Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/3c6876-96ae-48af-ae7a-ff05d446e7fd/1/u36ax0xpTJgFKndS5YsGMSqnq7s.roa
File: u36ax0xpTJgFKndS5YsGMSqnq7s.roa (raw, json)
Hash identifier: uik0LuaE13Pf2kO3ppprzpbjfY2DRZ0GXchvvKMGvNo=
Subject key identifier: BB:7E:9A:C7:4C:69:4C:98:05:2A:77:52:E5:8B:06:31:2A:A7:AB:BB
Certificate issuer: /CN=b9114dff36b948b56c211d25f398751d35b93cc2
Certificate serial: 019422FC1E3EB0CFACBD0DFF508F7D21FF68
Authority key identifier: B9:11:4D:FF:36:B9:48:B5:6C:21:1D:25:F3:98:75:1D:35:B9:3C:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRFN_za5SLVsIR0l85h1HTW5PMI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/3c6876-96ae-48af-ae7a-ff05d446e7fd/1/u36ax0xpTJgFKndS5YsGMSqnq7s.roa
Signing time: Wed 01 Jan 2025 17:48:55 +0000
ROA not before: Wed 01 Jan 2025 17:48:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51088
IP address blocks: 185.46.173.0/24 maxlen: 24
2a12:4180::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:1e:3e:b0:cf:ac:bd:0d:ff:50:8f:7d:21:ff:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9114dff36b948b56c211d25f398751d35b93cc2
Validity
Not Before: Jan 1 17:48:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bb7e9ac74c694c98052a7752e58b06312aa7abbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:da:08:91:ed:37:1c:f1:54:80:68:e4:9e:75:
b0:70:1c:24:cf:44:80:1f:62:6f:53:49:18:45:26:
bd:1f:a0:fe:51:ef:d1:6c:a1:98:ea:0c:8b:24:e5:
50:5e:b8:94:a9:1d:6c:82:f7:88:1b:8d:dd:16:fd:
34:ce:11:92:2b:32:3e:5c:e7:60:73:47:9a:c2:3e:
1a:ae:3c:e6:38:ac:f5:70:6f:96:d2:13:24:49:1f:
31:52:75:fc:40:1b:6d:6f:77:b1:79:55:40:f6:3a:
eb:30:21:3d:ad:77:27:43:14:95:3c:fa:95:70:bf:
9f:a6:43:0f:96:6d:e5:12:63:34:6f:ac:89:60:cf:
37:64:a1:ba:8b:ce:55:6c:3f:ea:90:b1:bb:56:cb:
ad:4d:48:1c:5f:7f:9e:42:43:3d:1a:89:7e:03:db:
74:9f:b0:8e:e8:f0:24:3a:0d:a3:2b:49:a9:fc:91:
1a:d5:13:95:c2:27:f7:f0:ef:3a:c4:10:ed:69:c3:
65:9a:40:de:ee:bf:14:e7:47:0c:04:e5:0a:cf:09:
f3:44:cb:07:2c:d4:b1:6a:56:47:82:a6:d6:85:1d:
2c:6b:f9:1e:41:f8:c4:ca:39:77:df:10:bc:9c:b2:
a9:66:da:3e:6a:59:b4:d8:53:c0:8e:0e:b4:e0:56:
b8:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:7E:9A:C7:4C:69:4C:98:05:2A:77:52:E5:8B:06:31:2A:A7:AB:BB
X509v3 Authority Key Identifier:
keyid:B9:11:4D:FF:36:B9:48:B5:6C:21:1D:25:F3:98:75:1D:35:B9:3C:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRFN_za5SLVsIR0l85h1HTW5PMI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/3c6876-96ae-48af-ae7a-ff05d446e7fd/1/u36ax0xpTJgFKndS5YsGMSqnq7s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/3c6876-96ae-48af-ae7a-ff05d446e7fd/1/uRFN_za5SLVsIR0l85h1HTW5PMI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.46.173.0/24
IPv6:
2a12:4180::/29
Signature Algorithm: sha256WithRSAEncryption
82:bc:81:18:1d:46:9e:5a:3b:2d:20:6e:81:a6:12:c3:d6:69:
a2:db:ab:b3:21:47:20:4f:09:46:b8:4f:40:b0:76:b7:4f:0d:
fa:04:42:7f:af:a4:75:c1:e7:64:db:86:f6:4b:89:45:8e:c5:
db:ad:02:94:c8:22:fa:0d:f9:04:52:47:2c:ff:7f:24:46:6f:
10:e5:8e:8a:87:b5:52:53:28:7e:cf:84:81:20:4a:c9:f2:d5:
74:a6:3d:4e:49:68:27:51:c9:69:af:37:ef:23:80:44:43:f9:
19:e3:a5:8b:78:df:ae:eb:c0:4a:fb:41:56:8c:ef:79:c3:02:
94:55:29:c8:66:ea:6b:ab:13:e7:29:38:5d:e6:3f:df:6a:bc:
88:06:9d:39:a5:61:5e:e3:89:ac:78:6d:9a:8c:5b:ee:20:57:
06:3e:a1:e8:4f:d0:f2:f3:08:f6:57:e5:96:68:62:0b:c8:55:
3a:0b:1a:66:5c:6c:34:37:b9:a8:70:d6:bd:f9:54:4b:a6:ee:
06:04:8e:e7:cc:3a:23:14:9e:a4:2f:bb:84:70:d4:a3:96:bb:
45:00:0c:96:1a:b0:42:e7:12:ed:8e:c8:90:1c:50:6f:2a:c8:
12:5d:39:85:09:00:58:18:f4:7f:af:cc:d0:7b:97:4e:9f:18:
2f:f7:1c:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 13:20:40 2025 by rpki-client