Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/D1q4BgTn7bbFv15FNp1tA6TGZ9I.roa
File: D1q4BgTn7bbFv15FNp1tA6TGZ9I.roa (raw, json)
Hash identifier: 5x0T+zBZ3OQ8pd7j147ewWlQvRZ6FuHn88kEWpJyIf4=
Subject key identifier: 0F:5A:B8:06:04:E7:ED:B6:C5:BF:5E:45:36:9D:6D:03:A4:C6:67:D2
Certificate issuer: /CN=885b857706dac54e20ca0d11bd6416cb634203b4
Certificate serial: 01942747D3D757EF1F92CDE905D72173D3CE
Authority key identifier: 88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/D1q4BgTn7bbFv15FNp1tA6TGZ9I.roa
Signing time: Thu 02 Jan 2025 13:50:06 +0000
ROA not before: Thu 02 Jan 2025 13:50:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208936
IP address blocks: 46.8.159.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:d3:d7:57:ef:1f:92:cd:e9:05:d7:21:73:d3:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=885b857706dac54e20ca0d11bd6416cb634203b4
Validity
Not Before: Jan 2 13:50:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0f5ab80604e7edb6c5bf5e45369d6d03a4c667d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:9f:71:d2:3b:bb:bb:c5:f9:55:e3:6f:28:53:
20:6f:d0:34:7f:98:84:8a:63:5e:49:e5:83:c1:86:
37:e0:81:0d:6f:20:77:8a:bf:da:32:8f:49:06:2f:
42:ae:48:58:48:0f:62:10:f1:b5:44:e7:96:20:e5:
64:6d:04:31:fd:46:54:5c:dc:64:3e:7b:9a:cc:69:
d6:01:c9:dd:97:ee:89:e5:6e:ce:f4:d9:a9:36:92:
ea:e1:be:60:c9:57:f5:ae:74:1f:de:48:ef:43:94:
6a:b7:f0:88:9c:ba:50:58:91:52:77:5a:78:16:5e:
97:23:f6:d2:4f:aa:83:e2:d0:69:e7:4f:d9:47:88:
12:e0:1b:17:57:62:82:a2:cc:16:78:a0:92:db:c1:
3b:ec:fd:e0:c1:09:8c:fd:2d:27:b2:bc:31:9c:07:
a7:9e:5e:a9:29:e2:fa:91:d7:7e:da:41:1a:01:b0:
04:2c:44:c2:42:5e:22:2e:e0:5a:97:fe:60:e3:a2:
e7:c6:79:bb:c1:eb:24:d2:b7:e7:c7:f5:34:c4:cb:
ae:24:4e:70:50:35:72:e2:0c:4b:7d:38:8a:5e:91:
57:50:5d:8d:d5:05:22:ed:4a:30:49:7f:c2:1e:ba:
2f:b6:a1:71:23:aa:e3:c2:90:20:11:8b:6f:90:22:
ab:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:5A:B8:06:04:E7:ED:B6:C5:BF:5E:45:36:9D:6D:03:A4:C6:67:D2
X509v3 Authority Key Identifier:
keyid:88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/D1q4BgTn7bbFv15FNp1tA6TGZ9I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.8.159.0/24
Signature Algorithm: sha256WithRSAEncryption
58:0e:29:aa:8e:a5:4e:ec:ec:73:27:1e:a0:15:b3:82:5e:51:
2b:57:42:04:5b:06:ea:7c:69:7f:ae:9b:47:a4:6f:27:13:a0:
45:61:e1:8d:26:87:a5:ce:d1:65:30:18:74:5e:fe:89:46:8a:
03:72:b9:2a:e1:b6:7d:0d:cb:9b:dc:4a:94:2d:21:74:f5:5e:
d8:25:62:43:b9:e2:49:2a:ae:ee:fa:91:5a:0c:ad:48:be:e1:
88:dd:3c:81:84:37:f0:5a:b4:56:25:9e:1f:01:ff:f8:b0:da:
64:27:14:1b:7c:64:52:6a:0a:e7:86:7f:98:ba:93:62:77:4c:
60:4d:4b:5b:1b:c0:7f:63:eb:fe:b8:03:93:49:ab:5c:ea:8e:
eb:3c:65:63:4f:8e:55:4c:1a:e5:23:3b:b6:dc:f1:26:5f:b9:
ce:a5:0f:2a:8d:50:18:70:40:bb:24:18:90:af:f8:67:7f:b1:
e9:99:d0:21:f7:6e:b9:c0:86:32:26:9b:53:31:70:38:60:2f:
01:2f:40:6a:35:13:77:3e:e0:4c:f4:25:34:6b:c7:aa:b0:fb:
12:64:df:e0:38:a6:2d:5f:31:bd:f3:6c:80:b0:21:73:e5:ad:
b3:1e:ad:ea:48:c1:e0:0d:c6:a0:d0:cb:6f:3d:d2:66:f4:f9:
6b:a3:5c:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 10:24:15 2025 by rpki-client