Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/3tE5adlhGRIjvtbDc5vN-iBOnCI.roa
File: 3tE5adlhGRIjvtbDc5vN-iBOnCI.roa (raw, json)
Hash identifier: xE8tjVETb96slARbl0YF7Ur/2jUILJJnxIpzQ0Vqizo=
Subject key identifier: DE:D1:39:69:D9:61:19:12:23:BE:D6:C3:73:9B:CD:FA:20:4E:9C:22
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 018CC94E71DB320307BC05D7A8AE1FF61256
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/3tE5adlhGRIjvtbDc5vN-iBOnCI.roa
Signing time: Tue 02 Jan 2024 08:33:30 +0000
ROA not before: Tue 02 Jan 2024 08:33:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 398083
IP address blocks: 46.3.80.0/21 maxlen: 22
46.3.216.0/21 maxlen: 22
46.3.224.0/21 maxlen: 22
46.3.120.0/21 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:71:db:32:03:07:bc:05:d7:a8:ae:1f:f6:12:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: Jan 2 08:33:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ded13969d961191223bed6c3739bcdfa204e9c22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:10:85:91:d6:39:e3:aa:6f:0d:1e:ca:64:5f:
c2:96:c6:85:98:db:f8:3a:cc:22:62:45:14:2e:3f:
02:4e:ae:61:d2:7c:dd:b6:c1:19:8c:5c:52:52:2c:
64:39:e7:ba:5b:1d:59:a4:c1:b1:d4:5d:55:36:81:
e0:b9:e7:a5:e5:b6:44:c1:6a:28:9f:f4:a9:d2:4d:
46:73:35:72:48:33:50:91:e2:63:78:ae:c1:24:71:
00:93:87:d9:b9:37:f7:f7:09:20:67:e2:b4:71:f4:
5f:21:e1:64:a1:bd:d7:2b:31:22:76:a1:fb:49:6a:
7a:ab:8a:34:e0:97:69:dd:04:62:a6:c0:32:27:43:
3c:21:44:20:24:71:7a:ec:c5:b9:a3:db:bb:e9:2e:
ad:d7:b9:ec:a0:7f:ba:98:2c:56:47:81:5a:70:fd:
fc:c3:4a:94:d2:67:15:52:f1:9c:ed:eb:e5:2b:1a:
bf:a5:bf:80:d3:1a:75:b7:68:08:24:70:66:33:2e:
66:39:53:3f:e9:be:b9:0a:62:d3:44:ee:63:d2:b0:
8b:29:8c:26:c3:0b:4b:79:72:22:35:01:ea:8e:59:
9e:c4:f0:6e:b3:4f:67:fe:3e:83:c1:3b:2c:c1:ea:
9e:3a:54:de:5a:7d:48:f5:8e:07:24:73:54:ec:e5:
1a:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:D1:39:69:D9:61:19:12:23:BE:D6:C3:73:9B:CD:FA:20:4E:9C:22
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/3tE5adlhGRIjvtbDc5vN-iBOnCI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.3.80.0/21
46.3.120.0/21
46.3.216.0-46.3.231.255
Signature Algorithm: sha256WithRSAEncryption
2e:81:d4:ea:0e:c8:24:5a:b4:f1:82:59:cb:f5:79:1b:df:33:
ff:01:f5:56:42:bc:67:29:b6:82:51:2b:9c:7b:07:b0:3a:2f:
dc:73:12:0e:e6:41:80:8c:57:76:84:f7:d6:8b:85:fa:b4:bc:
dd:11:2c:d2:da:6e:a0:ae:2d:fc:9e:72:ef:49:61:0b:a9:c6:
d8:20:46:c1:ef:d2:22:8c:b2:69:9a:6e:3d:b5:b9:79:fa:20:
11:20:4f:05:6f:f7:c9:80:8c:99:6e:f0:1e:51:de:f4:6e:59:
72:58:9f:38:24:fd:c2:bc:d6:3d:89:4e:94:c2:58:b4:71:60:
c7:69:a2:f0:11:9b:21:e0:8d:d1:6c:c5:d1:a8:4f:e7:e1:cb:
b5:5c:ce:19:4a:10:ce:3e:a9:f4:2c:4f:1a:2c:7f:61:d8:87:
81:12:d3:27:44:9c:2a:b5:5d:55:27:27:27:77:9f:11:60:fd:
0d:c0:fc:88:4b:cf:d0:f3:de:d0:bf:2c:54:52:3e:40:ad:e5:
58:7a:87:f6:4e:18:9f:70:c7:58:5c:03:e4:0d:73:6d:9d:e4:
6e:61:b6:9e:21:34:b0:92:a5:cd:5d:67:80:35:f7:04:c8:bc:
f0:9f:ca:4e:1c:e3:9b:0d:48:4c:24:75:e5:eb:5b:2d:d8:78:
a6:d8:63:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:10:29 2025 by rpki-client