Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/FKaeXb4K1EynagGRQjeatWAcqgc.roa
File: FKaeXb4K1EynagGRQjeatWAcqgc.roa (raw, json)
Hash identifier: CZiF18LL6QhQag7zI7FYHTRqJr5fp5LvZzS0BtjMKWg=
Subject key identifier: 14:A6:9E:5D:BE:0A:D4:4C:A7:6A:01:91:42:37:9A:B5:60:1C:AA:07
Certificate issuer: /CN=b72945f57103153a07854e74e227f2aec1c5f430
Certificate serial: 0194222002CA16D7B460C541FE42999B6F36
Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/FKaeXb4K1EynagGRQjeatWAcqgc.roa
Signing time: Wed 01 Jan 2025 13:48:30 +0000
ROA not before: Wed 01 Jan 2025 13:48:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60068
IP address blocks: 46.38.154.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:02:ca:16:d7:b4:60:c5:41:fe:42:99:9b:6f:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430
Validity
Not Before: Jan 1 13:48:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=14a69e5dbe0ad44ca76a019142379ab5601caa07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:aa:62:99:57:94:34:a8:cb:c6:1e:ac:cf:11:
a6:96:b1:19:70:27:31:a6:1e:09:bd:48:d6:2d:b7:
61:e8:38:26:ea:8a:73:57:50:8c:65:3e:df:3c:4a:
45:a6:81:f0:a6:c0:cf:19:20:78:99:1a:63:39:b3:
32:b7:51:ef:74:97:fe:eb:1c:eb:75:e8:c2:05:b2:
a3:04:f5:6a:48:93:43:dd:96:28:bb:e1:3a:ba:b4:
f3:00:dd:dc:4f:c0:51:62:f8:a4:ea:c0:22:04:14:
a5:4a:67:88:0c:f4:92:05:c7:e6:3c:7d:13:68:43:
ff:75:9d:14:1d:8f:51:9b:d4:83:ab:16:92:b9:a7:
37:19:ba:9e:0f:d2:50:ec:ec:05:7e:30:84:95:7f:
4c:07:20:ad:13:89:4c:94:db:af:4e:98:b2:10:41:
3f:dc:9e:a6:56:70:0e:89:3b:a1:83:d7:bf:1b:4b:
00:ee:0a:00:ee:78:93:03:0e:d5:82:1e:75:64:c1:
60:85:be:b5:52:85:7b:5f:1a:0d:4a:23:c4:5d:72:
a1:64:8f:0d:b9:2e:48:f2:c3:9a:9c:e1:75:20:9b:
2d:ca:78:03:7b:e1:d8:ef:5f:b0:4e:94:ed:47:5e:
42:34:cb:2d:c6:4a:ea:a5:2e:4b:9c:e0:49:8f:c4:
24:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:A6:9E:5D:BE:0A:D4:4C:A7:6A:01:91:42:37:9A:B5:60:1C:AA:07
X509v3 Authority Key Identifier:
keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/FKaeXb4K1EynagGRQjeatWAcqgc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.38.154.0/24
Signature Algorithm: sha256WithRSAEncryption
48:1b:dc:d5:fb:67:81:f8:b2:6c:b2:df:59:83:73:5b:da:4b:
45:df:e7:0c:df:a6:b9:6c:d2:ac:a4:a7:12:34:15:bf:0f:70:
35:4c:bc:bf:f6:4f:eb:8c:52:67:b9:40:00:58:6f:eb:76:69:
49:e1:e3:29:c5:1d:ca:6f:c4:e8:7d:e9:e5:f4:a1:d3:9b:11:
69:49:6d:c5:f2:e7:89:35:d7:1a:57:1a:78:79:e1:59:b5:2a:
3b:49:96:49:dd:e8:30:55:05:9c:68:7e:ff:87:fe:99:5a:39:
26:10:dc:df:ee:9b:1d:58:51:2e:42:fc:90:46:c2:ca:2e:47:
ee:b8:aa:54:1f:f2:3a:80:68:b0:03:0d:45:b1:9d:d5:30:a7:
93:f6:41:fa:e1:b3:08:ce:39:c4:f3:1b:fc:48:1b:f3:fb:0a:
45:bc:58:07:aa:94:cd:04:72:1a:5a:45:cb:df:05:e3:5f:0e:
63:44:7c:06:bb:cb:63:1b:ad:15:2a:ab:82:a2:68:dd:b5:c0:
1b:25:eb:5a:cb:84:d3:b8:dc:bc:2b:bf:10:37:d1:db:d7:a8:
67:46:4e:0f:df:a9:f1:f8:9c:b9:e8:57:7e:5e:aa:f5:db:1e:
b8:42:08:e0:9e:ce:18:89:5a:e3:15:2f:77:1b:14:aa:59:60:
af:8d:ee:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:25:08 2025 by rpki-client