Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/2e93fb-49b1-4b39-b252-250baf78e30e/1/7oEw8EFmquKMrLL8-hfLmIwZUQY.roa
File: 7oEw8EFmquKMrLL8-hfLmIwZUQY.roa (raw, json)
Hash identifier: UnWZTOCHUCj50Mpn5ZUqFaqkSFvoIDWjjwDqigNU5NY=
Subject key identifier: EE:81:30:F0:41:66:AA:E2:8C:AC:B2:FC:FA:17:CB:98:8C:19:51:06
Certificate issuer: /CN=bdac8f33db4a4a0175d8f8ea7ca747507e7e81e0
Certificate serial: 019420D63985138DD4A2221B685CB9C4E568
Authority key identifier: BD:AC:8F:33:DB:4A:4A:01:75:D8:F8:EA:7C:A7:47:50:7E:7E:81:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vayPM9tKSgF12PjqfKdHUH5-geA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/2e93fb-49b1-4b39-b252-250baf78e30e/1/7oEw8EFmquKMrLL8-hfLmIwZUQY.roa
Signing time: Wed 01 Jan 2025 07:48:17 +0000
ROA not before: Wed 01 Jan 2025 07:48:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3257
IP address blocks: 46.173.64.0/20 maxlen: 20
46.173.80.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:39:85:13:8d:d4:a2:22:1b:68:5c:b9:c4:e5:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdac8f33db4a4a0175d8f8ea7ca747507e7e81e0
Validity
Not Before: Jan 1 07:48:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ee8130f04166aae28cacb2fcfa17cb988c195106
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c6:29:72:93:81:28:f6:46:3b:8d:e9:52:ef:
35:3d:47:9d:c9:01:46:02:2e:2b:41:6d:77:a7:d6:
8a:67:1a:f7:0c:7e:56:9c:f8:24:e4:86:6f:de:48:
51:a7:e5:e9:76:6a:f3:67:9b:a3:80:bb:71:05:4f:
18:45:c5:a5:ad:62:53:4f:df:70:a0:7f:e9:18:e6:
3a:d7:3a:1a:40:1f:dd:bb:e9:c9:33:41:88:35:34:
5f:f4:f4:4c:83:35:f5:69:a7:57:b8:cc:6e:a1:51:
1d:4a:34:31:97:3f:54:81:ff:81:78:76:2c:22:ab:
d9:44:3f:99:90:a6:81:17:a3:00:18:71:3f:ec:d6:
6a:f9:fe:c2:3b:ee:ba:51:4e:31:6b:d7:7c:29:73:
5f:fa:ce:3f:2b:4c:39:56:48:f5:6b:53:36:0c:d8:
9a:34:63:61:f5:f6:d6:ce:7a:08:b2:34:06:f6:c4:
27:91:b3:7e:b4:76:f6:6d:68:97:a1:e6:2d:ca:cd:
a3:87:d3:d0:e0:9e:27:6a:17:5f:52:7f:03:f6:19:
8b:36:e3:8a:26:f2:59:53:a7:cb:72:58:d1:67:28:
8f:ba:e5:35:37:5d:04:7b:4a:19:47:fd:fb:03:52:
77:b4:cc:34:ac:a8:d8:7a:59:2d:3f:3c:fe:45:bc:
31:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:81:30:F0:41:66:AA:E2:8C:AC:B2:FC:FA:17:CB:98:8C:19:51:06
X509v3 Authority Key Identifier:
keyid:BD:AC:8F:33:DB:4A:4A:01:75:D8:F8:EA:7C:A7:47:50:7E:7E:81:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vayPM9tKSgF12PjqfKdHUH5-geA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/2e93fb-49b1-4b39-b252-250baf78e30e/1/7oEw8EFmquKMrLL8-hfLmIwZUQY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/2e93fb-49b1-4b39-b252-250baf78e30e/1/vayPM9tKSgF12PjqfKdHUH5-geA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.173.64.0/19
Signature Algorithm: sha256WithRSAEncryption
96:27:2c:66:80:37:6b:6a:e5:9d:a8:ce:b4:5e:4e:e0:56:52:
f6:58:46:9f:ac:2a:4a:f0:a3:89:f5:67:fa:40:d7:5b:c3:e1:
f8:b8:e1:e4:9b:8d:35:ab:c0:c2:e5:17:ca:b7:a0:a2:7f:1b:
de:8f:1f:5d:0d:98:aa:24:aa:8a:ca:b5:f7:c3:d1:65:e0:19:
11:2f:98:3b:be:6e:44:ad:b2:cb:8a:a5:ec:19:bf:ee:6b:7e:
8d:b1:bb:3d:7b:12:9c:5d:f8:cc:11:00:f6:03:ee:4a:8a:50:
6d:ac:06:f1:9c:d4:77:7e:3b:a2:72:8f:78:66:f6:c5:a7:14:
6c:c2:c3:5c:d1:80:1e:c4:77:c6:c0:04:24:0f:6b:a6:f6:0a:
09:22:96:1b:a3:26:c9:70:6d:5d:c1:db:e9:c9:9b:fd:31:c2:
8d:f7:b7:75:05:af:69:04:57:fe:ca:15:7a:a3:ec:f5:ce:34:
92:fe:f8:9d:2a:b1:3a:c7:fc:e8:60:75:93:45:4b:a3:1a:b4:
c6:a7:67:5b:dd:cb:16:ca:40:33:e4:1e:1d:1a:e5:78:e4:cd:
8e:9e:71:d1:1b:bb:b7:14:5f:0f:97:f0:bc:33:49:8b:bc:7f:
43:32:ab:a1:ce:18:c2:ec:19:78:2d:8c:12:68:41:39:78:87:
80:81:99:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:07:47 2025 by rpki-client