Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/1Jwnmkf26XGT0bCK0UZhr9JDGsc.roa
File: 1Jwnmkf26XGT0bCK0UZhr9JDGsc.roa (raw, json)
Hash identifier: suey+6sxu8Ep9phsqzoL2uXvOUbz+YbseoPdVYXGvNM=
Subject key identifier: D4:9C:27:9A:47:F6:E9:71:93:D1:B0:8A:D1:46:61:AF:D2:43:1A:C7
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 019302D6A38572C8BD5AC8488C4C3941F63A
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/1Jwnmkf26XGT0bCK0UZhr9JDGsc.roa
Signing time: Wed 06 Nov 2024 18:57:21 +0000
ROA not before: Wed 06 Nov 2024 18:57:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 398465
IP address blocks: 46.3.116.0/22 maxlen: 24
46.3.190.0/24 maxlen: 24
46.3.191.0/24 maxlen: 24
46.3.200.0/24 maxlen: 24
46.3.201.0/24 maxlen: 24
46.3.220.0/23 maxlen: 23
46.3.230.0/23 maxlen: 23
46.3.248.0/24 maxlen: 24
46.3.250.0/24 maxlen: 24
46.3.251.0/24 maxlen: 24
46.3.252.0/24 maxlen: 24
46.3.253.0/24 maxlen: 24
46.3.254.0/24 maxlen: 24
46.3.255.0/24 maxlen: 24
46.232.67.0/24 maxlen: 24
46.232.69.0/24 maxlen: 24
46.232.71.0/24 maxlen: 24
46.232.72.0/21 maxlen: 24
46.232.72.0/24 maxlen: 24
149.126.226.0/24 maxlen: 24
149.126.244.0/24 maxlen: 24
149.126.245.0/24 maxlen: 24
149.126.247.0/24 maxlen: 24
149.126.248.0/24 maxlen: 24
149.126.249.0/24 maxlen: 24
149.126.250.0/24 maxlen: 24
149.126.252.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:02:d6:a3:85:72:c8:bd:5a:c8:48:8c:4c:39:41:f6:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: Nov 6 18:57:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d49c279a47f6e97193d1b08ad14661afd2431ac7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:1d:75:9b:c3:44:f5:cd:6e:b2:48:8f:78:95:
f6:0f:82:4b:05:7b:39:99:0a:37:69:5e:c0:14:3c:
8f:70:4d:18:1c:be:d9:0e:4c:bb:6e:98:c1:32:91:
c4:8d:35:77:4f:de:9b:77:6f:8e:e4:c4:94:b9:ad:
5c:1d:17:d5:2f:82:bd:40:cf:8c:b5:8a:3e:19:84:
a7:2a:aa:4c:47:55:dc:21:b3:65:09:d0:e3:cb:00:
fc:42:bf:c2:c2:b4:02:14:9d:d8:15:32:49:5e:fb:
df:23:a8:de:74:c9:b7:db:c1:34:09:41:da:94:f5:
93:dc:84:84:71:6f:38:3e:5f:94:a4:5b:79:b6:af:
86:4b:78:f4:e3:5f:ab:b3:5d:bb:0e:48:54:aa:d9:
d4:d9:ff:10:12:b4:ad:f3:8c:77:8c:cf:6e:fb:15:
0c:53:ee:07:a1:e8:a7:5b:a5:b8:0e:46:37:7d:33:
04:04:61:f1:2c:10:92:38:f5:6c:a7:2d:94:e2:be:
33:8b:10:7c:3b:79:23:e3:83:c8:1c:24:95:72:a4:
c1:08:28:25:7a:a6:d2:8b:11:a2:4b:a2:a4:41:2c:
91:e9:9a:a7:54:ac:19:1b:01:c0:cd:56:e7:0a:df:
34:fe:19:44:75:6b:13:cf:ee:7b:ec:22:35:58:44:
3d:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:9C:27:9A:47:F6:E9:71:93:D1:B0:8A:D1:46:61:AF:D2:43:1A:C7
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/1Jwnmkf26XGT0bCK0UZhr9JDGsc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.3.116.0/22
46.3.190.0/23
46.3.200.0/23
46.3.220.0/23
46.3.230.0/23
46.3.248.0/24
46.3.250.0-46.3.255.255
46.232.67.0/24
46.232.69.0/24
46.232.71.0-46.232.79.255
149.126.226.0/24
149.126.244.0/23
149.126.247.0-149.126.250.255
149.126.252.0/24
Signature Algorithm: sha256WithRSAEncryption
97:4d:98:fd:bb:b5:a8:ee:49:d6:2e:54:a0:da:5d:d5:f1:83:
ab:b1:95:5b:19:9e:09:75:0a:c6:38:d4:df:10:4d:4e:7d:6f:
80:e3:8c:58:b7:98:87:38:2b:07:4f:b3:c1:2c:df:de:c8:15:
67:1b:bb:3b:02:11:89:e6:40:e1:26:50:14:c1:67:57:bb:4c:
ff:95:2d:55:ad:77:e2:57:95:b4:99:d1:06:d8:8b:3d:d7:c9:
d1:b8:ef:d7:9c:8e:79:4c:81:bf:06:5b:d8:8a:39:97:3f:c7:
47:a9:72:1d:ca:f3:d3:37:30:99:a9:b6:f1:5b:90:89:e1:75:
bc:48:32:f5:b4:0b:d5:5e:02:02:d9:e3:d2:71:ce:91:4c:e0:
8c:c6:70:e4:53:93:18:d1:9d:e1:81:b7:c3:1a:2e:20:cb:1a:
9d:f3:cf:57:45:52:2a:8b:63:65:28:6e:81:24:f6:61:9d:20:
e8:e3:1b:6a:08:12:ab:38:7a:bb:55:87:84:be:c2:fa:91:d6:
42:95:c1:03:5a:8b:fe:ee:bc:51:a4:1a:d8:8d:ac:e8:8d:d6:
ff:af:8f:0c:ca:88:6d:3a:da:c4:4d:37:de:20:ca:62:34:c5:
31:19:ca:f5:81:6b:e6:b8:55:5e:9e:34:a6:9a:32:e9:f6:db:
be:d4:66:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:02:24 2025 by rpki-client