Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/f9__0EOOD2bbqws_SYovsEadu64.roa
File: f9__0EOOD2bbqws_SYovsEadu64.roa (raw, json)
Hash identifier: rdpqu3t3b72JgKQs0LjFSsEK4eL5Gx3rtjq221xpO1U=
Subject key identifier: 7F:DF:FF:D0:43:8E:0F:66:DB:AB:0B:3F:49:8A:2F:B0:46:9D:BB:AE
Certificate issuer: /CN=1e36de27974727aa0046b3e9c8d0624674541255
Certificate serial: 01941FFA9EE5B232DD77678F07F4CA338CBD
Authority key identifier: 1E:36:DE:27:97:47:27:AA:00:46:B3:E9:C8:D0:62:46:74:54:12:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HjbeJ5dHJ6oARrPpyNBiRnRUElU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/f9__0EOOD2bbqws_SYovsEadu64.roa
Signing time: Wed 01 Jan 2025 03:48:25 +0000
ROA not before: Wed 01 Jan 2025 03:48:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51200
IP address blocks: 46.29.232.0/24 maxlen: 24
46.29.233.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:9e:e5:b2:32:dd:77:67:8f:07:f4:ca:33:8c:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e36de27974727aa0046b3e9c8d0624674541255
Validity
Not Before: Jan 1 03:48:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7fdfffd0438e0f66dbab0b3f498a2fb0469dbbae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:7b:f7:5b:55:c6:59:b4:c2:7c:45:a5:9e:b2:
c3:c3:2f:d0:e2:14:ca:55:45:33:e0:16:02:9b:00:
fe:08:3a:21:62:cb:ca:31:66:3d:13:1e:6f:d0:93:
d7:9e:1a:a8:21:93:30:20:93:d3:13:12:28:bd:4d:
67:57:42:ed:c1:91:3e:1c:8b:8f:93:01:d2:07:8b:
ef:59:bd:24:fa:0e:ed:8e:1a:63:0a:e6:ea:cd:f8:
0f:97:6d:68:29:a0:53:9a:f8:ab:3d:49:2c:18:5b:
e6:12:05:57:c3:cc:1f:99:38:cb:9f:a5:17:83:b2:
0c:d2:1e:5a:5e:84:86:3f:1d:ab:b5:3b:7f:cc:e4:
e5:ef:8e:2e:4d:fd:a3:60:4f:30:c7:02:2f:0a:29:
8c:59:4d:71:89:5e:85:03:74:ed:17:d8:7d:44:fb:
02:67:cf:aa:51:dd:ec:d3:51:2e:4c:2e:f2:42:31:
84:7e:7e:0b:9e:71:06:7d:8b:80:ec:90:08:59:2c:
a5:a3:3f:4a:ae:d9:82:c8:e8:a7:13:b4:d4:85:92:
1a:67:35:bd:51:ab:82:54:95:82:ab:02:70:08:e4:
84:5d:df:f5:ab:81:8d:68:3a:28:6b:4e:e5:3a:56:
ae:c3:c4:d5:79:ff:47:35:3a:29:9a:7e:c4:ea:49:
05:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:DF:FF:D0:43:8E:0F:66:DB:AB:0B:3F:49:8A:2F:B0:46:9D:BB:AE
X509v3 Authority Key Identifier:
keyid:1E:36:DE:27:97:47:27:AA:00:46:B3:E9:C8:D0:62:46:74:54:12:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HjbeJ5dHJ6oARrPpyNBiRnRUElU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/f9__0EOOD2bbqws_SYovsEadu64.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.29.232.0/23
Signature Algorithm: sha256WithRSAEncryption
04:b2:2d:7b:32:f2:13:5c:86:19:45:f1:8b:a7:24:de:75:c8:
32:46:c6:19:d6:8c:d2:6a:3c:69:ad:b3:98:75:8a:d3:e5:a7:
20:82:25:2c:56:ff:3b:c6:95:5e:a2:97:8f:84:c4:18:1e:5e:
1d:ec:5f:41:aa:1f:da:be:af:9e:23:c0:e4:95:46:74:63:48:
cb:f2:90:a6:ea:d0:b3:54:2b:ae:ad:21:49:3b:33:e9:65:69:
d7:23:da:87:24:24:61:54:78:ea:7f:3a:f2:0b:c0:de:f1:21:
bd:67:7d:5c:75:e8:34:3c:4e:29:dd:20:00:6c:e0:5b:7a:3d:
56:7c:51:22:82:0c:a5:5a:da:2c:53:fb:57:1f:f2:5c:9f:ac:
31:27:f2:1a:5d:c0:26:c5:b1:35:80:4c:95:93:ba:a2:05:df:
3f:9f:ae:c9:b1:89:2c:cb:1e:54:8c:64:e7:69:a1:63:bd:86:
6c:e9:ef:77:dc:14:1e:53:51:e0:62:33:ae:83:1d:fb:ea:85:
59:e0:c2:85:64:6c:27:c9:cb:58:b8:d3:47:61:8f:71:61:3f:
1a:7b:33:c4:4d:95:ea:13:d3:00:e6:07:d6:a4:4f:84:fa:74:
14:95:5a:34:47:a6:b9:05:41:48:69:a5:1c:29:d6:c4:da:a6:
c1:e1:28:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 09:21:51 2025 by rpki-client