Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/DHmEi4YQiRBETpzSBvEeBakhLko.roa
File: DHmEi4YQiRBETpzSBvEeBakhLko.roa (raw, json)
Hash identifier: j1aPlu5sKrus49MGN9eDsSKbvbp9RSPAs4EoBXRS7Es=
Subject key identifier: 0C:79:84:8B:86:10:89:10:44:4E:9C:D2:06:F1:1E:05:A9:21:2E:4A
Certificate issuer: /CN=67499595a65aab0b53768def08091e31061e9e65
Certificate serial: 019427B54937A0D7F490E63472BB2F16EEBA
Authority key identifier: 67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/DHmEi4YQiRBETpzSBvEeBakhLko.roa
Signing time: Thu 02 Jan 2025 15:49:39 +0000
ROA not before: Thu 02 Jan 2025 15:49:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 54339
IP address blocks: 46.20.105.0/24 maxlen: 24
46.20.111.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:49:37:a0:d7:f4:90:e6:34:72:bb:2f:16:ee:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67499595a65aab0b53768def08091e31061e9e65
Validity
Not Before: Jan 2 15:49:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0c79848b86108910444e9cd206f11e05a9212e4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f2:c2:f1:38:27:c9:50:ea:11:02:83:6a:f9:
17:af:4b:66:38:8c:3b:f9:87:5d:4a:bc:68:a9:22:
ab:ee:fa:f3:ea:06:2b:0d:82:c7:97:56:84:87:8b:
2d:3a:7c:a2:a5:2e:38:10:c9:f0:10:3a:0b:c6:cc:
62:30:29:df:eb:27:59:53:36:f0:3a:a3:1a:a8:7c:
5c:6c:a0:61:b1:35:15:88:e5:f5:06:b7:f3:cd:6a:
1e:09:77:d6:d0:5f:0b:ca:49:a3:39:65:5e:4f:3b:
dc:9c:36:f2:61:2d:63:56:5f:f7:80:ef:29:25:73:
8e:57:f4:a6:96:0c:45:f2:c1:ea:23:8f:1c:33:12:
34:44:21:5e:4b:eb:8f:e4:fa:2a:d5:93:e9:51:7b:
e2:43:3a:fe:f3:e4:7d:52:74:2c:b3:ee:86:eb:40:
43:ff:ae:09:4d:38:a8:71:1a:8c:b1:c0:f6:83:61:
62:e1:cf:59:80:d5:8a:2f:3d:63:c1:af:bb:ea:fe:
c5:27:31:44:22:2b:3c:a5:d2:40:30:69:37:cb:19:
3e:2b:08:50:71:b8:78:8f:da:05:2c:86:dd:e6:da:
71:d5:0d:48:0d:1e:9c:f4:57:85:86:d1:63:a6:99:
99:83:53:85:fd:69:40:90:2b:03:f9:7a:b1:cc:92:
78:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:79:84:8B:86:10:89:10:44:4E:9C:D2:06:F1:1E:05:A9:21:2E:4A
X509v3 Authority Key Identifier:
keyid:67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/DHmEi4YQiRBETpzSBvEeBakhLko.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.20.105.0/24
46.20.111.0/24
Signature Algorithm: sha256WithRSAEncryption
68:87:02:28:b7:fd:e9:db:ef:09:fc:14:17:e4:f4:e0:b2:6c:
f1:fc:41:17:8e:41:33:93:57:d9:bb:7a:03:3e:6e:8c:9f:a1:
11:ee:3b:40:20:a9:51:dc:29:65:36:b4:6b:8a:a9:2a:5f:69:
d8:6d:3f:8c:80:b6:1f:24:59:c9:80:43:e9:15:32:47:7b:a3:
bf:c4:9c:ba:0b:05:ce:9a:fe:21:f6:aa:40:39:ba:67:2a:9b:
f3:7f:1c:c6:07:8c:cd:eb:35:72:d2:9c:57:f8:f3:d3:2e:09:
73:8b:9a:54:1e:17:ce:6d:75:3f:4c:5e:b6:89:a7:02:db:86:
1c:40:63:6d:25:76:6c:1d:f0:35:aa:92:88:44:2e:be:47:4a:
f2:9e:6a:47:7a:4d:30:10:ca:83:39:20:72:b2:f9:35:a3:de:
fc:47:eb:83:74:cf:42:62:0c:1a:0c:38:55:54:95:d3:64:0d:
48:bf:31:19:87:99:9f:12:58:5d:93:41:97:88:fa:91:9f:7a:
a7:85:00:b3:7e:f7:f7:72:0d:9a:b7:15:12:8e:9d:47:61:01:
9d:d7:48:99:fa:6a:18:8f:b0:f6:25:28:d4:17:8f:8a:40:36:
6e:e5:6a:13:44:5c:73:b5:15:99:d5:00:e1:62:b2:59:08:3f:
ad:f4:fb:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:00:00 2025 by rpki-client