Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/4ruUvXlMLPrrP01zsS2SLiteE-U.roa
File: 4ruUvXlMLPrrP01zsS2SLiteE-U.roa (raw, json)
Hash identifier: JU/uwzZfeiL0t1kNQDBfkI6HXVcIqdVe9eseSjTnmUk=
Subject key identifier: E2:BB:94:BD:79:4C:2C:FA:EB:3F:4D:73:B1:2D:92:2E:2B:5E:13:E5
Certificate issuer: /CN=c89c2cc489ebe48f490584ac866fe362c4117e75
Certificate serial: 0193BF76525B133853EA79AA5F9AB75C5CDE
Authority key identifier: C8:9C:2C:C4:89:EB:E4:8F:49:05:84:AC:86:6F:E3:62:C4:11:7E:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yJwsxInr5I9JBYSshm_jYsQRfnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/4ruUvXlMLPrrP01zsS2SLiteE-U.roa
Signing time: Fri 13 Dec 2024 10:00:22 +0000
ROA not before: Fri 13 Dec 2024 10:00:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212939
IP address blocks: 46.148.40.0/24 maxlen: 24
46.148.46.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:bf:76:52:5b:13:38:53:ea:79:aa:5f:9a:b7:5c:5c:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c89c2cc489ebe48f490584ac866fe362c4117e75
Validity
Not Before: Dec 13 10:00:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e2bb94bd794c2cfaeb3f4d73b12d922e2b5e13e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:1f:f4:66:1b:3b:5d:33:e6:85:e9:9e:ea:cd:
1b:9b:02:02:fc:a5:42:0c:c8:f1:c8:7d:33:dd:53:
58:9f:91:f6:b9:7d:50:3d:93:d6:a2:ff:cf:76:7e:
d8:f0:aa:4f:92:f5:ea:bf:8d:81:5b:92:4a:23:57:
f7:02:b5:c4:eb:b0:c7:8e:7e:b7:09:32:ca:b9:7f:
e8:90:50:52:33:8c:34:ac:9e:02:0b:a0:a9:a9:7f:
20:29:13:e6:7c:a5:24:8f:3b:86:a1:2e:ac:d4:7b:
85:b5:44:5a:c9:43:8a:6f:4b:e2:b6:08:2a:ad:41:
42:ff:36:6e:9f:a4:5d:02:b2:91:31:f9:06:77:d1:
70:18:c6:58:de:e7:29:b1:bb:6d:fe:5e:24:38:42:
5b:20:29:64:99:af:af:54:d5:2f:c8:2d:1d:97:c0:
a9:31:06:5a:b6:87:8b:1e:28:a6:75:4b:9a:7f:69:
1b:28:1d:a3:f1:0e:47:3f:30:e6:5a:bd:6d:55:4a:
40:f8:d2:23:80:7f:24:cf:fa:c4:a8:b8:65:51:b3:
ad:30:80:e0:c3:e2:16:7c:3d:25:d2:d5:2a:74:be:
78:1e:1d:02:d4:0e:b7:70:77:a8:41:ea:65:bd:20:
45:55:bd:46:6d:b4:30:7f:07:9f:3d:62:05:8a:2c:
26:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:BB:94:BD:79:4C:2C:FA:EB:3F:4D:73:B1:2D:92:2E:2B:5E:13:E5
X509v3 Authority Key Identifier:
keyid:C8:9C:2C:C4:89:EB:E4:8F:49:05:84:AC:86:6F:E3:62:C4:11:7E:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yJwsxInr5I9JBYSshm_jYsQRfnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/4ruUvXlMLPrrP01zsS2SLiteE-U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/yJwsxInr5I9JBYSshm_jYsQRfnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.148.40.0/24
46.148.46.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:61:1d:15:b6:22:86:ee:91:68:da:fd:9c:77:77:d3:fb:44:
95:e6:a2:2b:b2:76:fe:fe:88:15:f9:54:1e:fa:50:c3:35:08:
b5:e1:e9:42:b6:ec:ab:ff:31:68:b1:b9:4e:28:77:b3:9b:15:
73:7c:6d:d2:48:1d:2d:5b:20:12:77:56:7a:d6:be:b1:6d:24:
b0:97:7c:cf:7e:84:d9:a8:6c:e4:fc:5f:05:82:f9:3a:e2:2e:
fc:59:b7:a6:69:c2:9e:40:33:75:fd:89:5b:dd:d7:b2:ea:f7:
1c:3e:b4:eb:5b:4b:70:ec:6a:7e:b7:87:47:f7:0d:8a:fc:7f:
b7:7d:6e:99:d8:ef:42:7e:db:e1:40:b0:37:7c:aa:9a:bd:cb:
08:e8:ac:6e:00:f9:b4:7d:7a:69:fa:72:87:b1:b8:8a:4f:5b:
09:b3:a1:e3:29:c4:55:5b:10:cc:67:93:82:69:99:4c:c5:c6:
cf:b7:2d:6d:e9:5d:ee:fb:09:09:26:f7:ef:43:a2:e7:71:5c:
2e:bf:15:17:36:d5:50:89:6e:33:64:4f:c0:81:63:cb:60:ef:
db:e0:a5:27:81:83:85:30:dc:8d:59:ab:5e:5e:76:c8:18:bd:
cd:a7:b3:c8:d1:ce:6b:5f:7d:2c:b0:01:ed:14:42:65:c2:91:
b6:5d:0c:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 01:02:43 2025 by rpki-client