Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/2mVfV49Z4VOJNxOYjQ8U5su-jXI.roa
File: 2mVfV49Z4VOJNxOYjQ8U5su-jXI.roa (raw, json)
Hash identifier: 4B8NDf79dTd1lmhu+DlgTxMCto2uI5jnWGoSRhBcicE=
Subject key identifier: DA:65:5F:57:8F:59:E1:53:89:37:13:98:8D:0F:14:E6:CB:BE:8D:72
Certificate issuer: /CN=e760126dce78bc16e66c2e6e7635848ac46846af
Certificate serial: 019423D7F89639A0E30BB0FC49AB0EFAE9F1
Authority key identifier: E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/2mVfV49Z4VOJNxOYjQ8U5su-jXI.roa
Signing time: Wed 01 Jan 2025 21:49:03 +0000
ROA not before: Wed 01 Jan 2025 21:49:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61317
IP address blocks: 146.247.106.0/24 maxlen: 24
146.247.107.0/24 maxlen: 24
146.247.108.0/24 maxlen: 24
146.247.111.0/24 maxlen: 24
146.247.112.0/23 maxlen: 23
146.247.114.0/24 maxlen: 24
146.247.115.0/24 maxlen: 24
146.247.116.0/24 maxlen: 24
146.247.117.0/24 maxlen: 24
146.247.118.0/24 maxlen: 24
146.247.119.0/24 maxlen: 24
146.247.120.0/24 maxlen: 24
146.247.121.0/24 maxlen: 24
146.247.122.0/24 maxlen: 24
146.247.126.0/24 maxlen: 24
146.247.127.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:f8:96:39:a0:e3:0b:b0:fc:49:ab:0e:fa:e9:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e760126dce78bc16e66c2e6e7635848ac46846af
Validity
Not Before: Jan 1 21:49:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=da655f578f59e153893713988d0f14e6cbbe8d72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:b3:9c:2f:67:a1:e3:55:ac:f6:19:e1:ee:3d:
c1:3e:88:d9:b3:cc:77:b3:4f:f1:b8:30:84:5c:4c:
d6:eb:66:e9:78:d1:62:f1:31:ca:16:46:be:6d:e3:
71:92:95:c5:8c:23:e5:76:8c:0c:29:02:9f:1a:70:
3d:78:35:46:7f:ba:d0:52:78:eb:07:f2:2b:ca:0e:
32:15:f6:40:01:c6:4f:36:be:cc:98:60:26:84:6a:
48:17:e9:a8:2c:8c:c8:65:cf:74:0d:6d:89:f8:b1:
f3:98:3a:76:c2:03:ff:ff:5b:90:79:f0:bf:bc:8e:
68:87:92:50:d9:fc:8e:15:26:ae:8b:29:e4:da:b7:
ad:8c:f2:61:1c:ad:81:67:f9:b1:01:cb:65:27:81:
66:b1:96:42:13:c7:df:c2:c0:ef:2f:3d:aa:09:93:
fd:eb:e3:4b:4c:9e:2a:a9:f4:f8:4e:6d:37:11:0f:
c5:82:f3:d6:50:19:9a:dd:2e:85:fc:b8:6a:7a:75:
3d:53:63:dc:bc:f7:87:6d:7b:cd:1e:8b:82:84:5f:
ec:29:f7:76:08:ce:ed:c9:45:5d:13:7a:89:52:6e:
35:d9:77:6b:ed:27:c9:d4:e2:02:49:bd:e0:e0:8b:
93:aa:a0:01:55:e7:f2:2c:62:88:9d:43:5c:d3:2f:
74:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:65:5F:57:8F:59:E1:53:89:37:13:98:8D:0F:14:E6:CB:BE:8D:72
X509v3 Authority Key Identifier:
keyid:E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/2mVfV49Z4VOJNxOYjQ8U5su-jXI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.247.106.0-146.247.108.255
146.247.111.0-146.247.122.255
146.247.126.0/23
Signature Algorithm: sha256WithRSAEncryption
3a:1e:dc:ad:b2:87:22:23:91:09:18:f8:10:fd:e8:26:e8:38:
43:e0:8a:00:ed:aa:16:6d:26:2c:bb:eb:40:ed:9e:e8:43:7f:
5a:7f:d2:69:d7:a1:68:15:cf:ff:09:63:c2:02:52:51:51:6d:
1a:94:af:fa:fe:4d:62:03:43:0a:cc:65:4f:2a:e0:bf:65:e4:
31:85:9b:15:a6:40:3e:80:cf:05:5f:1a:f4:42:91:29:82:89:
be:2b:7d:c2:61:2c:af:5f:49:d1:2f:bb:b6:55:df:51:56:84:
69:cb:f6:09:9f:03:e6:94:d0:e3:00:a2:1a:1b:5c:f2:f8:45:
d3:ab:ef:26:78:88:c0:5e:d1:2f:2b:31:95:62:8c:e4:59:2b:
61:1e:cc:cf:58:be:18:c2:89:80:85:b3:dd:c8:52:4b:9f:56:
4d:c2:5e:e0:a6:28:30:a3:83:12:49:df:05:84:e8:8f:f8:c0:
f9:29:ed:87:2e:30:30:91:58:70:a6:7e:65:a7:c7:1e:80:a2:
b2:7e:25:8b:dd:97:b6:f0:ed:21:ae:0a:b1:b1:83:7e:51:28:
ac:40:ed:c2:8c:64:d1:c7:1e:d6:aa:02:16:93:8a:b3:63:a4:
99:15:4e:e3:d7:6b:25:88:9d:a9:78:bf:36:92:d3:6c:a0:ae:
89:02:b9:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:08:20 2025 by rpki-client