Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/4d693f-5369-411b-add3-564ae771b1a4/1/46BDc4nIJZOn3XU9MmbFnXrVaB4.roa
File: 46BDc4nIJZOn3XU9MmbFnXrVaB4.roa (raw, json)
Hash identifier: ByPAdvUaCKU02etUzLW4fzqtxKvNof3q804og54/i7I=
Subject key identifier: E3:A0:43:73:89:C8:25:93:A7:DD:75:3D:32:66:C5:9D:7A:D5:68:1E
Certificate issuer: /CN=849ff2cc8e0b8ac046f7a49a5e3268dd402a5907
Certificate serial: 0184CE0F9E966DBAEA6AE83789CF324FA943
Authority key identifier: 84:9F:F2:CC:8E:0B:8A:C0:46:F7:A4:9A:5E:32:68:DD:40:2A:59:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hJ_yzI4LisBG96SaXjJo3UAqWQc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/4d693f-5369-411b-add3-564ae771b1a4/1/46BDc4nIJZOn3XU9MmbFnXrVaB4.roa
Signing time: Thu 01 Dec 2022 14:20:40 +0000
ROA not before: Thu 01 Dec 2022 14:20:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57271
IP address blocks: 194.26.141.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:ce:0f:9e:96:6d:ba:ea:6a:e8:37:89:cf:32:4f:a9:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=849ff2cc8e0b8ac046f7a49a5e3268dd402a5907
Validity
Not Before: Dec 1 14:20:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e3a0437389c82593a7dd753d3266c59d7ad5681e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:28:1a:ea:33:29:0f:84:bc:d2:d7:c9:8c:52:
40:3a:6e:89:d7:64:5b:bb:07:af:62:c7:53:8a:46:
1d:b4:8e:39:4e:86:37:5d:4b:a3:a7:d9:78:c6:f9:
e9:a3:09:64:97:ee:5f:de:7a:ba:47:30:c6:43:6d:
18:be:d5:83:76:24:db:9c:f2:3a:13:af:4a:3e:5c:
ed:ce:fd:3a:b0:c4:d6:62:db:4e:99:02:b9:80:b8:
50:03:93:61:d5:b6:80:d9:c0:45:da:ed:89:f8:31:
88:dd:52:81:a3:d8:46:b3:fa:de:1a:10:bc:2e:98:
78:b9:ae:f4:c0:01:70:d7:ed:cd:b8:86:62:04:92:
1b:fa:b5:74:46:a3:01:fb:d5:62:be:c5:75:9f:5e:
7b:28:d7:c7:58:3c:f0:48:4b:45:51:ad:f1:9c:15:
9b:71:df:e8:05:bd:71:61:66:65:fe:da:c4:d5:7a:
31:d2:47:16:44:88:02:63:25:be:b0:19:67:55:43:
39:71:29:6d:eb:98:d1:90:8c:2b:a8:cc:3d:b6:e9:
17:4e:29:e5:76:70:19:32:f7:31:62:10:8f:17:ae:
a5:7b:d5:2f:0c:81:fc:2f:a7:99:4d:57:93:15:61:
44:a4:12:40:66:d1:3f:df:e9:9e:5f:b1:a1:d2:34:
a2:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:A0:43:73:89:C8:25:93:A7:DD:75:3D:32:66:C5:9D:7A:D5:68:1E
X509v3 Authority Key Identifier:
keyid:84:9F:F2:CC:8E:0B:8A:C0:46:F7:A4:9A:5E:32:68:DD:40:2A:59:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hJ_yzI4LisBG96SaXjJo3UAqWQc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/4d693f-5369-411b-add3-564ae771b1a4/1/46BDc4nIJZOn3XU9MmbFnXrVaB4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/4d693f-5369-411b-add3-564ae771b1a4/1/hJ_yzI4LisBG96SaXjJo3UAqWQc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.26.141.0/24
Signature Algorithm: sha256WithRSAEncryption
76:6c:ea:7b:29:0b:5c:ee:2b:16:be:ec:35:9c:49:f3:6a:7b:
89:c3:07:9b:44:f9:12:52:a2:5d:36:21:70:cb:61:44:1e:b6:
65:83:02:41:16:f1:b7:c7:74:c3:2b:87:4e:9a:7f:9a:99:ac:
5f:62:a0:32:27:e8:d3:09:56:f8:7a:40:28:c8:d5:41:87:cc:
fe:f8:ec:00:03:23:bf:9a:95:c7:f8:4c:b8:93:12:ac:e8:b1:
c2:0c:99:3c:0e:ac:be:21:59:7f:bb:2c:d3:1c:1f:6a:a6:01:
fc:6f:36:e7:dd:ac:41:37:9f:24:8d:99:d9:7e:41:32:1f:85:
68:31:47:e5:f8:49:24:2a:01:17:ad:c2:68:43:18:73:46:a4:
00:cf:92:02:dd:fc:7d:c7:c2:26:40:7e:ad:59:c1:02:49:c0:
fc:84:ec:00:cb:d3:7f:7e:e6:d3:fa:d6:a6:7f:1a:43:21:b4:
bb:9d:7f:dc:28:bd:29:65:0e:4d:5f:e3:69:9f:f5:0c:59:27:
6d:bf:c2:08:49:09:d7:de:1c:08:02:d9:7a:53:1d:b0:d8:e4:
2c:54:17:fc:da:9b:9a:2d:78:25:f3:86:d3:25:d6:b6:29:7d:
2b:81:27:4b:e7:3f:66:92:b2:eb:40:1a:63:15:ba:69:14:41:
a6:2a:ea:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:16:10 2025 by rpki-client