Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/_2UIAbwnrsC5V22uqWNYhCkCBv4.roa
File: _2UIAbwnrsC5V22uqWNYhCkCBv4.roa (raw, json)
Hash identifier: gV7Atks+dRAubF+/PClD5ej93PjPh08+Wxe3v3q8MoM=
Subject key identifier: FF:65:08:01:BC:27:AE:C0:B9:57:6D:AE:A9:63:58:84:29:02:06:FE
Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Certificate serial: 01856F02547F255027720E647850B1F9AC9A
Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/_2UIAbwnrsC5V22uqWNYhCkCBv4.roa
Signing time: Sun 01 Jan 2023 20:25:01 +0000
ROA not before: Sun 01 Jan 2023 20:25:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208030
IP address blocks: 46.19.200.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:02:54:7f:25:50:27:72:0e:64:78:50:b1:f9:ac:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Validity
Not Before: Jan 1 20:25:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ff650801bc27aec0b9576daea9635884290206fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:a7:50:94:05:6a:93:69:58:21:77:11:13:e1:
f3:be:88:78:85:4a:c0:fe:0b:84:3c:5a:32:9b:a1:
83:47:08:5d:96:9c:f7:75:e4:0a:79:20:68:b0:16:
83:f3:d6:2f:9b:04:a0:dd:d3:b6:ad:bf:c6:ed:e7:
b3:77:2f:8c:88:a0:18:28:78:79:c8:a7:d2:a4:dd:
01:ca:4d:6b:e2:db:d2:9b:41:f1:50:f2:07:60:50:
7b:82:2a:70:af:0e:d5:59:ef:22:34:26:61:e6:b3:
65:74:dd:93:fd:25:fd:4d:30:f6:65:15:11:c0:88:
1a:a0:73:80:43:8b:54:a1:60:79:46:06:60:15:de:
84:f9:31:3f:17:15:a1:72:cf:63:9f:27:c5:2a:f0:
1f:62:0b:b1:bc:71:f6:c6:e8:e7:c2:a4:1e:f9:b9:
7d:16:aa:85:1e:2f:10:d1:3f:27:c2:5b:6b:d0:e2:
eb:c1:37:ba:59:7f:29:98:a5:83:4c:a1:9d:9f:7d:
1a:5c:2d:91:00:b8:89:e7:1b:e9:16:22:2e:9c:fb:
ee:1b:3f:55:6e:7a:a6:3e:4c:04:c0:5e:21:c9:c5:
1f:95:7a:f1:37:10:89:7e:4f:71:30:be:ea:0f:bc:
a6:88:ec:59:e3:95:84:e7:08:e6:da:88:50:ab:db:
78:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:65:08:01:BC:27:AE:C0:B9:57:6D:AE:A9:63:58:84:29:02:06:FE
X509v3 Authority Key Identifier:
keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/_2UIAbwnrsC5V22uqWNYhCkCBv4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.19.200.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:15:00:63:ed:14:4d:2f:f3:79:7e:49:c0:c3:d5:94:18:a2:
0d:74:bd:4f:01:f7:09:9b:8a:15:72:9c:82:50:c8:71:40:19:
6d:76:49:1a:9f:86:64:14:09:80:13:8c:c6:50:b8:bb:da:41:
44:5e:8c:c1:27:5a:94:82:9f:85:48:7f:a3:1b:75:c7:7c:9f:
fc:02:73:6d:d1:e8:6c:c0:91:9d:55:6c:c7:55:70:44:98:07:
dd:f4:df:96:12:ca:e3:7a:dc:55:7d:94:82:89:c6:6a:59:22:
cd:7b:e8:7d:59:09:d6:ee:9a:f4:e1:bc:2d:f8:17:3b:fd:e2:
b5:b5:ad:c4:30:1a:0b:e5:1d:58:4f:eb:24:b1:8b:48:17:35:
e5:3a:df:94:1a:02:f0:15:06:1a:d7:9a:17:39:74:a2:02:4a:
8c:9d:f6:fb:24:e8:42:9b:a6:46:44:c7:a7:27:50:f6:0b:b4:
61:05:78:61:74:8d:3e:97:eb:fc:85:70:82:f4:e1:cd:c7:02:
0b:d4:dc:54:a6:b9:5d:87:ab:2f:33:3b:2d:7b:dc:91:b1:4c:
97:d0:18:92:38:cb:fa:6e:d0:84:2f:73:0f:95:46:98:6d:28:
b5:85:84:e4:4a:8b:38:ea:74:41:fe:fb:d7:19:57:05:ff:99:
8d:c3:e7:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:12:40 2025 by rpki-client