Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/IhJngVbLb8Db-QzdzqXJChc0DwY.roa
File: IhJngVbLb8Db-QzdzqXJChc0DwY.roa (raw, json)
Hash identifier: 1eflBR4u9192qPpciCfdicCLIhZG0dwAiOreMUCX/eQ=
Subject key identifier: 22:12:67:81:56:CB:6F:C0:DB:F9:0C:DD:CE:A5:C9:0A:17:34:0F:06
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 01850A2E6F656D3F734AD3E5C2618B78448C
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/IhJngVbLb8Db-QzdzqXJChc0DwY.roa
Signing time: Tue 13 Dec 2022 06:31:33 +0000
ROA not before: Tue 13 Dec 2022 06:31:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2914
IP address blocks: 46.3.152.0/22 maxlen: 22
46.3.160.0/20 maxlen: 20
46.3.176.0/20 maxlen: 20
46.3.96.0/19 maxlen: 19
46.3.92.0/22 maxlen: 22
46.3.128.0/23 maxlen: 23
46.232.64.0/19 maxlen: 19
46.232.64.0/18 maxlen: 18
46.3.64.0/20 maxlen: 20
46.3.80.0/22 maxlen: 22
46.3.80.0/20 maxlen: 20
46.232.96.0/19 maxlen: 19
46.232.0.0/24 maxlen: 24
46.3.216.0/21 maxlen: 21
46.232.16.0/22 maxlen: 22
46.3.224.0/22 maxlen: 22
46.3.16.0/22 maxlen: 22
46.3.12.0/22 maxlen: 22
46.3.24.0/22 maxlen: 22
46.232.32.0/19 maxlen: 19
46.3.30.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:0a:2e:6f:65:6d:3f:73:4a:d3:e5:c2:61:8b:78:44:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: Dec 13 06:31:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2212678156cb6fc0dbf90cddcea5c90a17340f06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ec:9d:34:49:44:e1:d1:f5:19:1d:69:03:52:
13:0e:e5:d4:64:42:31:94:68:73:a7:d2:a2:0b:2b:
9e:dc:bc:19:3f:b5:ca:d7:cd:92:dd:a7:f1:79:2c:
49:66:a9:d7:e2:68:a3:59:d9:8b:9b:11:d1:50:37:
fc:f0:0e:19:84:2e:15:04:80:c7:8a:65:12:5f:65:
6a:56:24:02:c5:c0:30:cd:06:68:4a:3d:bc:b2:57:
65:c0:ff:82:ff:67:92:24:3c:7c:26:b7:33:0a:17:
50:67:2c:f5:d0:06:6e:00:7f:a6:86:27:c8:9c:16:
9e:46:67:6a:49:ec:f2:03:fd:c3:ea:02:40:9d:a7:
fc:ee:b1:ee:46:dc:a5:42:a5:de:92:c5:8b:92:4b:
8e:43:3e:f2:44:bf:f9:10:32:90:d1:d8:bd:4c:2d:
77:1a:2d:c1:60:f3:7b:31:15:6e:1a:ab:4d:44:82:
3f:e9:67:a9:cc:76:89:2c:04:c6:71:52:c1:be:87:
d5:6b:f4:c3:34:64:7c:67:98:26:91:6a:3e:35:7d:
bd:5d:6a:e7:8c:67:61:63:d8:3b:16:bf:a9:18:9f:
8a:ba:34:2e:aa:58:65:5d:d5:e7:88:a5:71:cc:98:
2e:8d:28:2c:07:0c:f2:03:ef:3a:9e:0b:2f:d0:f9:
61:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:12:67:81:56:CB:6F:C0:DB:F9:0C:DD:CE:A5:C9:0A:17:34:0F:06
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/IhJngVbLb8Db-QzdzqXJChc0DwY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.3.12.0-46.3.19.255
46.3.24.0/22
46.3.30.0/24
46.3.64.0-46.3.129.255
46.3.152.0/22
46.3.160.0/19
46.3.216.0-46.3.227.255
46.232.0.0/24
46.232.16.0/22
46.232.32.0-46.232.127.255
Signature Algorithm: sha256WithRSAEncryption
81:97:c2:ed:fc:d1:3a:bd:a8:66:70:47:9b:49:fa:c5:ae:56:
a4:57:a8:d5:58:5a:a9:13:ac:e9:4d:fc:6c:99:a7:9d:5e:c7:
26:a2:d8:d5:48:11:af:32:b5:9d:27:17:e7:a1:71:27:08:c4:
8d:4e:16:6f:7c:e0:93:55:b9:47:2a:92:3d:1a:35:a5:15:0f:
12:34:f4:c3:a8:b7:a5:ee:3c:d3:55:e3:2b:97:d0:d9:df:11:
79:a7:13:ee:7b:a8:9c:76:5e:02:19:0d:38:cb:7d:d2:00:9f:
af:cb:e5:fa:ab:3f:fd:54:82:22:4f:42:b7:5b:29:1e:83:43:
a9:95:b4:27:8e:96:ca:9a:be:13:7e:29:44:a0:53:e8:6f:5a:
3a:8c:83:68:de:b0:c0:1a:8c:2a:77:59:46:b0:b9:08:1b:db:
e5:ef:4f:10:94:ae:2c:8a:02:bb:44:e0:ed:d6:a4:6e:49:b8:
26:b1:5c:2d:68:18:4f:35:77:81:ff:63:47:8a:a2:7c:e1:88:
20:a6:55:df:a2:4f:e5:4c:b4:ed:66:bd:f9:82:9f:62:51:b4:
1c:52:68:d8:7f:66:64:14:7c:bc:cb:2e:11:28:81:d1:36:a2:
32:0a:fb:22:37:67:4a:f8:55:81:a4:42:49:f8:35:6d:ef:70:
62:57:7c:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:11:03 2025 by rpki-client