Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/1WYrgZWHyydMNpFRJjMRqxWv3yA.roa
File: 1WYrgZWHyydMNpFRJjMRqxWv3yA.roa (raw, json)
Hash identifier: 4w8LfbbSRp0ZffTvZuh4Mgnm1jd9DhLRwxv66VUANQE=
Subject key identifier: D5:66:2B:81:95:87:CB:27:4C:36:91:51:26:33:11:AB:15:AF:DF:20
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 01862DCDD67DAB13F1468D12BC53C2D824C6
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/1WYrgZWHyydMNpFRJjMRqxWv3yA.roa
Signing time: Tue 07 Feb 2023 21:35:09 +0000
ROA not before: Tue 07 Feb 2023 21:35:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2914
IP address blocks: 46.3.160.0/20 maxlen: 20
46.3.176.0/20 maxlen: 20
46.3.96.0/19 maxlen: 19
46.3.92.0/22 maxlen: 22
46.3.128.0/23 maxlen: 23
46.232.64.0/19 maxlen: 19
46.232.64.0/18 maxlen: 18
46.3.64.0/20 maxlen: 20
46.3.80.0/20 maxlen: 20
46.3.80.0/22 maxlen: 22
46.232.96.0/19 maxlen: 19
46.232.0.0/24 maxlen: 24
46.3.216.0/21 maxlen: 21
46.232.16.0/22 maxlen: 22
46.3.224.0/22 maxlen: 22
46.3.16.0/22 maxlen: 22
46.3.12.0/22 maxlen: 22
46.3.24.0/22 maxlen: 22
46.232.32.0/19 maxlen: 19
46.3.30.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:2d:cd:d6:7d:ab:13:f1:46:8d:12:bc:53:c2:d8:24:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: Feb 7 21:35:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d5662b819587cb274c369151263311ab15afdf20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:6a:4c:14:c5:c5:06:78:f0:6a:4b:37:42:3b:
bf:44:6c:76:6a:f6:69:73:cc:04:67:03:1c:08:d5:
9d:82:7c:1f:d5:3a:d2:15:9f:76:b8:8a:7e:0e:79:
0c:f8:e0:a1:35:f6:12:e5:7b:d4:2c:f5:82:fe:bd:
98:3c:6e:cf:65:23:12:2e:bb:24:84:39:1b:14:46:
25:ee:18:e9:a0:86:b8:7c:a5:00:8e:b2:aa:34:61:
75:42:dd:3f:16:81:c2:87:45:71:a2:f7:c3:7e:8a:
eb:47:86:a7:e7:59:09:a2:9e:62:f0:22:ca:1b:ac:
af:28:00:b5:d3:fe:f3:74:17:7d:4a:a9:19:fc:1c:
d7:a6:09:15:89:23:96:ea:91:ad:ff:3a:51:aa:21:
33:bf:a9:3e:e2:ad:24:14:ce:32:92:a1:c0:77:9a:
89:95:83:5c:38:32:86:47:c0:2e:ab:3c:58:bc:24:
2f:a5:4b:bc:ab:c7:89:1b:8e:f8:bc:5a:82:82:0f:
fc:f4:fb:ca:6b:57:1a:5c:12:fa:cb:b2:7a:6f:34:
27:38:82:3d:25:ad:7e:99:0b:46:ef:db:c8:c9:8c:
c2:48:53:48:e7:1d:09:10:fc:49:1a:1c:9c:7d:42:
79:4f:a0:b8:d2:f6:c4:da:11:21:9f:35:a4:55:f9:
0e:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:66:2B:81:95:87:CB:27:4C:36:91:51:26:33:11:AB:15:AF:DF:20
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/1WYrgZWHyydMNpFRJjMRqxWv3yA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.3.12.0-46.3.19.255
46.3.24.0/22
46.3.30.0/24
46.3.64.0-46.3.129.255
46.3.160.0/19
46.3.216.0-46.3.227.255
46.232.0.0/24
46.232.16.0/22
46.232.32.0-46.232.127.255
Signature Algorithm: sha256WithRSAEncryption
3c:86:07:fe:6b:de:c1:0d:8b:fe:59:cc:54:38:e6:f0:ce:c8:
e1:1c:d9:5c:db:3d:a1:b0:bb:43:2e:8b:5e:ae:d7:fd:8a:e6:
d2:3d:eb:7f:7a:f8:43:ce:88:6e:53:df:4d:79:a4:bc:ff:4e:
6c:a5:a4:c8:19:35:b9:1b:d3:9e:54:2a:4e:e1:ea:44:0c:7a:
d0:95:76:c1:2d:a9:f5:56:b0:85:f8:e4:9c:e1:1b:84:2f:45:
b7:d4:18:3e:20:da:8c:6e:22:0f:74:e0:b1:c1:72:9c:ae:ab:
c3:00:e2:7d:ad:b8:92:65:22:74:aa:44:8d:d9:2b:fb:81:fe:
d1:84:d4:78:5b:1a:83:c9:fa:d0:e9:b5:8b:d5:e2:5b:39:3d:
c8:5c:da:1f:ec:73:85:2b:6c:90:32:89:39:3f:c0:51:b7:4d:
6e:45:df:14:f5:35:bb:3b:e1:45:a2:fa:22:1d:6d:b8:3b:93:
4f:4d:09:94:f5:ec:cd:85:6c:01:32:70:7f:bf:2c:f0:f0:14:
e8:e9:9e:15:33:27:af:76:56:2f:40:f8:20:15:1b:77:0f:33:
13:52:9d:1d:5f:6c:fb:71:88:be:fc:b0:f8:21:a3:33:50:45:
29:c4:e2:64:5e:67:29:3e:6d:dd:5c:d8:c1:57:22:86:f6:c1:
06:8f:86:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:58:40 2025 by rpki-client