Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/bef6e8-8873-4529-8e72-238c6d8a4c17/1/03LlpQC3OthhaMKAkoHkTsK5DvM.roa
File: 03LlpQC3OthhaMKAkoHkTsK5DvM.roa (raw, json)
Hash identifier: MXfk52dc+50VpTuEktAwLc5jK+27W4bau786/NbUnKQ=
Subject key identifier: D3:72:E5:A5:00:B7:3A:D8:61:68:C2:80:92:81:E4:4E:C2:B9:0E:F3
Certificate issuer: /CN=a487782e3f70c5cd27b32f5274d0e5bc62e95caf
Certificate serial: 0194266B3B4AD3B39826CE8C1FE2DD0742AD
Authority key identifier: A4:87:78:2E:3F:70:C5:CD:27:B3:2F:52:74:D0:E5:BC:62:E9:5C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pId4Lj9wxc0nsy9SdNDlvGLpXK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/bef6e8-8873-4529-8e72-238c6d8a4c17/1/03LlpQC3OthhaMKAkoHkTsK5DvM.roa
Signing time: Thu 02 Jan 2025 09:49:09 +0000
ROA not before: Thu 02 Jan 2025 09:49:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212567
IP address blocks: 46.226.127.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:3b:4a:d3:b3:98:26:ce:8c:1f:e2:dd:07:42:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a487782e3f70c5cd27b32f5274d0e5bc62e95caf
Validity
Not Before: Jan 2 09:49:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d372e5a500b73ad86168c2809281e44ec2b90ef3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:8f:28:83:e1:40:57:18:43:26:d5:44:91:16:
af:82:3e:5a:bc:12:c6:93:1c:73:49:bd:5e:6f:3b:
07:49:1d:07:d1:9d:74:d1:ae:b0:91:3e:ee:f1:d8:
3e:e0:af:a0:2f:bf:21:f2:88:1f:51:5d:65:a2:66:
87:0a:a0:20:f9:8c:62:49:5b:ac:19:e9:5d:8c:08:
ae:72:1f:27:fe:04:99:81:c4:16:2a:69:de:84:dc:
5b:0a:1c:7a:b3:a7:03:0c:53:41:df:b2:08:b2:60:
0e:8c:cb:9d:84:7c:4c:18:ae:6b:b2:f5:1e:fb:ad:
d7:eb:b7:05:c8:3f:10:17:6f:15:1a:36:68:69:ca:
a3:a8:bd:b1:97:f5:65:10:a0:75:ea:63:7d:5f:58:
95:c2:5a:b2:cf:ec:2d:30:5a:a3:23:31:9e:ce:df:
1a:bb:e6:10:6c:d0:69:b2:48:ae:82:be:b9:d1:f1:
2d:1b:7d:1c:10:c3:04:f6:b2:4c:48:e3:68:43:fe:
08:27:9a:5e:13:31:b4:9e:a9:4b:73:de:a8:03:5b:
b1:fe:e6:7d:4b:a9:84:c9:be:79:4b:c3:10:8c:09:
ed:83:13:08:05:87:e2:72:35:ea:51:27:5c:5e:3a:
1c:de:eb:0a:74:14:e1:c0:a5:2e:98:55:f9:df:af:
14:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:72:E5:A5:00:B7:3A:D8:61:68:C2:80:92:81:E4:4E:C2:B9:0E:F3
X509v3 Authority Key Identifier:
keyid:A4:87:78:2E:3F:70:C5:CD:27:B3:2F:52:74:D0:E5:BC:62:E9:5C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pId4Lj9wxc0nsy9SdNDlvGLpXK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/bef6e8-8873-4529-8e72-238c6d8a4c17/1/03LlpQC3OthhaMKAkoHkTsK5DvM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/bef6e8-8873-4529-8e72-238c6d8a4c17/1/pId4Lj9wxc0nsy9SdNDlvGLpXK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.226.127.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:ad:10:cf:f6:d6:88:1f:ca:6e:25:a4:38:f3:04:da:41:79:
4b:d2:2c:ee:0c:16:3b:d0:ec:3f:4b:1b:56:37:84:22:7c:d6:
4e:ac:c9:a4:94:c7:d1:2e:40:fa:e6:95:93:71:3a:ba:ff:92:
55:97:4a:9a:5a:cb:e5:1c:19:6b:6b:a8:71:33:09:f6:91:77:
e9:ea:37:03:f5:43:35:3f:85:e0:cd:ea:97:a0:47:9e:a3:41:
7b:7f:02:2d:08:eb:c3:3f:4b:9a:41:4e:e4:1b:62:77:e5:1d:
56:76:29:bc:1e:72:bc:59:b9:47:61:06:e7:0f:4a:76:8e:01:
5f:ad:0f:fb:06:ea:bd:d6:f1:de:45:51:a1:fe:51:83:7f:f9:
a8:56:a8:9e:5e:bf:45:af:13:ab:b2:51:97:4d:8f:b3:8e:65:
b1:4c:1d:17:90:35:f3:72:67:03:93:ce:29:c5:3d:d7:14:ae:
d8:98:39:47:6d:e6:0f:8d:d6:44:3a:4d:88:ba:0c:f2:48:43:
05:87:79:97:39:76:46:c2:f3:a2:4e:d3:c2:78:5c:37:95:45:
85:e7:51:a8:3e:68:56:a5:80:a4:4e:21:1e:6b:f5:61:7e:b2:
90:f6:3d:8f:ea:52:49:82:4b:22:99:13:ba:2a:54:c0:77:48:
d0:96:48:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 11:58:21 2025 by rpki-client