Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/95YGR7GHxoOFHcl2kzYmYoOeSkc.roa
File: 95YGR7GHxoOFHcl2kzYmYoOeSkc.roa (raw, json)
Hash identifier: UCf659KnzXrGdW4OTnX0fxXlcLNH7iiMM2EMLxA+qlA=
Subject key identifier: F7:96:06:47:B1:87:C6:83:85:1D:C9:76:93:36:26:62:83:9E:4A:47
Certificate issuer: /CN=ebec9030c70a3d4192d59c28dcc8d547694340b3
Certificate serial: 0194266B55EE76753D3CE3CF0D39C6583285
Authority key identifier: EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/95YGR7GHxoOFHcl2kzYmYoOeSkc.roa
Signing time: Thu 02 Jan 2025 09:49:16 +0000
ROA not before: Thu 02 Jan 2025 09:49:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21230
IP address blocks: 46.35.160.0/21 maxlen: 24
46.35.168.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:55:ee:76:75:3d:3c:e3:cf:0d:39:c6:58:32:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebec9030c70a3d4192d59c28dcc8d547694340b3
Validity
Not Before: Jan 2 09:49:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f7960647b187c683851dc97693362662839e4a47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:41:a9:8d:38:62:28:c0:7f:33:3e:bd:5f:81:
2d:c5:77:e9:42:46:2f:ad:22:24:84:f0:f6:61:55:
b3:19:3e:c5:9b:53:4d:49:64:34:5b:86:21:a3:d7:
41:b3:fc:f1:55:25:11:2e:d8:b0:09:51:66:52:f0:
a2:19:1b:54:5d:93:a8:ec:4e:41:93:91:01:84:db:
58:13:a7:d8:29:e9:9a:b3:49:de:25:10:1d:6e:3b:
24:0a:bd:71:35:4e:02:62:d3:10:8b:94:fa:fe:c0:
7d:56:02:89:b0:79:c0:8d:54:c6:3d:b2:62:7f:ef:
f4:57:be:4d:e9:46:11:f3:5b:5c:13:ea:66:ef:58:
f1:c1:e7:1c:ff:f4:4e:57:80:a1:3e:9f:a2:cf:0e:
a8:be:70:4c:38:c6:bf:b0:1e:09:95:6b:6a:e3:8b:
33:57:7b:93:d6:5a:ed:19:f7:a8:fa:75:c1:85:28:
4f:cf:47:4b:f6:74:f6:3c:be:ed:65:d3:7c:bb:df:
f7:c0:d4:99:93:2a:32:66:68:01:dc:05:58:2c:ee:
ae:99:a5:e8:90:55:a5:fb:70:b0:66:fb:b3:89:86:
13:b6:92:49:28:1b:57:28:17:90:18:98:57:c0:05:
94:3c:50:ef:71:67:82:44:5d:ee:db:32:bc:d0:8e:
ac:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:96:06:47:B1:87:C6:83:85:1D:C9:76:93:36:26:62:83:9E:4A:47
X509v3 Authority Key Identifier:
keyid:EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/95YGR7GHxoOFHcl2kzYmYoOeSkc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.35.160.0-46.35.169.255
Signature Algorithm: sha256WithRSAEncryption
69:a7:a9:e7:67:fd:2b:71:ea:b9:de:b9:30:89:a1:c0:5e:2b:
bb:d0:81:a2:fc:1e:24:6a:59:51:30:99:53:3c:81:74:68:7f:
f5:bd:b1:cf:d6:55:e0:84:54:9d:e3:bc:db:8e:5e:a2:40:e1:
bc:e1:ea:c1:fd:47:f6:f0:05:41:02:9c:07:43:74:a4:00:87:
49:22:71:38:8f:aa:d4:66:22:61:4d:df:a1:0a:25:04:b9:63:
62:0d:14:e6:55:9c:52:2b:db:77:30:70:2c:d6:88:80:a9:34:
d2:6e:63:43:be:ad:a1:b6:50:a5:fe:83:1d:af:7a:54:f1:fe:
e6:ba:69:36:b9:00:42:04:a8:e5:b5:6f:c5:ad:1a:5c:43:ea:
6d:4f:ec:81:5e:02:d9:41:60:17:8f:42:cf:3c:f8:85:ec:52:
4d:1f:1e:7b:78:32:ea:d8:de:76:04:10:a6:1c:98:15:c3:52:
93:40:c1:54:a7:7f:bf:b0:ed:37:cd:3a:6e:d4:0d:ed:8f:f8:
d2:be:34:33:8d:67:69:10:9b:f0:ea:ff:af:a9:6c:3d:de:a8:
ef:d7:05:a7:91:ef:81:ea:0f:05:71:f1:8c:0e:03:be:4c:4f:
d7:a0:73:f6:19:c0:1a:ed:89:ec:8d:7b:c6:6c:dc:ff:78:10:
17:46:99:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 17:56:58 2025 by rpki-client