Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/fe3d1a-ec07-4033-b40c-ca24361e7e4d/1/3oHwf4GZ-NRvUJks5LiYQcqk1KI.roa
File: 3oHwf4GZ-NRvUJks5LiYQcqk1KI.roa (raw, json)
Hash identifier: cPgk70nctUqqfKnfXMuIjEQct1+qyEMcQxucog/OXDo=
Subject key identifier: DE:81:F0:7F:81:99:F8:D4:6F:50:99:2C:E4:B8:98:41:CA:A4:D4:A2
Certificate issuer: /CN=311867bba7eeccf2b04c122ab8ec2cf1e72fc5ea
Certificate serial: 01847B36DD986ABE542703E5341E65B76E42
Authority key identifier: 31:18:67:BB:A7:EE:CC:F2:B0:4C:12:2A:B8:EC:2C:F1:E7:2F:C5:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MRhnu6fuzPKwTBIquOws8ecvxeo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/fe3d1a-ec07-4033-b40c-ca24361e7e4d/1/3oHwf4GZ-NRvUJks5LiYQcqk1KI.roa
Signing time: Tue 15 Nov 2022 12:15:03 +0000
ROA not before: Tue 15 Nov 2022 12:15:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39591
IP address blocks: 46.17.12.0/23 maxlen: 24
46.17.8.0/22 maxlen: 24
2a02:2870::/33 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:7b:36:dd:98:6a:be:54:27:03:e5:34:1e:65:b7:6e:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=311867bba7eeccf2b04c122ab8ec2cf1e72fc5ea
Validity
Not Before: Nov 15 12:15:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=de81f07f8199f8d46f50992ce4b89841caa4d4a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:9a:c5:d5:8d:70:b6:19:fb:7c:fa:f2:f1:4d:
0b:00:d8:d3:3d:3c:a2:77:d5:96:8a:2f:88:96:88:
19:35:e0:bb:c0:e7:d5:b0:9b:23:e9:ff:90:b7:21:
ba:25:3c:59:96:ee:ef:f1:b8:dd:dc:b9:01:81:47:
66:e2:c8:1f:3f:c3:91:94:cc:43:67:d8:dc:68:9c:
8e:49:df:fc:9f:dc:79:2a:ff:b4:1a:c3:13:45:f2:
c8:d8:b7:b2:65:bd:01:12:9f:e0:e9:9d:dd:af:e9:
7b:47:26:5a:ea:c8:a5:31:ae:69:94:61:74:26:f6:
71:19:57:88:cb:dc:9d:fb:98:52:4e:f0:3a:55:35:
a7:5f:e8:db:7f:10:e4:be:da:c2:26:a2:a4:ab:14:
ab:f1:50:05:09:5b:48:fa:3a:0b:e7:74:42:13:7f:
47:b6:10:9f:06:27:bf:e5:a8:6e:05:07:f2:9e:fa:
43:38:ae:c3:16:f1:ba:6f:70:9e:d6:cc:2c:44:b9:
2f:1f:c4:7d:cf:09:bb:ee:73:d2:12:a0:5a:89:83:
5d:1a:cd:a4:12:d3:da:d8:18:07:40:42:2d:bf:aa:
53:29:58:6e:e9:79:03:7f:e2:23:3b:b0:4f:72:a0:
94:a0:0d:94:ce:d9:60:e8:fa:cd:b4:d8:3e:1a:eb:
12:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:81:F0:7F:81:99:F8:D4:6F:50:99:2C:E4:B8:98:41:CA:A4:D4:A2
X509v3 Authority Key Identifier:
keyid:31:18:67:BB:A7:EE:CC:F2:B0:4C:12:2A:B8:EC:2C:F1:E7:2F:C5:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MRhnu6fuzPKwTBIquOws8ecvxeo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/fe3d1a-ec07-4033-b40c-ca24361e7e4d/1/3oHwf4GZ-NRvUJks5LiYQcqk1KI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/fe3d1a-ec07-4033-b40c-ca24361e7e4d/1/MRhnu6fuzPKwTBIquOws8ecvxeo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.17.8.0-46.17.13.255
IPv6:
2a02:2870::/33
Signature Algorithm: sha256WithRSAEncryption
db:99:63:c1:88:c6:8d:61:1c:23:f7:73:7f:5f:3d:93:90:83:
7f:59:bc:7b:10:c1:a0:93:80:03:b0:67:38:8b:5f:92:f9:6e:
0c:1d:63:9e:ef:d7:be:8e:5e:9b:1e:6f:c1:0a:c1:cd:b7:24:
1f:cd:45:98:cb:eb:ce:1f:06:8c:dc:55:be:96:1f:d5:91:5d:
7c:49:de:91:db:8e:a7:f2:39:67:ab:b8:78:2b:91:24:9d:cc:
e5:24:69:cc:8c:3d:a8:2d:cd:44:85:82:9a:08:58:e5:6f:65:
5d:f1:c0:39:54:6f:e6:07:73:d8:af:2c:d4:93:23:02:25:40:
cb:01:92:72:54:c7:2d:80:2f:68:a0:ef:21:b1:85:28:ad:da:
5d:05:e8:4c:af:a4:5f:a6:af:23:44:ea:8d:78:d6:ef:d1:66:
fc:ec:28:0b:76:a6:06:e8:ed:ca:fa:bc:fe:79:f6:bb:fe:0e:
6e:1c:83:24:90:78:40:10:cc:86:cc:ea:77:00:85:ea:b3:a9:
ed:56:f9:11:1b:36:b6:11:c9:1f:29:02:d6:5d:ca:8a:91:c0:
15:02:63:54:45:95:4b:2e:6d:c4:17:96:80:50:66:88:52:0d:
ed:38:37:12:c6:9a:9f:a0:80:f2:84:99:1f:f5:26:78:e2:fa:
6b:0d:19:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:42:52 2025 by rpki-client