Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/858454-a18d-4040-ab3c-ca8fba595d4f/1/E48fxMRuF9_usgkv-wBA_GtkkY8.roa
File: E48fxMRuF9_usgkv-wBA_GtkkY8.roa (raw, json)
Hash identifier: TJ/B+8gZ2LSJEkkPcBk2s1l74WkEA3d0hjUzJQAQi8w=
Subject key identifier: 13:8F:1F:C4:C4:6E:17:DF:EE:B2:09:2F:FB:00:40:FC:6B:64:91:8F
Certificate issuer: /CN=46649b57b817ec143ddcb7d7712c22bb1f28ac75
Certificate serial: 01942143F28265B6AC8CC12DFC81460F1C1C
Authority key identifier: 46:64:9B:57:B8:17:EC:14:3D:DC:B7:D7:71:2C:22:BB:1F:28:AC:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RmSbV7gX7BQ93LfXcSwiux8orHU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/858454-a18d-4040-ab3c-ca8fba595d4f/1/E48fxMRuF9_usgkv-wBA_GtkkY8.roa
Signing time: Wed 01 Jan 2025 09:48:08 +0000
ROA not before: Wed 01 Jan 2025 09:48:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207187
IP address blocks: 185.214.116.0/22 maxlen: 22
2a0b:99c0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:f2:82:65:b6:ac:8c:c1:2d:fc:81:46:0f:1c:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46649b57b817ec143ddcb7d7712c22bb1f28ac75
Validity
Not Before: Jan 1 09:48:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=138f1fc4c46e17dfeeb2092ffb0040fc6b64918f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ab:5c:bc:c6:ec:86:b7:3f:69:e2:58:25:9d:
f7:2e:9a:7f:bf:b4:6f:e1:bc:0f:c9:62:22:08:d6:
35:0f:01:fe:95:2a:e4:d5:0a:ec:e9:f3:d1:5d:21:
a4:fc:85:10:a0:a3:8b:36:10:32:2b:86:f7:27:ae:
6b:51:e1:7d:77:28:94:9c:7a:76:ec:ab:72:0e:24:
85:2a:03:2b:e8:71:34:af:be:3c:a1:0c:d5:8e:4a:
57:63:05:63:4e:60:65:0d:33:f1:7c:34:80:97:07:
8b:1e:37:e5:54:87:76:87:44:64:55:f0:3f:6e:59:
bb:58:44:b8:43:b4:8c:a8:a0:8e:4c:b5:f8:53:89:
75:57:f7:6f:fe:21:cd:e8:be:7b:ad:56:8e:99:85:
6e:cf:98:15:c0:69:f3:99:dd:19:db:91:fe:bb:73:
52:56:79:db:bc:f9:90:c1:dd:67:f2:a9:b2:49:a5:
22:0c:40:6f:4d:57:7b:e5:de:93:c9:43:12:02:6c:
de:fc:0c:20:7a:70:5b:46:48:29:2a:e2:11:7d:09:
bb:d2:2e:da:45:9a:e4:22:ae:f3:ce:79:1e:43:eb:
25:fc:2b:d1:f3:27:37:4f:a4:ae:c1:78:b6:4d:fe:
3f:fb:e4:46:9f:30:05:21:9c:9c:bc:f9:a7:8c:e0:
8f:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:8F:1F:C4:C4:6E:17:DF:EE:B2:09:2F:FB:00:40:FC:6B:64:91:8F
X509v3 Authority Key Identifier:
keyid:46:64:9B:57:B8:17:EC:14:3D:DC:B7:D7:71:2C:22:BB:1F:28:AC:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RmSbV7gX7BQ93LfXcSwiux8orHU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/858454-a18d-4040-ab3c-ca8fba595d4f/1/E48fxMRuF9_usgkv-wBA_GtkkY8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/858454-a18d-4040-ab3c-ca8fba595d4f/1/RmSbV7gX7BQ93LfXcSwiux8orHU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.214.116.0/22
IPv6:
2a0b:99c0::/29
Signature Algorithm: sha256WithRSAEncryption
11:bf:b1:ff:ed:59:84:11:b0:97:7a:3b:6f:6d:ef:f9:40:4e:
75:cc:aa:21:8b:c3:52:5a:55:c0:67:4b:35:81:c0:80:30:04:
f8:a0:fc:21:d9:80:ee:0d:f4:9a:cd:47:24:27:5c:20:02:68:
8d:e7:69:6a:ec:42:d7:6f:56:7b:f1:a0:7b:b3:84:1d:a6:81:
0c:57:04:02:9e:92:78:6b:cf:1a:cc:02:a0:ab:0e:8a:60:20:
c6:5f:fb:61:d3:4e:1f:8d:43:1a:f9:97:c6:3e:a7:25:84:30:
70:58:c6:92:00:78:bb:ae:72:32:61:ea:64:33:6d:f4:0d:04:
36:25:88:e9:27:18:00:1b:14:e0:5d:7b:00:d5:ae:f4:e3:ce:
0a:26:c6:ba:92:2f:f7:3e:64:42:40:53:50:df:7e:5e:3b:92:
96:11:2a:a7:89:79:e7:a3:11:6a:e4:e2:60:2c:e8:d6:e9:f0:
31:61:85:ed:e1:9d:ac:29:72:15:6c:2c:6e:f6:7f:ba:b6:f5:
63:1f:b2:17:3f:8a:9c:44:ef:d9:e7:94:b1:34:9b:10:ee:1a:
7c:63:83:03:74:94:40:28:7d:93:53:5b:d8:fd:ff:ba:69:73:
84:30:76:95:17:61:39:c8:a0:6b:2e:69:93:41:bc:c5:47:05:
79:05:b5:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 05:13:25 2025 by rpki-client