Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/kQKdysmTaRsM_prXUpHq31VA64M.roa
File: kQKdysmTaRsM_prXUpHq31VA64M.roa (raw, json)
Hash identifier: 4uOa/YNZRWAOcb/bmFRecDVO7lMiDWSIRlCuP9rEoLg=
Subject key identifier: 91:02:9D:CA:C9:93:69:1B:0C:FE:9A:D7:52:91:EA:DF:55:40:EB:83
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 01942369F86BECDAFC947EF3ABE9940CDBEC
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/kQKdysmTaRsM_prXUpHq31VA64M.roa
Signing time: Wed 01 Jan 2025 19:48:54 +0000
ROA not before: Wed 01 Jan 2025 19:48:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 399587
IP address blocks: 46.3.32.0/19 maxlen: 24
46.3.32.0/20 maxlen: 20
46.3.48.0/21 maxlen: 24
46.3.56.0/21 maxlen: 24
46.3.80.0/21 maxlen: 22
46.3.96.0/20 maxlen: 24
46.3.160.0/22 maxlen: 24
46.3.164.0/22 maxlen: 24
46.3.208.0/21 maxlen: 21
46.3.216.0/21 maxlen: 22
46.3.216.0/22 maxlen: 24
46.3.222.0/24 maxlen: 24
46.3.224.0/21 maxlen: 22
46.232.20.0/22 maxlen: 24
46.232.64.0/22 maxlen: 24
80.243.128.0/21 maxlen: 24
80.243.128.0/23 maxlen: 24
80.243.130.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:f8:6b:ec:da:fc:94:7e:f3:ab:e9:94:0c:db:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: Jan 1 19:48:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=91029dcac993691b0cfe9ad75291eadf5540eb83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:b2:67:8b:c9:46:8d:21:ee:68:1c:b3:9d:57:
a6:b9:82:3e:87:69:2a:87:77:b6:ff:c3:ab:9f:a5:
27:61:6b:ff:63:bc:01:59:c6:1b:10:86:9b:d8:0f:
cc:90:b6:1c:4b:e8:2c:86:51:e5:9c:cb:8a:27:4c:
12:2d:8a:8c:b2:07:05:de:3e:11:9c:aa:69:44:9c:
92:40:23:db:4c:92:6e:5a:da:ea:86:ae:0e:a1:9f:
06:cf:e4:0b:87:53:21:52:16:f8:61:3e:33:28:2f:
bf:2f:65:18:db:f0:62:69:66:e3:ae:42:9d:2b:75:
87:7e:be:84:da:00:b5:f8:ea:36:39:4b:53:21:33:
98:0e:b5:8d:e0:ae:d0:e4:9c:b0:1b:b0:47:76:d3:
4a:88:52:15:ff:1a:ab:0f:f9:b8:38:07:09:46:11:
46:9a:86:62:1b:20:34:26:a9:7d:0f:58:27:09:69:
6a:f0:34:00:bb:72:57:63:0a:9a:67:1f:1a:45:1d:
a3:7b:9c:4e:17:14:dd:d7:db:4d:4f:4a:bf:de:05:
38:20:39:3b:40:ca:c5:41:57:43:89:16:d2:75:18:
b9:ae:a6:8a:a7:2f:89:3b:41:1e:aa:64:dd:2e:bf:
37:54:3c:1e:18:15:d4:ad:e5:26:dc:44:5e:8e:f3:
9c:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:02:9D:CA:C9:93:69:1B:0C:FE:9A:D7:52:91:EA:DF:55:40:EB:83
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/kQKdysmTaRsM_prXUpHq31VA64M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.3.32.0/19
46.3.80.0/21
46.3.96.0/20
46.3.160.0/21
46.3.208.0-46.3.231.255
46.232.20.0/22
46.232.64.0/22
80.243.128.0/21
Signature Algorithm: sha256WithRSAEncryption
29:b1:3b:91:4f:ca:1d:fb:11:99:3c:1d:a8:37:85:36:da:6a:
f2:65:d1:c3:a0:b1:40:63:29:41:6c:7e:52:14:0e:af:38:2f:
02:f6:f8:dc:c8:c5:49:c8:03:51:e7:eb:d9:78:43:31:66:0a:
2e:5a:15:c1:db:f8:b3:a9:cc:fc:54:51:80:b1:60:18:b5:56:
76:ca:75:e7:6e:67:aa:04:4a:31:b2:2f:6a:21:1e:07:57:53:
70:6b:03:66:96:7f:96:0a:99:78:1f:75:23:84:98:90:54:19:
15:64:da:1b:b0:0b:21:b6:50:d8:ec:e9:fb:8c:b9:94:61:db:
e7:13:42:b8:0b:45:aa:0e:94:31:80:34:59:20:25:19:e0:4f:
39:af:92:ed:43:97:03:30:95:0f:5c:ff:97:2f:bc:bc:75:83:
f6:ee:f8:4b:3e:f3:93:6b:56:90:b0:a7:2e:12:e1:eb:37:f3:
0e:12:e5:26:a5:ab:c3:31:d2:00:00:84:89:98:cc:7d:1d:5f:
15:b7:20:90:d7:b6:87:55:65:99:9c:a3:cf:31:6e:49:01:8b:
86:cf:70:e1:66:c1:c0:75:b5:f0:4e:1f:7b:52:27:1d:87:71:
ec:e5:79:da:6c:66:3d:e1:b2:37:4c:f9:4d:e1:65:9a:6b:0f:
c7:a5:b9:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:05:01 2025 by rpki-client