Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/wLUDWX0cwpM_RHx6YDs5R3c6gr8.roa
File: wLUDWX0cwpM_RHx6YDs5R3c6gr8.roa (raw, json)
Hash identifier: Z0xiIbMEaFi71xS8FzZoE8IllV237HdjpIXCcKFFXp0=
Subject key identifier: C0:B5:03:59:7D:1C:C2:93:3F:44:7C:7A:60:3B:39:47:77:3A:82:BF
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 01942369F7C30409EA1DA7BC234A52D2E217
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/wLUDWX0cwpM_RHx6YDs5R3c6gr8.roa
Signing time: Wed 01 Jan 2025 19:48:54 +0000
ROA not before: Wed 01 Jan 2025 19:48:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 397423
IP address blocks: 46.3.160.0/22 maxlen: 24
46.3.208.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:f7:c3:04:09:ea:1d:a7:bc:23:4a:52:d2:e2:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: Jan 1 19:48:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c0b503597d1cc2933f447c7a603b3947773a82bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ac:bc:1f:98:c9:36:75:c9:c1:b4:a2:7c:95:
14:ab:0b:5e:6c:3f:21:d4:0e:6b:05:fe:b1:75:d6:
a0:1e:f4:e8:38:9d:10:fc:5b:67:0f:34:24:2f:10:
25:52:61:c5:87:c5:09:97:4b:a1:ad:8d:0a:94:54:
99:5e:ba:43:12:cd:eb:70:24:24:8a:2d:4f:23:66:
24:49:e2:39:4f:e5:9d:87:19:8d:34:ff:5c:34:3b:
78:81:23:d9:1e:ec:d7:a1:72:0a:ab:0a:66:f7:ce:
1a:e1:98:15:ba:6c:b9:0b:02:0d:70:98:d4:e1:74:
cb:b9:1f:14:76:14:1a:a0:8e:1f:c3:1c:1c:2d:7c:
5e:8d:08:c6:0d:6d:a6:b7:6b:1d:c2:0e:f4:91:d9:
38:56:5a:f9:8f:be:5b:66:87:a3:23:07:1c:97:e8:
ba:5f:14:c3:1e:68:f1:a6:be:ff:d3:6c:a7:43:86:
3b:bc:2f:d3:95:c0:71:58:44:55:c1:2c:45:b9:a5:
ed:9b:91:f5:c9:e9:0c:92:92:8f:c7:f9:4e:6c:49:
64:79:53:d7:86:80:28:85:d7:f7:08:59:1d:7b:44:
85:1d:cf:f5:58:3d:a2:0d:72:c7:01:7e:7b:6e:a3:
a4:d2:07:4c:3b:05:05:f1:54:99:22:49:e4:70:c1:
f2:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:B5:03:59:7D:1C:C2:93:3F:44:7C:7A:60:3B:39:47:77:3A:82:BF
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/wLUDWX0cwpM_RHx6YDs5R3c6gr8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.3.160.0/22
46.3.208.0/21
Signature Algorithm: sha256WithRSAEncryption
3c:e8:e7:8d:65:f7:c3:59:f4:91:31:90:07:c9:9e:48:47:a1:
48:1c:98:10:5d:a1:67:36:b5:c2:10:72:50:32:f2:44:e5:0c:
cc:a5:48:96:98:86:40:1c:95:d4:c4:bb:aa:f3:9c:c9:c0:d6:
2e:ab:15:ad:65:d9:64:25:88:92:34:b0:01:d0:7e:3b:c9:ae:
15:2d:b9:bd:54:62:c1:4f:dc:51:b6:db:9f:ae:73:96:4d:5a:
2f:60:99:87:cf:7c:9d:2e:df:d9:76:28:c1:f5:03:77:ef:e6:
a5:f4:d6:88:3b:9e:81:0d:ad:b9:a8:5a:af:64:27:c7:04:de:
67:89:f6:9e:77:4e:2c:f5:31:d2:db:9d:24:a4:53:97:2c:b9:
66:b5:ff:40:e6:99:98:91:dc:4a:ea:3e:11:eb:e5:0a:43:ba:
32:1a:e0:c6:69:54:96:28:68:a3:02:26:3b:81:08:85:0a:1f:
44:e3:39:61:4d:4b:1a:c1:32:56:e8:f2:2a:87:79:48:40:1b:
3e:ee:4e:cd:5f:ee:05:7b:6b:3b:a1:ad:7b:89:a0:f8:d0:27:
24:5c:85:5a:3e:a2:01:45:5f:67:b5:4c:33:6b:7b:84:fc:12:
ae:7b:a5:ab:06:b3:da:4e:6a:64:ab:6e:a4:a6:73:9c:b7:2d:
ae:50:4a:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:02:24 2025 by rpki-client