Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/dQu8NDtpgLOr_vKRd9TWsfxe4ko.roa
File: dQu8NDtpgLOr_vKRd9TWsfxe4ko.roa (raw, json)
Hash identifier: SWvLFahapUrBwlcxExzpHJLII4LZKdHNnz4XC1e5WXY=
Subject key identifier: 75:0B:BC:34:3B:69:80:B3:AB:FE:F2:91:77:D4:D6:B1:FC:5E:E2:4A
Certificate issuer: /CN=885b857706dac54e20ca0d11bd6416cb634203b4
Certificate serial: 01942747D7F06CFD0C36FD46095BEE99C70F
Authority key identifier: 88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/dQu8NDtpgLOr_vKRd9TWsfxe4ko.roa
Signing time: Thu 02 Jan 2025 13:50:07 +0000
ROA not before: Thu 02 Jan 2025 13:50:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213912
IP address blocks: 46.8.66.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:d7:f0:6c:fd:0c:36:fd:46:09:5b:ee:99:c7:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=885b857706dac54e20ca0d11bd6416cb634203b4
Validity
Not Before: Jan 2 13:50:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=750bbc343b6980b3abfef29177d4d6b1fc5ee24a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:42:01:fb:f4:74:ea:10:76:41:08:1e:de:28:
73:4c:43:36:46:42:a8:aa:1d:e7:3f:2c:dd:dd:ce:
c3:57:f1:f2:fb:1e:20:62:78:10:f1:d6:9a:d3:a9:
29:ac:93:a9:f4:d5:35:84:cd:9b:29:5f:a1:22:55:
cf:e4:49:47:77:53:54:83:b9:47:bb:3c:ff:79:3c:
63:3b:71:58:ab:6d:40:49:ca:39:b4:2a:79:ec:ef:
f8:c8:f2:92:d0:98:8a:34:a4:49:c3:e5:cc:3a:bb:
cb:59:48:03:90:ae:88:ae:a5:0e:07:49:9b:4f:89:
8e:4b:f8:d3:2c:7d:bc:d6:8c:6b:d1:b1:a3:00:75:
52:4e:c3:fd:bc:46:4b:22:9c:4c:03:dd:c3:b1:79:
70:e8:b5:8f:19:a9:1d:f2:7d:d1:07:f7:4d:13:96:
e0:f2:59:b0:77:6d:ad:f6:77:38:df:14:a0:0f:5f:
1e:88:68:95:18:3a:53:3a:85:f8:af:af:6c:7e:57:
d9:55:7c:f1:f0:11:cd:23:9c:3b:3b:18:fc:6a:00:
3e:35:2f:6b:b9:1c:81:28:52:fe:17:0a:80:f7:15:
e6:4d:dc:cc:b6:28:44:36:1f:66:82:be:99:56:a7:
77:4f:08:67:16:59:93:57:75:cb:e3:d6:87:ac:c5:
ff:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:0B:BC:34:3B:69:80:B3:AB:FE:F2:91:77:D4:D6:B1:FC:5E:E2:4A
X509v3 Authority Key Identifier:
keyid:88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/dQu8NDtpgLOr_vKRd9TWsfxe4ko.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.8.66.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:67:ce:5a:f5:2c:66:b3:ef:3a:c0:88:5d:47:ff:2b:b9:23:
db:a1:14:d3:86:9f:0c:4c:c5:c3:db:83:85:a4:85:fa:76:12:
ef:77:16:de:72:cc:05:77:c3:9d:62:57:ee:8e:48:77:d3:6c:
c9:2e:71:dc:c1:dd:af:e1:ab:5a:e8:f5:ad:98:71:3e:9d:58:
4e:f4:7e:c9:ee:0f:8f:8c:39:38:4e:5d:fb:be:11:1a:bf:6c:
ac:1a:4e:ee:b1:72:ef:9e:b3:56:46:a9:4d:3c:c1:2c:47:cc:
1f:fb:f3:98:1d:ca:4e:ce:d0:19:ef:f6:7e:53:4f:6c:45:5a:
f7:e9:6a:16:55:5a:f2:a2:ac:1b:ac:e0:f0:30:6d:47:75:83:
43:18:76:64:86:c5:ec:bf:76:17:62:19:c8:f9:06:92:53:d8:
79:13:ec:f4:51:35:32:24:47:f5:4a:44:fe:45:2a:e0:07:64:
ea:6f:67:40:73:a1:c5:d8:6c:db:b0:7d:4f:26:94:8e:3f:c4:
59:7a:4f:6f:86:5f:8a:a7:98:5c:42:10:11:22:a4:42:62:ff:
99:d6:f4:02:77:2d:b0:34:94:9b:f5:19:10:e5:03:4f:5a:cb:
e7:15:d3:29:f7:76:99:f9:bc:5f:ac:7c:7a:a2:6b:bc:60:d0:
b0:38:7d:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 09:55:33 2025 by rpki-client