Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/bSHHpvQVBEKAcl2uEZS919_Cjyg.roa
File: bSHHpvQVBEKAcl2uEZS919_Cjyg.roa (raw, json)
Hash identifier: 5jaWmbPd4LIWXKp0ZeI0f6LpjRNL5lBm6iS8zRB5IAU=
Subject key identifier: 6D:21:C7:A6:F4:15:04:42:80:72:5D:AE:11:94:BD:D7:DF:C2:8F:28
Certificate issuer: /CN=885b857706dac54e20ca0d11bd6416cb634203b4
Certificate serial: 01942747BF11599017DA2E601A339F3EA8BC
Authority key identifier: 88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/bSHHpvQVBEKAcl2uEZS919_Cjyg.roa
Signing time: Thu 02 Jan 2025 13:50:00 +0000
ROA not before: Thu 02 Jan 2025 13:50:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42007
IP address blocks: 46.8.130.0/23 maxlen: 24
46.8.132.0/22 maxlen: 24
46.8.136.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:bf:11:59:90:17:da:2e:60:1a:33:9f:3e:a8:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=885b857706dac54e20ca0d11bd6416cb634203b4
Validity
Not Before: Jan 2 13:50:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6d21c7a6f415044280725dae1194bdd7dfc28f28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:65:a2:6c:80:e7:c6:2b:a4:68:04:b5:34:f2:
67:a8:d0:49:73:45:31:16:f1:a5:47:9b:0b:ae:33:
29:a6:03:81:44:49:5a:30:4c:34:2e:bd:76:f0:ee:
99:ae:c5:90:05:10:3f:73:16:3e:bb:29:4e:5b:3a:
d3:b0:a8:93:ff:4d:9f:0b:4a:1a:82:d5:83:ea:b4:
45:2d:0a:fb:49:fb:55:ad:d0:72:74:8b:f9:9c:3a:
7c:b3:56:3f:51:25:8a:52:fc:22:49:51:fd:ad:8d:
34:d4:6e:20:a4:2c:17:49:88:05:1a:56:c8:36:cd:
cb:e0:b5:e0:ce:b0:65:31:94:8d:95:c6:89:39:7a:
32:c0:ee:4b:0f:01:da:d4:33:75:7b:b7:b9:29:a0:
91:6a:81:91:a0:22:b6:41:35:0c:11:c4:81:24:7e:
b3:f0:b4:41:92:53:14:f7:59:37:d8:6e:37:02:49:
53:5d:08:fe:f5:0d:65:f0:0e:ef:7b:8f:e4:ac:fd:
ce:2e:cb:c8:65:55:a6:c8:dc:f1:3d:1a:a8:51:35:
99:32:b4:28:fe:c1:d7:5c:4b:b4:99:55:ef:0e:c6:
89:5c:c4:00:2e:fd:23:5b:4a:e1:9a:d1:e1:e7:e4:
be:1c:24:a7:30:c6:c4:22:f8:78:4a:1e:5f:49:f2:
30:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:21:C7:A6:F4:15:04:42:80:72:5D:AE:11:94:BD:D7:DF:C2:8F:28
X509v3 Authority Key Identifier:
keyid:88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/bSHHpvQVBEKAcl2uEZS919_Cjyg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.8.130.0-46.8.139.255
Signature Algorithm: sha256WithRSAEncryption
5d:6a:fe:04:6b:e7:a8:c3:9e:b7:f1:49:d0:69:d8:e2:3f:0f:
f2:10:49:7c:b7:6c:7b:9c:00:e3:d4:64:99:db:c6:e5:d9:97:
38:41:b6:89:6a:60:d3:00:92:fc:15:7c:f4:c0:7b:0b:82:1e:
63:b3:31:be:fe:7c:7d:2b:9f:ce:e0:6b:39:85:0a:b4:6b:a3:
c3:b1:93:2f:e8:44:14:c7:b9:62:54:a1:1b:55:fa:82:60:ce:
76:4d:4a:01:bd:87:cf:31:e2:1c:4a:44:5b:87:d7:ce:52:e6:
18:87:41:67:6a:36:c0:4a:19:bc:40:49:47:45:8e:c0:9b:46:
b0:86:c7:d9:0d:d8:df:a0:6e:e2:a2:1f:07:ca:2f:00:c6:f6:
06:99:ec:bb:0d:b6:03:e3:a5:1a:1a:bf:b2:1e:fa:5c:40:73:
9c:2e:6a:75:3a:98:a1:41:10:80:eb:39:b6:83:1c:8e:7a:28:
39:6a:58:51:46:9d:f3:f9:75:18:26:39:ce:a5:cc:6c:7f:84:
5f:1b:f4:e0:10:1b:b4:87:4e:da:4c:21:61:e2:6c:0f:ae:f6:
4a:84:cc:00:6f:aa:69:a8:c3:4e:59:46:c1:79:b4:9b:ea:1a:
e2:17:59:19:53:da:80:17:a7:e2:30:0d:53:76:9b:b5:33:2f:
69:c9:f3:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 10:15:39 2025 by rpki-client