Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/5WATrOg63KTkMX8mIkiQirDeoOA.roa
File: 5WATrOg63KTkMX8mIkiQirDeoOA.roa (raw, json)
Hash identifier: s81B//KClqA7bXyV+5fkY79YYtW4UJAMBmpMoss61bM=
Subject key identifier: E5:60:13:AC:E8:3A:DC:A4:E4:31:7F:26:22:48:90:8A:B0:DE:A0:E0
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 01942369E8CA62656DE6AAF0A9F9CA2208EE
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/5WATrOg63KTkMX8mIkiQirDeoOA.roa
Signing time: Wed 01 Jan 2025 19:48:50 +0000
ROA not before: Wed 01 Jan 2025 19:48:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 18464
IP address blocks: 46.3.96.0/20 maxlen: 24
46.232.48.0/21 maxlen: 24
46.232.56.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:e8:ca:62:65:6d:e6:aa:f0:a9:f9:ca:22:08:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: Jan 1 19:48:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e56013ace83adca4e4317f262248908ab0dea0e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:98:be:fe:ef:10:a0:d7:23:08:31:e3:a6:7e:
db:83:67:66:dc:f6:0f:1e:67:c3:e6:b1:27:65:c3:
f0:00:fc:e8:73:5b:1e:22:79:39:2e:05:44:af:d5:
81:33:8c:b6:0a:5c:31:1c:d6:3f:2e:23:b4:1c:fc:
6d:35:20:ef:66:37:55:10:7a:1e:5c:10:77:6a:c9:
88:b8:37:97:52:9b:d7:68:c1:41:aa:cf:10:24:7a:
ef:e7:6e:ba:ed:a3:78:b2:13:d4:93:1a:f1:4f:e3:
89:bd:db:b2:d2:e7:f0:1a:44:6c:ca:79:35:67:c7:
69:bd:43:12:2a:a1:c0:d5:e3:b8:42:38:3e:67:0e:
5a:45:e3:2b:1c:f5:44:30:5b:e3:4d:cf:96:e4:c1:
2b:08:46:62:9c:fc:29:ea:bc:e3:a7:04:fb:60:38:
31:23:79:27:54:a5:45:20:cd:e9:1c:50:10:3f:89:
0d:18:e9:ca:9d:50:36:3d:02:77:78:fd:5c:b0:e4:
50:a6:6a:06:f5:4a:aa:bc:5c:9c:bb:ef:67:da:5b:
ee:c2:78:b6:6d:dd:23:c5:f4:81:fa:24:06:5d:3b:
d5:b2:a6:b9:24:e0:d2:e8:5a:f8:54:3c:d8:26:f9:
60:a6:d5:43:1c:71:1c:92:4d:59:76:3d:46:c5:3d:
f5:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:60:13:AC:E8:3A:DC:A4:E4:31:7F:26:22:48:90:8A:B0:DE:A0:E0
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/5WATrOg63KTkMX8mIkiQirDeoOA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.3.96.0/20
46.232.48.0/20
Signature Algorithm: sha256WithRSAEncryption
8b:76:d1:57:37:de:9b:7c:fc:02:cf:67:77:48:93:5e:89:45:
f5:76:ed:3c:39:12:93:22:85:41:db:c0:6f:7e:54:88:6d:5e:
7b:d5:07:33:bc:b2:0e:c3:6e:32:cb:2f:a1:08:40:ed:b1:0a:
a6:f8:9b:80:30:8f:fc:4a:bb:6e:49:7f:22:0f:ff:58:28:25:
50:43:b2:09:4c:7f:6b:ae:35:ec:f5:22:4b:23:09:55:46:e2:
2c:18:6f:bb:27:c7:14:32:05:79:bf:9e:60:e3:03:46:d3:95:
c0:82:87:6a:0f:05:36:78:85:85:5e:ea:3a:b4:7a:26:d1:43:
24:d3:2b:ac:5e:33:f2:ad:40:f0:44:9d:56:a6:10:ed:03:6d:
46:d2:07:4c:67:37:95:c0:69:90:8b:ab:91:99:49:5c:bb:b6:
87:37:ba:4e:84:16:21:89:72:48:33:cc:5b:0a:00:ff:6f:7d:
f2:3d:7a:c9:66:90:c3:ba:f2:74:80:4b:eb:a5:09:a3:8a:b1:
06:34:51:0f:75:4c:d9:30:a1:2b:8b:ed:58:f8:df:08:02:df:
71:b8:24:95:c5:11:60:92:60:df:d4:2a:e3:ab:d9:b6:b3:c1:
2e:04:06:7b:19:e5:43:9a:80:47:71:f2:c1:69:e7:09:d6:bb:
97:88:2b:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:11:40 2025 by rpki-client