Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/l5UHl_04bz9hmdByW-mS5aOLzVQ.roa
File: l5UHl_04bz9hmdByW-mS5aOLzVQ.roa (raw, json)
Hash identifier: 44oRNABvdxfx6PrHpOdx7KjJ3dNX5DY1G8L30+SPRh4=
Subject key identifier: 97:95:07:97:FD:38:6F:3F:61:99:D0:72:5B:E9:92:E5:A3:8B:CD:54
Certificate issuer: /CN=5336a106cecdeba92e0b80e5e9a5c789ba74c62b
Certificate serial: 019425FDA69D9086FC8FCE9F01E1E90CAEF2
Authority key identifier: 53:36:A1:06:CE:CD:EB:A9:2E:0B:80:E5:E9:A5:C7:89:BA:74:C6:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UzahBs7N66kuC4Dl6aXHibp0xis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/l5UHl_04bz9hmdByW-mS5aOLzVQ.roa
Signing time: Thu 02 Jan 2025 07:49:27 +0000
ROA not before: Thu 02 Jan 2025 07:49:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59746
IP address blocks: 46.16.196.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:a6:9d:90:86:fc:8f:ce:9f:01:e1:e9:0c:ae:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5336a106cecdeba92e0b80e5e9a5c789ba74c62b
Validity
Not Before: Jan 2 07:49:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=97950797fd386f3f6199d0725be992e5a38bcd54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:17:ad:57:15:8a:f9:2f:ad:73:0a:97:d5:db:
3d:98:5a:04:0f:00:07:f2:59:1e:98:9c:cf:36:85:
98:a6:f3:f3:1a:0f:ef:de:b2:19:0c:05:7e:7f:62:
b3:85:25:8a:cb:2b:3c:e0:5b:24:c9:37:03:fc:52:
fa:e1:2a:6a:f9:98:e8:f5:a1:99:57:32:76:39:18:
da:14:96:43:03:51:17:9b:b3:9b:e8:07:bd:20:0a:
e0:55:58:a8:a8:c3:fd:a4:3f:80:94:c9:74:f9:0d:
6b:90:17:c4:3d:f3:be:cb:71:fb:ec:3e:c2:09:28:
f8:ec:f3:21:73:f0:ce:27:72:a7:e4:87:27:38:38:
35:9e:b0:41:9c:e9:8e:6b:ac:3a:06:c2:ad:b7:09:
6e:76:2a:26:b5:b0:bd:c9:c2:e0:d1:fe:60:dc:f6:
1c:d0:56:df:16:12:b5:69:fe:91:e8:40:9b:e9:e8:
2f:7b:7e:89:60:51:66:0a:da:bb:e8:c0:7e:64:26:
74:99:e7:d8:07:bb:b7:0a:5f:86:7b:2f:13:a1:a9:
f4:60:c5:90:3d:36:5b:76:f2:d0:2c:7b:0f:f7:9b:
ac:4b:d7:e5:50:da:c7:f9:1f:f8:ff:75:33:cc:d9:
39:3e:44:36:da:2e:84:f9:5e:ae:4c:c7:c3:7d:6e:
2b:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:95:07:97:FD:38:6F:3F:61:99:D0:72:5B:E9:92:E5:A3:8B:CD:54
X509v3 Authority Key Identifier:
keyid:53:36:A1:06:CE:CD:EB:A9:2E:0B:80:E5:E9:A5:C7:89:BA:74:C6:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UzahBs7N66kuC4Dl6aXHibp0xis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/l5UHl_04bz9hmdByW-mS5aOLzVQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/UzahBs7N66kuC4Dl6aXHibp0xis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.16.196.0/24
Signature Algorithm: sha256WithRSAEncryption
24:95:3e:d6:bb:5d:8c:68:6b:1c:5b:93:22:59:7f:09:80:3b:
17:5e:60:bf:52:47:d9:71:b6:dc:12:15:a9:cd:78:aa:e0:9c:
ba:be:5e:ab:c6:53:2b:f4:b1:b9:7a:92:4d:04:1a:11:bc:b1:
d1:e8:59:16:54:bc:bc:76:2c:fc:04:4e:94:27:5a:94:7f:b0:
b7:19:4b:10:c4:aa:87:59:8a:a2:d7:3c:ca:d9:a3:e4:4b:df:
05:9b:dd:37:e4:ba:67:75:de:e5:f5:6b:46:be:9f:c3:bc:f8:
2d:1e:a1:b6:0a:1b:2a:a4:5a:ed:9a:d6:76:ce:b9:58:70:50:
e2:fc:f9:8d:cd:69:1f:88:75:cc:db:5a:af:95:0f:be:13:3b:
40:fd:2c:0b:fc:45:62:b3:9f:03:f1:d0:b0:54:36:41:ba:d4:
a4:8d:b4:98:7b:c2:2e:17:09:24:a1:e9:bf:66:bb:af:9a:c1:
e1:36:f8:f8:31:72:06:99:09:35:b4:2b:70:17:75:83:17:f3:
c7:08:e9:22:6e:22:25:59:b3:46:a6:fd:19:4a:db:71:aa:07:
3f:1f:d9:0d:60:94:70:e4:0d:65:65:87:6c:79:74:74:94:9b:
7d:0b:0f:b9:68:a0:6a:2e:0e:85:cb:49:a6:72:0b:ba:4e:ac:
19:e2:11:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:07:36 2025 by rpki-client