Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/8xEnp63Gwdn_xiSmE_5PDKVuQXE.roa
File: 8xEnp63Gwdn_xiSmE_5PDKVuQXE.roa (raw, json)
Hash identifier: oUu/Cr2QDEeTwcOjK3METSUgB97loqZ77UGHIfvV6yc=
Subject key identifier: F3:11:27:A7:AD:C6:C1:D9:FF:C6:24:A6:13:FE:4F:0C:A5:6E:41:71
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 0185719554CB87B564984B47952725021BC3
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/8xEnp63Gwdn_xiSmE_5PDKVuQXE.roa
Signing time: Mon 02 Jan 2023 08:24:50 +0000
ROA not before: Mon 02 Jan 2023 08:24:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1040
IP address blocks: 46.3.96.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:95:54:cb:87:b5:64:98:4b:47:95:27:25:02:1b:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: Jan 2 08:24:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f31127a7adc6c1d9ffc624a613fe4f0ca56e4171
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ee:ac:e3:06:3c:73:08:3a:d9:92:57:38:61:
b3:fc:b6:36:9b:2b:fb:bb:c1:53:3e:f9:67:ff:b5:
61:f3:4e:c3:90:5d:7a:c8:80:a1:17:46:14:e0:9d:
d6:c2:70:4c:d1:db:e2:b3:92:35:5b:6f:89:b1:ce:
61:8e:f4:d5:3f:cb:71:8b:07:c1:13:3b:4a:2f:ad:
21:57:4c:1d:d0:c7:38:60:3f:b9:00:58:ee:ae:5f:
50:55:e1:e2:e5:03:4f:47:4d:01:19:5d:5e:fb:3b:
90:b3:b8:25:33:e2:49:28:b4:ba:ef:74:44:d3:91:
03:7f:98:77:74:42:8e:9d:e0:b2:62:59:ed:65:72:
7e:a9:1b:82:94:dd:aa:f4:68:fd:27:33:74:95:74:
44:7e:1b:a8:48:73:0b:4a:87:21:f6:8c:71:9d:f1:
9d:ec:d5:d4:b5:7d:9b:f9:bb:41:da:bc:57:c6:80:
31:78:3d:7c:bd:7c:8f:f6:72:3e:b7:5b:c8:68:3b:
b5:f0:d7:8e:d4:c4:23:7c:d5:3e:06:a2:19:68:de:
10:3d:9b:69:2d:11:aa:d1:4e:d4:db:26:9b:e5:a0:
6d:c4:ce:57:9e:6c:ef:3d:37:3c:12:05:e5:28:46:
b8:44:60:d5:c6:7e:eb:4c:67:7d:9f:41:b0:0a:b9:
16:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:11:27:A7:AD:C6:C1:D9:FF:C6:24:A6:13:FE:4F:0C:A5:6E:41:71
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/8xEnp63Gwdn_xiSmE_5PDKVuQXE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.3.96.0/20
Signature Algorithm: sha256WithRSAEncryption
4d:6c:be:69:d9:40:66:5a:d5:78:c4:a0:d5:30:8b:c2:db:2b:
ba:b9:15:ca:b6:e4:4b:4b:70:eb:7b:d4:c4:03:87:e2:bb:59:
00:a7:68:be:66:08:5d:77:2b:c5:45:e0:7d:da:9c:9b:10:45:
3e:49:4b:45:72:b9:c8:45:64:da:9f:bb:24:5d:ca:e3:a3:52:
48:53:ec:dd:4e:00:db:d4:cf:32:cb:f8:76:03:40:d3:41:1c:
01:57:db:41:38:ba:9f:53:70:fd:38:74:12:54:d7:e8:97:68:
d1:f7:9b:7d:42:42:2b:52:6c:a4:aa:04:fa:40:0c:8d:58:fc:
47:45:6b:d8:a3:f9:40:37:4b:4e:a3:e4:44:7c:1f:19:c6:d7:
8b:b1:72:c9:36:15:04:71:9e:35:f7:e1:17:a3:fd:3a:bc:a3:
c0:a8:67:7a:e9:9b:1e:73:7f:4d:9e:ad:8d:8f:89:3f:79:ed:
0f:2e:d9:5d:0f:9b:a0:df:80:83:ad:63:77:50:b9:ea:e8:fb:
40:27:32:ee:f2:08:96:cf:14:3c:7c:77:a8:7f:c4:13:23:7f:
79:f3:02:25:0b:06:89:ad:05:30:5f:f4:e3:cc:7c:14:b2:bf:
91:b5:15:b9:64:57:e2:1a:ac:a0:d2:f1:27:54:7b:7f:5e:08:
00:b8:a9:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:09:56 2025 by rpki-client