Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a6ad9f-8d69-46ea-bd7c-32b150f8e61f/1/npZnOM0g4bf4XzNsZ8w7rMF281I.roa
File: npZnOM0g4bf4XzNsZ8w7rMF281I.roa (raw, json)
Hash identifier: itHeBiyCzqZMsYtTF5DjEMeEnqghha1Cb+duBKfFzjk=
Subject key identifier: 9E:96:67:38:CD:20:E1:B7:F8:5F:33:6C:67:CC:3B:AC:C1:76:F3:52
Certificate issuer: /CN=46eb3b3b579c90b4b996a7fe40f20503913a25cf
Certificate serial: 046D2A
Authority key identifier: 46:EB:3B:3B:57:9C:90:B4:B9:96:A7:FE:40:F2:05:03:91:3A:25:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rus7O1eckLS5lqf-QPIFA5E6Jc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a6ad9f-8d69-46ea-bd7c-32b150f8e61f/1/npZnOM0g4bf4XzNsZ8w7rMF281I.roa
Signing time: Thu 27 Jan 2022 21:27:14 +0000
ROA not before: Thu 27 Jan 2022 21:27:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42637
IP address blocks: 86.106.133.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 290090 (0x46d2a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46eb3b3b579c90b4b996a7fe40f20503913a25cf
Validity
Not Before: Jan 27 21:27:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9e966738cd20e1b7f85f336c67cc3bacc176f352
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:5a:be:4c:84:56:4b:3b:cb:ca:6a:43:6b:19:
54:9c:37:71:38:d9:75:2d:6e:f0:7f:56:f3:38:c6:
a7:88:88:f5:02:71:4f:69:40:fc:34:2b:73:f6:99:
22:d7:d0:c9:15:47:97:70:f1:bb:f8:85:95:25:37:
c2:cf:9b:e5:a8:76:38:1e:d5:6a:d2:13:fb:e0:20:
5d:89:8e:f6:31:33:6c:bb:f0:30:a9:2c:25:54:6e:
fa:d7:56:82:47:66:92:c1:d1:cd:74:02:ea:78:40:
0d:40:75:b3:f5:02:d8:ca:ee:17:6d:38:b4:8c:45:
89:79:c4:db:95:ee:12:ee:aa:98:cf:45:bf:db:ce:
77:d7:6d:1f:b5:5d:a3:b5:ec:6c:b2:7b:63:5d:56:
eb:80:8f:27:4d:66:5c:2f:dd:07:c3:7f:64:f7:d5:
47:80:87:19:7b:05:e8:97:76:11:8a:8b:46:6e:8d:
6d:94:58:69:4c:3f:6f:d5:c1:c5:08:cb:5e:d7:05:
1c:d3:8a:45:c1:9f:93:c1:a2:a8:17:cf:7e:4c:82:
00:df:76:0c:4d:27:75:17:1d:1a:a0:34:a9:22:10:
61:72:ca:74:44:96:02:4a:6e:c8:f2:4c:59:4c:6f:
04:23:19:7f:28:2e:43:8b:19:56:6c:db:cc:cc:dc:
9c:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:96:67:38:CD:20:E1:B7:F8:5F:33:6C:67:CC:3B:AC:C1:76:F3:52
X509v3 Authority Key Identifier:
keyid:46:EB:3B:3B:57:9C:90:B4:B9:96:A7:FE:40:F2:05:03:91:3A:25:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rus7O1eckLS5lqf-QPIFA5E6Jc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a6ad9f-8d69-46ea-bd7c-32b150f8e61f/1/npZnOM0g4bf4XzNsZ8w7rMF281I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a6ad9f-8d69-46ea-bd7c-32b150f8e61f/1/Rus7O1eckLS5lqf-QPIFA5E6Jc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.106.133.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:be:7a:08:24:92:ac:ea:d7:e5:8d:81:a9:22:72:95:55:7b:
94:29:84:d7:cf:90:e6:c0:c1:01:1d:99:c3:25:09:39:29:17:
66:ee:ff:75:3c:81:7d:41:6d:92:8a:01:f0:68:3b:33:a0:4a:
5b:b8:57:ec:21:1a:3c:50:b8:01:72:4e:24:28:fd:77:15:94:
c0:2d:80:fc:7a:e7:77:b8:b2:f3:29:db:aa:cc:0f:80:0f:27:
7b:96:fd:72:cc:3b:dc:11:1c:cf:f7:bc:1d:48:db:2f:c5:97:
56:5e:31:19:13:b7:e3:1a:97:07:c0:d6:56:d9:f0:4a:cc:26:
2e:38:a6:07:41:47:b8:26:47:40:9d:8e:d3:f9:da:8f:f9:bd:
6c:d1:b3:53:52:b2:56:c0:36:47:c4:c1:cb:e2:9e:ab:ab:8d:
8f:19:11:14:e7:e0:77:0e:0f:15:fe:a8:41:73:14:23:f4:2e:
45:85:9b:ad:35:ba:a7:32:4f:33:38:1d:48:fb:e4:90:1d:44:
91:64:71:0d:13:74:25:bf:ba:aa:79:5e:c0:be:c7:a5:9d:07:
9c:f1:09:33:26:07:1b:28:3c:49:6e:9c:19:0a:ed:b1:2f:bf:
c3:c5:2e:29:f8:c4:ac:b5:76:58:32:0f:86:41:fa:6b:b7:bd:
e9:7d:12:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 05:22:24 2025 by rpki-client