:c0:8d:a2:80:88:3a:ae:a3:84:04:5e:1c:
bf:5f:18:a9:32:b2:ca:01:e4:8f:2a:b7:67:90:11:
87:bc:e9:be:5d:84:65:72:49:3a:75:a6:2d:f9:80:
3b:14:20:62:8d:f8:03:a9:85:9c:43:98:bf:f2:64:
aa:76:67:e2:97:a5:b4:eb:f1:fc:13:ea:32:ae:38:
ce:a5:9d:ca:3e:5c:cc:14:1a:eb:43:43:6b:89:6c:
55:ec:08:9c:df:0a:ae:84:2f:52:eb:43:94:1b:be:
f6:2f:d4:71:f7:14:86:a6:64:98:fa:69:23:87:fa:
db:52:48:12:da:55:48:38:35:7e:e9:fc:32:07:16:
a8:8a:9a:e5:4b:2d:96:d4:5f:47:7a:b4:9e:38:cf:
22:e4:df:7b:28:97:ec:89:98:95:e1:d1:09:b1:37:
b2:74:ed:82:3d:38:35:b0:f8:3d:37:0a:91:3b:0b:
6a:fb:48:6e:67:5a:4f:c8:0f:9c:2f:22:e2:37:0f:
0d:f5:b2:91:6d:9f:f4:c2:5c:fb:7e:d2:51:e8:d6:
63:19:c9:8b:64:29:9f:39:98:66:5f:4e:04:92:a4:
4c:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:61:BC:AA:E6:E9:FE:0F:4F:C7:A1:35:0C:20:FA:84:07:6C:BF:1A
X509v3 Authority Key Identifier:
keyid:FC:D7:A7:21:ED:A4:59:EB:DF:98:E0:29:F8:7C:90:A9:80:E8:1D:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_NenIe2kWevfmOAp-HyQqYDoHZQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/cf4ab4-e914-40e1-82df-14dc7ec0495d/1/_GG8qubp_g9Px6E1DCD6hAdsvxo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/cf4ab4-e914-40e1-82df-14dc7ec0495d/1/_NenIe2kWevfmOAp-HyQqYDoHZQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.235.152.0/21
185.180.48.0/22
Signature Algorithm: sha256WithRSAEncryption
37:00:c6:fd:df:25:49:38:cd:0f:ac:eb:f2:91:86:f6:8b:71:
25:f3:cd:55:82:b5:6f:6d:99:18:03:40:4c:8a:d1:97:3b:33:
cd:42:58:46:30:43:4b:fa:be:1c:e2:f8:26:6f:fe:10:fa:40:
6c:ca:13:cb:13:a4:0c:e8:00:e2:76:7a:50:a0:b5:99:63:c9:
72:cf:98:ca:8a:92:78:2a:12:79:be:1c:b5:cb:71:27:bd:c4:
a9:35:39:a6:12:e9:d9:e1:66:6e:58:9f:2d:7a:f6:55:5f:08:
72:b0:12:db:82:cf:44:87:0f:53:88:83:33:7b:73:b4:73:3b:
e8:39:56:ee:af:63:c4:fe:c1:4b:b4:45:08:ce:b1:6c:ea:6f:
0a:bb:a2:08:ba:71:35:20:8b:d6:d8:39:32:ff:de:cc:71:31:
b4:0a:4d:35:45:94:71:d8:d3:a0:44:56:84:1a:74:69:47:7d:
00:72:55:93:43:25:1f:6f:e2:b5:09:42:98:23:03:11:96:51:
c7:c7:82:47:78:22:bd:d3:6f:89:a0:67:71:8b:a0:73:eb:3b:
96:a6:79:de:1d:8c:8f:b3:79:ad:67:e4:47:94:5c:c1:28:b2:
8e:7a:3d:0d:03:a4:be:4e:68:b8:72:4d:48:d3:a7:f2:ba:77:
d0:d3:32:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:43:06 2025 by rpki-client