Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/Cg1rIwAa6O9b5pHj9iMwHAZ7fSE.roa
File: Cg1rIwAa6O9b5pHj9iMwHAZ7fSE.roa (raw, json)
Hash identifier: 4N+U7+PRWNjJVqJ2KygRwPrjK1Ien5sO5KXTSIsM0Ro=
Subject key identifier: 0A:0D:6B:23:00:1A:E8:EF:5B:E6:91:E3:F6:23:30:1C:06:7B:7D:21
Certificate issuer: /CN=464dcfa96399716692d245a804887c09da451f8f
Certificate serial: 01942522304D17F57499B75AB7D929FC1138
Authority key identifier: 46:4D:CF:A9:63:99:71:66:92:D2:45:A8:04:88:7C:09:DA:45:1F:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rk3PqWOZcWaS0kWoBIh8CdpFH48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/Cg1rIwAa6O9b5pHj9iMwHAZ7fSE.roa
Signing time: Thu 02 Jan 2025 03:49:45 +0000
ROA not before: Thu 02 Jan 2025 03:49:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39122
IP address blocks: 185.94.44.0/24 maxlen: 24
185.94.45.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:30:4d:17:f5:74:99:b7:5a:b7:d9:29:fc:11:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=464dcfa96399716692d245a804887c09da451f8f
Validity
Not Before: Jan 2 03:49:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0a0d6b23001ae8ef5be691e3f623301c067b7d21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e0:25:99:16:05:9f:87:f3:fa:2d:eb:f6:d0:
47:16:f4:05:91:1a:c9:05:22:01:23:68:6a:7f:53:
17:8d:53:9a:32:d5:20:46:3c:25:75:b9:30:8d:0d:
ef:57:1e:7a:b1:98:f0:d0:68:83:64:ec:12:d9:e9:
df:7d:09:75:2f:ed:96:df:29:25:5e:60:e2:c3:72:
8c:d3:0f:6f:dd:36:f2:5b:4f:c4:77:2b:e3:78:c1:
5f:fb:45:fb:c0:5e:a5:1e:3b:4c:34:13:89:8a:14:
16:eb:91:12:21:27:35:f8:1e:60:4c:75:bf:ed:35:
06:c5:76:9e:b1:3d:9e:f8:f1:cf:84:2f:c0:6a:7d:
ea:19:73:1e:c3:27:3f:34:7c:3d:cd:dd:fe:3f:48:
42:94:44:24:5a:29:0e:e0:0b:ab:fd:1f:7e:a1:3b:
1a:73:ec:c2:bd:17:29:95:46:2b:4f:5d:2e:1d:16:
1e:3f:f8:ad:c1:85:5f:8a:79:c0:10:dc:25:3e:bb:
45:eb:0b:9c:83:66:d9:03:77:b4:38:11:e0:55:58:
59:5e:d6:91:08:d8:43:a2:ba:5d:7a:0e:fd:1c:97:
95:86:21:01:a4:51:dd:c5:24:12:dc:fb:62:cf:0c:
25:cd:98:8d:1e:cf:ee:68:09:90:4f:8d:28:a1:ef:
34:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:0D:6B:23:00:1A:E8:EF:5B:E6:91:E3:F6:23:30:1C:06:7B:7D:21
X509v3 Authority Key Identifier:
keyid:46:4D:CF:A9:63:99:71:66:92:D2:45:A8:04:88:7C:09:DA:45:1F:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rk3PqWOZcWaS0kWoBIh8CdpFH48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/Cg1rIwAa6O9b5pHj9iMwHAZ7fSE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/Rk3PqWOZcWaS0kWoBIh8CdpFH48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.94.44.0/23
Signature Algorithm: sha256WithRSAEncryption
1c:f6:e1:0a:6f:85:51:37:a1:15:08:1a:cc:f6:91:6e:3e:70:
7a:3e:5a:4c:79:28:89:42:7a:c1:3a:ea:bf:db:e9:0d:2a:aa:
e3:b1:6c:08:83:82:68:fe:f0:c4:a5:4c:10:72:a1:8b:96:e6:
76:5d:78:31:73:03:9f:6e:d8:46:73:c4:25:6d:53:7d:5e:7e:
55:0c:c6:50:96:84:bc:db:23:53:95:33:12:7c:1f:80:be:40:
47:49:10:0b:8a:b2:e7:6b:ff:b3:b8:65:34:01:8e:a2:64:64:
47:79:a8:c3:0c:d4:aa:d0:44:89:da:da:54:ff:48:80:92:5a:
34:e6:50:d5:4d:b4:74:6f:42:c8:cb:e0:33:c4:ee:f3:5a:9e:
2c:36:b7:86:56:fa:56:76:9a:32:08:9d:53:94:2b:b1:f1:5a:
b4:ba:b8:b4:5e:b6:b4:32:e3:03:a9:a8:07:9b:9e:19:3a:e8:
ec:5e:2e:67:30:af:a3:e0:3c:3c:f2:bf:85:c8:67:66:2a:ea:
0b:92:54:2f:cd:35:39:8c:53:00:be:92:5d:8a:a1:32:39:26:
1a:1e:71:0c:7e:5c:6c:27:35:24:c1:fe:bd:b5:57:c5:f4:c0:
cc:92:39:4d:ad:d0:22:cd:8b:57:99:fc:00:d2:6b:ab:89:fa:
15:c3:cf:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 19:52:43 2025 by rpki-client