Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/dxsj19ad71KgXNL1YmHKWh5i0MY.roa
File: dxsj19ad71KgXNL1YmHKWh5i0MY.roa (raw, json)
Hash identifier: SOB/Ng790Wkh1xOtUOHg0x+weAFM6hQZdonwYbqqi6g=
Subject key identifier: 77:1B:23:D7:D6:9D:EF:52:A0:5C:D2:F5:62:61:CA:5A:1E:62:D0:C6
Certificate issuer: /CN=885b857706dac54e20ca0d11bd6416cb634203b4
Certificate serial: 01942747CFC51C6830231DF2816E686B1ABD
Authority key identifier: 88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/dxsj19ad71KgXNL1YmHKWh5i0MY.roa
Signing time: Thu 02 Jan 2025 13:50:05 +0000
ROA not before: Thu 02 Jan 2025 13:50:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204848
IP address blocks: 46.8.105.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:cf:c5:1c:68:30:23:1d:f2:81:6e:68:6b:1a:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=885b857706dac54e20ca0d11bd6416cb634203b4
Validity
Not Before: Jan 2 13:50:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=771b23d7d69def52a05cd2f56261ca5a1e62d0c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e6:c0:a6:6b:aa:43:f8:e2:33:23:57:8c:bb:
95:d6:a8:e2:69:be:86:2e:5d:c5:33:8b:bf:37:2d:
72:ee:d3:96:42:13:cf:90:75:13:83:9d:45:d3:8d:
21:6a:70:41:c5:9d:bd:54:05:cf:aa:33:71:9d:66:
d0:65:b1:bc:34:f9:5d:36:9c:df:c2:82:e2:e0:ed:
5e:12:a8:fe:08:b5:7e:05:0e:52:6d:b3:5c:8f:d7:
d0:fb:22:f5:3c:5d:a3:d5:4c:d3:10:aa:43:09:8d:
12:24:f4:3a:9e:95:89:6b:13:73:73:79:5b:8c:36:
d0:e8:64:a8:d9:e9:f9:6e:17:1c:cf:61:53:dd:a2:
4e:da:98:61:0a:26:5a:50:7e:7b:f9:42:04:88:ab:
26:98:a4:b6:36:c7:93:23:9a:c7:57:81:86:fe:b2:
22:4c:eb:ce:91:4a:50:de:49:fb:5b:c3:7d:15:d8:
95:d4:f9:7a:74:44:b1:35:a1:9e:60:7e:ef:64:7c:
bb:71:0a:11:96:33:9f:ff:02:f2:96:d5:ea:84:b3:
08:c6:68:e6:fb:ff:3a:d2:ed:6b:21:3d:74:61:e8:
91:91:30:1b:6a:43:31:8c:ce:0b:52:96:e9:c2:05:
30:e7:bf:dd:52:25:59:5e:99:e9:ae:5a:75:0e:75:
79:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:1B:23:D7:D6:9D:EF:52:A0:5C:D2:F5:62:61:CA:5A:1E:62:D0:C6
X509v3 Authority Key Identifier:
keyid:88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/dxsj19ad71KgXNL1YmHKWh5i0MY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.8.105.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:d6:75:1d:8b:91:1a:1d:6c:33:83:6f:ec:71:ab:6f:6f:88:
cc:e6:68:f2:6c:d6:58:5f:16:90:e8:60:26:fe:6a:32:eb:19:
1b:cb:f9:3c:2f:57:ea:18:ee:05:0f:e3:87:c3:2d:d3:10:2c:
40:4f:3b:41:90:28:3e:c5:c7:39:f0:0e:06:98:ed:44:27:17:
c4:44:10:ea:54:2d:52:dc:c3:d5:36:b3:d8:fe:68:80:c3:76:
81:7f:da:d3:b6:71:73:7a:2f:35:92:c0:01:ea:ff:1e:89:0b:
55:ab:cd:4c:06:7f:74:62:66:0e:09:b1:66:18:d1:8a:2d:88:
d8:88:d9:0d:48:7d:7e:58:0f:1e:ba:cc:5e:e7:bd:9b:73:49:
fa:b2:1f:46:7a:90:ce:ad:7a:14:4c:f5:53:dd:d4:b0:89:e5:
34:48:31:e3:08:39:90:24:3e:9e:c7:ef:c4:29:0c:48:af:c0:
39:e5:ac:7f:49:2a:51:ee:0e:e7:d5:87:c1:96:b7:91:e8:9d:
67:78:00:1d:c8:17:a1:14:02:ae:97:5f:a3:32:ed:d9:a9:a2:
83:78:01:88:73:34:6e:af:4b:31:04:ac:7c:75:0d:bd:9b:a6:
21:5a:88:43:85:dd:b5:35:0a:6a:04:3e:61:22:51:66:fe:13:
41:e8:95:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 10:18:47 2025 by rpki-client