Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/5V_5wxTn-OIctJXf6Z_IrO2IkBs.roa
File: 5V_5wxTn-OIctJXf6Z_IrO2IkBs.roa (raw, json)
Hash identifier: p3y4JzLbFOrivgxZTzpQiVp+M7EDSZLnLv3Q4379loY=
Subject key identifier: E5:5F:F9:C3:14:E7:F8:E2:1C:B4:95:DF:E9:9F:C8:AC:ED:88:90:1B
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 095BC2C1
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/5V_5wxTn-OIctJXf6Z_IrO2IkBs.roa
Signing time: Fri 01 Apr 2022 21:59:24 +0000
ROA not before: Fri 01 Apr 2022 21:59:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 399587
IP address blocks: 46.3.72.0/21 maxlen: 21
46.3.80.0/21 maxlen: 22
46.3.208.0/21 maxlen: 21
46.3.216.0/21 maxlen: 22
46.3.224.0/21 maxlen: 22
46.3.120.0/21 maxlen: 22
46.3.32.0/19 maxlen: 22
46.3.32.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 157008577 (0x95bc2c1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: Apr 1 21:59:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e55ff9c314e7f8e21cb495dfe99fc8aced88901b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:f7:e5:89:02:da:b7:5f:63:ff:ef:59:7a:b2:
34:fe:89:2a:fb:49:3f:d9:42:23:5f:44:48:47:8c:
38:d6:74:28:4b:2c:6f:dd:bf:90:29:5d:89:18:38:
36:60:f0:43:27:19:4c:a0:83:eb:95:82:b4:d5:9b:
53:b8:e2:a2:d1:d2:c6:da:c7:6a:ad:36:a8:c1:7b:
4d:09:74:ba:a1:0c:5a:c3:5e:1e:38:b6:2d:4a:60:
3a:05:77:ee:1a:cd:8b:43:d1:21:07:04:10:7c:9e:
23:e8:c8:7f:29:f0:10:84:ef:2a:46:de:94:c2:02:
09:05:7f:c7:74:f1:97:a2:cc:06:51:51:02:15:cf:
63:dd:75:ac:44:b3:1c:3d:2c:e5:ec:b0:b5:c6:79:
90:7a:ce:9a:dc:a8:6d:60:07:9a:6b:00:df:14:f1:
d4:fe:cb:8d:52:ff:94:25:45:db:8a:52:96:54:f3:
19:51:7f:37:32:19:aa:e5:98:9a:8f:a8:c0:9b:a2:
b9:32:c0:ea:a1:aa:52:cb:75:8e:13:12:f1:54:ae:
bc:02:b3:80:a0:78:ee:6f:44:56:a7:e0:e1:a0:f7:
25:9c:71:11:13:62:4b:f2:80:2c:56:f5:84:79:e2:
95:b2:10:34:c5:4e:35:a1:97:f6:17:5d:87:0d:67:
09:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:5F:F9:C3:14:E7:F8:E2:1C:B4:95:DF:E9:9F:C8:AC:ED:88:90:1B
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/5V_5wxTn-OIctJXf6Z_IrO2IkBs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.3.32.0/19
46.3.72.0-46.3.87.255
46.3.120.0/21
46.3.208.0-46.3.231.255
Signature Algorithm: sha256WithRSAEncryption
90:a0:83:f7:14:c3:94:d1:70:0c:a7:f0:d1:21:1e:a1:bc:1b:
08:4a:67:bc:dd:15:9f:da:3a:a1:6e:41:52:52:f5:67:60:bc:
12:b8:4b:82:0d:38:2d:9a:a4:43:ae:b2:c5:8f:db:23:cf:d1:
96:c6:78:56:0a:50:19:0d:b7:7a:9c:88:36:a7:68:e1:c1:73:
88:8b:13:08:4c:f0:6d:02:71:4a:c2:72:df:46:96:17:8a:4d:
75:47:84:bd:f9:4b:46:b4:f9:4b:c9:03:53:8c:5f:61:a7:86:
f9:14:37:e4:df:cf:ff:3f:55:6c:a9:8a:7c:27:c0:4f:fa:1c:
9b:e9:6a:a2:a9:ee:f1:47:93:26:87:fa:c3:72:87:55:29:fc:
d2:51:23:5c:a5:75:c3:cb:65:57:67:6a:21:0a:bc:fe:c7:a7:
c9:16:0e:6e:de:36:4b:9f:dd:2e:d2:00:6f:21:e9:68:d4:3c:
23:5d:aa:ee:7b:6f:53:bd:92:ec:4c:11:28:c5:f1:cb:e6:40:
e8:1e:46:c8:78:db:49:ae:42:04:48:a2:8a:7a:1d:4d:e7:f8:
e1:97:03:18:c8:40:4b:fa:ed:a6:6d:8d:b0:e2:1a:8b:23:4f:
23:b0:c2:ab:a9:d8:2d:61:1b:26:8c:d5:22:63:12:3f:ca:cd:
b1:e9:9b:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:03:24 2025 by rpki-client