Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/15t4jtwjSajKRGWvChjPcvGSPgw.roa
File: 15t4jtwjSajKRGWvChjPcvGSPgw.roa (raw, json)
Hash identifier: PyhQuq12WyB7IsxYVipbG0hKknG/gvudvLFG3LuwsN4=
Subject key identifier: D7:9B:78:8E:DC:23:49:A8:CA:44:65:AF:0A:18:CF:72:F1:92:3E:0C
Certificate issuer: /CN=885b857706dac54e20ca0d11bd6416cb634203b4
Certificate serial: 0194B2FB1424D209CC48FE9EC8514C4301E1
Authority key identifier: 88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/15t4jtwjSajKRGWvChjPcvGSPgw.roa
Signing time: Wed 29 Jan 2025 16:53:06 +0000
ROA not before: Wed 29 Jan 2025 16:53:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 30738
IP address blocks: 46.8.33.0/24 maxlen: 24
188.130.182.0/24 maxlen: 24
195.211.52.0/22 maxlen: 24
2001:1468::/32 maxlen: 33
2001:1468:8000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:b2:fb:14:24:d2:09:cc:48:fe:9e:c8:51:4c:43:01:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=885b857706dac54e20ca0d11bd6416cb634203b4
Validity
Not Before: Jan 29 16:53:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d79b788edc2349a8ca4465af0a18cf72f1923e0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:cf:48:9f:65:a7:ff:60:d4:66:73:2b:d6:7d:
16:ce:01:f2:de:64:15:52:d3:a8:8c:c6:63:ff:9a:
bd:55:88:b8:f3:b5:26:aa:cc:b7:f7:f1:21:0a:dd:
41:0b:47:64:17:f5:93:ae:23:e7:29:64:5b:ac:dc:
f9:9e:d9:9f:58:c1:3a:ff:be:41:a2:dc:43:3e:51:
6b:a3:69:90:1d:08:bf:ee:78:4a:96:24:24:b3:bd:
ca:e0:3e:96:d0:89:d4:db:fc:eb:5c:9a:41:59:4b:
f7:d9:87:26:22:3b:bb:00:bc:d2:f6:92:7d:55:64:
c0:56:25:0f:7d:43:f7:cb:87:b1:99:4e:3a:48:cf:
76:ad:6d:57:d4:a5:55:02:1f:c4:79:96:04:2e:74:
04:0d:b4:05:c6:a2:1c:43:21:3f:a0:75:e5:c4:82:
68:6b:b4:d0:83:6c:87:bb:23:d0:9f:ad:68:09:8b:
a9:87:e3:23:81:8b:cf:04:d9:12:f7:75:f0:8a:3b:
df:d4:90:7c:c0:d9:63:15:34:07:d2:86:9c:bf:27:
4e:53:21:ad:3e:7e:c5:7c:2c:15:45:3a:db:36:e6:
c0:ad:23:29:2f:01:47:22:13:75:95:81:af:ef:ba:
f6:e9:ac:3a:03:c2:a7:92:15:1a:4b:17:05:b4:63:
b1:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:9B:78:8E:DC:23:49:A8:CA:44:65:AF:0A:18:CF:72:F1:92:3E:0C
X509v3 Authority Key Identifier:
keyid:88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/15t4jtwjSajKRGWvChjPcvGSPgw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.8.33.0/24
188.130.182.0/24
195.211.52.0/22
IPv6:
2001:1468::/32
Signature Algorithm: sha256WithRSAEncryption
a0:f0:cb:d7:bd:b0:80:b4:5f:46:2c:5f:36:55:eb:bc:4d:85:
0d:61:1f:83:0d:ba:7f:d0:00:b8:32:99:59:19:07:58:f8:c8:
c7:02:fd:a8:1a:94:de:89:9f:4e:27:e4:25:fe:8f:d4:ca:0a:
6c:a2:8d:e0:d6:de:92:f6:a6:ff:55:e5:75:9b:e5:4f:1f:f0:
94:13:12:72:60:c3:ab:fc:44:c4:25:5e:20:fa:3d:d3:65:f9:
fb:d3:dd:1a:bf:c5:57:e0:54:1e:e6:09:da:00:95:91:cf:cd:
27:71:ca:b2:06:cf:74:89:29:2b:00:5b:c9:4e:a9:70:a1:7a:
4c:4b:78:7f:54:f9:b8:bf:99:2e:ff:4f:ae:9e:73:f6:12:c6:
59:69:bd:9f:2d:58:d6:a3:6b:d2:c5:7b:92:dd:5a:a3:88:5a:
35:51:b5:87:a0:a2:a8:9b:2b:ec:e3:79:23:a1:67:f3:c3:fd:
7d:1a:76:bb:b0:bf:23:ee:42:0d:e7:55:ff:fc:2e:a0:fb:ba:
9e:28:7f:c8:3b:b1:50:22:26:c2:cd:54:c6:41:cd:21:71:ef:
15:fa:c9:05:5e:6a:77:09:7d:54:a0:38:d4:7f:0e:13:d3:d2:
0f:4f:cf:59:fe:34:80:0d:67:af:72:e1:db:f8:f8:da:8b:28:
32:ec:ea:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 10:06:39 2025 by rpki-client