Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/jUB5PRtoRI1flFNEi0Xhc9A2v24.roa
File: jUB5PRtoRI1flFNEi0Xhc9A2v24.roa (raw, json)
Hash identifier: xahLnc6O0sfqsubQhJTJfxB0AtmlnA57o0hU8mlDp6I=
Subject key identifier: 8D:40:79:3D:1B:68:44:8D:5F:94:53:44:8B:45:E1:73:D0:36:BF:6E
Certificate issuer: /CN=468b592f3110bc6c35249a8271a0dac1a9acb0ce
Certificate serial: 0194236916501A279CAFAAF5390621EF77E8
Authority key identifier: 46:8B:59:2F:31:10:BC:6C:35:24:9A:82:71:A0:DA:C1:A9:AC:B0:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RotZLzEQvGw1JJqCcaDawamssM4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/jUB5PRtoRI1flFNEi0Xhc9A2v24.roa
Signing time: Wed 01 Jan 2025 19:47:56 +0000
ROA not before: Wed 01 Jan 2025 19:47:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 7018
IP address blocks: 146.19.142.0/24 maxlen: 24
185.218.184.0/24 maxlen: 24
185.253.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:16:50:1a:27:9c:af:aa:f5:39:06:21:ef:77:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=468b592f3110bc6c35249a8271a0dac1a9acb0ce
Validity
Not Before: Jan 1 19:47:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8d40793d1b68448d5f9453448b45e173d036bf6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:08:89:6f:f0:a5:70:a6:8c:1d:c5:13:1f:d5:
06:8b:8d:43:6a:49:33:a5:02:99:b6:6b:cf:39:62:
69:62:c5:61:ad:69:24:22:77:01:96:18:e9:21:5d:
ce:bd:c8:76:42:a3:18:76:9a:1f:ce:64:4d:cc:c5:
ff:6d:59:5b:27:e3:da:c9:1b:eb:12:1c:88:85:0a:
73:61:ba:e2:6d:a7:1f:d3:a7:82:c1:37:d3:af:dc:
36:85:4f:76:e0:5a:10:c4:79:b6:42:d8:c7:35:46:
c5:67:02:c4:23:89:bd:dc:29:18:d4:fd:6f:d3:33:
29:78:bc:5b:0a:7f:20:de:86:f7:27:7c:37:32:88:
4a:ae:6b:4d:a7:6e:66:4e:b7:76:5f:91:4b:39:10:
bb:bd:41:46:cb:82:09:33:84:b6:41:1d:37:0f:e6:
31:a1:0d:a0:ab:a7:64:6d:5e:a1:76:ec:39:9e:48:
54:40:e9:9e:cb:43:d6:73:6f:97:d3:cf:96:30:f5:
51:29:ae:ac:c5:d1:42:ad:79:d3:d7:e1:f3:34:34:
06:16:a3:11:bd:e6:b7:7e:9f:29:0d:65:2c:29:d4:
b1:37:cb:37:64:39:49:63:27:8b:da:86:de:d0:7b:
a6:c5:59:12:2e:02:fd:65:db:e1:bc:d6:82:68:3b:
2f:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:40:79:3D:1B:68:44:8D:5F:94:53:44:8B:45:E1:73:D0:36:BF:6E
X509v3 Authority Key Identifier:
keyid:46:8B:59:2F:31:10:BC:6C:35:24:9A:82:71:A0:DA:C1:A9:AC:B0:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RotZLzEQvGw1JJqCcaDawamssM4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/jUB5PRtoRI1flFNEi0Xhc9A2v24.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/RotZLzEQvGw1JJqCcaDawamssM4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.142.0/24
185.218.184.0/24
185.253.3.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:59:26:a9:95:1f:45:3c:88:90:68:fd:a5:c2:ef:be:a1:8a:
c6:40:cb:33:5f:e4:6c:c8:6d:da:da:70:c9:7d:cc:4c:47:24:
4b:91:76:67:47:f9:a7:b0:d9:a5:ae:d0:e7:d3:e5:62:43:50:
e1:58:23:b8:07:97:08:8d:64:13:4c:80:01:d8:0f:1f:4d:04:
62:b0:1d:e2:0e:94:ff:dd:7e:8f:7e:39:72:fa:64:35:6b:fb:
88:78:06:f7:8c:9e:76:ff:43:ff:40:f6:be:5f:79:99:ab:18:
8a:44:69:a7:5f:21:f0:81:3d:0b:c1:25:a0:91:e8:93:62:9d:
a5:6f:3b:be:ef:15:18:1a:37:ba:d0:fe:57:ef:89:b8:75:e1:
e2:c7:f4:79:2b:8f:e7:93:8e:cf:38:d5:1e:0d:19:b9:78:cd:
9a:9d:00:6b:60:f8:02:97:36:33:69:5a:93:fb:1c:71:f8:e9:
7a:be:69:61:f2:aa:89:da:bb:b7:b6:bc:47:f6:30:45:55:f5:
14:1d:23:05:3a:76:8b:29:4d:46:7c:b5:59:ba:28:f7:4b:22:
a9:85:e6:03:f9:5e:62:c8:8a:c7:cb:13:bd:06:ad:8e:80:f5:
0c:36:fc:c9:b7:82:d3:f6:f1:22:d1:b7:aa:4f:e8:bc:7a:4b:
fd:95:a3:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 02:24:16 2025 by rpki-client