Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/lsoRvhBYP4BFjB3EPLYb5DfAt-k.roa
File: lsoRvhBYP4BFjB3EPLYb5DfAt-k.roa (raw, json)
Hash identifier: 4aBF5aNmJAlF3RgZKlr2lhS8/MOTaZfHHnjAN6dRE6w=
Subject key identifier: 96:CA:11:BE:10:58:3F:80:45:8C:1D:C4:3C:B6:1B:E4:37:C0:B7:E9
Certificate issuer: /CN=c89c2cc489ebe48f490584ac866fe362c4117e75
Certificate serial: 019421B1D20CA99D98055F4F7739EC0A2538
Authority key identifier: C8:9C:2C:C4:89:EB:E4:8F:49:05:84:AC:86:6F:E3:62:C4:11:7E:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yJwsxInr5I9JBYSshm_jYsQRfnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/lsoRvhBYP4BFjB3EPLYb5DfAt-k.roa
Signing time: Wed 01 Jan 2025 11:48:09 +0000
ROA not before: Wed 01 Jan 2025 11:48:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212939
IP address blocks: 46.148.40.0/24 maxlen: 24
46.148.46.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:d2:0c:a9:9d:98:05:5f:4f:77:39:ec:0a:25:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c89c2cc489ebe48f490584ac866fe362c4117e75
Validity
Not Before: Jan 1 11:48:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=96ca11be10583f80458c1dc43cb61be437c0b7e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:67:8e:61:51:6a:60:fc:eb:88:f2:3e:09:52:
b3:03:d8:1d:9e:a6:d6:7c:13:bc:5d:28:3a:1c:47:
a0:c8:2d:33:69:d4:96:1a:09:0d:ce:c1:e0:4f:89:
85:01:b8:fa:aa:d0:dc:66:6c:5b:91:82:fd:43:58:
aa:8b:43:eb:f7:57:2b:f3:77:8c:4b:8c:ce:20:83:
7b:7b:89:e8:35:c9:29:d4:ce:24:1d:88:7d:0a:65:
c9:2c:1e:54:49:25:0f:f1:e3:bc:a7:e6:20:63:d2:
56:d8:21:71:b5:2f:bd:5f:2e:92:d2:03:c7:7c:e0:
7a:66:36:56:1e:38:66:00:4e:20:a6:71:ba:4a:5a:
cc:c4:2a:d2:4c:64:e9:88:34:55:b8:0b:22:19:a7:
bc:ab:fb:83:5c:57:49:8a:97:2a:c3:63:48:9d:d8:
e5:7e:c6:d6:c8:1e:c2:c7:d4:99:85:42:05:6a:5c:
bb:2d:4f:9f:fa:d9:92:a0:8e:9a:09:21:e8:d7:9e:
de:69:db:2b:8a:b5:04:1d:c4:61:f1:d5:68:6e:33:
15:b3:b4:bf:6e:0d:ce:05:0b:77:50:dc:39:95:64:
bf:5d:95:2f:0e:1f:ff:69:ce:62:09:1d:fd:a0:ec:
12:d4:4b:fc:73:65:f7:cf:49:80:b8:ff:d9:29:5f:
6f:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:CA:11:BE:10:58:3F:80:45:8C:1D:C4:3C:B6:1B:E4:37:C0:B7:E9
X509v3 Authority Key Identifier:
keyid:C8:9C:2C:C4:89:EB:E4:8F:49:05:84:AC:86:6F:E3:62:C4:11:7E:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yJwsxInr5I9JBYSshm_jYsQRfnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/lsoRvhBYP4BFjB3EPLYb5DfAt-k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/yJwsxInr5I9JBYSshm_jYsQRfnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.148.40.0/24
46.148.46.0/24
Signature Algorithm: sha256WithRSAEncryption
af:2a:a7:32:97:fe:8f:72:4a:b1:54:93:48:9f:f7:6e:03:83:
20:9e:d3:f5:cc:47:ad:51:e3:b6:21:d8:97:ba:bc:69:d8:43:
7f:f3:c0:8d:4e:ec:0f:5f:20:51:f9:41:a7:48:3b:58:0f:1d:
a3:ba:ea:3c:9d:d6:0c:91:a4:1f:48:e1:92:9e:58:a5:65:f2:
35:df:c1:07:64:af:dc:da:91:20:3f:e9:6c:8f:2e:4e:40:05:
3c:72:a6:92:4b:cf:69:48:2c:6e:4c:1e:e4:b8:be:b4:1a:8e:
f3:75:f6:45:bd:27:80:fc:2c:48:ce:82:0f:bd:72:ee:62:27:
f2:54:0b:0a:7b:4d:d5:eb:ce:90:e8:78:47:e0:cd:e3:41:b1:
07:ec:93:db:6a:cf:aa:63:f2:d8:e2:48:61:81:1c:bd:20:32:
05:0f:cd:b2:65:82:b5:a7:df:77:ae:80:a9:19:b3:98:e8:50:
1b:93:59:a0:a1:7f:b0:3b:3c:f4:1f:7f:89:17:9d:b8:3d:a5:
fa:d9:e6:8c:72:23:51:fc:9c:16:61:31:ce:b2:f0:63:31:6c:
dc:ee:48:98:0a:d4:e3:28:ac:62:20:3b:18:7c:64:39:ff:b9:
74:b5:7d:67:6d:e6:75:b2:70:58:4f:c9:69:a4:2c:3d:cf:7c:
9d:51:65:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:40:44 2025 by rpki-client