Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/HHdY1EdrxdXuALBRjGKCt2yVciQ.roa
File: HHdY1EdrxdXuALBRjGKCt2yVciQ.roa (raw, json)
Hash identifier: e8jyUCvYl6yOJlJ/z0yoDpPUyRi5G568GWApgl+rQdk=
Subject key identifier: 1C:77:58:D4:47:6B:C5:D5:EE:00:B0:51:8C:62:82:B7:6C:95:72:24
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 0188F52CD78AB2E6D51D544A522A5A2DCF67
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/HHdY1EdrxdXuALBRjGKCt2yVciQ.roa
Signing time: Mon 26 Jun 2023 00:48:56 +0000
ROA not before: Mon 26 Jun 2023 00:48:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 146839
IP address blocks: 46.232.56.0/21 maxlen: 24
46.3.96.0/20 maxlen: 24
46.232.48.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:f5:2c:d7:8a:b2:e6:d5:1d:54:4a:52:2a:5a:2d:cf:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: Jun 26 00:48:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1c7758d4476bc5d5ee00b0518c6282b76c957224
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:0e:ec:77:46:13:34:d8:c0:34:b3:23:05:99:
c4:4c:05:f8:b2:65:98:4c:d2:ee:3f:2a:59:4b:f5:
61:fb:dc:0f:60:3a:a5:f4:d6:d3:ee:a0:6f:b3:72:
00:12:9d:70:c0:27:c8:67:c3:b3:55:0c:0a:b4:25:
37:8d:68:ba:76:ed:bc:7e:db:83:7c:7b:be:bb:6b:
2b:73:da:28:a9:44:93:5c:38:3f:ce:08:ce:83:1b:
c3:9e:7e:34:cc:44:22:f5:93:db:78:7f:b2:e6:35:
dd:cd:02:d6:d8:d2:22:e1:8d:d7:6c:53:01:07:d6:
30:67:b2:a7:c2:fd:6f:b4:e6:d6:3b:25:ca:00:58:
18:9d:81:45:75:81:a1:ce:21:25:f4:2f:e8:20:1f:
10:2b:6b:6e:5d:c7:02:fe:52:70:25:ec:3f:0c:49:
20:28:cc:d1:2d:04:99:7c:57:06:72:03:ea:1a:44:
56:d9:41:37:ca:cb:ac:17:08:eb:f0:1f:e7:21:12:
58:33:03:0b:f0:de:46:66:c5:c4:ef:a7:78:cd:03:
a8:1d:1f:66:25:9a:3a:aa:e6:52:66:c3:60:e4:55:
d9:32:68:69:0f:fb:30:ed:12:a1:f5:70:50:0e:37:
a5:98:fe:ee:de:07:38:57:c6:c6:4b:91:c7:89:13:
7a:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:77:58:D4:47:6B:C5:D5:EE:00:B0:51:8C:62:82:B7:6C:95:72:24
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/HHdY1EdrxdXuALBRjGKCt2yVciQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.3.96.0/20
46.232.48.0/20
Signature Algorithm: sha256WithRSAEncryption
44:7a:98:3e:3c:6c:f2:05:d1:65:97:95:77:1f:ba:15:23:08:
fb:63:7a:10:6b:51:0a:49:16:17:83:5f:36:40:3f:9a:b0:ce:
7d:e9:7b:d8:a5:79:67:1e:34:cc:78:1f:c8:19:ce:52:11:9e:
45:d6:18:46:c7:14:59:77:12:3b:0a:22:19:28:10:03:2a:60:
5f:66:e0:e4:c8:18:9d:33:f0:0a:87:9b:0b:32:5a:bb:d1:d2:
f5:44:7b:e2:aa:00:19:ba:99:25:81:74:a2:bc:e1:b4:44:02:
ca:2e:31:14:22:c9:14:d1:1b:07:be:83:cd:aa:4d:2e:8b:c9:
60:14:62:e7:50:8d:88:43:96:45:f0:86:94:37:59:e1:08:4f:
d2:d7:bd:c3:8d:ab:7a:7c:06:57:e7:7c:b1:5c:62:6e:0b:15:
97:08:c3:bb:54:06:23:68:6d:12:8d:0d:83:f3:0a:ca:57:58:
66:a9:c6:7a:9e:8d:ba:a9:9c:5d:4a:51:35:67:48:c3:8d:0b:
42:25:ab:64:9d:cb:9b:95:31:0e:8b:b3:0b:e5:ca:73:b9:d0:
1e:0e:13:7b:ee:72:53:ee:22:88:0a:78:d8:e9:02:9d:24:62:
a6:a3:c8:7f:94:f8:20:4c:bd:fc:18:10:94:dc:a8:d7:07:12:
78:c3:b3:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:06:25 2025 by rpki-client