Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/4a39e6-4220-4b07-bb69-045f462b5d3c/1/I8pHjYgFFPxW3ZWaQYCwf2lDfTI.roa
File: I8pHjYgFFPxW3ZWaQYCwf2lDfTI.roa (raw, json)
Hash identifier: OC1HzqfHbPzhkCGyCwxB8FrgBwG5CJeiy/I/xdWwOoQ=
Subject key identifier: 23:CA:47:8D:88:05:14:FC:56:DD:95:9A:41:80:B0:7F:69:43:7D:32
Certificate issuer: /CN=40f0c36c93559909bad7d675f7995c6ce6682af3
Certificate serial: 01856F4B750359E4D6F8F884ADC5ED06A3E1
Authority key identifier: 40:F0:C3:6C:93:55:99:09:BA:D7:D6:75:F7:99:5C:6C:E6:68:2A:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QPDDbJNVmQm619Z195lcbOZoKvM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/4a39e6-4220-4b07-bb69-045f462b5d3c/1/I8pHjYgFFPxW3ZWaQYCwf2lDfTI.roa
Signing time: Sun 01 Jan 2023 21:44:54 +0000
ROA not before: Sun 01 Jan 2023 21:44:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203020
IP address blocks: 46.16.32.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:4b:75:03:59:e4:d6:f8:f8:84:ad:c5:ed:06:a3:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40f0c36c93559909bad7d675f7995c6ce6682af3
Validity
Not Before: Jan 1 21:44:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=23ca478d880514fc56dd959a4180b07f69437d32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:16:f6:07:d6:91:86:84:36:84:34:7f:69:5f:
48:fd:0f:b0:dc:6c:27:0b:9c:eb:6d:71:3b:04:a8:
fb:4e:5d:f9:55:67:d4:ca:1f:5b:7c:d3:a0:91:4b:
eb:96:c9:c0:0b:1c:bf:b8:4d:6b:46:af:a6:35:a1:
ee:23:93:25:40:97:ca:12:8e:bf:e2:e1:cf:cd:f9:
5e:b5:4b:2e:42:01:c2:a3:07:55:5d:45:a0:ce:94:
60:c9:cc:1e:9e:a0:98:45:bb:ba:b8:f8:a7:c9:b0:
45:a5:5f:69:69:ab:0f:5f:37:19:44:70:7b:b4:e4:
fb:6c:a3:39:59:2d:7a:14:12:50:b5:7f:cd:99:9a:
db:7d:d9:b3:e0:73:80:47:bd:fc:42:f5:96:48:ad:
f6:98:44:cf:b6:85:bb:c2:66:43:fa:e4:8d:b5:8f:
e5:c2:c9:2f:b4:db:66:f0:8c:08:ba:a9:ae:80:0f:
32:18:b9:aa:d1:bd:04:c7:e2:63:41:1a:93:b7:3a:
1c:ff:aa:c1:2b:b3:09:8b:dd:c2:42:f9:d2:ef:2d:
8e:7a:79:e3:79:60:4c:5c:ff:c1:fc:b1:49:f7:d8:
69:23:28:fa:5f:63:97:4f:0b:28:76:c0:ce:df:f9:
4a:3f:ea:3a:a7:01:d5:9b:08:f2:15:75:83:30:37:
b9:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:CA:47:8D:88:05:14:FC:56:DD:95:9A:41:80:B0:7F:69:43:7D:32
X509v3 Authority Key Identifier:
keyid:40:F0:C3:6C:93:55:99:09:BA:D7:D6:75:F7:99:5C:6C:E6:68:2A:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QPDDbJNVmQm619Z195lcbOZoKvM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/4a39e6-4220-4b07-bb69-045f462b5d3c/1/I8pHjYgFFPxW3ZWaQYCwf2lDfTI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/4a39e6-4220-4b07-bb69-045f462b5d3c/1/QPDDbJNVmQm619Z195lcbOZoKvM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.16.32.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:11:cd:11:bb:b5:99:ba:d5:75:d8:0c:56:b0:ef:8d:d3:7f:
a9:2d:65:18:b0:3f:23:67:c7:9f:83:bf:ac:f5:c9:11:13:8a:
29:94:d8:b9:d7:68:ec:b2:24:31:8a:45:d4:67:91:eb:b6:aa:
f9:52:a2:aa:fd:09:df:a7:04:7d:65:de:4f:b2:a0:d9:6a:7f:
34:39:de:b7:50:c6:07:8f:d8:69:ea:c5:89:72:58:16:de:df:
c6:aa:fe:a5:36:c1:99:d0:c3:53:11:6f:8d:ae:d6:ba:ae:e3:
2a:64:f1:31:dd:55:02:99:53:fd:0d:8b:cc:c3:b3:48:1a:4d:
4e:14:8f:49:a1:30:e0:5c:10:fe:d9:e8:5e:83:85:3f:bd:de:
af:53:e9:75:19:a5:9c:16:e9:8f:80:ec:3c:6d:8c:08:27:88:
cc:e7:dc:1b:87:26:e9:be:7b:ed:69:1f:b7:6b:91:38:61:ec:
1b:00:22:90:57:9e:3a:13:bc:de:81:87:30:5b:e2:2a:38:e1:
d9:1c:57:91:eb:22:4d:73:66:46:d1:c3:21:d6:fd:07:b9:52:
89:85:0c:61:f4:13:4e:27:fa:5e:a4:48:50:3e:fc:d7:94:29:
44:ce:d1:cb:64:87:21:53:95:7f:f1:b3:58:76:1f:46:04:68:
71:d4:83:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:47:01 2025 by rpki-client