Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/C8MALQ3xkGfkN_0TZ1lfJy1qQKM.roa
File: C8MALQ3xkGfkN_0TZ1lfJy1qQKM.roa (raw, json)
Hash identifier: S7D2tsxsn0RnqJ7sQ6FxgdwdfSo0OHAlSY5LSei19mc=
Subject key identifier: 0B:C3:00:2D:0D:F1:90:67:E4:37:FD:13:67:59:5F:27:2D:6A:40:A3
Certificate issuer: /CN=57c670c8db32dd748df797c5c93013d8c91fa839
Certificate serial: 0194E6DAB53FBED344B095500CFCB435A391
Authority key identifier: 57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/C8MALQ3xkGfkN_0TZ1lfJy1qQKM.roa
Signing time: Sat 08 Feb 2025 18:38:00 +0000
ROA not before: Sat 08 Feb 2025 18:38:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207569
IP address blocks: 46.243.1.0/24 maxlen: 24
46.243.4.0/24 maxlen: 24
46.243.6.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:e6:da:b5:3f:be:d3:44:b0:95:50:0c:fc:b4:35:a3:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57c670c8db32dd748df797c5c93013d8c91fa839
Validity
Not Before: Feb 8 18:38:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0bc3002d0df19067e437fd1367595f272d6a40a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:3e:65:5f:c0:1a:d3:f7:28:b4:35:1f:f8:ee:
8d:a1:62:52:fa:2e:ea:cd:6d:96:0a:ed:f2:1e:d7:
7d:a7:36:87:e3:2b:3b:97:4f:84:44:d8:d2:19:9e:
56:0c:3e:05:ff:94:97:b9:f3:9f:94:8f:e0:e9:84:
9f:45:21:80:0d:bb:3e:a4:0f:9b:d5:03:fb:b0:26:
85:ba:44:3e:06:7f:75:fd:20:ff:77:ef:e8:39:fd:
dd:be:83:e5:de:bd:cb:7a:7e:63:fa:7b:a3:38:46:
8b:5e:a7:97:7b:8f:b6:de:01:ec:e9:4e:6e:99:db:
32:44:b2:11:56:76:26:d2:55:32:30:3d:b7:c3:7e:
36:a0:35:da:1d:41:5d:81:31:49:d4:d9:8d:5a:a1:
15:7e:03:8a:0c:05:6a:e0:70:1a:d5:27:34:3f:fb:
dd:80:a6:c2:89:90:18:ed:05:95:7d:24:99:ec:27:
05:c9:e3:82:5c:57:7c:33:b6:b1:e5:ab:96:61:06:
78:19:0f:2d:5e:4f:51:06:65:26:6d:5d:4b:86:61:
47:f6:91:65:15:27:8b:1c:86:95:74:a7:60:46:a6:
0a:ad:5b:c2:38:89:30:d5:f9:c8:d0:ee:52:57:23:
16:8d:fa:4f:b4:0e:4e:14:66:f5:9e:84:19:a3:c1:
88:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:C3:00:2D:0D:F1:90:67:E4:37:FD:13:67:59:5F:27:2D:6A:40:A3
X509v3 Authority Key Identifier:
keyid:57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/C8MALQ3xkGfkN_0TZ1lfJy1qQKM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.243.1.0/24
46.243.4.0/24
46.243.6.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:f8:ab:4e:d5:61:f7:63:06:bb:16:b2:3a:e1:2d:86:f3:72:
c2:00:d5:a6:96:42:06:81:13:e0:1b:02:ea:3b:b4:f9:7b:33:
c3:96:15:85:c0:2f:37:52:77:7a:3d:c3:97:81:aa:a5:03:eb:
3e:67:2f:cc:24:fb:b1:23:a2:db:5f:01:2c:6c:78:dc:34:36:
bd:e4:62:ea:3d:4a:84:de:a5:07:04:d3:cf:2b:24:5f:36:39:
3e:5b:fd:21:06:f4:70:90:4a:99:c3:c9:9a:12:94:58:55:a4:
b5:80:94:bf:27:51:86:e2:47:23:28:b4:2c:de:c4:d4:5e:c2:
f2:3a:74:f6:2e:e4:18:1a:c2:b3:e9:b1:90:c5:46:ed:30:34:
62:9c:5f:f7:b0:3e:e1:b0:29:38:af:70:ba:c6:89:55:62:00:
08:3a:8c:a4:42:8a:54:88:96:b0:39:e0:d6:2c:79:30:0a:4c:
d8:79:33:6f:93:2d:8b:7d:11:ff:4d:ec:45:29:e9:08:7b:14:
9d:1e:4d:ef:aa:15:70:d1:de:86:76:3c:d2:c4:1c:ab:63:fd:
81:25:e3:82:47:86:8a:59:41:96:7d:1d:b4:5d:48:4b:81:4d:
04:1f:0f:b5:24:9d:e1:a2:05:18:66:ac:22:2f:94:85:e3:81:
5e:19:08:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 19:30:15 2025 by rpki-client