Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/PPEjrmqO4N4EfzfBEhMDBn7XUb4.roa
File: PPEjrmqO4N4EfzfBEhMDBn7XUb4.roa (raw, json)
Hash identifier: g2u52r+7LfC+ZVn4nx2Ci0KhdrfUmR63zGK3bXLh/0k=
Subject key identifier: 3C:F1:23:AE:6A:8E:E0:DE:04:7F:37:C1:12:13:03:06:7E:D7:51:BE
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 01942369EA616EDB8577911C5D9659BA3C86
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/PPEjrmqO4N4EfzfBEhMDBn7XUb4.roa
Signing time: Wed 01 Jan 2025 19:48:51 +0000
ROA not before: Wed 01 Jan 2025 19:48:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 38136
IP address blocks: 46.3.240.0/22 maxlen: 24
46.232.120.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:ea:61:6e:db:85:77:91:1c:5d:96:59:ba:3c:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: Jan 1 19:48:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3cf123ae6a8ee0de047f37c1121303067ed751be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:9e:5b:be:d6:88:97:79:bd:97:b4:12:7e:88:
e5:cd:e7:10:a9:4d:ce:02:2c:38:50:d0:2c:5a:91:
4e:a1:ef:e4:67:08:c9:3e:7f:ce:90:70:bb:76:a8:
0d:15:4a:f6:82:f6:94:89:32:c7:46:8b:73:fe:5b:
02:8d:67:92:14:96:ce:69:0c:48:e9:a4:0e:91:ff:
4b:83:e3:59:fb:26:41:08:ea:99:af:e2:14:64:c0:
00:37:01:e6:5e:82:16:67:2a:fb:45:af:7a:19:6f:
ce:c2:52:a3:45:52:d5:a9:4b:78:1d:f2:10:f0:e2:
46:c8:b2:91:cb:b9:7e:a9:b9:42:8a:11:bc:62:26:
3e:b9:73:40:f4:bb:79:ee:a3:e7:dc:18:7f:34:e7:
42:42:c2:46:80:3e:f7:0a:3f:49:d1:0e:b3:bf:da:
7b:8a:6e:d7:af:fb:d7:de:28:3b:46:c4:6e:2d:34:
67:9d:41:b8:ab:6f:fa:1b:5e:40:52:6e:6e:d0:6b:
3d:1f:d7:e9:61:f6:80:6f:3c:88:d4:fd:ed:52:71:
f5:ec:1d:d2:39:3e:5d:66:64:78:69:54:b4:28:63:
23:e3:7f:0b:45:ba:1f:4c:c0:b9:00:7d:3a:7d:b9:
e0:ac:d9:95:b3:45:fd:58:b8:a2:07:db:14:1f:b4:
d7:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:F1:23:AE:6A:8E:E0:DE:04:7F:37:C1:12:13:03:06:7E:D7:51:BE
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/PPEjrmqO4N4EfzfBEhMDBn7XUb4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.3.240.0/22
46.232.120.0/22
Signature Algorithm: sha256WithRSAEncryption
28:e5:74:09:1d:55:b1:71:7a:81:f8:36:57:26:6b:03:64:3f:
fa:d3:fe:6d:34:28:99:fb:c1:39:66:c5:31:ee:c5:4f:de:83:
33:e0:52:ca:8f:2e:7e:02:7c:6a:19:af:af:ab:ed:ec:21:a5:
95:6a:57:61:5b:e1:90:c1:a3:c0:83:f0:af:50:3f:a8:84:07:
6b:39:42:8f:26:ed:44:40:96:8a:0e:ce:4b:30:f7:4b:4b:c6:
57:8b:c1:25:4f:f9:3f:bd:db:99:f3:88:59:68:1c:bb:7e:37:
98:cb:00:42:f6:9f:d8:ff:10:c8:5e:df:a5:19:14:4f:33:57:
04:a8:6f:c7:1d:87:a0:1a:11:c4:8a:60:21:fb:26:c8:d1:c0:
f0:3e:e5:a9:b6:55:6c:5e:6a:35:c8:74:75:5a:fc:34:a0:2f:
e8:0c:04:74:f6:f7:62:da:20:47:b9:db:dd:cf:d3:f4:0b:e6:
db:3c:5f:fd:b2:83:67:c7:74:6a:74:03:60:2f:73:04:0d:7f:
ce:ef:0b:be:4f:ef:0b:dc:9c:38:e1:55:ab:c5:0b:c7:ad:0b:
09:87:c6:24:37:46:2b:e9:e4:05:0f:28:d4:58:55:58:ae:cb:
58:df:34:de:23:ac:c4:2a:0d:15:c1:df:ae:27:66:52:3e:c2:
68:3b:26:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:02:55 2025 by rpki-client