Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/8nzdRByXa6_8dlrWgKf9ECgVADs.roa
File: 8nzdRByXa6_8dlrWgKf9ECgVADs.roa (raw, json)
Hash identifier: VxQagbxVGwG1Dz0dUi7W2+z8A42U9csxDOJUyvPq1/Q=
Subject key identifier: F2:7C:DD:44:1C:97:6B:AF:FC:76:5A:D6:80:A7:FD:10:28:15:00:3B
Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial: 0194651B8D245F5289F35FE756B5CD8280F0
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/8nzdRByXa6_8dlrWgKf9ECgVADs.roa
Signing time: Tue 14 Jan 2025 13:58:11 +0000
ROA not before: Tue 14 Jan 2025 13:58:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215224
IP address blocks: 46.29.25.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:65:1b:8d:24:5f:52:89:f3:5f:e7:56:b5:cd:82:80:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Validity
Not Before: Jan 14 13:58:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f27cdd441c976baffc765ad680a7fd102815003b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d1:e9:f9:f7:53:14:10:19:11:cb:5f:01:17:
2b:3b:15:ea:03:92:fd:07:8d:66:35:8c:56:39:60:
3a:2d:c6:07:6a:60:c3:f8:52:6a:bf:60:11:35:45:
b7:c7:c7:58:86:35:df:7b:9f:7b:65:f0:55:ba:d7:
c3:aa:2c:c5:44:b3:90:1b:f1:81:d1:a4:3d:c1:5f:
68:cc:94:f4:ce:73:d5:95:d9:60:ce:93:7c:ac:db:
a1:20:00:c1:91:52:24:15:72:17:41:af:98:8f:43:
56:1d:d2:08:05:3a:35:95:e7:34:a4:13:7f:cf:88:
13:93:74:eb:b8:07:cb:ed:ec:f6:f6:88:b4:1b:57:
69:7d:bd:a1:f4:c5:29:08:25:a8:c4:be:9c:e6:48:
f9:13:5e:2a:37:e3:8e:8b:88:17:96:e4:6f:ea:fc:
72:7a:27:76:29:fb:fb:52:8c:58:8c:45:ec:fb:4c:
9e:97:85:89:30:ff:3e:2e:30:cf:79:2b:e7:58:69:
22:92:34:94:4d:a2:83:1d:5c:01:42:db:d7:96:c9:
43:0c:94:3b:66:a6:87:7d:d3:9c:47:02:a3:8e:06:
79:31:1d:d6:59:19:73:70:6c:03:f5:d0:19:f0:d0:
f1:25:f0:05:ca:a6:c1:ff:c3:bc:49:e5:d1:93:5f:
40:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:7C:DD:44:1C:97:6B:AF:FC:76:5A:D6:80:A7:FD:10:28:15:00:3B
X509v3 Authority Key Identifier:
keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/8nzdRByXa6_8dlrWgKf9ECgVADs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.29.25.0/24
Signature Algorithm: sha256WithRSAEncryption
39:ef:ff:63:85:5e:a5:d8:a2:24:d5:cc:6d:4c:d5:2c:a9:f2:
cd:b7:f2:8f:61:ce:49:a9:df:15:45:f0:a3:86:c6:b5:05:c6:
44:fd:2f:07:45:a6:0f:e5:82:b5:1f:86:64:63:54:0a:e5:27:
05:98:4f:93:2c:9b:17:60:16:71:f5:88:27:a5:fd:56:84:a2:
9c:a9:5e:b3:2f:01:49:75:62:97:91:fc:1d:4e:74:03:32:66:
80:7a:18:69:7f:d6:47:9f:c8:1f:2c:6f:4f:5e:10:5c:18:b6:
38:13:f5:29:9f:37:85:03:97:6d:ec:9a:9f:2d:7e:e5:8d:93:
e9:c1:a9:c0:07:06:74:70:e5:18:af:5f:7b:d1:ad:81:45:6c:
48:54:6a:59:b3:ff:23:02:10:71:e9:e4:93:be:4a:7f:b4:26:
d7:2f:4d:dc:db:02:6e:93:62:10:e3:47:d1:17:c4:be:3c:4c:
dd:8a:a9:c8:da:bf:53:ae:4e:d3:e0:9f:26:e8:f1:a9:f3:d6:
7d:00:7a:42:a2:11:74:4c:6d:55:72:5b:03:77:58:d8:ee:51:
ed:c8:6e:8c:0b:2c:d8:5c:af:86:2b:07:71:7f:18:1f:a8:cc:
56:f6:50:78:6d:83:29:a6:39:cb:d0:03:22:9b:8d:3c:c9:de:
13:1e:f4:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:32:43 2025 by rpki-client