Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ec44ea-ef43-4b3a-a69a-b4cb637da8c3/1/OcAvtCfGeHAKogvTrE4zVIYXhXs.roa
File: OcAvtCfGeHAKogvTrE4zVIYXhXs.roa (raw, json)
Hash identifier: ytTb8Vp57MsWC+qg8DRVK13nEW8nfvpJJgza5MGPgYA=
Subject key identifier: 39:C0:2F:B4:27:C6:78:70:0A:A2:0B:D3:AC:4E:33:54:86:17:85:7B
Certificate issuer: /CN=a2b12e8df3abd5559f9cf9680af65dd16589de86
Certificate serial: 019427B56BA7DC7777A837BD30B1B501CDF9
Authority key identifier: A2:B1:2E:8D:F3:AB:D5:55:9F:9C:F9:68:0A:F6:5D:D1:65:89:DE:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/orEujfOr1VWfnPloCvZd0WWJ3oY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ec44ea-ef43-4b3a-a69a-b4cb637da8c3/1/OcAvtCfGeHAKogvTrE4zVIYXhXs.roa
Signing time: Thu 02 Jan 2025 15:49:48 +0000
ROA not before: Thu 02 Jan 2025 15:49:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60128
IP address blocks: 46.236.218.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:6b:a7:dc:77:77:a8:37:bd:30:b1:b5:01:cd:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2b12e8df3abd5559f9cf9680af65dd16589de86
Validity
Not Before: Jan 2 15:49:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=39c02fb427c678700aa20bd3ac4e33548617857b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:39:25:75:0d:e4:df:bc:75:d2:a0:75:12:b6:
cd:db:95:9b:98:aa:f2:11:81:b5:c9:c6:9f:29:46:
99:34:44:b8:67:de:41:6c:69:c9:2b:10:7e:f3:ce:
4e:bc:af:9a:a2:0d:9c:9b:53:77:e0:39:3b:35:45:
16:b7:1b:78:c2:8b:66:c0:1d:3e:48:65:0a:e2:54:
f1:74:15:d6:47:8b:bd:7a:a2:aa:ce:d4:db:34:e0:
ed:a2:6b:a8:8f:23:13:95:17:54:9a:a3:5e:cd:e8:
ab:8e:d4:15:0d:b9:e6:11:8a:41:a4:83:7e:31:01:
1b:45:d1:fa:9f:5d:28:66:58:42:bb:0d:c3:07:b3:
cb:23:c5:af:83:91:f6:7b:c6:4c:9b:5a:7e:31:c3:
5c:ce:3d:65:2f:a6:19:e9:8a:43:7a:bb:04:b0:4b:
92:b8:c0:57:c7:15:a5:5c:33:b9:1e:34:2b:70:63:
23:61:02:cf:af:18:cb:4d:44:61:f8:b6:89:26:d4:
7a:aa:db:31:c0:0f:54:a1:35:9c:ba:71:5e:45:c6:
7e:4b:1a:2c:9b:06:d1:72:c7:4c:34:86:d3:1f:7d:
21:17:80:52:ac:46:3a:5c:3e:26:7f:cc:fc:5b:41:
d6:e1:29:e7:46:a9:f4:35:95:b4:66:f1:34:9c:26:
67:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:C0:2F:B4:27:C6:78:70:0A:A2:0B:D3:AC:4E:33:54:86:17:85:7B
X509v3 Authority Key Identifier:
keyid:A2:B1:2E:8D:F3:AB:D5:55:9F:9C:F9:68:0A:F6:5D:D1:65:89:DE:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/orEujfOr1VWfnPloCvZd0WWJ3oY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ec44ea-ef43-4b3a-a69a-b4cb637da8c3/1/OcAvtCfGeHAKogvTrE4zVIYXhXs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ec44ea-ef43-4b3a-a69a-b4cb637da8c3/1/orEujfOr1VWfnPloCvZd0WWJ3oY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.236.218.0/24
Signature Algorithm: sha256WithRSAEncryption
63:1b:f6:ba:4a:79:63:c7:7e:70:57:89:76:3d:8b:a5:8d:7a:
9b:88:6a:c8:02:7f:ba:32:1a:85:3d:42:d8:af:e6:f0:74:2b:
f5:b2:5b:3b:3e:3c:37:aa:61:49:2b:6f:e0:06:fe:38:f4:ec:
2f:3d:9b:11:fe:6a:e5:74:ff:34:17:6a:cd:93:19:49:46:f6:
0e:e1:10:c4:21:33:8c:16:f8:74:e2:1c:94:bb:e0:bc:f6:f2:
83:8e:31:56:7b:25:a1:f0:f7:be:78:cb:6c:0a:01:76:cd:fc:
ce:2c:e7:0a:4d:26:c0:91:cc:33:79:e7:9d:22:cf:b2:b6:97:
25:f2:65:92:99:27:16:bb:e3:bf:8c:0b:71:44:e5:c1:1e:4d:
c5:5c:9e:71:0f:81:6e:26:13:0b:79:14:9c:89:2b:3a:51:5e:
74:fa:0e:bc:d5:b8:67:52:9a:80:f9:51:18:5a:3e:02:30:ff:
9a:99:f4:32:fe:59:01:b1:1f:fe:3b:84:c2:bf:3a:ec:87:b6:
e8:d5:76:c1:0f:ca:2d:2d:a5:74:07:46:74:53:f0:1b:94:e8:
92:27:b2:be:9e:b6:4c:75:c3:03:d1:86:de:46:5e:64:3c:98:
48:5e:96:64:80:8c:9e:36:07:3c:45:f8:22:98:9f:1a:97:a1:
36:02:97:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:12:22 2025 by rpki-client