Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/RxDyM5zPJTw-GDWj-aZ3V42S9c0.roa
File: RxDyM5zPJTw-GDWj-aZ3V42S9c0.roa (raw, json)
Hash identifier: WhhxkpQDIzO9CMum5fyWB8b/Z/+ntY8yCqHS/EgZ6Mk=
Subject key identifier: 47:10:F2:33:9C:CF:25:3C:3E:18:35:A3:F9:A6:77:57:8D:92:F5:CD
Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial: 019427B5A02D16601DDD62D346025EE73A1B
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/RxDyM5zPJTw-GDWj-aZ3V42S9c0.roa
Signing time: Thu 02 Jan 2025 15:50:01 +0000
ROA not before: Thu 02 Jan 2025 15:50:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43350
IP address blocks: 46.161.27.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:a0:2d:16:60:1d:dd:62:d3:46:02:5e:e7:3a:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Validity
Not Before: Jan 2 15:50:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4710f2339ccf253c3e1835a3f9a677578d92f5cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:80:43:25:91:28:0b:4d:af:17:c3:d4:d0:8f:
a3:5c:d9:f4:9c:49:79:a8:cc:d0:39:f4:ae:cf:55:
ef:e2:bc:cb:ac:d8:f4:07:f2:7a:7e:61:b7:f0:5d:
e0:c0:85:02:39:51:9d:22:b3:42:86:b3:2c:35:7b:
c2:f5:e8:3c:fe:4f:7f:48:c0:f6:ad:76:74:a7:66:
f0:6f:a5:e5:db:ff:75:87:f1:cf:e0:22:92:b4:d9:
87:50:3c:b7:b3:0e:e1:40:e2:59:26:df:f2:5a:e2:
12:08:82:7c:82:59:c6:f1:03:69:1d:3c:f3:bc:0b:
0c:a8:d2:6d:4d:06:ca:e7:3e:a0:b0:15:ab:fd:ed:
fe:08:da:3a:d3:0e:69:bd:d4:19:d8:15:e9:88:c3:
f3:4c:b0:20:2c:f4:cb:d4:4e:6a:4f:06:48:46:57:
c1:95:17:50:c4:99:e5:8d:03:e0:90:20:ff:7c:56:
21:43:c5:73:3a:5d:d7:b5:ac:f3:c5:92:20:19:23:
c7:a9:e9:7d:23:83:d9:f6:68:f2:23:3a:70:a2:df:
cb:a7:2f:85:2a:59:58:0e:01:8c:e2:56:7e:b4:9e:
5e:fc:38:9a:b7:1e:e7:98:9a:21:48:5e:a5:3a:db:
bf:d6:0e:a1:44:b8:89:01:76:3d:de:71:6b:7e:40:
33:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:10:F2:33:9C:CF:25:3C:3E:18:35:A3:F9:A6:77:57:8D:92:F5:CD
X509v3 Authority Key Identifier:
keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/RxDyM5zPJTw-GDWj-aZ3V42S9c0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.161.27.0/24
Signature Algorithm: sha256WithRSAEncryption
70:f4:d8:3b:3c:1a:a4:ef:9e:42:09:a3:26:ee:02:3d:f0:8f:
48:26:8d:9b:72:b3:a0:68:8a:89:3b:a2:5f:57:a9:a2:4a:5d:
82:d9:bd:ab:cf:91:f2:02:0f:dd:c1:51:7d:ae:df:4e:f2:07:
6b:34:7e:99:4e:a4:14:02:08:77:71:36:f9:42:73:35:dd:8d:
16:9a:a5:24:83:99:1a:2e:e8:06:bb:c2:93:05:f6:08:05:85:
d7:08:d5:29:2c:c0:7d:25:ec:e7:b6:50:e3:7b:f8:47:33:c6:
a6:7c:4f:45:b6:2e:e2:6c:dc:86:fa:b6:ed:59:3d:fe:20:a8:
4a:b8:c8:6c:a7:a9:77:b9:b2:82:1f:9f:fb:20:8c:5b:d6:c2:
1e:de:2d:b4:e1:fa:c7:ca:9c:b6:a8:29:f9:5c:e7:14:ce:e9:
31:8c:5d:73:ed:ac:7d:69:63:b4:02:d2:be:63:f3:d0:6c:c7:
7e:dd:cd:7b:2b:1d:36:cc:81:47:f5:4d:21:9c:94:65:06:67:
3f:66:4a:71:3f:3e:23:95:44:31:38:91:49:df:3b:51:29:b5:
eb:95:fc:65:5f:b7:d1:fe:fa:6d:b6:95:17:fd:71:65:9e:27:
97:11:ec:e5:ff:de:4f:19:97:82:ce:e6:d9:15:6f:6e:8b:fb:
a8:bc:78:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 17:09:30 2025 by rpki-client