Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/4b2f88-3e20-4afa-b754-06a404435e50/1/K6Fu_XiBHvDsYhtG_--3fuPZg48.roa
File: K6Fu_XiBHvDsYhtG_--3fuPZg48.roa (raw, json)
Hash identifier: RNhrx5f19YH8DzgdDWPTLam4LAtgoJZsbS8JdFM0WN8=
Subject key identifier: 2B:A1:6E:FD:78:81:1E:F0:EC:62:1B:46:FF:EF:B7:7E:E3:D9:83:8F
Certificate issuer: /CN=ff8dd5fe4179e8bda28532561919f6d07877c63d
Certificate serial: 019424B307030895FED45B5D59F8F8C3795F
Authority key identifier: FF:8D:D5:FE:41:79:E8:BD:A2:85:32:56:19:19:F6:D0:78:77:C6:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_43V_kF56L2ihTJWGRn20Hh3xj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/4b2f88-3e20-4afa-b754-06a404435e50/1/K6Fu_XiBHvDsYhtG_--3fuPZg48.roa
Signing time: Thu 02 Jan 2025 01:48:19 +0000
ROA not before: Thu 02 Jan 2025 01:48:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204957
IP address blocks: 46.149.140.0/24 maxlen: 24
46.149.141.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:07:03:08:95:fe:d4:5b:5d:59:f8:f8:c3:79:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff8dd5fe4179e8bda28532561919f6d07877c63d
Validity
Not Before: Jan 2 01:48:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2ba16efd78811ef0ec621b46ffefb77ee3d9838f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:62:61:e5:cb:d2:dd:6f:31:cc:2f:70:8e:e0:
12:92:36:d4:3d:67:ff:69:6c:43:2c:95:1e:28:79:
77:01:f1:6e:aa:86:01:89:0f:b6:56:9c:db:b1:b5:
de:51:cc:73:91:b4:32:21:94:2a:f9:2c:a3:0e:5d:
f8:0d:65:e4:d1:ee:91:be:d0:bf:84:80:23:2d:75:
6d:f3:51:fd:c5:af:09:1e:25:ec:ac:78:12:e3:db:
63:59:91:38:7c:78:0d:8d:46:59:2b:21:f6:ad:62:
3c:6e:e8:49:4e:7c:9c:bb:1e:be:b0:4a:78:bd:72:
a4:ef:fd:21:aa:80:dd:5c:b6:55:27:e9:f6:97:fc:
1f:a0:a8:4c:5f:dd:d4:ce:6a:e3:43:36:a5:af:59:
2a:3a:8c:9e:af:91:26:98:66:df:44:c1:74:bd:1d:
3d:67:be:27:8a:17:3c:b1:4e:94:d9:3d:28:1c:93:
af:bf:84:f9:56:b2:5e:a8:cd:63:d7:83:71:e2:c1:
e8:67:d7:4d:b4:02:07:de:e5:46:17:69:df:bf:2b:
90:4b:cb:58:3e:bb:d2:42:69:ec:2f:31:d4:86:3c:
61:6b:48:d4:78:21:9c:64:94:e8:29:bb:37:81:62:
5e:df:b6:3d:74:e3:08:79:ca:c9:8b:76:d9:7c:21:
fb:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:A1:6E:FD:78:81:1E:F0:EC:62:1B:46:FF:EF:B7:7E:E3:D9:83:8F
X509v3 Authority Key Identifier:
keyid:FF:8D:D5:FE:41:79:E8:BD:A2:85:32:56:19:19:F6:D0:78:77:C6:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_43V_kF56L2ihTJWGRn20Hh3xj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4b2f88-3e20-4afa-b754-06a404435e50/1/K6Fu_XiBHvDsYhtG_--3fuPZg48.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4b2f88-3e20-4afa-b754-06a404435e50/1/_43V_kF56L2ihTJWGRn20Hh3xj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.149.140.0/23
Signature Algorithm: sha256WithRSAEncryption
66:bb:9c:f1:98:6c:86:d4:b0:45:eb:6f:d0:c7:e1:f8:1f:14:
96:61:bc:d6:e3:39:e2:4a:1a:5c:ee:b0:c0:c9:1c:cf:ba:9b:
5c:03:2d:a5:c7:e0:da:ee:03:47:54:d9:f7:4f:af:cf:33:bf:
5a:26:ab:b3:6a:85:25:9f:fa:16:20:8a:23:01:fd:14:ea:3a:
e7:8a:60:0a:bc:15:2a:6c:31:f2:31:6c:e7:fa:ee:ed:04:70:
77:18:0a:d4:72:80:0a:2f:63:d2:1b:85:c0:6e:a0:38:de:9b:
59:6f:71:72:6a:0d:3b:1f:91:d1:5c:39:7b:73:0a:c4:82:5f:
27:07:2c:b7:ce:3c:2f:9b:30:ea:2f:4e:9f:3b:29:a7:5f:2d:
19:98:d8:e0:fb:a0:45:11:66:82:19:a1:47:58:32:4b:f4:0d:
9a:af:dd:46:e9:13:4e:8c:bf:4b:a8:47:9a:7b:a3:ca:44:dc:
e7:ce:46:bb:e3:10:4a:81:19:c5:fc:45:12:87:c3:94:45:ef:
b7:7b:ba:0f:3d:a2:a5:6c:d5:9f:1b:5a:27:61:9e:ec:fd:1d:
43:79:5f:f4:05:30:55:a3:53:f2:61:ce:c6:6a:d0:72:9c:e5:
42:4b:fa:cf:04:a4:46:cc:d8:73:f1:ff:bb:09:2d:e6:b2:0a:
cf:02:84:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:10:04 2025 by rpki-client