Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/4E632_IuZY8x1ozkP-6ThR03Bog.roa
File: 4E632_IuZY8x1ozkP-6ThR03Bog.roa (raw, json)
Hash identifier: bN1eFi88zJV25U+1rFpjLuGfK5mLAqors48XRnISnic=
Subject key identifier: E0:4E:B7:DB:F2:2E:65:8F:31:D6:8C:E4:3F:EE:93:85:1D:37:06:88
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 01942369F01BF20121E6F7DFA4CD827707BB
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/4E632_IuZY8x1ozkP-6ThR03Bog.roa
Signing time: Wed 01 Jan 2025 19:48:52 +0000
ROA not before: Wed 01 Jan 2025 19:48:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49505
IP address blocks: 46.3.208.0/24 maxlen: 24
46.3.209.0/24 maxlen: 24
46.3.210.0/24 maxlen: 24
46.3.211.0/24 maxlen: 24
46.3.212.0/24 maxlen: 24
46.3.213.0/24 maxlen: 24
46.3.214.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:f0:1b:f2:01:21:e6:f7:df:a4:cd:82:77:07:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: Jan 1 19:48:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e04eb7dbf22e658f31d68ce43fee93851d370688
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:45:78:4f:67:6d:b3:02:ed:16:cb:fe:a7:92:
1c:43:27:4a:d1:fd:ca:1b:dc:c3:69:a4:0e:37:a1:
45:db:48:04:60:a8:e6:e8:80:27:b1:01:3a:ba:f9:
bd:7b:6b:41:71:e9:f6:f2:f6:54:6b:f6:8c:c0:31:
59:13:f7:dd:cd:34:e3:f2:77:b5:20:8b:80:47:9f:
6f:9e:98:ce:5a:e6:f1:15:07:21:47:df:e4:ca:8a:
c0:df:90:40:a8:43:82:ac:b3:ae:20:ef:ed:78:15:
63:a2:fa:39:13:b0:5d:de:14:43:63:2b:71:f8:05:
b3:de:a0:dc:1c:64:dd:c9:51:16:85:5b:81:4b:5e:
68:2e:fc:37:79:c4:dd:81:7c:0d:55:e5:5d:c0:62:
ec:5e:0c:74:29:dd:cc:fc:05:44:67:20:13:ea:c1:
4f:06:a8:d8:bb:6a:90:b1:6f:a7:b3:81:6c:43:eb:
17:d2:a7:a0:61:4d:16:bc:3e:c4:f1:18:21:3e:5b:
83:14:6a:2e:65:e7:56:4e:35:f3:02:14:6c:7a:42:
78:43:4e:bf:82:64:30:a3:98:65:f2:50:c0:f7:4d:
fc:f8:db:b2:06:c7:d4:b7:07:76:e7:d3:45:cb:a7:
07:69:22:ba:83:a8:9b:71:4b:7b:23:2c:dc:58:fe:
95:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:4E:B7:DB:F2:2E:65:8F:31:D6:8C:E4:3F:EE:93:85:1D:37:06:88
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/4E632_IuZY8x1ozkP-6ThR03Bog.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.3.208.0-46.3.214.255
Signature Algorithm: sha256WithRSAEncryption
0e:29:66:1d:97:5d:7c:e6:22:a9:66:53:83:29:ed:0f:46:7c:
3b:63:0a:8e:54:df:ae:b9:81:9f:66:bf:91:8d:10:2a:24:3e:
96:fa:f9:d8:1a:88:f4:28:91:cd:03:17:e2:1d:d9:69:e0:98:
40:b6:0d:6e:04:43:fa:ef:fb:bf:4b:f4:ca:99:bc:e0:6f:76:
5c:b3:81:80:03:b4:17:6b:0e:a6:83:58:d1:06:0c:f1:17:c8:
59:91:fc:40:b5:b1:08:66:92:b8:5b:b2:dc:40:5a:50:ec:4f:
8e:3d:3a:b9:a8:36:66:35:d2:6e:57:78:d4:0b:eb:1b:99:45:
1e:22:5d:1f:6a:f8:5a:3d:76:93:5f:bc:30:f8:b2:30:6e:fb:
25:5f:12:5c:76:e4:16:90:be:8b:f2:ae:2d:cd:95:e7:f4:4d:
1f:dd:de:b2:cc:ed:d0:9d:d1:a0:80:f3:ef:1f:61:14:39:24:
4f:dc:64:aa:57:24:be:89:2e:3d:71:e4:a3:6a:ff:cf:f5:9b:
6b:c9:6c:ee:17:bf:64:dc:c1:ed:41:d1:da:c8:ba:bd:bc:3f:
2e:17:7a:26:f7:d5:79:09:d1:3d:c7:a6:6f:b6:7a:af:b6:36:
d9:cc:72:52:b2:3a:83:f0:73:05:c8:7a:86:7e:5a:7b:89:1d:
eb:79:50:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:57:10 2025 by rpki-client