Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/bJZwc6x4v9eha3_fkfGRGyXZv_s.roa
File: bJZwc6x4v9eha3_fkfGRGyXZv_s.roa (raw, json)
Hash identifier: TZD4YeGnHusyxgIV8I8kZEsbESxFebTaLJEFL2AcZrE=
Subject key identifier: 6C:96:70:73:AC:78:BF:D7:A1:6B:7F:DF:91:F1:91:1B:25:D9:BF:FB
Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial: 019427B5AAEC069B96B322C3E87BECE86AF7
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/bJZwc6x4v9eha3_fkfGRGyXZv_s.roa
Signing time: Thu 02 Jan 2025 15:50:04 +0000
ROA not before: Thu 02 Jan 2025 15:50:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57043
IP address blocks: 5.188.232.0/24 maxlen: 24
46.161.40.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:aa:ec:06:9b:96:b3:22:c3:e8:7b:ec:e8:6a:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Validity
Not Before: Jan 2 15:50:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6c967073ac78bfd7a16b7fdf91f1911b25d9bffb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:3f:3e:d9:fa:6f:08:ca:6f:3a:b4:61:5a:aa:
12:3b:f2:7e:9b:45:d7:f6:1b:9c:8b:e0:36:30:40:
0f:95:94:e5:b6:b2:ba:f8:6e:ae:6f:19:9f:13:82:
c5:b1:e1:9c:7d:71:be:42:03:72:29:fc:69:f7:3b:
ad:ab:18:45:2c:c7:9d:78:d9:bf:cb:c0:71:a4:b8:
24:0b:18:bd:80:2f:2e:49:7b:15:5c:0f:65:f3:8f:
b6:e3:a2:15:a4:9e:be:52:23:1a:4d:0f:0c:1f:13:
ca:ed:8a:af:c3:47:38:bc:6a:37:76:09:73:f2:4f:
7f:f6:4e:c8:f8:1c:ad:2a:71:4f:cc:83:08:42:4c:
99:a9:ad:1b:d6:ef:57:93:be:65:e6:4a:20:6f:67:
ce:f3:9a:7b:55:e8:b5:7b:76:35:aa:c7:35:c8:4d:
8b:5a:48:14:3b:5d:bc:92:af:97:ae:d2:ce:c8:c7:
77:63:fa:4a:02:ff:b3:03:d2:f9:f8:20:18:31:b7:
f5:72:83:f8:02:f1:50:ba:d8:ec:52:b2:4e:ec:b7:
e0:40:82:78:6c:69:53:31:3e:1a:d5:9b:ec:28:7d:
a1:e0:14:b1:d9:52:c3:b7:6c:f8:c7:e2:50:93:2e:
d1:47:99:8f:3e:93:22:83:27:5d:d4:ba:4f:22:0b:
3a:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:96:70:73:AC:78:BF:D7:A1:6B:7F:DF:91:F1:91:1B:25:D9:BF:FB
X509v3 Authority Key Identifier:
keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/bJZwc6x4v9eha3_fkfGRGyXZv_s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.188.232.0/24
46.161.40.0/24
Signature Algorithm: sha256WithRSAEncryption
ca:af:8a:aa:57:3e:d6:5c:af:27:9d:e3:e2:14:cc:9f:86:76:
90:45:fe:8a:a3:58:a1:ec:89:2e:09:0c:49:d4:07:bc:69:f9:
d2:26:1a:fa:db:a1:0c:fa:e1:4c:ae:2f:a2:ad:b0:f0:3e:61:
5d:28:ec:05:5b:20:7b:75:a5:71:f2:cc:99:3a:d5:f0:d0:ec:
89:0b:49:ca:29:8b:9b:95:6e:00:a7:ce:e8:b2:ec:e8:4e:27:
a3:4d:6b:eb:07:4b:89:bf:ad:44:af:96:b6:6d:a4:d1:0c:67:
f4:56:65:54:26:57:77:63:58:5e:24:aa:98:d1:c3:c3:c8:5e:
ec:92:8f:b2:8c:f6:4d:00:b1:55:16:42:6c:13:3f:ff:65:80:
63:9e:79:94:ff:a1:aa:6d:6e:fe:0e:62:10:94:a9:e8:ad:c9:
6b:78:4e:3f:f4:8a:e4:d6:e1:5c:ad:66:28:f2:a5:d4:f7:93:
f9:c3:90:2a:55:4d:2b:6d:da:42:84:69:d5:43:63:e0:1b:03:
1f:b2:06:17:58:9e:a5:0a:72:47:0c:0f:a9:e8:a9:73:8d:82:
8a:7a:ab:00:8f:aa:bc:89:80:39:eb:9c:69:52:f4:02:64:71:
8d:b5:39:37:01:42:de:f8:24:ab:47:0d:da:aa:c2:63:83:aa:
a1:77:50:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:12:23 2025 by rpki-client