Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/U-0XoRYDV1K8NeLT79sQu_iy4t8.roa
File: U-0XoRYDV1K8NeLT79sQu_iy4t8.roa (raw, json)
Hash identifier: QAJ2fJtDmsN9XNVxW3a/dJEvqFcETnDiO1SCagG2pSk=
Subject key identifier: 53:ED:17:A1:16:03:57:52:BC:35:E2:D3:EF:DB:10:BB:F8:B2:E2:DF
Certificate issuer: /CN=67499595a65aab0b53768def08091e31061e9e65
Certificate serial: 019427B546E3EDEE5472155642997C33BD1A
Authority key identifier: 67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/U-0XoRYDV1K8NeLT79sQu_iy4t8.roa
Signing time: Thu 02 Jan 2025 15:49:39 +0000
ROA not before: Thu 02 Jan 2025 15:49:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5650
IP address blocks: 46.20.96.0/24 maxlen: 24
46.20.98.0/24 maxlen: 24
46.20.102.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:46:e3:ed:ee:54:72:15:56:42:99:7c:33:bd:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67499595a65aab0b53768def08091e31061e9e65
Validity
Not Before: Jan 2 15:49:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=53ed17a116035752bc35e2d3efdb10bbf8b2e2df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:39:94:54:9d:32:4d:13:38:bc:d3:f9:d2:66:
c5:d3:53:cf:41:c6:08:98:ac:99:ef:6b:b4:97:13:
df:cf:8e:7b:67:97:87:bd:37:d0:47:c7:a8:e0:fa:
d3:b8:7a:65:97:13:2f:75:2d:64:49:7e:fb:a8:d1:
05:8e:53:7d:6d:f6:0b:87:d1:24:7c:87:dc:7e:08:
2e:c5:16:e9:36:04:de:9f:be:63:59:09:06:f9:52:
43:9a:29:26:e3:44:6d:44:0f:a6:b4:4e:83:b8:4f:
17:5a:94:3c:63:54:d5:36:71:9c:a2:f5:35:b4:96:
2d:7c:ce:64:81:6b:ef:47:e6:a3:dd:28:ca:e5:4e:
9f:5d:8c:33:4b:88:01:7e:c6:20:40:3b:ec:af:ee:
7b:42:4c:dd:cd:46:f2:73:62:26:75:58:ae:34:a0:
90:c1:5a:c7:99:14:00:65:e1:92:33:25:64:96:08:
58:bb:6f:27:a9:f1:ae:44:3e:a8:95:4a:10:8c:d4:
70:69:29:86:86:79:a2:86:2e:32:01:09:03:19:a7:
e1:ae:73:18:fd:c5:9b:71:0f:10:24:50:e7:7e:07:
ed:1e:aa:a9:bb:c3:11:b4:92:be:33:f9:d2:31:9c:
e1:16:91:9d:18:70:a6:2f:34:e1:fb:de:91:28:73:
24:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:ED:17:A1:16:03:57:52:BC:35:E2:D3:EF:DB:10:BB:F8:B2:E2:DF
X509v3 Authority Key Identifier:
keyid:67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/U-0XoRYDV1K8NeLT79sQu_iy4t8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.20.96.0/24
46.20.98.0/24
46.20.102.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:79:9a:55:d8:e4:18:0b:fd:46:1c:6c:c1:7b:f1:a5:a0:87:
c3:25:1d:dd:4f:d2:17:24:c1:0b:27:99:b2:a3:32:d5:0c:df:
5c:48:a6:f7:a4:b4:be:4a:1c:fb:4a:4d:2c:07:34:6d:97:c2:
cb:a4:48:68:b8:b5:fd:a2:68:df:09:cf:03:33:0d:76:ca:8d:
4d:72:2d:db:f5:78:be:c3:ec:e8:b2:bb:f9:bc:4a:45:22:66:
b9:df:41:53:16:8f:49:5b:e0:ec:e5:29:e2:f3:71:2d:08:9c:
4b:f3:a1:6a:ba:87:79:c6:76:9f:bb:30:ed:be:a9:c4:b5:50:
26:7a:c0:6c:b3:25:6e:5b:18:ff:1e:3d:6b:b3:c1:9e:d0:2a:
36:af:3a:af:c8:60:23:d8:1b:57:7d:88:00:81:f6:9d:45:05:
75:4f:20:a9:34:09:a5:05:53:cd:83:6a:9e:4e:a2:5d:da:40:
bf:78:54:38:74:f8:54:0f:d9:bc:7f:5d:ec:9c:07:6e:18:d2:
03:3a:0d:d8:4f:1e:ca:ae:b6:8a:85:0f:a1:2b:b1:36:b6:a3:
db:10:ed:49:00:15:a1:d3:b1:44:17:91:ac:3e:9a:38:29:b2:
95:c5:04:77:14:d9:2f:13:a9:3e:c3:08:8a:d3:af:7b:01:ec:
8f:72:9b:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:57:57 2025 by rpki-client