Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/49424a-aa5f-4b9f-a627-24654e941c12/1/xHovsWco0FWia8DWR-GvNsYSrNI.roa
File: xHovsWco0FWia8DWR-GvNsYSrNI.roa (raw, json)
Hash identifier: tby+FFpFl1LGlp9XQyXnHjYmVkeUGYGKTrQzTYqHrLE=
Subject key identifier: C4:7A:2F:B1:67:28:D0:55:A2:6B:C0:D6:47:E1:AF:36:C6:12:AC:D2
Certificate issuer: /CN=dac32632aa9154253c6dcd2331e9ad6920b6bdcc
Certificate serial: 019420D64F8E37C7025F2B5DA3BDC3CF8AF3
Authority key identifier: DA:C3:26:32:AA:91:54:25:3C:6D:CD:23:31:E9:AD:69:20:B6:BD:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2sMmMqqRVCU8bc0jMemtaSC2vcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/49424a-aa5f-4b9f-a627-24654e941c12/1/xHovsWco0FWia8DWR-GvNsYSrNI.roa
Signing time: Wed 01 Jan 2025 07:48:23 +0000
ROA not before: Wed 01 Jan 2025 07:48:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 212.46.57.0/24 maxlen: 24
2a12:fc0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:4f:8e:37:c7:02:5f:2b:5d:a3:bd:c3:cf:8a:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dac32632aa9154253c6dcd2331e9ad6920b6bdcc
Validity
Not Before: Jan 1 07:48:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c47a2fb16728d055a26bc0d647e1af36c612acd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:5c:c2:d7:8c:bf:ee:bc:44:98:60:35:c1:ba:
f2:44:24:43:c8:54:a3:ba:ab:b7:90:84:d7:96:40:
41:9b:5c:c4:01:bc:a1:15:ee:41:e3:e2:c1:35:26:
f9:44:7d:df:d6:c2:60:89:5d:b0:aa:f9:50:ff:05:
b1:e8:cb:59:36:ac:14:42:4a:c7:d9:f9:af:5f:54:
61:21:72:36:82:69:6c:ce:fa:cb:94:05:34:88:86:
7e:dd:77:b1:00:91:3f:30:fa:21:13:51:cb:01:2f:
ae:d6:e3:bf:9c:eb:12:3f:4b:49:4f:51:55:9b:d2:
ab:4d:3e:a3:5e:51:13:01:79:d8:49:f7:3c:e7:cb:
f5:ea:b2:ab:4c:7a:fc:99:3f:3c:31:ce:8c:eb:53:
c9:d7:13:70:5f:03:bb:25:9b:57:35:de:db:cd:d9:
9b:5f:d1:53:f3:e4:54:3b:63:b2:8c:eb:21:7d:62:
63:17:07:ff:a6:2e:81:0e:93:80:a0:91:fc:f4:5e:
a3:d6:1b:e9:d8:85:ec:75:3c:fb:e6:90:05:8f:e5:
ee:de:45:9e:96:05:ec:8d:d4:a2:e2:43:60:bc:29:
5d:08:f6:82:0d:5d:79:7c:7f:46:f1:ac:35:b1:bc:
29:e9:04:4f:da:2b:f8:f1:98:97:2b:87:6b:8a:92:
c6:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:7A:2F:B1:67:28:D0:55:A2:6B:C0:D6:47:E1:AF:36:C6:12:AC:D2
X509v3 Authority Key Identifier:
keyid:DA:C3:26:32:AA:91:54:25:3C:6D:CD:23:31:E9:AD:69:20:B6:BD:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2sMmMqqRVCU8bc0jMemtaSC2vcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/49424a-aa5f-4b9f-a627-24654e941c12/1/xHovsWco0FWia8DWR-GvNsYSrNI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/49424a-aa5f-4b9f-a627-24654e941c12/1/2sMmMqqRVCU8bc0jMemtaSC2vcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.46.57.0/24
IPv6:
2a12:fc0::/44
Signature Algorithm: sha256WithRSAEncryption
05:6a:e8:3c:f6:06:4a:77:3c:79:08:1b:bd:cf:fb:a6:d4:73:
5e:a8:e4:30:dd:00:1d:80:b7:8e:db:09:37:66:b8:43:92:8e:
61:0a:d4:1f:12:a5:bb:61:1f:11:a5:c9:15:fa:a4:30:8b:6b:
3f:81:b0:a0:7c:bf:6a:81:75:2f:f4:97:8b:de:29:43:03:e7:
bd:8e:1f:9e:25:08:88:e4:7f:1f:51:90:ec:31:52:ea:a9:1f:
a4:9b:ed:af:08:fa:05:28:08:0e:fe:c6:f9:97:b4:9d:69:b7:
da:7b:d4:60:38:02:6f:de:5d:de:c9:b5:19:31:e2:8e:45:85:
d4:6f:c6:b1:d8:c5:8a:d0:de:0a:77:d4:15:79:a6:c4:7e:2b:
09:3b:a4:cc:8c:21:45:bc:b9:1d:c6:98:5b:eb:d5:6e:25:60:
54:05:c2:52:a9:6e:79:17:b9:4c:04:12:b6:95:52:e5:c9:64:
09:5d:cd:37:d8:5f:d1:a1:6d:b5:08:f9:2f:21:10:3b:da:aa:
3d:10:34:34:b9:89:70:83:98:c2:b7:5e:0e:1a:6f:e9:c2:99:
09:74:75:a4:37:39:e1:01:59:64:d4:84:e1:80:ca:80:83:6f:
d1:0d:72:42:c7:e9:94:8b:42:4b:43:ab:2b:96:05:f5:f9:44:
50:40:f9:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:45:26 2025 by rpki-client