Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/ba1be3-796e-45c8-8b76-c700ea03c227/1/7kCB1J_rNDVtgNFDQBz-ZFXo6aA.roa
File: 7kCB1J_rNDVtgNFDQBz-ZFXo6aA.roa (raw, json)
Hash identifier: j6xn4MHIGZVJXA81hfabdadaay1xFRv4GfnwCa5VtAQ=
Subject key identifier: EE:40:81:D4:9F:EB:34:35:6D:80:D1:43:40:1C:FE:64:55:E8:E9:A0
Certificate issuer: /CN=b57ab718b4acb3a679c5db8fcee7294ed6be2bd0
Certificate serial: 019422FC2FAA07EC41AEDF3579989E5305B0
Authority key identifier: B5:7A:B7:18:B4:AC:B3:A6:79:C5:DB:8F:CE:E7:29:4E:D6:BE:2B:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tXq3GLSss6Z5xduPzucpTta-K9A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/ba1be3-796e-45c8-8b76-c700ea03c227/1/7kCB1J_rNDVtgNFDQBz-ZFXo6aA.roa
Signing time: Wed 01 Jan 2025 17:49:00 +0000
ROA not before: Wed 01 Jan 2025 17:49:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43853
IP address blocks: 46.22.112.0/20 maxlen: 20
131.117.176.0/21 maxlen: 21
185.183.56.0/22 maxlen: 22
2a02:2a48::/32 maxlen: 32
2a0b:680::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:2f:aa:07:ec:41:ae:df:35:79:98:9e:53:05:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b57ab718b4acb3a679c5db8fcee7294ed6be2bd0
Validity
Not Before: Jan 1 17:49:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ee4081d49feb34356d80d143401cfe6455e8e9a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:39:42:2b:dc:a1:97:f2:fa:cb:92:34:b5:96:
96:46:b9:e0:32:fc:26:6d:64:64:37:34:4c:45:1c:
a8:06:a8:ab:33:90:d1:04:2c:9c:55:cc:c9:84:a2:
7f:d0:6a:4f:1d:59:43:e8:cc:d5:13:c5:0a:52:b0:
8f:29:d8:ca:2a:aa:15:4d:d1:1d:06:fb:1a:e4:1f:
74:f8:54:c0:bf:a1:bd:1b:79:35:a9:2d:4a:d4:ee:
bf:24:88:6b:f0:53:d9:f2:24:8f:d0:a8:7b:ab:61:
6b:b2:4e:b1:51:d4:86:69:56:3b:45:c5:5a:e0:21:
c0:bd:8c:28:14:21:2f:3f:bf:c3:69:b6:94:2e:ca:
17:46:61:e9:95:91:84:a6:e0:12:ab:e4:d0:5b:79:
8b:b2:02:5d:33:64:ad:3f:84:68:bb:c6:36:ca:20:
f1:60:1c:71:39:92:5d:9d:b4:94:44:52:43:77:61:
bf:f4:ee:5f:e6:90:f9:fa:62:02:43:08:61:29:61:
8d:bf:50:4d:68:81:01:1a:74:0d:e1:de:83:f0:17:
c5:7d:ac:df:d6:00:53:7e:7c:31:c5:93:99:83:ec:
53:67:0e:41:2d:3c:71:20:39:61:11:6e:af:70:39:
86:00:56:e3:e7:41:e9:e4:58:10:62:7a:0a:7d:72:
1f:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:40:81:D4:9F:EB:34:35:6D:80:D1:43:40:1C:FE:64:55:E8:E9:A0
X509v3 Authority Key Identifier:
keyid:B5:7A:B7:18:B4:AC:B3:A6:79:C5:DB:8F:CE:E7:29:4E:D6:BE:2B:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tXq3GLSss6Z5xduPzucpTta-K9A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/ba1be3-796e-45c8-8b76-c700ea03c227/1/7kCB1J_rNDVtgNFDQBz-ZFXo6aA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/ba1be3-796e-45c8-8b76-c700ea03c227/1/tXq3GLSss6Z5xduPzucpTta-K9A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.22.112.0/20
131.117.176.0/21
185.183.56.0/22
IPv6:
2a02:2a48::/32
2a0b:680::/29
Signature Algorithm: sha256WithRSAEncryption
3a:99:62:8a:a3:15:09:ed:c1:24:6e:eb:97:6f:75:5a:3a:98:
a3:5b:57:1d:24:c9:bb:3c:c9:de:0c:7e:f1:e0:6e:ca:39:7b:
61:0a:04:ee:5f:47:bb:70:6d:4e:86:e7:48:92:56:33:21:33:
92:f5:55:7c:af:7e:25:56:83:74:03:91:98:8c:3b:35:96:e0:
24:d2:ac:4f:a1:3d:32:7d:d1:77:10:b2:d5:c0:47:a0:e5:bb:
7f:b5:8f:ef:5f:1a:3a:2f:54:cf:7b:d8:ee:61:7c:f4:d0:f9:
c3:57:a7:bb:a2:7c:43:84:78:cc:59:5f:64:e5:20:db:cb:db:
df:37:20:da:1b:59:c5:f9:9b:c9:9b:e8:0d:f6:9b:77:5f:da:
85:66:24:68:fc:c5:5f:b0:b5:be:7c:39:14:be:6e:00:b6:be:
1b:b4:18:e7:de:91:6a:91:9b:a8:b1:9c:7f:40:52:07:7f:b0:
e1:44:ba:b6:de:55:7e:94:31:bf:2b:49:7c:b3:f3:53:3e:02:
71:75:a9:91:12:14:07:2a:ec:83:d4:77:2e:c9:c8:03:ec:52:
89:87:6d:a0:f6:bf:71:19:da:ab:53:fe:38:ec:b7:63:58:89:
ee:2a:11:db:1b:a2:15:ac:86:db:58:2a:5f:9a:d3:38:82:5b:
3e:bf:10:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 05:18:09 2025 by rpki-client