Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/4abe1d-3036-42b8-be36-e799ef54f0c4/1/1TUcoIEXF4J_9vqfLzDcXvX8LV0.roa
File: 1TUcoIEXF4J_9vqfLzDcXvX8LV0.roa (raw, json)
Hash identifier: eIRoaJMdc/l4AU70hG0PC/LPtYaLw4xgou2xPhRFPhE=
Subject key identifier: D5:35:1C:A0:81:17:17:82:7F:F6:FA:9F:2F:30:DC:5E:F5:FC:2D:5D
Certificate issuer: /CN=6b7b4a054a721a0fda6012907cc5b56e8120a73e
Certificate serial: 01944B25D9101248141E09A6D2818047F966
Authority key identifier: 6B:7B:4A:05:4A:72:1A:0F:DA:60:12:90:7C:C5:B5:6E:81:20:A7:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a3tKBUpyGg_aYBKQfMW1boEgpz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/4abe1d-3036-42b8-be36-e799ef54f0c4/1/1TUcoIEXF4J_9vqfLzDcXvX8LV0.roa
Signing time: Thu 09 Jan 2025 12:59:19 +0000
ROA not before: Thu 09 Jan 2025 12:59:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197418
IP address blocks: 46.151.112.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:4b:25:d9:10:12:48:14:1e:09:a6:d2:81:80:47:f9:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b7b4a054a721a0fda6012907cc5b56e8120a73e
Validity
Not Before: Jan 9 12:59:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d5351ca0811717827ff6fa9f2f30dc5ef5fc2d5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:89:a6:4d:b8:67:29:ec:96:19:d6:f4:12:58:
0d:c1:8c:77:2f:fb:19:31:05:e7:dc:cd:d0:74:ae:
f2:8e:6e:02:d8:32:1f:9a:24:fc:f2:73:74:34:b4:
d7:9f:bc:0e:96:5d:65:88:98:01:12:e7:be:d8:42:
5c:54:26:37:81:49:b5:6c:47:4f:98:fe:8d:eb:be:
fe:e3:2d:f3:42:bb:80:97:05:77:a3:6f:33:3d:c1:
54:60:03:a9:6d:d5:75:98:05:f8:3c:68:b8:0c:9e:
f2:06:6c:8a:05:59:39:f5:93:7f:fc:3f:33:01:df:
63:a0:48:84:ba:aa:48:13:c3:f4:56:1b:32:a3:3e:
b1:74:32:8d:41:45:20:f9:69:37:44:dc:87:db:c1:
c5:6d:3d:13:40:96:e8:3f:9e:60:52:8f:f7:29:0b:
e8:fe:41:a8:7a:65:ba:1f:a8:b1:4e:0a:9a:14:43:
29:8d:36:67:fb:78:3f:97:31:d1:a0:24:37:53:b5:
1a:13:37:69:0e:86:75:d7:07:6f:13:b5:cd:c3:03:
85:8f:e8:82:53:74:f0:f6:76:3f:8e:81:bf:97:5c:
25:8c:b2:c1:dc:20:7b:4f:8d:3c:ef:33:eb:18:a8:
a4:15:c4:ef:b0:86:fa:e1:3a:de:b1:5e:d7:84:e9:
15:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:35:1C:A0:81:17:17:82:7F:F6:FA:9F:2F:30:DC:5E:F5:FC:2D:5D
X509v3 Authority Key Identifier:
keyid:6B:7B:4A:05:4A:72:1A:0F:DA:60:12:90:7C:C5:B5:6E:81:20:A7:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3tKBUpyGg_aYBKQfMW1boEgpz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4abe1d-3036-42b8-be36-e799ef54f0c4/1/1TUcoIEXF4J_9vqfLzDcXvX8LV0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4abe1d-3036-42b8-be36-e799ef54f0c4/1/a3tKBUpyGg_aYBKQfMW1boEgpz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.151.112.0/21
Signature Algorithm: sha256WithRSAEncryption
36:b1:78:29:34:85:23:e3:e6:0b:c6:14:06:cd:c6:fb:72:9b:
a3:7d:3c:36:47:64:e7:92:5a:d5:d1:ea:ab:2a:90:a1:c1:b2:
a2:f8:09:f9:2f:35:1f:74:29:2a:07:7c:35:8a:b0:9c:d5:7d:
9f:a3:ca:5b:d1:80:30:9f:46:0f:b9:ab:ab:27:ce:61:8f:c9:
e0:e8:fa:20:8f:33:a2:0b:31:08:a0:d6:1c:2a:ab:c2:9b:75:
13:91:00:43:ab:3b:ce:82:1b:41:5f:ea:14:bf:5f:28:4a:4d:
14:77:77:f5:a9:fa:1b:ba:4e:01:68:2c:ff:1c:6e:a1:4d:c2:
46:9c:42:05:70:8d:eb:7e:57:ce:d6:78:d1:c0:fd:b4:fb:f4:
d8:03:7d:dc:17:3a:d9:c0:91:ae:fd:0e:b0:c7:dc:91:be:10:
bd:6f:67:32:fa:cb:d1:d6:c1:c4:e0:7c:40:ef:69:01:2f:c7:
2c:03:a2:b5:34:99:45:e1:d2:68:97:f5:89:19:00:30:12:da:
26:e2:fa:c3:86:36:19:21:52:a0:a2:95:18:f6:6d:07:82:5f:
ea:15:f2:c3:27:18:16:3d:12:aa:a9:b1:26:31:d0:61:46:53:
8a:01:48:09:6c:c7:dc:2f:92:2b:b3:b2:f8:43:84:db:ac:f8:
50:b2:81:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:48:12 2025 by rpki-client