Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/c031e5-fc67-41f5-8ebe-3197110097c9/1/p5Pxp-2R2mpxd_TdGf_xD9MyhUg.roa
File: p5Pxp-2R2mpxd_TdGf_xD9MyhUg.roa (raw, json)
Hash identifier: 8XfSlLN4HMzOCIW1k555GHmyKjvtxd9c3WvZ5/ZNc5E=
Subject key identifier: A7:93:F1:A7:ED:91:DA:6A:71:77:F4:DD:19:FF:F1:0F:D3:32:85:48
Certificate issuer: /CN=69a4d6916b93159aa80984a9b3774683bb550ebd
Certificate serial: 019420685A94D4FC4B53A0DA9CC49DB9A6C7
Authority key identifier: 69:A4:D6:91:6B:93:15:9A:A8:09:84:A9:B3:77:46:83:BB:55:0E:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aaTWkWuTFZqoCYSps3dGg7tVDr0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/c031e5-fc67-41f5-8ebe-3197110097c9/1/p5Pxp-2R2mpxd_TdGf_xD9MyhUg.roa
Signing time: Wed 01 Jan 2025 05:48:17 +0000
ROA not before: Wed 01 Jan 2025 05:48:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216235
IP address blocks: 46.183.166.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:5a:94:d4:fc:4b:53:a0:da:9c:c4:9d:b9:a6:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69a4d6916b93159aa80984a9b3774683bb550ebd
Validity
Not Before: Jan 1 05:48:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a793f1a7ed91da6a7177f4dd19fff10fd3328548
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:8d:f4:66:37:5a:6e:73:92:db:77:9a:10:d4:
51:4e:4c:78:aa:a3:4b:fe:b0:da:77:05:55:dc:fb:
0c:9c:ce:6e:ba:38:98:44:55:9b:ad:b0:5e:6b:9a:
d4:fa:6b:38:b3:da:11:24:ad:64:05:06:25:b5:de:
58:d6:4d:8b:30:02:ed:fb:d2:79:e5:5b:02:20:71:
43:23:11:76:fe:1e:78:11:92:9d:9e:38:45:ee:4a:
b5:56:41:20:3d:5a:0e:27:80:11:e7:2a:34:d2:7a:
a9:3e:e4:f2:f8:84:15:50:2a:53:10:f1:62:9b:36:
50:42:43:8f:84:94:59:29:80:3a:f0:57:28:4d:d3:
02:0e:92:9f:3a:45:1f:e9:0d:f9:ae:18:ca:00:64:
e1:5a:4c:54:61:03:d9:df:1f:e9:c8:d4:fc:c9:b6:
e4:60:7c:9c:0e:61:ec:cd:5f:bf:33:46:b5:fc:cc:
f0:e7:73:80:1d:dc:59:dd:3d:eb:41:f5:74:55:a0:
17:28:cb:52:cf:3e:52:85:b6:84:33:ce:5f:e1:62:
29:35:9a:52:a5:ba:46:ed:87:dc:81:fe:44:8c:27:
44:06:78:50:d6:89:3a:de:56:d6:54:14:51:99:27:
ee:fb:55:c7:1f:5a:64:c8:1a:be:ae:c4:d3:98:02:
f7:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:93:F1:A7:ED:91:DA:6A:71:77:F4:DD:19:FF:F1:0F:D3:32:85:48
X509v3 Authority Key Identifier:
keyid:69:A4:D6:91:6B:93:15:9A:A8:09:84:A9:B3:77:46:83:BB:55:0E:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aaTWkWuTFZqoCYSps3dGg7tVDr0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/c031e5-fc67-41f5-8ebe-3197110097c9/1/p5Pxp-2R2mpxd_TdGf_xD9MyhUg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/c031e5-fc67-41f5-8ebe-3197110097c9/1/aaTWkWuTFZqoCYSps3dGg7tVDr0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.183.166.0/23
Signature Algorithm: sha256WithRSAEncryption
c6:2f:ae:12:c5:f7:e3:33:66:ab:21:f0:a3:d1:4a:b0:68:95:
4c:72:01:d4:0b:64:2f:5b:af:c6:66:6a:2f:da:fc:be:3c:40:
8e:cd:35:11:d7:45:93:f0:98:cf:88:54:c3:59:98:ca:7b:1f:
9d:ab:6b:8c:03:46:dc:8c:30:db:f3:35:31:8d:0b:e1:ad:7e:
05:e0:cd:b5:1e:88:fe:21:e1:5d:79:34:fc:54:17:65:50:20:
60:a8:76:b7:e9:13:71:e6:ab:4b:d7:5f:f3:aa:13:d7:2e:75:
0b:4f:fd:57:7f:fa:e6:99:d5:aa:ea:fb:5f:7d:05:b2:4f:c8:
d1:e8:08:8a:73:c3:93:53:04:cc:7a:aa:7c:7f:de:d8:cf:4f:
99:e8:88:15:9d:94:0f:b5:76:a7:3d:af:b9:b7:cb:5e:2b:ec:
26:1b:7a:c4:e5:fb:b5:d5:90:9e:fc:55:05:5b:00:3c:3f:3c:
53:43:02:b1:9b:34:f2:5f:af:87:c8:e6:22:63:78:8c:9b:30:
a1:e0:58:f4:33:03:72:c5:ae:dc:d9:e6:3d:9f:1c:d2:c6:f2:
be:4a:31:8f:c6:f5:b7:cd:f7:ab:c4:73:dd:13:8a:a6:53:b8:
a6:c9:26:d7:49:e4:a1:9a:51:77:25:69:1a:56:d5:aa:5c:bf:
5e:0d:e2:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:58:05 2025 by rpki-client