Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/Axn-NVzCZA_G2WBIHxY5cZ4mVwI.roa
File: Axn-NVzCZA_G2WBIHxY5cZ4mVwI.roa (raw, json)
Hash identifier: APCdsjeTh5n7yjJ7uxsihFqFylIEyOtsZPLALq4ApXA=
Subject key identifier: 03:19:FE:35:5C:C2:64:0F:C6:D9:60:48:1F:16:39:71:9E:26:57:02
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 01942369F151695E5867B7FC95E0F35C4D42
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/Axn-NVzCZA_G2WBIHxY5cZ4mVwI.roa
Signing time: Wed 01 Jan 2025 19:48:53 +0000
ROA not before: Wed 01 Jan 2025 19:48:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59436
IP address blocks: 46.3.242.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:f1:51:69:5e:58:67:b7:fc:95:e0:f3:5c:4d:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: Jan 1 19:48:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0319fe355cc2640fc6d960481f1639719e265702
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:34:26:fc:15:e2:06:2a:c7:3c:43:a4:d4:dc:
15:e3:07:c9:df:c2:97:4e:24:98:f9:11:f5:89:4a:
7c:44:50:ca:05:83:1a:55:e7:5d:0b:f0:dd:1d:47:
96:98:5b:31:92:1f:a7:c6:68:93:dc:8a:92:98:bb:
e8:9e:99:f7:35:67:58:1d:bd:e1:2d:d5:fe:2c:70:
56:2c:33:13:8e:39:24:0e:a9:e8:86:1a:e2:75:16:
59:91:17:a9:fa:d6:70:55:46:e1:5b:26:f7:52:99:
6c:60:6f:ec:42:18:23:a3:dd:44:28:49:4a:03:80:
25:36:75:db:a8:8e:a2:9a:cc:80:21:da:0c:36:93:
de:f9:66:6a:39:ec:f2:1d:ee:bb:ee:06:9b:86:34:
6b:15:0b:ca:63:5e:c2:7e:96:27:c0:66:dc:19:1c:
f0:42:e5:4a:dc:b3:20:b7:f2:dd:5a:2a:92:6f:80:
2e:f2:66:26:4c:c5:37:9f:3c:ef:6a:fb:b4:01:7e:
90:06:9d:ca:c6:a5:b2:88:0a:a0:5f:cc:e6:06:be:
5c:f0:f2:31:84:f4:0b:d2:b3:f9:96:52:61:9c:82:
04:2b:33:0b:02:bc:73:e2:59:76:a5:3b:7a:ad:bb:
ec:d2:4c:5a:bb:2c:26:23:81:75:8e:b4:51:26:7c:
a9:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:19:FE:35:5C:C2:64:0F:C6:D9:60:48:1F:16:39:71:9E:26:57:02
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/Axn-NVzCZA_G2WBIHxY5cZ4mVwI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.3.242.0/23
Signature Algorithm: sha256WithRSAEncryption
26:41:63:22:73:18:f8:1d:fd:87:e8:74:df:76:5d:2e:46:15:
2a:a4:9f:4a:e9:f1:c3:a9:d3:f1:16:13:e1:08:52:29:9f:49:
b9:fc:d1:d6:46:bc:9a:79:76:41:44:c5:88:02:c9:79:8c:c3:
21:18:fb:6d:85:eb:bf:86:c2:81:02:90:2c:6d:78:b0:d0:43:
c3:bb:8d:ab:bc:ff:a8:d5:50:e8:ae:77:2f:0f:d3:66:1b:f5:
d9:da:ed:37:47:31:5b:f2:14:75:db:fa:4c:15:d8:ba:68:76:
e4:55:18:df:e5:d9:d0:f1:75:9a:a0:d0:c4:97:dd:20:5e:8f:
69:ba:a9:df:bc:fc:c1:26:14:dd:09:ab:51:62:f0:ff:9e:eb:
4c:f7:d7:31:70:48:9d:6e:21:54:f4:8e:6a:c3:53:ee:ad:21:
67:41:86:c6:ec:9d:1d:b9:e1:52:d9:76:de:fb:02:b3:eb:0a:
85:3d:65:86:70:80:2f:c8:c5:08:4e:d6:3c:d8:1c:4b:39:00:
b3:8e:56:24:32:56:79:e1:e0:c2:81:da:47:be:f0:d4:e5:eb:
c9:26:39:22:63:21:2b:f8:c0:fd:75:37:b6:e8:45:54:3f:84:
46:8e:0c:a5:e9:b0:c5:f0:31:77:c2:c0:54:bc:6e:83:0f:69:
85:f7:f1:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:06:51 2025 by rpki-client