Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/8fe7d8-017b-41aa-a91f-28b19e3fd4a6/1/rZAA3Y495kRkRNDpWyGUUlyfTzU.roa
File: rZAA3Y495kRkRNDpWyGUUlyfTzU.roa (raw, json)
Hash identifier: Fgv+FkEtI7c1vlophMoAf5XyRQp0aEoHwM68DDPsUbg=
Subject key identifier: AD:90:00:DD:8E:3D:E6:44:64:44:D0:E9:5B:21:94:52:5C:9F:4F:35
Certificate issuer: /CN=aca77c708af0ba1f81549c9f87089559390167a5
Certificate serial: 0194228D5065FAED822E276BDC61042B55BF
Authority key identifier: AC:A7:7C:70:8A:F0:BA:1F:81:54:9C:9F:87:08:95:59:39:01:67:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/8fe7d8-017b-41aa-a91f-28b19e3fd4a6/1/rZAA3Y495kRkRNDpWyGUUlyfTzU.roa
Signing time: Wed 01 Jan 2025 15:47:53 +0000
ROA not before: Wed 01 Jan 2025 15:47:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 46.183.152.0/21 maxlen: 21
185.1.102.0/24 maxlen: 24
2001:7f8:bd::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:50:65:fa:ed:82:2e:27:6b:dc:61:04:2b:55:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aca77c708af0ba1f81549c9f87089559390167a5
Validity
Not Before: Jan 1 15:47:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ad9000dd8e3de6446444d0e95b2194525c9f4f35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:85:46:04:f4:d0:c1:e7:d8:5f:a1:b3:3d:c9:
86:d7:39:4d:80:39:3b:b2:99:3a:a8:2b:12:86:45:
1a:f1:42:57:57:f7:84:f3:b0:ee:a2:07:f8:ae:6d:
d4:02:50:a9:0d:66:24:c5:15:c1:df:9f:b9:9d:5e:
0a:56:60:c5:51:e7:68:f8:23:26:a0:79:52:b2:d9:
1d:fd:98:b8:6c:02:d5:b4:9f:d1:d9:84:57:cc:02:
dd:bc:4a:f2:a8:ca:38:f5:80:1b:ef:b6:b3:d8:20:
71:9c:78:9c:95:aa:da:af:a7:98:94:a4:e0:cd:74:
52:de:57:06:b2:dc:fe:a2:14:2e:06:c4:b6:ce:3f:
06:18:d5:f0:40:03:ec:6f:02:77:ae:a5:30:5c:9f:
76:5a:20:a0:79:67:b8:cf:7a:73:2a:c7:0e:24:94:
c9:e2:bc:3b:04:e0:5f:be:2e:cc:6a:bd:a7:07:5f:
3b:65:89:08:05:60:8e:51:6f:60:67:8d:d3:19:bc:
02:ab:df:1f:58:7d:40:30:b4:9c:56:1a:ee:ae:5c:
5f:a7:53:4a:5d:25:a4:3e:c7:45:72:28:c5:6c:db:
68:1f:6d:62:3f:1d:f4:f6:10:60:eb:d6:ea:90:7a:
59:3b:5f:25:c7:41:fc:f4:8a:c5:34:bf:14:85:91:
bd:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:90:00:DD:8E:3D:E6:44:64:44:D0:E9:5B:21:94:52:5C:9F:4F:35
X509v3 Authority Key Identifier:
keyid:AC:A7:7C:70:8A:F0:BA:1F:81:54:9C:9F:87:08:95:59:39:01:67:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/8fe7d8-017b-41aa-a91f-28b19e3fd4a6/1/rZAA3Y495kRkRNDpWyGUUlyfTzU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/8fe7d8-017b-41aa-a91f-28b19e3fd4a6/1/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.183.152.0/21
185.1.102.0/24
IPv6:
2001:7f8:bd::/48
Signature Algorithm: sha256WithRSAEncryption
61:d3:a7:f2:c9:52:53:9b:21:5a:a9:b1:46:97:df:f2:0b:4c:
6a:e4:58:75:58:dd:55:9b:86:ab:e2:d8:a9:1e:33:18:1e:e4:
29:cf:5b:20:ed:17:e2:21:56:b5:fb:16:61:22:4b:bc:4c:02:
d5:33:48:d7:47:58:f2:66:13:a0:a8:f8:d3:a1:35:54:89:a7:
1a:7a:f1:2b:c4:3c:9f:21:12:cc:68:6e:a0:2a:28:a8:17:ef:
a4:e6:95:63:23:6c:a9:f9:e9:c2:64:93:6d:5a:99:cd:87:79:
66:53:74:af:a7:21:0c:83:b3:3b:1b:00:35:a0:c2:a6:6e:23:
43:a4:31:01:05:1b:2d:95:c2:ca:25:98:93:c5:b3:c5:57:f8:
86:f9:b3:aa:e2:35:82:1d:e4:5d:e2:39:c5:b1:84:bf:be:bf:
6d:13:13:5e:72:10:44:56:93:d4:d2:9f:84:a4:cf:6d:c6:45:
e0:09:22:f8:76:ae:db:a1:41:ab:bb:b4:bd:01:d6:1b:37:f2:
a6:59:f5:d2:00:52:b3:e1:78:0d:f9:17:a6:17:fc:2a:f5:7b:
8d:05:f2:de:35:f2:f3:c5:a3:3d:bd:75:d7:e4:45:f0:af:30:
f0:87:12:39:e4:12:a5:a2:e6:13:02:e0:10:41:9b:13:5f:1a:
97:d5:6c:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 03:13:02 2025 by rpki-client