Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/6d6b76-b4b7-4f7e-8628-cf794658f5be/1/0O73PaTyLOlo4DtC-zfVh-so0po.roa
File: 0O73PaTyLOlo4DtC-zfVh-so0po.roa (raw, json)
Hash identifier: 8d52pgK7PtxKWsBsAJptabjpB2sUfgsDROP6Cr/a/W0=
Subject key identifier: D0:EE:F7:3D:A4:F2:2C:E9:68:E0:3B:42:FB:37:D5:87:EB:28:D2:9A
Certificate issuer: /CN=e76210e38b16909a7ee8fe3b8d06647f0665292b
Certificate serial: 0194236A25882E39DBE7785AFAE48D853CE4
Authority key identifier: E7:62:10:E3:8B:16:90:9A:7E:E8:FE:3B:8D:06:64:7F:06:65:29:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/52IQ44sWkJp-6P47jQZkfwZlKSs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/6d6b76-b4b7-4f7e-8628-cf794658f5be/1/0O73PaTyLOlo4DtC-zfVh-so0po.roa
Signing time: Wed 01 Jan 2025 19:49:06 +0000
ROA not before: Wed 01 Jan 2025 19:49:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15726
IP address blocks: 46.231.232.0/21 maxlen: 24
213.149.64.0/20 maxlen: 24
217.14.160.0/20 maxlen: 24
2a00:f88::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:25:88:2e:39:db:e7:78:5a:fa:e4:8d:85:3c:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e76210e38b16909a7ee8fe3b8d06647f0665292b
Validity
Not Before: Jan 1 19:49:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d0eef73da4f22ce968e03b42fb37d587eb28d29a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:05:98:0e:d1:3d:af:ff:81:90:40:84:d8:88:
3d:fe:b2:49:41:21:15:be:bb:2b:37:05:c5:3a:b0:
4a:3d:4a:d0:9e:b0:fd:3e:c9:30:3c:f4:6b:ff:60:
01:95:f5:66:91:37:03:6c:cd:20:17:ea:c6:5f:e4:
26:67:bb:79:39:8e:ad:54:95:0b:78:64:17:f5:e1:
22:e2:48:6d:64:4f:c2:99:7a:ed:9b:a8:0b:18:d7:
5c:c8:0f:66:2c:ee:6c:e0:66:cc:f6:ce:a3:1b:e3:
9d:93:a2:eb:28:32:15:13:5b:d2:80:69:00:9d:9d:
fb:42:f3:bf:b5:7a:18:77:02:7d:b1:35:c0:9a:54:
11:2f:6e:1e:05:c7:4f:06:5b:2d:b9:e2:9a:6e:79:
fd:1e:80:71:61:f1:bc:14:2e:70:da:19:9d:ab:2b:
fd:c9:75:9c:98:c8:ae:73:71:54:c8:d6:bd:2c:80:
58:19:4c:c5:54:ad:96:d6:23:09:38:a4:76:94:e1:
17:53:40:9f:df:8a:bf:dd:11:44:d5:a6:ab:83:f2:
98:43:f0:a0:15:d3:3f:4f:f2:4f:6c:6a:1f:c8:c6:
4d:16:6b:d8:c1:b1:69:24:ce:b8:0f:3c:1a:9b:20:
81:54:f6:48:68:9e:96:f1:c1:bb:84:19:dc:3f:1a:
d3:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:EE:F7:3D:A4:F2:2C:E9:68:E0:3B:42:FB:37:D5:87:EB:28:D2:9A
X509v3 Authority Key Identifier:
keyid:E7:62:10:E3:8B:16:90:9A:7E:E8:FE:3B:8D:06:64:7F:06:65:29:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/52IQ44sWkJp-6P47jQZkfwZlKSs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/6d6b76-b4b7-4f7e-8628-cf794658f5be/1/0O73PaTyLOlo4DtC-zfVh-so0po.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/6d6b76-b4b7-4f7e-8628-cf794658f5be/1/52IQ44sWkJp-6P47jQZkfwZlKSs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.231.232.0/21
213.149.64.0/20
217.14.160.0/20
IPv6:
2a00:f88::/32
Signature Algorithm: sha256WithRSAEncryption
8e:0f:6c:af:e7:11:37:e1:28:25:27:2e:f5:ef:42:eb:25:d8:
d8:fb:8f:95:84:f2:d5:c9:12:5d:1b:c3:00:bb:c0:c4:cc:6d:
97:9a:e9:57:75:b9:e5:d1:4e:4b:4b:0d:9b:09:98:df:74:03:
bd:86:fc:f5:57:bd:b2:21:65:38:31:0c:7d:70:96:b8:50:62:
29:7a:d9:3a:9c:5f:b1:0a:d8:e0:f3:55:92:5e:12:06:2d:87:
a8:ed:3e:fb:d2:f6:23:f1:38:1e:f9:98:e3:24:7b:4d:83:cf:
5c:a2:36:68:8b:6e:16:62:e0:a3:dd:5e:6f:7f:07:7e:1c:86:
3a:f1:a3:8f:3b:45:14:ea:0b:f0:a6:f3:32:65:19:1e:10:c1:
9d:54:38:0a:d8:ef:fd:b4:f6:8b:97:06:7d:2b:81:2f:f4:00:
27:41:1a:97:f4:85:7d:3c:04:cc:6f:d2:c5:95:40:7c:6a:99:
ed:aa:d3:c7:cd:c2:90:f9:68:95:11:bf:69:84:54:73:61:48:
e0:12:12:2b:45:6a:a5:a3:f2:96:94:c9:e9:11:f5:ff:07:fb:
6b:d5:50:a5:63:03:14:5b:b3:04:c7:7b:8a:c1:7a:68:3b:99:
18:13:df:49:de:56:2d:cf:a5:84:b4:6a:68:60:c4:bf:f3:cb:
f5:b4:b7:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:33:34 2025 by rpki-client