Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Aktpx74XmatUTO0PsnrIQ8oLXas.roa
File: Aktpx74XmatUTO0PsnrIQ8oLXas.roa (raw, json)
Hash identifier: yiP/SdOJNGEPMmg3Jf+uPMZaRzGu2ta2551I6jbIIyI=
Subject key identifier: 02:4B:69:C7:BE:17:99:AB:54:4C:ED:0F:B2:7A:C8:43:CA:0B:5D:AB
Certificate issuer: /CN=67499595a65aab0b53768def08091e31061e9e65
Certificate serial: 0195D847F7086BCCE7AE1B00E44B4C616ECE
Authority key identifier: 67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Aktpx74XmatUTO0PsnrIQ8oLXas.roa
Signing time: Thu 27 Mar 2025 15:45:49 +0000
ROA not before: Thu 27 Mar 2025 15:45:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42689
IP address blocks: 46.20.101.0/24 maxlen: 24
46.20.108.0/24 maxlen: 24
46.20.110.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:d8:47:f7:08:6b:cc:e7:ae:1b:00:e4:4b:4c:61:6e:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67499595a65aab0b53768def08091e31061e9e65
Validity
Not Before: Mar 27 15:45:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=024b69c7be1799ab544ced0fb27ac843ca0b5dab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:34:93:a2:01:23:71:2d:d7:a7:8e:ee:a7:b7:
72:2a:d9:a9:76:46:95:8d:f3:c9:de:40:a8:76:8a:
cd:64:d5:c6:65:b9:4d:e0:d8:e4:f7:79:3b:54:e9:
91:3a:52:1f:85:3f:8e:f8:73:69:74:52:da:1e:2b:
f4:bf:fe:57:35:2c:dd:28:1c:29:11:dc:5e:7c:9a:
d9:56:5d:62:b2:e3:12:3c:31:79:30:e5:eb:3c:a4:
3d:ae:ab:1a:9e:fc:05:e1:9d:56:fd:d5:9e:9d:0e:
03:d4:80:90:41:a9:f7:cf:6a:41:2c:27:8d:04:43:
e7:76:33:6e:e0:57:43:95:99:cd:5c:60:38:6a:a1:
ad:71:70:a1:36:03:37:e2:e3:57:21:be:04:6b:d0:
3c:7d:42:63:7a:d4:e2:38:8b:87:b3:11:cb:83:81:
99:4f:ff:8f:75:9f:69:ef:59:56:97:13:04:3e:d3:
71:61:af:e2:3c:60:a4:c1:51:8c:a0:85:eb:5b:ee:
66:67:2f:8a:81:5d:7e:49:aa:bf:ca:af:65:d1:12:
a8:cb:f1:55:8c:52:59:1f:f4:06:39:d6:1a:f4:93:
04:3e:7d:56:57:df:16:50:e7:f7:fa:dc:24:a6:24:
84:51:1b:9b:d3:d4:2f:b9:c6:57:9f:82:22:1a:57:
18:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:4B:69:C7:BE:17:99:AB:54:4C:ED:0F:B2:7A:C8:43:CA:0B:5D:AB
X509v3 Authority Key Identifier:
keyid:67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Aktpx74XmatUTO0PsnrIQ8oLXas.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.20.101.0/24
46.20.108.0/24
46.20.110.0/24
Signature Algorithm: sha256WithRSAEncryption
42:79:09:1d:5b:7b:04:e9:17:c6:d1:29:36:d6:9f:c6:14:7c:
77:c5:21:b2:74:36:fe:bc:7a:3f:d1:0c:32:15:1e:15:3d:ac:
03:72:e6:7f:4f:d4:a6:0f:dd:2c:dd:ce:d9:31:26:5b:38:fd:
75:e7:58:5d:80:79:86:cb:77:df:1a:11:f8:56:35:92:d9:82:
e7:76:f4:77:da:c6:f4:d2:4a:2f:c8:f9:92:5a:52:65:a9:72:
1e:83:60:6d:ae:29:b4:be:81:b3:27:a6:b9:b0:e8:98:8e:7c:
e4:24:c6:40:f5:0c:36:32:93:3e:54:9e:89:ab:56:7e:69:1d:
2e:82:b4:75:94:2f:86:ac:4f:14:35:2e:e9:b8:6d:d8:64:9f:
e7:ad:51:89:79:73:5a:9b:35:c0:09:c8:41:bc:bb:18:68:cf:
59:3d:16:64:d2:3d:d8:d2:fa:95:65:9c:58:71:9a:ac:8f:7f:
a1:73:a8:22:17:2d:3c:86:9e:d5:f4:ba:56:83:ca:c4:d9:6c:
e6:2c:ee:21:0a:bc:40:49:15:f5:ee:47:eb:ef:b7:1d:7d:d5:
b8:c6:ef:01:2d:61:d6:f5:c0:87:c4:cc:9f:0c:6b:4e:cc:e1:
4d:3b:89:f3:99:77:55:ef:33:e5:d0:22:7e:61:8b:d2:ca:e1:
99:5d:aa:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:10:32 2025 by rpki-client