Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/a75f60-058e-43c7-9ca5-71d472748b53/1/Fw44UHiEuqNZ6X1RyPVPj2cqpy4.roa
File: Fw44UHiEuqNZ6X1RyPVPj2cqpy4.roa (raw, json)
Hash identifier: 5mBr1vIVBFPy/++gx6v5snPWiNbVJ4cczDt0AKeWeRg=
Subject key identifier: 17:0E:38:50:78:84:BA:A3:59:E9:7D:51:C8:F5:4F:8F:67:2A:A7:2E
Certificate issuer: /CN=46a8cc61de20a90048831facae22fa370e576936
Certificate serial: 01856C81442E531E8E7BF2CB8C9831341726
Authority key identifier: 46:A8:CC:61:DE:20:A9:00:48:83:1F:AC:AE:22:FA:37:0E:57:69:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RqjMYd4gqQBIgx-sriL6Nw5XaTY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/a75f60-058e-43c7-9ca5-71d472748b53/1/Fw44UHiEuqNZ6X1RyPVPj2cqpy4.roa
Signing time: Sun 01 Jan 2023 08:44:48 +0000
ROA not before: Sun 01 Jan 2023 08:44:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 91.246.63.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:81:44:2e:53:1e:8e:7b:f2:cb:8c:98:31:34:17:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46a8cc61de20a90048831facae22fa370e576936
Validity
Not Before: Jan 1 08:44:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=170e38507884baa359e97d51c8f54f8f672aa72e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:15:ee:e2:ab:59:dc:ac:01:24:d0:72:80:6e:
8a:b3:c3:d7:33:c2:d1:b1:fb:79:61:c8:10:7f:39:
4e:48:32:5f:06:7a:c9:d8:50:cb:84:7d:58:ec:16:
b6:15:a1:57:bf:da:ba:73:23:b8:5d:8a:2f:1f:dc:
2d:23:20:e9:61:67:be:f6:b1:24:d8:84:8e:f4:87:
94:1f:31:7d:83:80:07:9d:1d:b2:8d:e0:67:b4:2d:
71:8d:64:d5:58:eb:61:4a:4d:7b:42:ac:d8:e5:5b:
ce:0c:ca:f8:52:8d:2b:25:01:8c:43:60:51:f3:cb:
f0:aa:ea:07:04:f2:02:56:12:31:f2:af:bf:0a:4c:
23:f4:53:60:c3:4d:e8:95:c5:ae:d9:e2:91:fe:40:
44:8d:fc:96:77:a4:6a:bf:04:80:e2:57:b0:32:da:
54:40:bc:7d:f5:ab:c1:1e:68:c6:40:57:c0:ff:2e:
7c:5a:77:74:93:f2:d1:d5:33:fb:ca:dc:24:96:98:
29:c1:fa:b0:77:cd:5f:83:72:88:92:16:40:74:fa:
f8:c1:4b:13:de:06:a3:09:d5:1c:db:59:de:80:48:
9c:be:73:90:28:c8:53:62:38:18:3b:6c:60:64:91:
8d:97:10:0c:3c:2f:89:0c:fc:d2:7c:d4:d3:bc:92:
82:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:0E:38:50:78:84:BA:A3:59:E9:7D:51:C8:F5:4F:8F:67:2A:A7:2E
X509v3 Authority Key Identifier:
keyid:46:A8:CC:61:DE:20:A9:00:48:83:1F:AC:AE:22:FA:37:0E:57:69:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RqjMYd4gqQBIgx-sriL6Nw5XaTY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/a75f60-058e-43c7-9ca5-71d472748b53/1/Fw44UHiEuqNZ6X1RyPVPj2cqpy4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/a75f60-058e-43c7-9ca5-71d472748b53/1/RqjMYd4gqQBIgx-sriL6Nw5XaTY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.246.63.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:7c:4b:43:31:63:13:2e:81:89:89:aa:9a:f9:c5:15:58:9f:
ea:35:45:a9:20:24:85:10:01:ca:1b:9b:bb:61:94:40:ca:51:
b8:e3:96:4e:20:5e:9f:1f:19:5c:9b:5e:c9:f0:1c:58:12:0c:
e2:f5:27:fb:42:58:5c:77:8e:9a:e1:45:1b:2f:be:68:48:3b:
74:cb:90:54:62:68:ca:84:9d:ba:2e:02:7e:a2:3f:79:b7:87:
15:0c:06:a0:6c:2d:73:af:5f:13:f1:35:e6:f9:27:a1:16:37:
3d:4e:1a:c3:2b:04:a3:0b:44:b7:bf:fb:f5:f9:b1:e6:0f:dd:
c6:4f:79:47:98:bc:fd:b7:eb:29:57:2f:8c:15:c1:57:ef:3a:
5e:55:ca:14:2e:4a:0e:ff:fa:ff:b0:ea:93:ca:7f:bd:dd:39:
97:b0:11:7a:4c:df:8f:ff:bc:96:3a:86:36:7a:3f:7b:aa:de:
f6:26:5e:19:7b:d4:cb:f3:ad:fc:36:9e:97:92:5e:90:39:e7:
9c:dd:26:93:67:58:6e:4a:3b:fc:a7:e5:0b:4d:3f:c0:57:45:
48:f6:62:df:9a:7b:a1:65:8d:95:12:ae:08:0b:cb:c7:02:72:
5d:17:ec:51:e1:6b:e2:53:70:2d:b8:63:88:24:8f:11:d2:b4:
6c:d3:8f:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:29:24 2025 by rpki-client