Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/XiMwxE1HZEEpyb5Ct-aK99lswoo.roa
File: XiMwxE1HZEEpyb5Ct-aK99lswoo.roa (raw, json)
Hash identifier: IhIeDlYL90gGZJLBNmrjSUUu/uF+iAk+t02iuzdXAO8=
Subject key identifier: 5E:23:30:C4:4D:47:64:41:29:C9:BE:42:B7:E6:8A:F7:D9:6C:C2:8A
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 01942369E528C6CA825877C18A6568FAF306
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/XiMwxE1HZEEpyb5Ct-aK99lswoo.roa
Signing time: Wed 01 Jan 2025 19:48:49 +0000
ROA not before: Wed 01 Jan 2025 19:48:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 1040
IP address blocks: 46.232.48.0/21 maxlen: 24
46.232.56.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:e5:28:c6:ca:82:58:77:c1:8a:65:68:fa:f3:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: Jan 1 19:48:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5e2330c44d47644129c9be42b7e68af7d96cc28a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:5a:f9:8e:e2:3f:85:62:f4:67:06:89:ca:be:
3a:41:1c:bd:a9:05:23:ee:fe:7e:7c:eb:96:ca:92:
6e:f6:8d:e6:c8:4d:a5:f8:97:28:57:38:7f:a0:6f:
94:13:6d:63:82:18:78:44:7c:76:cf:99:76:7f:4c:
32:29:51:31:ef:9d:63:33:5a:92:2b:a2:db:ca:e4:
38:33:bf:37:b4:11:21:a8:6a:67:da:97:3f:7d:6b:
a7:60:d4:50:18:c8:8f:3e:80:32:80:ab:e0:04:f2:
59:92:cf:30:27:de:22:69:c8:6c:ed:ce:23:9f:35:
c2:48:66:e2:17:a9:36:21:a4:6a:18:aa:b7:ee:86:
74:dd:df:6e:b1:d0:51:33:17:03:95:6c:d8:67:3b:
79:d0:2b:b1:58:dd:98:6f:0b:69:91:c3:3c:74:ad:
81:f8:d5:d7:e7:fb:d4:ae:5d:0c:de:66:29:c1:a9:
3e:23:88:0a:01:20:f0:b9:43:8e:6d:49:e1:7b:ef:
d1:f9:ee:91:17:b9:65:57:c1:27:10:98:86:ba:40:
da:0e:4f:af:bf:82:2a:92:38:ac:fc:24:6e:2b:00:
85:16:73:e2:92:b8:b2:16:79:4e:60:0c:9b:97:2f:
5b:f4:b0:b2:0f:87:2d:9c:5d:26:6f:6a:ef:51:54:
68:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:23:30:C4:4D:47:64:41:29:C9:BE:42:B7:E6:8A:F7:D9:6C:C2:8A
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/XiMwxE1HZEEpyb5Ct-aK99lswoo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.232.48.0/20
Signature Algorithm: sha256WithRSAEncryption
4a:93:31:cb:ac:ef:65:36:18:2a:8d:74:56:68:95:8d:d1:c7:
50:c3:84:23:3c:95:cd:9c:ae:cc:0a:41:36:1f:bf:cd:ff:7f:
a0:b6:02:1e:6d:4c:42:56:43:6d:9f:0a:90:45:92:b6:3c:8d:
92:8e:f4:c9:4a:37:97:d3:88:71:23:e8:07:02:ee:f9:e4:48:
1e:9c:c8:54:d5:6e:dd:cd:37:46:1e:05:e8:7d:3d:31:07:56:
f4:c4:18:6d:0d:4c:48:a6:13:e3:b7:fb:b2:77:81:cf:96:f6:
ff:a2:96:83:c0:eb:c0:33:21:b7:4f:0a:ad:0c:4f:f6:70:00:
ac:ab:1a:60:b1:51:64:ab:02:49:7e:26:d5:d4:f3:e5:8c:f4:
e6:6c:73:f7:9d:21:dc:5e:7c:3d:1a:7d:ba:ca:7d:c5:f5:06:
a5:a9:aa:d2:e5:bc:ad:67:73:2e:c3:6d:41:ad:2d:ff:df:b9:
1a:cd:03:b7:a7:b9:88:0c:07:4b:f4:b3:8d:6d:e4:da:d4:ad:
91:70:e2:8a:9e:51:68:c8:7d:cd:fb:7d:58:18:ab:ae:1e:1e:
e4:d0:59:4a:38:40:68:2f:7d:07:64:02:dc:29:6b:70:34:74:
59:3e:82:96:29:3d:b5:aa:ec:43:7c:26:51:5b:08:96:e8:0b:
34:dd:04:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:57:11 2025 by rpki-client