Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/OHCA3vQMxG1d25xR7UuiUEeJ818.roa
File: OHCA3vQMxG1d25xR7UuiUEeJ818.roa (raw, json)
Hash identifier: O5s8l0cJjmVTzrkVW/B/tmzvvxU5Y9LtP5126UUkQZE=
Subject key identifier: 38:70:80:DE:F4:0C:C4:6D:5D:DB:9C:51:ED:4B:A2:50:47:89:F3:5F
Certificate issuer: /CN=c89c2cc489ebe48f490584ac866fe362c4117e75
Certificate serial: 019421B1D109A6E0D833E7AED7995918F89F
Authority key identifier: C8:9C:2C:C4:89:EB:E4:8F:49:05:84:AC:86:6F:E3:62:C4:11:7E:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yJwsxInr5I9JBYSshm_jYsQRfnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/OHCA3vQMxG1d25xR7UuiUEeJ818.roa
Signing time: Wed 01 Jan 2025 11:48:08 +0000
ROA not before: Wed 01 Jan 2025 11:48:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47376
IP address blocks: 46.148.38.0/24 maxlen: 24
46.148.41.0/24 maxlen: 24
46.148.43.0/24 maxlen: 24
46.148.44.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:d1:09:a6:e0:d8:33:e7:ae:d7:99:59:18:f8:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c89c2cc489ebe48f490584ac866fe362c4117e75
Validity
Not Before: Jan 1 11:48:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=387080def40cc46d5ddb9c51ed4ba2504789f35f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:8c:f5:bf:16:09:99:76:a8:9c:6c:cb:6a:66:
76:07:08:33:47:db:98:73:65:44:a8:ce:aa:0a:9f:
06:b8:a9:53:c1:61:b4:a9:d2:29:fd:e6:72:52:27:
9f:b4:74:4a:59:6d:6d:98:92:33:a8:c7:5d:77:64:
a1:10:49:e5:66:4a:48:a2:7b:e9:a8:47:46:59:fa:
74:86:c2:73:d2:3a:4e:05:e1:ba:04:0e:02:c7:47:
66:fd:4e:d9:a4:fc:7a:c6:fe:64:e1:f7:a9:b8:17:
ed:6e:3c:91:ec:d0:50:ea:c8:ee:87:3c:ea:6e:e6:
0e:39:fa:7a:b7:5e:48:f7:c0:05:1d:2a:ea:d0:11:
2b:80:46:37:f7:e4:04:53:b8:96:cc:54:a2:a6:57:
20:7d:24:b3:b4:37:14:0e:8b:28:49:0e:2e:71:31:
33:c3:ae:09:6f:15:23:b7:b4:99:9c:83:b3:d2:e1:
93:1d:b6:6e:ad:ea:43:33:f3:7f:c8:9e:58:b8:e2:
9c:89:1e:01:0c:aa:73:11:a0:e0:23:7c:5b:4c:b5:
3c:49:12:8e:b1:0b:41:ea:7a:73:25:9a:53:f2:ed:
22:81:25:3b:f3:bc:96:11:a9:20:6e:64:93:6c:63:
f3:ca:25:4a:14:70:fb:eb:33:d8:ba:1f:d6:3d:2d:
2d:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:70:80:DE:F4:0C:C4:6D:5D:DB:9C:51:ED:4B:A2:50:47:89:F3:5F
X509v3 Authority Key Identifier:
keyid:C8:9C:2C:C4:89:EB:E4:8F:49:05:84:AC:86:6F:E3:62:C4:11:7E:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yJwsxInr5I9JBYSshm_jYsQRfnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/OHCA3vQMxG1d25xR7UuiUEeJ818.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/yJwsxInr5I9JBYSshm_jYsQRfnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.148.38.0/24
46.148.41.0/24
46.148.43.0-46.148.44.255
Signature Algorithm: sha256WithRSAEncryption
7e:c0:a6:2a:ad:e1:40:3d:fe:71:ea:ef:cd:17:cf:96:92:07:
bb:31:3a:b9:a5:32:61:5c:33:f5:1b:95:22:c8:86:49:b5:ac:
25:69:e2:fe:a0:e2:03:35:d7:9b:3c:f5:f1:4c:88:af:70:e0:
24:0f:09:b5:01:6d:e7:47:6c:57:d7:52:ef:28:d9:73:9c:ab:
19:62:5c:61:95:7c:ae:2b:ae:0d:f5:1f:76:9c:f8:a4:0b:5d:
a9:56:8d:1b:7a:03:fa:0e:f7:86:fb:e7:4b:1b:e8:cc:f2:23:
1f:28:44:86:14:5b:d6:6a:8d:6b:b3:37:dd:37:f7:94:d6:39:
a0:98:42:f7:36:5d:fe:84:81:53:50:0c:b0:ec:0b:a4:d3:45:
4b:0c:4c:f1:05:f2:54:b6:ec:28:65:c8:47:64:25:16:07:6c:
19:a6:5b:d1:84:6a:8e:9f:f8:9f:91:fd:44:f4:d2:86:49:96:
69:66:65:1f:cf:ec:0a:a3:5f:ca:25:cb:3b:62:47:94:8a:fd:
a9:8b:a2:be:36:4b:bd:fc:db:ac:24:8d:c5:5c:35:45:36:33:
ae:98:99:d0:3f:e5:50:97:e0:40:61:ef:87:0f:ee:4e:a8:71:
cb:a2:60:ec:c2:ed:ed:64:90:d5:cf:3b:05:39:19:39:10:45:
b0:c3:ff:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:45:46 2025 by rpki-client