Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/9a3eac-f862-4789-ac21-d9444a3d0ce0/1/VXcC-Aoxwj-rTTGa_uO04BMN16g.roa
File: VXcC-Aoxwj-rTTGa_uO04BMN16g.roa (raw, json)
Hash identifier: VurFkBc53EnvckMEwSnM6ZAN10rC6gV5KJRXaTV9e/k=
Subject key identifier: 55:77:02:F8:0A:31:C2:3F:AB:4D:31:9A:FE:E3:B4:E0:13:0D:D7:A8
Certificate issuer: /CN=fb70de840fd6bf4b0afd1274e44efd1b8665762c
Certificate serial: 019424449F51B63C335216BD176263A39D8D
Authority key identifier: FB:70:DE:84:0F:D6:BF:4B:0A:FD:12:74:E4:4E:FD:1B:86:65:76:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-3DehA_Wv0sK_RJ05E79G4Zldiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/9a3eac-f862-4789-ac21-d9444a3d0ce0/1/VXcC-Aoxwj-rTTGa_uO04BMN16g.roa
Signing time: Wed 01 Jan 2025 23:47:44 +0000
ROA not before: Wed 01 Jan 2025 23:47:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 1299
IP address blocks: 46.254.111.0/24 maxlen: 24
2a11:c900::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:9f:51:b6:3c:33:52:16:bd:17:62:63:a3:9d:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb70de840fd6bf4b0afd1274e44efd1b8665762c
Validity
Not Before: Jan 1 23:47:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=557702f80a31c23fab4d319afee3b4e0130dd7a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:7a:16:5c:2c:a8:13:7b:1d:17:a3:59:21:d1:
90:74:3b:72:36:bc:a6:3c:af:32:1d:e5:7c:55:92:
c2:e3:25:11:48:1f:69:11:6b:f1:ca:e7:73:be:b6:
d0:84:ba:80:2a:4a:1b:c4:05:98:2b:eb:21:de:6e:
66:f2:0b:42:ff:be:a3:fd:bb:26:11:34:3a:46:0b:
31:13:aa:b4:05:e2:f9:4d:f1:ed:f2:3b:71:23:f3:
82:f3:91:b7:6f:67:85:1d:4b:82:31:fd:ea:a0:c0:
ed:6a:91:f9:70:c5:cc:b6:1a:44:d0:ca:5a:69:2d:
31:c1:a8:5f:d7:85:84:73:5a:a3:25:8a:0a:60:44:
78:f2:ea:b3:27:85:3d:e4:82:e8:de:bc:53:4b:98:
fb:fa:b5:b9:a6:25:57:a1:e1:a6:43:44:de:8b:40:
ce:4a:39:81:a4:1d:66:c4:0f:90:ab:4f:7e:4f:f0:
69:c5:5b:88:e0:54:6d:df:9f:39:e2:1f:34:ae:3d:
14:22:f5:4c:9d:f3:b2:30:ab:1e:94:9c:f3:f0:95:
e3:53:12:0b:76:8b:76:91:9d:45:5f:0d:88:60:75:
5a:69:71:df:6a:3b:73:a7:d0:54:f1:a2:94:81:fc:
b6:5d:c1:e9:46:96:bb:26:45:68:9b:d2:39:57:14:
c1:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:77:02:F8:0A:31:C2:3F:AB:4D:31:9A:FE:E3:B4:E0:13:0D:D7:A8
X509v3 Authority Key Identifier:
keyid:FB:70:DE:84:0F:D6:BF:4B:0A:FD:12:74:E4:4E:FD:1B:86:65:76:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-3DehA_Wv0sK_RJ05E79G4Zldiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/9a3eac-f862-4789-ac21-d9444a3d0ce0/1/VXcC-Aoxwj-rTTGa_uO04BMN16g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/9a3eac-f862-4789-ac21-d9444a3d0ce0/1/1-3DehA_Wv0sK_RJ05E79G4Zldiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.254.111.0/24
IPv6:
2a11:c900::/29
Signature Algorithm: sha256WithRSAEncryption
3c:62:39:2c:47:09:46:69:3b:4e:4a:9e:6d:2d:66:22:67:88:
9a:42:29:e0:ce:ad:ad:7b:5a:2f:f6:35:5c:22:bd:45:18:de:
98:0c:d5:fb:97:9b:de:8c:87:6d:78:7c:34:18:3f:c8:27:dc:
b0:8f:75:2b:bf:f7:1f:2e:41:83:f8:25:5d:6b:34:e8:62:59:
39:4b:10:3d:70:08:99:de:7c:1f:f1:2d:16:24:d2:d1:95:df:
8b:00:89:6f:9f:5f:91:ef:48:ee:3d:0d:c3:a1:55:6b:f2:0d:
c0:c7:13:e0:46:b4:a7:31:6b:31:68:97:5b:8a:33:44:1d:45:
db:12:cc:de:cf:97:ab:9a:36:2a:93:4f:67:13:0e:93:2e:0b:
54:06:1c:3f:ec:fe:90:9b:01:21:d2:5b:1b:9d:87:24:79:5f:
2f:a1:a5:8e:81:bf:ef:0d:90:aa:3b:bc:90:40:f0:24:98:e0:
b3:e2:a5:e1:41:9a:90:a7:c4:a4:8f:1b:5f:e4:82:51:74:65:
1a:7c:7e:57:06:0e:63:f6:09:cf:5a:08:e7:ab:39:d8:7c:43:
e3:e7:03:c8:af:48:f5:a1:ab:bd:74:70:ba:ee:ce:63:27:c0:
49:7d:ea:91:81:b9:ad:5d:de:f7:cb:5c:cd:d2:22:a2:11:1c:
3b:bc:4c:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:52:12 2025 by rpki-client