Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/a183ef-ab60-4d59-b5dd-9ae5db28c7e2/1/U7b5Q2NqTf-f9VPV7OsPl4sTj94.roa
File: U7b5Q2NqTf-f9VPV7OsPl4sTj94.roa (raw, json)
Hash identifier: eXqS2m0Wvxl6sD58+TrE1XKmei7IRqd93TpxHQvyAgc=
Subject key identifier: 53:B6:F9:43:63:6A:4D:FF:9F:F5:53:D5:EC:EB:0F:97:8B:13:8F:DE
Certificate issuer: /CN=9fe8f68fd828704e8d70796c783327dcde9b0c8e
Certificate serial: 0186C8F60A410D4DD6E6953438FC7922FA6E
Authority key identifier: 9F:E8:F6:8F:D8:28:70:4E:8D:70:79:6C:78:33:27:DC:DE:9B:0C:8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n-j2j9gocE6NcHlseDMn3N6bDI4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/a183ef-ab60-4d59-b5dd-9ae5db28c7e2/1/U7b5Q2NqTf-f9VPV7OsPl4sTj94.roa
Signing time: Fri 10 Mar 2023 00:40:13 +0000
ROA not before: Fri 10 Mar 2023 00:40:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199565
IP address blocks: 46.229.242.0/24 maxlen: 24
46.229.241.0/24 maxlen: 24
46.229.247.0/24 maxlen: 24
46.229.251.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:c8:f6:0a:41:0d:4d:d6:e6:95:34:38:fc:79:22:fa:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fe8f68fd828704e8d70796c783327dcde9b0c8e
Validity
Not Before: Mar 10 00:40:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=53b6f943636a4dff9ff553d5eceb0f978b138fde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:07:68:15:5d:51:a6:1c:98:c3:e6:44:7b:59:
1c:64:eb:11:b5:54:7d:5b:2e:35:a6:60:31:57:89:
3a:c9:c5:b2:c6:ec:c8:e9:d7:6e:cf:a1:f3:3f:25:
d7:47:56:52:4a:18:f1:4a:58:b7:4c:11:16:e6:31:
bb:86:95:13:63:6e:1d:9d:a9:4d:35:e3:30:c8:45:
85:c2:78:cd:21:1b:1b:6b:f9:20:70:e2:77:34:a7:
49:d5:50:37:09:6d:c9:b3:b7:a3:66:a8:e2:7e:07:
80:8c:a9:62:f7:8a:dc:48:69:ff:10:15:81:fa:54:
2b:46:df:f0:03:31:e8:31:b9:c5:a5:96:69:e3:da:
13:46:f9:c1:a2:fd:af:f8:0c:b7:f3:61:a6:90:48:
5e:ac:f5:df:1d:15:07:3a:84:ea:25:b6:72:34:65:
50:a7:76:d3:17:63:5e:e9:4f:94:45:56:27:07:71:
b1:fc:5e:a8:db:b3:5e:c5:b5:22:cb:8c:6a:25:3f:
c7:76:86:55:68:80:c1:0c:b2:3d:8f:56:2f:5e:5a:
e6:59:4a:62:53:bf:7f:4e:0d:77:2c:98:7e:83:e9:
12:cb:7e:6f:1f:cf:64:07:b1:55:7c:55:5a:46:e4:
0a:e1:14:cd:62:2a:6c:6d:39:13:1f:9d:a3:48:19:
ad:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:B6:F9:43:63:6A:4D:FF:9F:F5:53:D5:EC:EB:0F:97:8B:13:8F:DE
X509v3 Authority Key Identifier:
keyid:9F:E8:F6:8F:D8:28:70:4E:8D:70:79:6C:78:33:27:DC:DE:9B:0C:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n-j2j9gocE6NcHlseDMn3N6bDI4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/a183ef-ab60-4d59-b5dd-9ae5db28c7e2/1/U7b5Q2NqTf-f9VPV7OsPl4sTj94.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/a183ef-ab60-4d59-b5dd-9ae5db28c7e2/1/n-j2j9gocE6NcHlseDMn3N6bDI4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.229.241.0-46.229.242.255
46.229.247.0/24
46.229.251.0/24
Signature Algorithm: sha256WithRSAEncryption
20:f9:17:7d:87:86:ef:ad:06:3d:16:17:53:e9:f0:c2:c2:ea:
3e:c7:3a:73:fc:95:54:24:2a:51:f1:ab:f9:52:e8:f6:6a:e8:
a7:43:f8:82:4d:de:42:e2:df:0b:cd:1b:f0:4b:b7:b2:83:03:
33:01:b2:1c:cb:6e:27:09:7e:e0:40:b3:29:a6:04:45:73:09:
4c:47:52:70:a0:1d:5a:ea:c8:8a:26:80:58:97:b0:65:1b:25:
7f:8f:8e:d0:22:cd:71:f2:58:09:87:b0:5e:84:d7:95:10:91:
d5:6e:e1:4e:6a:bc:87:c4:a9:01:03:a0:27:5a:26:32:0b:c7:
58:97:b2:2c:a4:12:a2:df:29:3c:b9:bc:57:f8:57:83:75:63:
31:06:9f:60:04:9e:39:4a:ae:cf:29:1e:e0:53:01:39:66:85:
a7:06:14:84:63:b8:b4:d0:36:be:c0:86:d6:4d:dc:f3:58:ab:
3e:63:6a:30:92:47:05:92:ed:de:53:f1:0d:72:72:77:a7:db:
2d:fd:13:f8:52:ab:c5:39:d4:4b:5a:d3:90:a8:f7:b1:1f:63:
f6:7d:7d:86:58:5e:3a:48:11:bd:bf:62:7a:6a:ba:4c:12:39:
35:f4:8b:89:90:21:ff:27:84:3f:8a:89:6f:bc:7a:23:30:56:
0c:6e:2b:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:53:35 2025 by rpki-client