Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a6ad9f-8d69-46ea-bd7c-32b150f8e61f/1/1-dHQz5K0jyaNl5FqzO7evjfWRY8.roa
File: 1-dHQz5K0jyaNl5FqzO7evjfWRY8.roa (raw, json)
Hash identifier: fqrIeKwuKIrY/zHplgwt/7uJ63RbsX1d6ijPtzbAhUA=
Subject key identifier: F9:D1:D0:CF:92:B4:8F:26:8D:97:91:6A:CC:EE:DE:BE:37:D6:45:8F
Certificate issuer: /CN=46eb3b3b579c90b4b996a7fe40f20503913a25cf
Certificate serial: 01856C53CFFA681B0B2ED69A68A21D5DC641
Authority key identifier: 46:EB:3B:3B:57:9C:90:B4:B9:96:A7:FE:40:F2:05:03:91:3A:25:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rus7O1eckLS5lqf-QPIFA5E6Jc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a6ad9f-8d69-46ea-bd7c-32b150f8e61f/1/1-dHQz5K0jyaNl5FqzO7evjfWRY8.roa
Signing time: Sun 01 Jan 2023 07:55:10 +0000
ROA not before: Sun 01 Jan 2023 07:55:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57316
IP address blocks: 85.204.47.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:53:cf:fa:68:1b:0b:2e:d6:9a:68:a2:1d:5d:c6:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46eb3b3b579c90b4b996a7fe40f20503913a25cf
Validity
Not Before: Jan 1 07:55:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f9d1d0cf92b48f268d97916acceedebe37d6458f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:78:d4:98:10:d5:68:d7:52:7a:ce:31:d4:a0:
f9:7a:13:45:27:3d:b3:6a:1f:20:e6:f1:e5:1e:86:
13:9d:14:ab:54:f7:ba:00:2e:3e:c3:7e:27:a2:b4:
db:38:02:21:ea:75:a5:a8:09:42:d0:7c:be:ff:f9:
55:f4:93:5a:20:fb:9e:bd:82:7d:87:bb:32:6b:ee:
f2:b7:49:10:f0:86:50:01:f0:32:d6:8c:69:8c:0f:
d2:ae:09:40:f3:cc:98:76:82:cb:62:11:17:c7:5f:
b3:d1:78:34:5c:6d:33:e9:64:e8:83:ba:ba:42:5e:
a1:f2:cf:6e:c1:bb:4b:6d:3c:0e:bb:69:b8:5c:43:
6a:9d:09:3e:ed:b6:c7:1d:ee:70:fd:eb:57:f6:5d:
f3:a6:e5:60:27:95:e5:8c:67:3d:4c:29:e2:a9:7d:
c9:3b:6e:4e:f4:63:d6:84:38:be:ca:06:6c:a3:db:
ad:6c:0f:22:35:57:28:e7:9d:22:a1:0d:52:77:aa:
7b:6e:1b:c7:c4:ff:f2:23:2f:a8:dd:4f:dd:27:b4:
24:58:5d:27:37:83:d8:db:7b:91:a4:d7:9e:14:ea:
1d:d7:94:8b:3f:70:42:d7:a0:42:16:19:6b:08:c2:
2c:e3:84:7d:a5:c1:c1:e8:29:df:df:ca:ba:89:c3:
c5:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:D1:D0:CF:92:B4:8F:26:8D:97:91:6A:CC:EE:DE:BE:37:D6:45:8F
X509v3 Authority Key Identifier:
keyid:46:EB:3B:3B:57:9C:90:B4:B9:96:A7:FE:40:F2:05:03:91:3A:25:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rus7O1eckLS5lqf-QPIFA5E6Jc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a6ad9f-8d69-46ea-bd7c-32b150f8e61f/1/1-dHQz5K0jyaNl5FqzO7evjfWRY8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a6ad9f-8d69-46ea-bd7c-32b150f8e61f/1/Rus7O1eckLS5lqf-QPIFA5E6Jc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.204.47.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:3c:fd:dc:d6:62:7b:00:38:31:cf:d6:01:b3:7e:0a:5b:fc:
31:cc:7c:88:92:51:8d:24:c0:31:d2:57:38:f3:28:8f:33:53:
b6:2a:a2:c5:c1:c7:9d:e6:51:f5:22:a1:0f:6b:05:78:58:7a:
aa:b4:dc:3b:64:d9:5b:bc:88:03:8e:51:16:c9:d7:e8:50:37:
f9:f8:83:f7:d5:3d:49:bf:af:73:ef:d1:6d:23:40:ed:59:2c:
6a:a1:03:c4:fb:12:81:07:bb:05:ee:df:f7:b9:d2:74:07:e9:
e9:e3:3e:48:db:ba:30:0f:04:d7:33:85:de:e3:82:19:d1:81:
59:d0:5a:c1:35:bf:d6:44:10:da:b3:c6:42:64:5b:f3:e4:12:
ce:c0:89:d1:49:ae:b1:2f:3f:2b:45:8b:f0:d1:97:23:22:6e:
62:ff:11:e3:36:95:0b:e9:51:18:07:c1:39:91:81:d3:f7:0c:
57:fa:e4:bc:fc:d6:6f:27:74:01:ca:13:41:a8:e6:a3:b4:b0:
6b:a0:38:7f:e5:5d:29:0f:45:85:19:09:a3:0d:97:b4:d8:81:
92:97:f6:28:29:e4:ba:1a:34:27:2f:18:c9:4c:c9:3a:c0:2c:
6f:6a:29:4b:85:4a:83:36:cb:f7:3a:3e:84:ca:29:70:7d:27:
f0:21:46:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 14:49:46 2025 by rpki-client