Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/hADWb8Ul-X_A2ySCHhCgfFnA2Yo.roa
File: hADWb8Ul-X_A2ySCHhCgfFnA2Yo.roa (raw, json)
Hash identifier: iOQmVmIc5hJAt4h0ebp8fY1nzsr9aufJIFiZdvi/Vd0=
Subject key identifier: 84:00:D6:6F:C5:25:F9:7F:C0:DB:24:82:1E:10:A0:7C:59:C0:D9:8A
Certificate issuer: /CN=50980fb6ade858f2652e736993126c85759f06d9
Certificate serial: 0195C902AA481D474C0FD807E742D3F24282
Authority key identifier: 50:98:0F:B6:AD:E8:58:F2:65:2E:73:69:93:12:6C:85:75:9F:06:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UJgPtq3oWPJlLnNpkxJshXWfBtk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/hADWb8Ul-X_A2ySCHhCgfFnA2Yo.roa
Signing time: Mon 24 Mar 2025 16:35:49 +0000
ROA not before: Mon 24 Mar 2025 16:35:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213541
IP address blocks: 46.148.210.0/24 maxlen: 24
46.148.211.0/24 maxlen: 24
91.204.181.0/24 maxlen: 24
195.234.90.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:c9:02:aa:48:1d:47:4c:0f:d8:07:e7:42:d3:f2:42:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50980fb6ade858f2652e736993126c85759f06d9
Validity
Not Before: Mar 24 16:35:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8400d66fc525f97fc0db24821e10a07c59c0d98a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c7:9c:4a:a4:82:85:19:b3:e2:a0:18:bc:ce:
e0:ab:e8:be:f8:74:cc:c4:4f:9e:b8:9a:60:5a:e9:
e4:0c:2b:5b:52:e5:55:34:1d:eb:6b:31:30:e4:8c:
00:2f:b9:94:be:ce:b5:6e:da:f5:3a:52:3e:ca:88:
3b:39:f6:41:34:11:0c:4a:92:c5:1c:16:4a:1c:97:
2d:bc:15:4a:bc:98:42:dc:ee:e3:88:de:e5:3d:20:
99:c4:69:12:7c:dc:cb:e9:5d:fe:85:5f:38:16:16:
2e:ca:4c:97:5f:e2:f0:a3:32:9e:a2:78:c7:82:f1:
6a:54:48:fc:37:92:9d:db:89:f0:8b:28:b8:91:a6:
db:9e:f9:4e:b9:96:01:62:fd:b2:ef:c4:19:95:b2:
30:ac:01:64:8a:f8:69:b4:c7:5d:d8:72:c7:da:ad:
12:a1:b3:cb:d9:fa:ed:78:ba:4c:30:3b:d7:2d:99:
b7:14:c9:4f:03:39:d5:47:3e:90:9a:30:e4:bd:6c:
21:ef:6e:d0:c6:14:b1:d4:e2:91:ea:6b:68:e4:fb:
8b:09:75:11:22:be:3c:75:c2:f6:de:3b:5f:0a:75:
c3:ad:f1:3a:ec:6c:77:92:57:cd:c2:93:ea:3f:0e:
75:39:78:49:4f:b4:91:9a:07:34:6b:a6:8e:7d:27:
a1:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:00:D6:6F:C5:25:F9:7F:C0:DB:24:82:1E:10:A0:7C:59:C0:D9:8A
X509v3 Authority Key Identifier:
keyid:50:98:0F:B6:AD:E8:58:F2:65:2E:73:69:93:12:6C:85:75:9F:06:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJgPtq3oWPJlLnNpkxJshXWfBtk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/hADWb8Ul-X_A2ySCHhCgfFnA2Yo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/UJgPtq3oWPJlLnNpkxJshXWfBtk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.148.210.0/23
91.204.181.0/24
195.234.90.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:fb:7d:58:36:d7:1d:10:8e:4e:2a:05:4f:a9:d3:32:a9:6a:
29:42:81:9d:7f:2c:e0:16:4d:fe:5f:c4:e8:e8:47:47:81:22:
2d:63:c5:21:58:06:e1:5e:32:c0:a6:3b:26:85:6b:c4:60:55:
6a:de:11:47:4a:1a:f1:9c:2f:e7:67:93:85:d3:80:dc:53:36:
45:56:ba:e4:90:3d:4d:81:7e:a0:20:79:ac:d4:7b:4e:6f:e9:
39:97:79:31:d3:ec:dd:a1:f0:b9:7f:38:d3:ba:77:75:f0:cf:
32:77:6c:14:9d:f9:74:7b:05:1d:19:9d:cd:38:4a:78:27:ef:
20:13:1b:4d:2e:36:a5:13:a9:14:eb:fa:a8:5f:20:f9:5b:42:
4b:0d:b1:5a:53:ec:cd:6d:2f:48:85:9e:26:02:31:ef:9f:13:
4c:8b:4a:fb:30:5a:34:73:8d:40:69:04:4a:b4:32:33:9a:9d:
f6:3e:4e:29:ae:aa:b3:92:ea:eb:19:e3:dd:52:1e:6d:b3:12:
86:ef:01:8b:3d:3b:60:ff:af:ed:4a:82:d3:8d:07:69:db:1c:
b5:53:c4:7e:3b:7f:f6:3e:b9:ce:0f:12:9d:17:9c:47:9a:5f:
13:ad:3e:82:36:51:30:2a:77:5f:a6:e3:bd:07:1e:9a:9c:76:
a2:86:f0:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 15:34:42 2025 by rpki-client