Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/AoM9Fgpg6MsyZdlIaiQ1SP2ZfnI.roa
File: AoM9Fgpg6MsyZdlIaiQ1SP2ZfnI.roa (raw, json)
Hash identifier: 5w+mvwo815YPk68Iy4lNlz3bC+U47Lafh5B434r1zbU=
Subject key identifier: 02:83:3D:16:0A:60:E8:CB:32:65:D9:48:6A:24:35:48:FD:99:7E:72
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 018CC94E68150C98D2019EAC436B27B9DD91
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/AoM9Fgpg6MsyZdlIaiQ1SP2ZfnI.roa
Signing time: Tue 02 Jan 2024 08:33:28 +0000
ROA not before: Tue 02 Jan 2024 08:33:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7029
IP address blocks: 46.3.134.0/24 maxlen: 24
46.3.254.0/24 maxlen: 24
149.126.242.0/24 maxlen: 24
149.126.244.0/24 maxlen: 24
46.3.255.0/24 maxlen: 24
149.126.245.0/24 maxlen: 24
149.126.252.0/24 maxlen: 24
149.126.248.0/24 maxlen: 24
149.126.250.0/24 maxlen: 24
149.126.247.0/24 maxlen: 24
149.126.249.0/24 maxlen: 24
46.3.201.0/24 maxlen: 24
149.126.226.0/24 maxlen: 24
149.126.228.0/24 maxlen: 24
149.126.231.0/24 maxlen: 24
46.3.248.0/24 maxlen: 24
46.3.251.0/24 maxlen: 24
46.3.253.0/24 maxlen: 24
46.3.249.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:68:15:0c:98:d2:01:9e:ac:43:6b:27:b9:dd:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: Jan 2 08:33:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=02833d160a60e8cb3265d9486a243548fd997e72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:88:fd:a5:89:85:a0:84:ee:b8:fd:74:40:e6:
f7:c8:ea:ea:54:fd:28:24:44:84:e3:7c:a3:54:7c:
55:3b:41:54:68:fc:4f:42:16:3b:f7:3a:34:6d:df:
36:0d:02:fb:51:c3:50:15:a2:d1:76:2e:ac:d4:34:
36:c0:55:fa:7d:f7:2e:7a:5e:2f:1b:09:9d:3e:51:
31:c1:48:82:a0:ab:99:ec:54:84:b3:07:d4:1f:a0:
a5:dd:00:27:b0:38:c0:44:7d:79:3b:94:84:7d:89:
bf:15:2a:45:0c:d9:a1:21:a3:cd:d9:97:8b:bb:b6:
d4:bc:af:ad:20:bf:33:39:fe:92:20:5f:5b:1c:44:
f0:1e:dc:d9:41:bd:56:8e:a1:16:98:21:7d:76:5e:
6c:a1:91:4a:53:87:dc:aa:3d:7e:b6:ed:04:c7:70:
7c:63:b9:a7:53:c6:74:b9:65:b7:a2:6b:92:61:a2:
91:c8:6b:11:e7:b5:7f:78:b3:0d:f1:7a:3e:6f:bf:
58:a6:0a:6f:10:0f:d0:f4:7b:2e:ea:83:9d:8d:d6:
a6:39:c5:6e:b5:59:ba:5a:cf:6d:01:39:72:25:5e:
8c:e7:57:75:57:f1:12:8b:d6:aa:f2:ad:c8:19:d4:
1b:93:9e:5a:24:e7:22:9e:ea:e7:c2:9a:0b:9c:b7:
3b:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:83:3D:16:0A:60:E8:CB:32:65:D9:48:6A:24:35:48:FD:99:7E:72
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/AoM9Fgpg6MsyZdlIaiQ1SP2ZfnI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.3.134.0/24
46.3.201.0/24
46.3.248.0/23
46.3.251.0/24
46.3.253.0-46.3.255.255
149.126.226.0/24
149.126.228.0/24
149.126.231.0/24
149.126.242.0/24
149.126.244.0/23
149.126.247.0-149.126.250.255
149.126.252.0/24
Signature Algorithm: sha256WithRSAEncryption
85:ff:e8:a7:e4:f2:97:3d:c8:33:3a:66:dd:e1:bd:50:a6:da:
60:7c:76:b7:bb:07:f9:8b:da:68:2e:2d:1e:b1:a5:71:c1:13:
a1:41:b3:31:23:3b:02:b3:b4:10:31:20:07:92:4e:e0:f6:de:
87:82:dd:1e:6d:fa:c7:2a:59:0a:79:12:67:6e:d0:0f:30:8e:
21:2e:8f:7a:ee:00:14:05:74:12:e2:e7:27:37:09:de:6c:22:
a1:79:30:ae:b7:5f:ac:07:b3:7a:3f:f6:0d:9d:82:cb:7c:76:
53:b4:9f:51:7f:c6:20:bd:b5:df:8b:a6:67:5b:d9:a8:77:83:
41:19:2b:13:65:f1:29:57:95:8e:8f:89:3a:5b:6c:62:74:d5:
e5:1b:e5:2a:cd:16:15:65:09:e6:44:6e:b4:aa:1f:16:0f:df:
64:5e:43:46:08:30:f5:96:66:e1:3a:98:29:e8:ea:8f:13:d1:
02:be:1c:f3:ad:a6:8d:a6:1a:26:77:b7:53:f6:81:c8:46:d8:
65:a2:1e:43:d6:21:45:c9:85:ab:15:7c:e5:66:68:3e:2d:ae:
74:ba:88:29:41:f1:bf:03:1e:58:d8:4f:3e:b8:13:f0:a8:15:
af:b8:03:5d:bc:f9:20:68:14:c1:54:97:3e:ce:16:17:71:6b:
df:55:93:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:06:04 2025 by rpki-client