Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/a183ef-ab60-4d59-b5dd-9ae5db28c7e2/1/nRtav2aaLEsdiK7GL7esXemBQS4.roa
File: nRtav2aaLEsdiK7GL7esXemBQS4.roa (raw, json)
Hash identifier: xUzwUxBl9sTzXxi9y0zS+/YwWmnMX4LFuhYXK+D2rlc=
Subject key identifier: 9D:1B:5A:BF:66:9A:2C:4B:1D:88:AE:C6:2F:B7:AC:5D:E9:81:41:2E
Certificate issuer: /CN=9fe8f68fd828704e8d70796c783327dcde9b0c8e
Certificate serial: 018CCA2AAAB5CD8D6700512F12512DDB6061
Authority key identifier: 9F:E8:F6:8F:D8:28:70:4E:8D:70:79:6C:78:33:27:DC:DE:9B:0C:8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n-j2j9gocE6NcHlseDMn3N6bDI4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/a183ef-ab60-4d59-b5dd-9ae5db28c7e2/1/nRtav2aaLEsdiK7GL7esXemBQS4.roa
Signing time: Tue 02 Jan 2024 12:34:02 +0000
ROA not before: Tue 02 Jan 2024 12:34:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205705
IP address blocks: 46.229.250.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:aa:b5:cd:8d:67:00:51:2f:12:51:2d:db:60:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fe8f68fd828704e8d70796c783327dcde9b0c8e
Validity
Not Before: Jan 2 12:34:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9d1b5abf669a2c4b1d88aec62fb7ac5de981412e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:75:8b:7e:09:6f:07:bd:35:a5:fb:5b:57:ee:
58:71:f0:91:8e:34:11:d0:b6:f6:7e:7c:6c:10:49:
92:44:15:a6:6e:bb:73:d4:65:ef:bc:34:b6:d4:a3:
b2:ad:71:09:9d:5c:2f:1a:f5:01:ea:49:2e:ac:46:
de:ae:f4:65:40:db:c5:b8:1a:bb:75:9c:53:1d:a6:
28:79:d9:53:23:84:84:00:42:0e:33:23:1b:fc:90:
ad:90:86:6c:24:72:f1:24:85:0d:be:09:af:e1:50:
24:1e:09:be:a5:68:c2:25:b5:89:04:74:61:df:0c:
66:34:9d:b4:98:24:ab:04:3f:aa:a5:e3:fa:89:64:
00:3d:90:37:b4:52:e5:bb:1f:5c:02:39:4b:55:a0:
31:7b:f6:fc:50:03:83:8e:ce:dc:75:eb:43:b3:9f:
4e:47:ae:d3:22:ad:e0:d5:11:43:5c:86:d3:3d:85:
84:4e:14:7f:b6:ee:9c:04:d2:bb:c5:36:02:3a:79:
53:98:72:70:40:d7:a2:c2:0a:96:53:b2:ea:fd:6b:
fd:03:1b:a0:4a:f5:0c:ef:78:84:0b:d4:5d:c8:07:
40:bb:d7:45:74:3f:1a:81:e2:bd:13:d4:13:9d:b1:
3f:7f:bf:03:5b:b5:e1:1a:aa:6a:c0:61:80:0f:a7:
ec:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:1B:5A:BF:66:9A:2C:4B:1D:88:AE:C6:2F:B7:AC:5D:E9:81:41:2E
X509v3 Authority Key Identifier:
keyid:9F:E8:F6:8F:D8:28:70:4E:8D:70:79:6C:78:33:27:DC:DE:9B:0C:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n-j2j9gocE6NcHlseDMn3N6bDI4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/a183ef-ab60-4d59-b5dd-9ae5db28c7e2/1/nRtav2aaLEsdiK7GL7esXemBQS4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/a183ef-ab60-4d59-b5dd-9ae5db28c7e2/1/n-j2j9gocE6NcHlseDMn3N6bDI4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.229.250.0/24
Signature Algorithm: sha256WithRSAEncryption
68:03:1a:0c:db:95:d5:5f:6a:a2:98:b4:a2:10:c7:27:f4:16:
28:a9:20:b8:13:8a:b2:7a:f5:59:60:29:9b:9e:ab:2c:ac:14:
bc:f9:91:2d:88:01:93:ea:a6:ec:c9:e6:14:82:45:04:56:8c:
82:17:27:f2:81:3c:49:bf:d8:39:50:29:7a:92:15:a3:c8:75:
f7:38:17:19:2c:6d:2f:12:4c:2a:a3:a1:30:8b:4a:33:6b:98:
8d:ed:03:90:99:d3:da:6c:7f:9c:83:42:d3:7c:42:fc:86:f5:
a2:d0:53:1e:54:05:ef:a2:8b:0b:96:58:92:63:0a:45:1a:17:
05:7d:2e:b8:23:bb:05:3c:26:6c:db:e8:0e:e9:ce:d2:5f:b3:
11:c2:dd:18:1b:42:5b:ce:cb:bc:3f:86:5b:da:98:a8:9d:07:
96:c8:fd:ca:a5:e4:10:4c:c7:94:dd:39:71:39:13:db:d6:4b:
cb:97:2b:c0:e9:fc:b1:7e:6b:e9:cd:c5:2e:d4:a0:51:a6:53:
dc:e7:19:a3:52:85:02:14:46:ed:a9:cf:c6:f0:22:4a:e3:b8:
d0:7e:5c:23:8f:b8:36:b8:cf:29:9e:62:23:7b:58:60:78:99:
9d:e8:95:76:85:29:69:b5:cc:7a:99:91:11:32:0d:75:f8:9b:
1b:c8:e0:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:15:48 2025 by rpki-client