Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/RmwlFKm2A6wCOU2tiPLTSzuhAA8.roa
File: RmwlFKm2A6wCOU2tiPLTSzuhAA8.roa (raw, json)
Hash identifier: NB+w6tJSmFPHFd2FMxkqFpCOapIk+qQqzfmt3QzOsMk=
Subject key identifier: 46:6C:25:14:A9:B6:03:AC:02:39:4D:AD:88:F2:D3:4B:3B:A1:00:0F
Certificate issuer: /CN=ffdec4a46a6e6e4f9a92d0ba2e0b3ab5658be1bd
Certificate serial: 019423D75DCB082D3507CDC455B2886052DB
Authority key identifier: FF:DE:C4:A4:6A:6E:6E:4F:9A:92:D0:BA:2E:0B:3A:B5:65:8B:E1:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_97EpGpubk-aktC6Lgs6tWWL4b0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/RmwlFKm2A6wCOU2tiPLTSzuhAA8.roa
Signing time: Wed 01 Jan 2025 21:48:24 +0000
ROA not before: Wed 01 Jan 2025 21:48:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35545
IP address blocks: 185.42.222.0/24 maxlen: 24
2a06:bdc7::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:5d:cb:08:2d:35:07:cd:c4:55:b2:88:60:52:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffdec4a46a6e6e4f9a92d0ba2e0b3ab5658be1bd
Validity
Not Before: Jan 1 21:48:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=466c2514a9b603ac02394dad88f2d34b3ba1000f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:07:50:bf:cd:a1:61:5d:e7:4c:d8:1d:c2:be:
c8:5c:e7:ab:31:16:4f:0d:e4:00:24:d4:7f:a4:17:
ee:3d:0b:32:19:cf:66:b3:22:8d:5c:fe:45:8a:51:
2b:b6:d8:67:33:2a:60:47:05:97:b3:27:7e:da:b5:
00:54:ed:9d:ca:82:76:ec:14:47:a7:ce:6d:be:3a:
eb:3a:4f:fa:3d:f4:3a:e2:b0:91:2f:08:f1:70:ce:
56:c5:cc:ef:57:88:22:3a:f0:45:b2:df:d8:55:f3:
e4:79:f1:01:c6:7c:5d:16:d8:74:6d:7a:ac:cc:a9:
a3:d1:fd:5b:4b:85:ab:8b:89:48:8a:1b:cb:b7:b0:
e5:09:86:d2:42:0f:8e:fe:28:cd:50:0c:c2:26:fa:
f5:cc:3c:09:55:f4:8b:58:1c:ff:74:b3:6c:51:6f:
b7:4b:fd:b6:ad:d9:95:94:f2:08:0b:c1:6f:cf:d4:
73:0a:9d:34:ee:d5:f4:ac:15:1c:69:49:50:a9:e5:
20:27:20:c9:10:b6:ed:e0:c5:8b:3a:e4:d6:00:df:
89:50:0e:42:7f:3f:61:41:10:b1:ac:76:aa:8c:25:
ce:a7:f3:84:e6:32:4f:7e:19:c1:64:a5:96:a6:3d:
35:99:1e:8f:5a:5a:3a:49:79:00:fb:1b:53:27:36:
c2:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:6C:25:14:A9:B6:03:AC:02:39:4D:AD:88:F2:D3:4B:3B:A1:00:0F
X509v3 Authority Key Identifier:
keyid:FF:DE:C4:A4:6A:6E:6E:4F:9A:92:D0:BA:2E:0B:3A:B5:65:8B:E1:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_97EpGpubk-aktC6Lgs6tWWL4b0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/RmwlFKm2A6wCOU2tiPLTSzuhAA8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.42.222.0/24
IPv6:
2a06:bdc7::/32
Signature Algorithm: sha256WithRSAEncryption
40:1a:15:a0:15:26:47:01:27:ab:71:ee:0f:fc:b8:d8:af:97:
a2:82:e3:63:e7:97:e3:c2:1f:20:9a:6f:b5:41:02:39:de:27:
cf:8f:fd:c2:1f:44:b0:e3:9c:68:98:23:0d:6d:29:90:3b:56:
e6:b3:6e:6a:50:06:42:d9:1b:af:e1:89:a5:84:75:12:16:83:
3f:e2:68:c2:1f:ae:d1:d4:97:bf:8f:23:d5:72:51:ec:7c:72:
27:8b:8e:dc:0f:28:dc:25:2e:b2:1e:3a:85:18:02:4a:de:d6:
67:69:22:36:c5:9c:d9:3e:8f:24:1e:1d:3f:35:9a:57:4d:85:
4f:5d:96:01:1f:11:09:5d:21:aa:f5:96:f5:76:a8:72:20:88:
11:75:9a:d7:38:45:5d:17:3b:b0:3b:d7:7c:1f:86:e2:dc:ee:
1c:4c:6a:fe:05:05:22:22:2e:21:60:13:6f:9c:cc:51:9f:b4:
31:b1:82:a2:2e:d0:23:43:90:40:98:30:a4:12:63:dd:39:9a:
24:e4:7f:ac:38:a9:b1:37:1b:00:30:45:78:57:3c:f0:a9:9f:
b8:62:28:26:80:a6:8d:28:b1:75:57:d7:2b:22:ca:09:3a:1f:
b4:f9:20:b7:39:63:24:98:e6:9b:75:83:76:07:d1:ea:d1:8f:
ca:de:ee:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:20:50 2025 by rpki-client