Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/Y91mcz3N0txWIqq6pzAgodC9gpg.roa
File: Y91mcz3N0txWIqq6pzAgodC9gpg.roa (raw, json)
Hash identifier: 5tjre9n4NoCk4exuNDchQX9lMUs0nE7R3iOkbiprW6M=
Subject key identifier: 63:DD:66:73:3D:CD:D2:DC:56:22:AA:BA:A7:30:20:A1:D0:BD:82:98
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 01942369E3E89B0D72EE4009C3DBC281FBB9
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/Y91mcz3N0txWIqq6pzAgodC9gpg.roa
Signing time: Wed 01 Jan 2025 19:48:49 +0000
ROA not before: Wed 01 Jan 2025 19:48:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 979
IP address blocks: 46.3.112.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:e3:e8:9b:0d:72:ee:40:09:c3:db:c2:81:fb:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: Jan 1 19:48:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=63dd66733dcdd2dc5622aabaa73020a1d0bd8298
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c1:d6:b5:38:ff:81:0c:73:1f:84:87:d7:7a:
1f:1b:51:72:9e:c8:9c:35:a4:fd:d9:ab:7b:6d:94:
a9:16:06:54:00:c5:77:0a:8e:a0:da:e4:4f:22:df:
7f:e8:c1:21:33:67:65:8d:c5:94:63:43:ff:ba:07:
ac:1a:22:ff:77:0d:d9:be:55:6a:4d:ca:b0:9b:c7:
7b:d6:de:eb:17:7c:0a:2e:0d:33:6d:24:b0:de:3e:
3d:cc:4d:7d:38:59:7c:89:fb:b5:6f:17:d8:64:ec:
ab:1f:1d:a4:85:05:fe:3c:4c:d8:61:05:6a:15:92:
31:94:3a:9b:b6:a6:dc:43:f9:5a:66:40:e0:e3:03:
de:93:4f:2f:18:62:50:33:2a:02:ed:34:93:31:e2:
b4:50:b6:47:b9:2a:9f:50:96:84:3f:db:b6:79:e1:
fa:e1:f9:9a:6d:8c:4f:9b:ea:eb:f1:4b:4c:3c:ec:
41:da:83:eb:93:55:ea:4f:d4:2f:81:51:5c:cd:05:
5f:06:d5:37:68:ef:5e:42:14:da:7b:18:6a:0a:66:
f3:ea:81:7c:ea:78:9f:68:67:ad:92:03:a9:56:16:
13:a8:58:a3:38:66:ac:18:b8:d9:83:be:bf:b4:7e:
79:29:b6:65:cf:cd:54:9a:ff:f8:f8:52:6d:e8:4f:
e4:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:DD:66:73:3D:CD:D2:DC:56:22:AA:BA:A7:30:20:A1:D0:BD:82:98
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/Y91mcz3N0txWIqq6pzAgodC9gpg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.3.112.0/23
Signature Algorithm: sha256WithRSAEncryption
29:2a:25:87:5f:23:d3:22:d6:70:9e:15:a4:4b:10:dc:8e:94:
b7:9c:a9:25:24:a5:5a:99:9f:02:08:fd:17:65:dc:cb:5f:2b:
54:0a:53:de:7b:46:20:43:98:37:9f:1d:60:1c:23:1b:a5:8b:
34:2c:87:76:01:cb:0b:13:ef:36:5f:c3:42:b9:9b:4e:9f:8e:
e4:52:97:2b:38:c1:eb:36:05:b9:76:f2:ce:52:ac:ea:a6:00:
fa:af:e6:73:af:53:f7:78:df:56:3e:18:fa:0b:a5:45:33:95:
4e:9a:6c:0d:39:4d:59:7c:87:91:0b:d8:1e:a0:31:39:a2:a8:
91:c8:1f:e9:b6:2a:e6:5a:fb:96:47:b7:fe:68:e7:8f:6c:35:
89:8e:f9:34:15:09:67:16:51:8f:99:bf:39:77:74:fb:8e:58:
f8:fe:cb:d2:af:a6:70:b6:fb:8c:48:0e:1e:8b:ca:ae:8f:70:
eb:27:e5:ec:9e:41:1f:08:95:8c:b4:6e:b1:42:88:81:19:e6:
78:65:ea:59:bf:fb:3b:dc:2c:d3:73:11:3c:bc:9e:c8:8a:58:
a9:76:78:e3:1e:a2:01:10:34:5d:f7:3c:9b:83:63:99:c3:e0:
d7:0c:76:97:c0:7e:ee:f4:d0:75:8c:25:40:32:72:01:dc:fd:
32:70:ba:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:58:53 2025 by rpki-client