Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/da48e2-ff63-4bcd-82a2-d7b8eb4608e2/1/n9-usLo6aF2wwW6_ywj-9Wvh4ac.roa
File: n9-usLo6aF2wwW6_ywj-9Wvh4ac.roa (raw, json)
Hash identifier: 1CoA6tKUFjr40QImyeSQY7rXCRf9OZT/UPmAih0cirQ=
Subject key identifier: 9F:DF:AE:B0:BA:3A:68:5D:B0:C1:6E:BF:CB:08:FE:F5:6B:E1:E1:A7
Certificate issuer: /CN=8f4669216a2078cb024231f4632eab4da7ee4bc1
Certificate serial: 0195F0E1E0BFB5C90A831812332DEAB896EC
Authority key identifier: 8F:46:69:21:6A:20:78:CB:02:42:31:F4:63:2E:AB:4D:A7:EE:4B:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j0ZpIWogeMsCQjH0Yy6rTafuS8E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/da48e2-ff63-4bcd-82a2-d7b8eb4608e2/1/n9-usLo6aF2wwW6_ywj-9Wvh4ac.roa
Signing time: Tue 01 Apr 2025 10:24:49 +0000
ROA not before: Tue 01 Apr 2025 10:24:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57043
IP address blocks: 185.46.113.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:f0:e1:e0:bf:b5:c9:0a:83:18:12:33:2d:ea:b8:96:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f4669216a2078cb024231f4632eab4da7ee4bc1
Validity
Not Before: Apr 1 10:24:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9fdfaeb0ba3a685db0c16ebfcb08fef56be1e1a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:1c:ba:09:42:0c:38:f5:1c:1d:72:16:55:d2:
09:24:cb:d5:ad:5e:a5:de:b9:5c:71:c8:cf:3d:67:
78:d1:c1:21:6b:57:26:a1:03:80:4e:45:7f:49:4a:
a5:e4:8f:ef:bf:22:86:14:b3:05:49:81:c7:24:ee:
e5:b2:06:de:65:b0:21:86:85:9a:8d:67:2d:5b:30:
9a:05:8f:ed:fb:95:e0:41:60:81:cc:5f:2c:48:ff:
ea:3f:97:48:e1:da:55:e6:9d:f1:14:cf:91:20:96:
6b:20:cd:7d:b1:ad:92:be:5a:7e:4d:ba:ce:59:fa:
e6:54:df:2b:8d:ad:90:79:36:fd:c0:bc:c8:f5:ed:
b9:6c:56:04:bf:26:ec:7b:0e:46:45:8a:92:47:b2:
b2:7e:6e:d0:06:ce:e9:ac:4d:ba:c5:3d:f9:25:3d:
92:f3:f0:94:cb:c0:c2:6c:92:46:2b:2d:ab:99:4f:
19:b4:f6:26:55:e1:55:85:4d:43:f2:5f:c5:51:a4:
9f:a6:69:ff:7c:ec:51:d3:e4:e2:ac:3e:bb:3b:85:
c1:50:c1:a3:2c:27:2f:be:eb:de:83:69:07:d1:6e:
f8:55:59:4a:6d:53:11:72:e0:c9:a6:26:8c:46:4a:
15:a3:71:25:b0:2a:8b:96:b0:c5:29:63:ef:00:b4:
e0:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:DF:AE:B0:BA:3A:68:5D:B0:C1:6E:BF:CB:08:FE:F5:6B:E1:E1:A7
X509v3 Authority Key Identifier:
keyid:8F:46:69:21:6A:20:78:CB:02:42:31:F4:63:2E:AB:4D:A7:EE:4B:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j0ZpIWogeMsCQjH0Yy6rTafuS8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/da48e2-ff63-4bcd-82a2-d7b8eb4608e2/1/n9-usLo6aF2wwW6_ywj-9Wvh4ac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/da48e2-ff63-4bcd-82a2-d7b8eb4608e2/1/j0ZpIWogeMsCQjH0Yy6rTafuS8E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.46.113.0/24
Signature Algorithm: sha256WithRSAEncryption
26:7f:c9:7e:30:5f:3b:63:c9:11:7f:54:50:e1:5d:e5:17:20:
4c:cc:43:8a:e4:93:e1:4f:dc:54:50:0d:3c:ba:0d:ed:92:eb:
67:52:f3:1d:c8:87:70:67:1c:c2:3c:fb:dc:6b:27:fe:8d:ff:
2d:f6:a1:16:8e:e8:49:31:90:8d:7b:c8:96:93:55:3b:af:49:
4f:40:c2:81:45:78:75:c3:28:15:3e:b4:aa:80:f2:07:cc:5e:
c9:d6:e4:1a:3e:4d:be:a0:77:ef:69:84:55:92:b0:fa:f5:45:
db:17:a1:9c:03:55:51:59:2d:1d:67:0a:40:26:b7:1d:a6:be:
57:ea:cf:ee:34:b5:22:47:91:eb:0a:c2:42:9d:61:f3:ad:69:
65:a8:7b:aa:05:2b:4b:be:a8:15:2e:b1:b9:b5:3a:fa:d1:7e:
a0:0c:3a:6d:78:29:b0:1c:b1:f5:80:c0:50:ad:6b:72:ce:5a:
b6:d6:9b:00:01:40:b7:2e:dd:1e:8e:03:fe:30:e8:31:e7:db:
63:10:06:ae:8d:e8:a0:b0:10:1a:2b:b2:36:93:59:71:b5:34:
b9:cb:1a:f1:42:40:a9:5d:a4:4c:b4:e1:e8:32:90:f0:3c:eb:
d6:57:4d:14:b1:b1:30:e1:70:90:33:cd:7a:dd:a2:2b:b8:99:
cf:c1:b5:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:55 2025 by rpki-client on console.sobornost.net