Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/6ugQ7Op1QlEgpnnjZORYaHyj-n4.roa
File: 6ugQ7Op1QlEgpnnjZORYaHyj-n4.roa (raw, json)
Hash identifier: da6x8ewYyKy59i5CpZgWQCl1+/GS7ELU/wuWQ0Fl69Q=
Subject key identifier: EA:E8:10:EC:EA:75:42:51:20:A6:79:E3:64:E4:58:68:7C:A3:FA:7E
Certificate issuer: /CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Certificate serial: 01941FFA09E44C06AEC660B53BD6663A8015
Authority key identifier: 44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/6ugQ7Op1QlEgpnnjZORYaHyj-n4.roa
Signing time: Wed 01 Jan 2025 03:47:47 +0000
ROA not before: Wed 01 Jan 2025 03:47:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212165
IP address blocks: 185.246.118.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:09:e4:4c:06:ae:c6:60:b5:3b:d6:66:3a:80:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Validity
Not Before: Jan 1 03:47:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eae810ecea75425120a679e364e458687ca3fa7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:de:62:18:08:6e:1c:f6:74:b9:2a:d1:e3:11:
ab:37:33:d3:4c:8b:57:06:b7:5e:63:43:82:5f:8b:
6f:76:67:07:02:91:38:b0:9d:3b:04:e5:67:02:a9:
b3:8c:e0:3a:5d:35:7f:c1:29:f9:35:7c:58:0b:00:
6f:ec:ca:09:77:39:47:6c:0f:a7:13:8d:84:68:2e:
fe:82:de:63:27:8e:1d:5e:7d:d8:18:1e:21:06:60:
db:68:1b:6b:f4:d0:92:0b:c2:37:35:70:49:5c:f7:
a4:bb:a8:ea:70:60:1b:8f:62:fd:5c:21:39:6b:67:
6f:11:0a:c1:15:f3:fc:26:31:dc:de:93:fb:3d:26:
0e:31:d3:1f:00:63:78:c2:75:c1:86:69:06:c1:4b:
85:fb:4e:0b:b7:54:b8:96:18:53:62:5c:7c:6c:0d:
81:67:5b:58:a2:f3:79:0a:fc:c0:01:4c:ba:e5:90:
62:7f:e9:df:ed:06:1a:71:e0:5a:65:58:19:72:00:
86:fe:f0:31:a3:8c:7b:50:80:ef:3a:4e:a7:2d:e9:
87:6f:59:de:81:00:b3:d0:c4:4c:06:58:ac:42:45:
42:80:b7:07:1e:53:22:e0:4e:d6:d2:9e:e4:45:52:
a6:3b:25:3d:3c:64:17:b9:96:79:85:40:51:4e:82:
3c:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:E8:10:EC:EA:75:42:51:20:A6:79:E3:64:E4:58:68:7C:A3:FA:7E
X509v3 Authority Key Identifier:
keyid:44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/6ugQ7Op1QlEgpnnjZORYaHyj-n4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.246.118.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:03:59:f0:60:a8:7d:9f:e1:4e:a7:53:5e:7b:49:95:9c:b0:
9d:d8:a3:8a:45:14:55:b6:d4:b4:e1:6e:b6:03:9d:48:9b:ac:
be:07:92:8a:df:13:fb:3e:f8:d9:2a:6e:85:78:b1:2b:71:b8:
b9:10:cd:fa:bf:c1:8a:3c:0b:72:a1:e1:d1:b0:08:f9:d4:bc:
f1:e3:81:5a:bf:9d:41:70:d0:33:db:7d:86:58:83:de:5f:a6:
61:94:72:5e:da:5e:4f:e0:2d:2e:3e:a6:01:92:36:26:f7:56:
8b:52:83:52:68:e1:cf:63:4b:a7:4d:4c:1f:7d:fb:50:b8:03:
d9:e3:4c:97:2f:d9:fb:ff:26:d5:11:df:32:e4:7e:93:d0:08:
18:9d:e6:06:76:24:94:39:54:08:9e:4f:f4:cd:f2:5c:39:a8:
60:b5:32:2e:9c:b3:31:a7:20:80:c6:d2:4d:31:4d:5e:38:13:
78:2a:a1:a3:14:e7:53:43:19:d2:0d:87:9c:e9:35:28:40:84:
a9:5e:51:c3:75:67:35:66:29:26:21:62:8f:65:d2:b8:1d:78:
c6:08:87:bd:23:e7:17:9e:c7:0c:6b:08:93:9c:98:8f:28:60:
d1:54:ce:7f:ee:80:d2:9d:27:66:eb:4e:4e:19:63:f6:2a:5c:
28:5f:59:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:24:54 2025 by rpki-client