Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/xPmNgI2MBJIstiWMiSOAWkej_zc.roa
File: xPmNgI2MBJIstiWMiSOAWkej_zc.roa (raw, json)
Hash identifier: vJKk+eO7ZLM5QA+TiNBJgqIVJMIub9fywVY+U729ifg=
Subject key identifier: C4:F9:8D:80:8D:8C:04:92:2C:B6:25:8C:89:23:80:5A:47:A3:FF:37
Certificate issuer: /CN=c1233861207a230564ef36f11e0157344731e3f9
Certificate serial: 019422200CC6AD424A79A717523E4B7B9E0C
Authority key identifier: C1:23:38:61:20:7A:23:05:64:EF:36:F1:1E:01:57:34:47:31:E3:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wSM4YSB6IwVk7zbxHgFXNEcx4_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/xPmNgI2MBJIstiWMiSOAWkej_zc.roa
Signing time: Wed 01 Jan 2025 13:48:33 +0000
ROA not before: Wed 01 Jan 2025 13:48:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 46.228.131.0/24 maxlen: 24
46.228.135.0/24 maxlen: 24
46.228.136.0/23 maxlen: 24
46.228.140.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:0c:c6:ad:42:4a:79:a7:17:52:3e:4b:7b:9e:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1233861207a230564ef36f11e0157344731e3f9
Validity
Not Before: Jan 1 13:48:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c4f98d808d8c04922cb6258c8923805a47a3ff37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:e2:76:e3:e2:a8:b0:c7:f2:4b:7d:91:4b:d0:
d0:74:4d:5e:fd:74:7f:e3:e3:6c:72:b5:5d:29:58:
9b:fe:8e:48:44:ed:53:f3:2d:71:df:83:d2:be:06:
f0:09:9c:63:cf:df:ac:93:3d:9f:e8:b1:a8:4e:d5:
31:c9:81:f7:a2:e6:fa:8c:29:30:e2:6d:72:53:85:
18:23:62:e5:3d:01:8b:54:a8:af:f0:99:c0:53:94:
38:e9:1f:02:e8:00:29:f6:f8:80:70:2e:24:c0:21:
e2:38:e7:59:40:3d:64:2b:ba:35:86:30:9c:46:a3:
de:d2:fc:2c:ea:45:0f:4e:0c:e6:03:33:c4:79:62:
0b:5c:42:eb:b9:4c:41:de:48:0f:e8:76:14:9e:c4:
0a:d0:96:b6:a9:81:10:12:81:e2:42:f7:f1:c7:03:
2f:15:2d:b3:52:54:f9:bc:74:db:53:2d:be:1e:43:
01:27:c9:b3:27:73:31:ba:70:ff:c1:9a:f2:88:2b:
80:8c:8f:f1:b6:de:1a:25:5e:b5:ac:8c:9a:49:c1:
57:a9:26:d0:3c:8c:21:f3:ab:79:fa:07:c8:2e:91:
96:0a:da:26:e8:e6:f4:25:d6:2d:b6:10:8e:ef:0b:
78:ce:e7:c8:93:17:58:0d:d9:96:27:83:89:e9:1c:
f4:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:F9:8D:80:8D:8C:04:92:2C:B6:25:8C:89:23:80:5A:47:A3:FF:37
X509v3 Authority Key Identifier:
keyid:C1:23:38:61:20:7A:23:05:64:EF:36:F1:1E:01:57:34:47:31:E3:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wSM4YSB6IwVk7zbxHgFXNEcx4_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/xPmNgI2MBJIstiWMiSOAWkej_zc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/wSM4YSB6IwVk7zbxHgFXNEcx4_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.228.131.0/24
46.228.135.0-46.228.137.255
46.228.140.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:51:c8:6c:a3:52:7e:9c:8b:e7:ae:08:a4:c1:5b:6b:28:c8:
2b:42:e5:4b:21:c9:68:71:ea:90:fc:69:94:41:f9:5b:eb:39:
6f:42:bb:96:8d:14:4c:0e:ee:08:92:31:0e:45:33:b7:96:fb:
cb:2f:05:50:95:ed:47:fb:27:48:5f:11:b0:52:53:f6:bc:b4:
a9:f2:88:5e:ba:98:69:a1:c5:43:17:6f:c8:a0:2a:7c:23:4d:
c8:ee:75:c1:a4:b1:46:57:8f:e6:55:10:c0:fb:13:7b:8e:01:
70:c7:1e:ef:74:45:61:6a:fa:27:15:de:c2:86:c7:7f:2c:89:
57:e1:ed:af:78:86:aa:0f:63:77:60:65:2d:e6:7a:43:69:10:
af:7a:d3:3b:05:6e:8e:87:c3:3e:1d:f2:66:00:69:df:bf:f0:
9d:df:d3:1c:bf:dc:0a:87:e7:aa:91:3b:14:a3:97:3b:70:2d:
88:48:4d:17:fc:dc:4f:c7:77:6b:ac:2d:c1:d9:7a:06:02:19:
36:90:04:14:db:d6:12:c6:31:3c:e7:e5:bb:96:a5:ea:39:57:
3a:f0:79:18:01:cc:58:79:fe:fa:34:42:89:0d:3b:5a:27:3c:
f4:14:13:c2:42:84:63:fc:46:1d:f4:3b:25:b3:2b:35:12:1e:
c8:c8:19:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:19:53 2025 by rpki-client