Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/263044-c74f-4b67-b24b-e1352d5afa0a/1/KKAdJZwlPOuvUmhtsSSfP_XfQ9w.roa
File: KKAdJZwlPOuvUmhtsSSfP_XfQ9w.roa (raw, json)
Hash identifier: Fim6YZSnH30vV92L/gdG+AOAxW50mQ7FyxjlaSpVQfU=
Subject key identifier: 28:A0:1D:25:9C:25:3C:EB:AF:52:68:6D:B1:24:9F:3F:F5:DF:43:DC
Certificate issuer: /CN=99ff97f515b083e30bc52d81e193d8c8bb7fdf8c
Certificate serial: 019422FB7011A1C0C1D6F3BC09F6BF72D7E5
Authority key identifier: 99:FF:97:F5:15:B0:83:E3:0B:C5:2D:81:E1:93:D8:C8:BB:7F:DF:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mf-X9RWwg-MLxS2B4ZPYyLt_34w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/263044-c74f-4b67-b24b-e1352d5afa0a/1/KKAdJZwlPOuvUmhtsSSfP_XfQ9w.roa
Signing time: Wed 01 Jan 2025 17:48:11 +0000
ROA not before: Wed 01 Jan 2025 17:48:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25504
IP address blocks: 46.151.160.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:70:11:a1:c0:c1:d6:f3:bc:09:f6:bf:72:d7:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99ff97f515b083e30bc52d81e193d8c8bb7fdf8c
Validity
Not Before: Jan 1 17:48:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=28a01d259c253cebaf52686db1249f3ff5df43dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:aa:c9:08:86:f4:14:74:b6:be:cd:33:f0:49:
90:fa:10:ff:33:f5:c8:a1:13:6c:08:7d:67:97:37:
3f:1d:37:32:e1:a6:10:2e:db:b9:81:45:b3:df:c3:
c6:fa:e0:1c:a5:38:21:d0:05:00:0a:13:f2:6a:63:
e6:7c:22:f9:2f:9d:5b:b4:71:ba:b3:a4:a3:f1:44:
da:3b:a3:3d:30:88:b1:4d:a5:9b:cd:9a:cb:e1:73:
8f:65:4a:5b:f2:22:77:40:79:17:bc:07:07:a5:55:
b6:5d:fd:88:73:a3:ca:0e:3c:48:68:4d:91:8d:67:
79:4f:d5:e9:06:ce:09:76:8f:56:ee:0f:3e:15:bd:
92:d4:ea:87:35:63:4c:2d:e8:7e:8e:29:01:6a:df:
30:28:b5:14:9b:ae:b0:4a:65:e3:24:02:5d:1a:c6:
06:ef:fd:e0:1a:5c:f0:0c:c8:a3:f2:df:fd:89:f9:
cc:de:83:e6:c8:58:44:31:eb:58:28:b1:0f:cc:3f:
80:e9:b6:a2:f7:db:b0:ad:b0:d8:5d:3c:5d:5b:82:
9f:c6:46:71:c1:ca:12:43:af:d7:9f:54:1f:8a:46:
dc:23:ab:7a:18:48:e3:5c:25:91:2c:ce:58:75:e9:
9d:9d:14:eb:73:59:34:54:6d:e9:2d:5b:37:de:db:
1e:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:A0:1D:25:9C:25:3C:EB:AF:52:68:6D:B1:24:9F:3F:F5:DF:43:DC
X509v3 Authority Key Identifier:
keyid:99:FF:97:F5:15:B0:83:E3:0B:C5:2D:81:E1:93:D8:C8:BB:7F:DF:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mf-X9RWwg-MLxS2B4ZPYyLt_34w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/263044-c74f-4b67-b24b-e1352d5afa0a/1/KKAdJZwlPOuvUmhtsSSfP_XfQ9w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/263044-c74f-4b67-b24b-e1352d5afa0a/1/mf-X9RWwg-MLxS2B4ZPYyLt_34w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.151.160.0/21
Signature Algorithm: sha256WithRSAEncryption
7d:3c:a3:80:3c:1b:bc:97:13:a4:bc:54:5e:c6:e1:e8:ad:7a:
1d:f6:64:ab:a6:36:9f:38:b9:52:ba:20:f1:6f:33:40:3c:a8:
81:55:5f:b4:bb:03:3a:4f:32:53:e3:ef:01:a1:44:43:97:e0:
36:36:fb:ec:5d:f8:56:88:1e:54:4a:64:42:43:a9:99:21:4d:
3b:ce:92:a5:7a:4e:c3:6a:39:fc:99:f9:32:21:f7:a4:69:c3:
46:4e:e7:f6:f9:ab:92:37:66:2e:21:93:71:c3:0a:09:3b:5a:
a7:1e:28:80:b4:75:a9:7a:a0:7a:62:a0:c6:ff:a1:23:9c:c4:
6f:77:29:d3:ef:3e:39:7d:1b:16:3e:6b:56:d9:41:6c:8f:1f:
d8:04:6c:df:26:9a:80:e9:6f:bc:23:95:8b:72:6c:3a:45:e7:
d1:c4:9f:54:6c:00:a9:33:26:c8:8b:37:d7:a6:8e:27:a6:63:
49:9f:99:bf:bb:23:90:d8:01:a2:ae:66:00:20:f1:fe:5e:73:
59:1a:86:ea:b2:41:c7:5e:8c:b2:7d:37:c5:c8:6e:fa:77:1e:
bf:ae:f8:12:10:eb:8a:d0:a7:3d:f2:aa:1e:fe:23:00:a0:6c:
d9:2f:2c:45:23:94:c4:e1:bf:be:e1:cf:a1:99:73:9f:ec:3a:
24:b7:cd:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 07:10:02 2025 by rpki-client