Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/MYbry4xr0TmHOKR_jTpy5xplNcg.roa
File: MYbry4xr0TmHOKR_jTpy5xplNcg.roa (raw, json)
Hash identifier: WEpATX16+mehjsMmve3zSZW7Sjiv+b9WHtHoukw8n2U=
Subject key identifier: 31:86:EB:CB:8C:6B:D1:39:87:38:A4:7F:8D:3A:72:E7:1A:65:35:C8
Certificate issuer: /CN=885b857706dac54e20ca0d11bd6416cb634203b4
Certificate serial: 0194DFA9AE47C15897BE0619F6AD06E2D6DA
Authority key identifier: 88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/MYbry4xr0TmHOKR_jTpy5xplNcg.roa
Signing time: Fri 07 Feb 2025 09:07:06 +0000
ROA not before: Fri 07 Feb 2025 09:07:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39442
IP address blocks: 46.8.33.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:df:a9:ae:47:c1:58:97:be:06:19:f6:ad:06:e2:d6:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=885b857706dac54e20ca0d11bd6416cb634203b4
Validity
Not Before: Feb 7 09:07:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3186ebcb8c6bd1398738a47f8d3a72e71a6535c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:8e:c9:34:18:08:1f:47:c2:7f:f6:28:ff:99:
37:1f:5e:39:46:65:08:23:5e:45:b0:d3:cc:5b:f4:
27:d3:bf:c6:f4:3f:f6:60:af:db:f8:a0:35:15:20:
ae:3d:55:fb:87:68:78:ae:71:3a:24:5b:cf:ff:83:
ae:de:d0:7d:2d:0d:6c:e9:29:d2:49:a7:63:7c:da:
e4:94:8e:66:bf:8a:db:b1:e5:20:a2:a1:7b:5b:04:
85:83:f5:91:eb:f6:3d:7b:27:75:bb:4e:0a:55:14:
cd:67:3a:a3:ca:dd:6e:03:bc:43:b6:1d:06:a2:2d:
30:27:20:e8:ec:af:bf:e7:ea:89:0a:10:76:3c:3a:
e2:63:6d:ab:41:b8:4b:e7:e0:57:e0:52:7b:c9:43:
d2:98:74:01:e1:2c:6d:df:d3:61:69:80:12:f6:8a:
5d:e2:13:f2:0a:9a:e4:98:48:ec:c4:f1:b2:bf:99:
7c:73:ee:1a:a2:98:40:90:96:37:9e:c6:5a:a7:3b:
5e:5b:3f:8d:8f:b2:80:4b:bd:00:7d:aa:5a:f7:e9:
9f:1b:0d:0a:1c:e3:fb:82:e2:18:3e:f6:8a:ed:14:
c8:ca:db:08:93:25:f3:18:ac:09:eb:d4:fe:86:87:
b5:a1:b4:37:0b:0c:cf:5c:d1:58:e5:34:0a:f2:0a:
5b:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:86:EB:CB:8C:6B:D1:39:87:38:A4:7F:8D:3A:72:E7:1A:65:35:C8
X509v3 Authority Key Identifier:
keyid:88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/MYbry4xr0TmHOKR_jTpy5xplNcg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.8.33.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:ad:a5:36:41:9d:42:f7:74:2a:0b:3e:f7:68:07:2f:eb:e0:
55:f6:eb:2a:46:fc:53:09:af:13:b4:09:ea:af:86:0d:27:b1:
fa:c9:07:6b:83:f5:bb:d8:79:45:c0:0c:fb:74:b7:4b:3b:8d:
e8:82:3c:37:86:eb:77:21:54:43:e9:29:c6:f1:d0:cb:50:6b:
8e:73:d5:3a:71:04:df:cd:06:df:6f:4f:04:8c:2a:39:dc:49:
9e:49:5b:35:33:25:fa:33:b6:36:cf:91:1c:a5:f7:5d:34:ad:
a3:27:c7:0d:cd:09:ce:83:99:09:3c:13:a9:e8:33:a2:63:f6:
66:e5:85:31:62:b0:55:73:eb:09:bc:27:a1:ff:8b:db:53:e6:
01:22:d1:79:ee:ca:1a:5b:50:26:b8:92:53:bd:b6:2c:6d:e8:
f9:c4:48:3f:a9:27:08:71:21:fd:1a:67:17:6b:d9:6a:45:00:
e0:47:da:b0:69:7a:fb:17:d7:92:30:75:5e:ee:0d:c8:fe:21:
37:5f:79:bd:04:49:a2:c5:c7:bc:fb:d0:6f:3e:9c:63:1e:82:
e0:29:04:fa:3c:9b:01:82:38:d6:d2:fe:de:3d:d7:7a:a1:01:
f8:5f:72:0e:83:f5:fe:89:82:e8:7f:77:1b:ed:cd:1d:b6:a9:
d8:43:34:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 09:36:25 2025 by rpki-client