Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/K26w9O0Kl64iGRfQ-59UQrrinyE.roa
File: K26w9O0Kl64iGRfQ-59UQrrinyE.roa (raw, json)
Hash identifier: lL7HbUiFtq5nGNsAu03DGZQxMyC8yVz8x8heTMBJbbI=
Subject key identifier: 2B:6E:B0:F4:ED:0A:97:AE:22:19:17:D0:FB:9F:54:42:BA:E2:9F:21
Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial: 019427B5A531294B4DA82F432D69CC8589DB
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/K26w9O0Kl64iGRfQ-59UQrrinyE.roa
Signing time: Thu 02 Jan 2025 15:50:03 +0000
ROA not before: Thu 02 Jan 2025 15:50:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48558
IP address blocks: 46.161.1.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:a5:31:29:4b:4d:a8:2f:43:2d:69:cc:85:89:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Validity
Not Before: Jan 2 15:50:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2b6eb0f4ed0a97ae221917d0fb9f5442bae29f21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:e5:b4:53:a6:bb:b0:48:c5:d0:cd:d4:da:ff:
a8:26:a4:f8:eb:62:2c:8b:e9:c2:07:e0:53:06:84:
44:ff:78:a4:c5:d2:ed:65:ef:2c:40:9e:71:d6:b7:
e1:c6:db:44:99:6a:35:fa:ee:d9:85:b0:c8:77:56:
37:c1:a0:0a:a7:9d:81:57:3c:1e:e5:08:3e:27:3c:
ce:9a:4b:d3:a8:c0:1d:62:6b:ad:8e:1f:d0:c1:69:
47:10:f5:29:b1:ea:16:3a:ac:64:26:64:7a:73:f1:
1e:d7:01:ec:3c:cb:36:e6:f6:e3:3d:ff:15:af:e9:
2b:71:0c:dd:76:c9:3e:f0:b3:32:05:3c:9d:c8:45:
b5:1f:b4:07:8d:4d:ef:8d:6d:89:e7:6d:b4:8d:fd:
94:91:e5:8a:8d:16:9a:ca:04:05:97:c4:eb:dd:92:
3b:d5:30:1e:21:f4:80:da:62:54:d2:ac:67:5a:93:
95:99:ec:4b:fb:ee:90:75:b3:9d:68:7b:17:b8:53:
e4:4d:9b:ad:08:10:24:2a:28:01:58:43:a3:36:a2:
0d:ca:66:02:19:c5:63:08:22:bb:60:34:d8:e7:a6:
68:d4:3d:0f:79:eb:09:c2:7c:6a:ee:32:91:47:02:
c9:e5:12:07:14:4f:93:46:69:72:e9:62:1c:c7:ba:
54:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:6E:B0:F4:ED:0A:97:AE:22:19:17:D0:FB:9F:54:42:BA:E2:9F:21
X509v3 Authority Key Identifier:
keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/K26w9O0Kl64iGRfQ-59UQrrinyE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.161.1.0/24
Signature Algorithm: sha256WithRSAEncryption
d1:01:53:18:05:7e:3f:26:4d:ee:ab:8a:19:e3:30:be:82:e7:
1a:f0:d7:3e:16:f1:62:5a:fa:ef:cd:e6:a9:f5:ef:20:56:f2:
2d:c2:23:0e:10:c5:1b:76:d2:23:26:e7:6f:9e:60:30:54:0c:
17:7d:3d:bb:61:76:b1:32:93:66:92:32:36:31:67:5f:b5:04:
04:d6:79:55:0c:b2:64:8f:2b:37:90:45:a5:4c:ae:01:5d:2e:
71:88:ae:79:b1:30:5f:27:cb:46:bd:2c:12:0e:1f:c5:79:cd:
46:b8:d6:44:fb:d5:fb:48:a9:e5:6b:ed:41:4d:6e:1a:f9:92:
db:f8:2f:e2:6e:a2:64:f2:7a:62:7f:43:c5:c2:00:2f:df:f5:
53:47:e8:fb:9f:83:46:68:ab:ab:27:8c:88:d8:cd:9d:5b:8c:
58:29:6c:6f:78:a4:63:18:5f:08:22:70:f4:7c:6a:ed:1c:e0:
ea:89:69:e5:0b:1d:a8:2a:19:e8:ff:29:e8:9d:e8:74:f3:f5:
d9:cc:af:57:b6:eb:7b:51:b6:2e:4e:69:ef:9e:1c:1f:00:e4:
67:21:bf:82:17:2d:cb:e3:d2:6d:96:f6:8b:aa:03:1a:b2:59:
42:f1:82:54:be:97:82:cb:61:27:45:ad:07:a0:5f:13:e2:b2:
0f:f2:54:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:14:22 2025 by rpki-client