Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/Wuu4Rfuzgivv51W3_fEEMMA-rZg.roa
File: Wuu4Rfuzgivv51W3_fEEMMA-rZg.roa (raw, json)
Hash identifier: +yhfaW5xLDH/j1i9/OfwBBuzEhEXYXLtnxBzaIwhdS8=
Subject key identifier: 5A:EB:B8:45:FB:B3:82:2B:EF:E7:55:B7:FD:F1:04:30:C0:3E:AD:98
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 01942369EAE0404841DFAEE018AB0C0B3E60
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/Wuu4Rfuzgivv51W3_fEEMMA-rZg.roa
Signing time: Wed 01 Jan 2025 19:48:51 +0000
ROA not before: Wed 01 Jan 2025 19:48:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 40065
IP address blocks: 46.3.164.0/22 maxlen: 22
46.232.16.0/22 maxlen: 22
46.232.112.0/21 maxlen: 24
46.232.124.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:ea:e0:40:48:41:df:ae:e0:18:ab:0c:0b:3e:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: Jan 1 19:48:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5aebb845fbb3822befe755b7fdf10430c03ead98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:2b:20:24:36:1e:77:94:8c:7d:a2:3b:75:5e:
0f:3d:8d:43:55:9d:a5:74:7c:68:29:95:1e:df:b4:
05:62:02:a9:f7:7a:50:c3:45:3c:c0:88:33:80:ac:
8e:78:89:2b:09:da:a1:07:cd:54:f9:67:af:5f:fe:
a4:fa:65:67:e4:d3:0b:31:63:f5:d1:a7:e6:68:d4:
ce:f6:20:d9:a0:c9:81:90:f6:c9:2c:49:8d:5d:ca:
ef:ed:a4:f8:e0:ae:f0:01:e9:5b:38:d5:bd:28:ce:
1c:8d:4e:60:49:cf:52:e4:a5:d9:1b:db:b2:01:db:
cb:45:14:a0:a3:3d:16:4f:51:ad:bb:79:ce:ec:62:
2e:38:20:bd:c6:4e:df:f9:0c:85:7e:b4:b4:58:7d:
ca:0c:d0:37:53:5c:d9:38:06:70:9f:6d:ac:94:a7:
00:e7:7a:82:18:c6:4b:c4:5d:32:d4:ce:56:d8:ef:
3c:0a:dc:c2:7e:8b:7d:b2:cd:44:c4:fe:0b:a6:09:
92:fb:f8:17:d7:bf:aa:a4:dc:bf:95:31:86:b5:2e:
c2:44:1f:7d:75:2d:a6:43:71:20:17:6d:82:30:91:
5f:1e:c5:f6:5a:88:1d:9f:98:10:30:53:d2:e2:b8:
28:68:cf:60:e7:91:ed:33:a7:b4:8f:d3:82:e3:d7:
07:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:EB:B8:45:FB:B3:82:2B:EF:E7:55:B7:FD:F1:04:30:C0:3E:AD:98
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/Wuu4Rfuzgivv51W3_fEEMMA-rZg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.3.164.0/22
46.232.16.0/22
46.232.112.0/21
46.232.124.0/22
Signature Algorithm: sha256WithRSAEncryption
01:f4:bd:0a:6b:a8:34:81:80:03:e4:00:36:bd:af:cd:13:bb:
b1:60:d0:d9:42:6d:4a:cb:77:6c:eb:74:0a:7f:e2:47:67:71:
fc:69:2c:4c:32:ea:80:70:56:26:b0:d9:b3:49:23:aa:95:8f:
f5:7c:ab:b8:14:49:d9:33:80:31:04:c3:72:3e:da:9f:c2:42:
10:29:c9:77:60:50:0a:57:3c:88:bc:ab:da:d0:8c:4a:13:c1:
e4:1e:c8:24:97:c3:40:4a:03:f7:dc:b9:91:20:28:b8:e9:5e:
57:44:4d:d8:c4:e5:86:37:9a:3e:ef:c0:6b:bd:e4:1e:87:21:
40:19:9c:70:26:9b:08:87:5b:80:08:c0:e7:54:fd:ec:45:b9:
53:c4:f9:3a:48:27:bd:8f:08:88:65:53:3a:4f:7a:43:30:be:
f6:81:de:c6:d8:fa:29:71:15:57:b4:b3:c0:dd:9d:64:ed:38:
e0:7d:38:02:a0:29:c1:4f:49:88:e9:68:69:f9:37:28:72:42:
8c:a3:aa:c1:d3:dd:07:e1:8f:04:9b:a3:25:6e:40:ea:d9:50:
09:97:1f:df:5f:bb:ff:75:a7:a9:2c:1b:e7:0b:13:76:46:17:
e4:3b:a0:c9:c7:f8:24:79:87:fd:0c:8a:7d:1e:ee:12:3c:68:
da:ef:20:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:08:53 2025 by rpki-client