Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/wv6ntmrNzA75s3eRco16-hFMQbk.roa
File: wv6ntmrNzA75s3eRco16-hFMQbk.roa (raw, json)
Hash identifier: dAYp7KhHOGs/XMamtZNQjmudG6KNHsmwnVO28oOrpuY=
Subject key identifier: C2:FE:A7:B6:6A:CD:CC:0E:F9:B3:77:91:72:8D:7A:FA:11:4C:41:B9
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 0184D29044E7ACA02BA518B538DC75515976
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/wv6ntmrNzA75s3eRco16-hFMQbk.roa
Signing time: Fri 02 Dec 2022 11:19:40 +0000
ROA not before: Fri 02 Dec 2022 11:19:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 138687
IP address blocks: 46.232.0.0/24 maxlen: 24
46.3.202.0/24 maxlen: 24
149.126.197.0/24 maxlen: 24
46.3.238.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:d2:90:44:e7:ac:a0:2b:a5:18:b5:38:dc:75:51:59:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: Dec 2 11:19:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c2fea7b66acdcc0ef9b37791728d7afa114c41b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:8f:8a:41:d5:73:bf:2b:be:28:6a:11:a8:e0:
45:07:23:0b:20:43:53:2b:1e:0c:71:60:2d:64:0d:
34:6b:1c:a4:64:25:29:b9:bf:06:a6:6e:c4:48:58:
53:11:f7:06:57:43:6e:e8:2f:6b:b3:4d:7f:5a:ea:
f2:64:19:4d:ae:8d:dc:df:bb:21:69:5f:de:38:b8:
5e:e2:3b:d9:da:58:8b:d5:2b:f8:81:80:19:46:7a:
d2:c7:6e:60:e4:83:f5:b5:90:d1:50:e7:3c:5b:4a:
fa:b3:0c:72:7b:60:4d:cd:7e:89:09:f1:9d:57:2a:
15:c7:6e:5b:eb:3a:ce:39:c1:33:86:5c:4e:ea:4f:
b2:ed:33:46:25:3f:cf:9e:27:5e:7a:cd:c9:71:f8:
73:91:2a:54:e6:95:de:0e:50:b6:8c:66:4d:01:82:
a7:f1:cb:b1:4f:ae:b9:f5:c1:49:b2:8b:e3:f1:5a:
53:cc:72:31:6d:05:d4:e0:cb:30:c1:c7:4b:11:0f:
a4:a3:e9:ba:a3:33:c3:21:d8:10:cc:a3:b6:76:7c:
b7:19:84:26:27:4c:a0:b9:4f:e7:03:4c:ae:bb:0a:
ab:58:ea:7a:5a:78:02:b1:f7:8c:c2:a4:98:31:1f:
1d:86:46:c4:68:c1:7a:a5:fb:59:29:94:48:6e:0f:
9e:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:FE:A7:B6:6A:CD:CC:0E:F9:B3:77:91:72:8D:7A:FA:11:4C:41:B9
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/wv6ntmrNzA75s3eRco16-hFMQbk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.3.202.0/24
46.3.238.0/24
46.232.0.0/24
149.126.197.0/24
Signature Algorithm: sha256WithRSAEncryption
56:a6:6a:29:f8:d0:68:74:4e:5d:d5:fa:30:01:e1:7c:ba:d4:
6d:07:a4:ea:cb:c9:c5:13:2f:18:7f:af:dc:d2:16:0d:ab:0e:
45:29:76:b2:4f:80:f1:11:c4:44:aa:4c:62:5c:dc:c3:e2:b5:
da:d7:c1:b6:9b:4d:e4:f3:05:eb:dc:9b:67:f4:38:e2:25:e3:
b1:36:89:30:86:35:7c:61:04:d5:a6:47:3c:f1:0d:74:23:41:
27:ff:b6:2f:fa:00:d8:38:66:c2:0f:a5:9f:6d:c1:7c:83:cc:
fb:bd:16:a9:1f:6b:fc:b8:13:0b:f7:4c:b0:39:44:86:5a:9b:
53:a3:2f:22:76:3e:36:f0:1b:c6:8b:07:5a:c1:68:7a:e9:e4:
cd:29:fb:8e:a5:83:52:bd:6c:b6:cd:8b:64:fb:95:d2:c6:36:
ff:aa:8f:1a:6d:fb:ff:70:6a:28:89:8c:29:a2:f0:9c:07:65:
9f:51:47:d3:0e:3c:b9:65:3c:b5:a2:ea:a8:bd:00:86:21:8a:
67:2e:1d:8e:10:9e:82:ca:82:1a:ba:9c:1d:6f:6b:e7:f4:57:
fc:a7:ff:b1:59:ca:c9:69:6c:06:f4:38:d4:84:67:a2:23:d5:
42:73:fb:8b:97:45:da:a7:48:0d:53:6f:8d:9d:14:b8:74:f9:
45:ef:84:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:57:59 2025 by rpki-client