Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/DW7jRSnbY34hE_RIyO6FIl_U_i4.roa
File: DW7jRSnbY34hE_RIyO6FIl_U_i4.roa (raw, json)
Hash identifier: Bs5rd92ASGZAZDzYbnXm9tO9ObUBPqRSYN5EMjrMJfE=
Subject key identifier: 0D:6E:E3:45:29:DB:63:7E:21:13:F4:48:C8:EE:85:22:5F:D4:FE:2E
Certificate issuer: /CN=c89c2cc489ebe48f490584ac866fe362c4117e75
Certificate serial: 019421B1D1A4F22B545EBD02DE47CF64356E
Authority key identifier: C8:9C:2C:C4:89:EB:E4:8F:49:05:84:AC:86:6F:E3:62:C4:11:7E:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yJwsxInr5I9JBYSshm_jYsQRfnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/DW7jRSnbY34hE_RIyO6FIl_U_i4.roa
Signing time: Wed 01 Jan 2025 11:48:09 +0000
ROA not before: Wed 01 Jan 2025 11:48:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51788
IP address blocks: 46.148.32.0/24 maxlen: 24
46.148.33.0/24 maxlen: 24
46.148.34.0/24 maxlen: 24
46.148.37.0/24 maxlen: 24
46.148.40.0/24 maxlen: 24
46.148.41.0/24 maxlen: 24
46.148.42.0/24 maxlen: 24
46.148.46.0/24 maxlen: 24
46.148.47.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:d1:a4:f2:2b:54:5e:bd:02:de:47:cf:64:35:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c89c2cc489ebe48f490584ac866fe362c4117e75
Validity
Not Before: Jan 1 11:48:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0d6ee34529db637e2113f448c8ee85225fd4fe2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:18:a9:2d:e3:c7:15:66:cd:20:38:4f:de:9c:
0c:d9:64:2b:c0:34:39:73:6f:38:45:9a:62:e8:b9:
ae:ff:0e:da:28:4c:e1:e0:1c:57:ba:89:a2:f1:29:
01:80:2c:0a:02:bd:b3:90:a8:7a:db:94:0d:43:07:
b1:f4:68:d6:a7:99:da:60:01:ee:96:17:a0:a9:cf:
43:44:aa:65:6c:dc:f2:cf:f7:cd:b3:b2:95:5b:67:
57:ce:e3:71:e1:eb:fe:dd:03:fe:e3:82:24:86:f7:
da:b2:5a:d8:8c:08:c1:f6:1c:72:b6:b8:51:4b:b5:
8c:3a:9d:25:6c:ac:0e:15:e6:6d:73:02:c9:14:73:
97:02:42:b5:4f:d2:1c:b7:97:61:29:6a:cb:1b:8f:
12:a9:a0:a3:57:1e:33:e9:1b:52:88:87:93:9f:e5:
64:9c:f9:80:9b:e6:36:9c:ff:07:43:74:7e:ed:47:
1a:9c:e6:e3:c7:a8:d1:ef:41:2c:d6:75:33:5e:58:
3d:5c:43:c5:5b:54:68:78:d5:61:b3:89:31:e7:29:
2c:46:86:3f:08:aa:db:80:72:0e:cd:d4:c5:2c:37:
69:32:7d:09:42:6b:b9:6a:28:12:2f:ce:f8:4c:b2:
71:89:76:f9:5f:87:f4:f9:3f:98:62:fa:29:d6:f0:
8a:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:6E:E3:45:29:DB:63:7E:21:13:F4:48:C8:EE:85:22:5F:D4:FE:2E
X509v3 Authority Key Identifier:
keyid:C8:9C:2C:C4:89:EB:E4:8F:49:05:84:AC:86:6F:E3:62:C4:11:7E:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yJwsxInr5I9JBYSshm_jYsQRfnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/DW7jRSnbY34hE_RIyO6FIl_U_i4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/yJwsxInr5I9JBYSshm_jYsQRfnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.148.32.0-46.148.34.255
46.148.37.0/24
46.148.40.0-46.148.42.255
46.148.46.0/23
Signature Algorithm: sha256WithRSAEncryption
21:8e:12:95:7a:c5:8b:af:34:a6:f2:7b:b8:b2:00:a1:9e:74:
0d:b9:41:e4:c4:38:f7:f9:1d:c2:39:32:11:99:26:d8:73:a1:
c3:de:01:f8:6b:4f:1f:59:20:25:2f:03:10:ff:ca:11:68:4a:
62:2d:52:73:b3:3e:e1:f5:66:34:ca:d5:28:53:85:49:6a:b9:
79:47:b4:56:ff:fe:66:50:2b:c0:13:2c:00:0d:9b:2d:bf:53:
a2:c1:d9:d3:12:e4:60:2b:42:69:20:94:4d:4f:fa:15:4c:9d:
5d:c8:f6:21:3b:a7:22:8f:91:38:ba:f7:43:13:0c:ec:df:05:
c0:fc:30:63:a2:dd:d0:47:13:a6:93:ab:d7:d9:24:33:b8:8e:
0c:77:6a:85:34:cb:67:09:f9:63:35:8e:f2:ae:9b:90:35:c4:
98:d5:fa:f9:64:ac:ce:97:80:a7:ef:d0:0a:68:2b:c8:32:21:
2a:8b:59:c1:9c:b1:7f:5c:84:71:77:91:bd:49:ca:dc:f1:3d:
82:ff:12:8f:18:e4:bf:af:d3:45:a8:a2:16:95:96:c3:c2:7f:
b9:20:c8:98:7b:4c:9c:b1:20:ad:89:f2:9e:b5:78:83:00:85:
b4:2f:26:4c:59:ff:29:a6:7e:0d:b9:bb:97:92:dd:16:10:a8:
83:90:eb:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 19:02:39 2025 by rpki-client