Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/fw42rT9qXo2Z5J-BcBttYbI1on0.roa
File: fw42rT9qXo2Z5J-BcBttYbI1on0.roa (raw, json)
Hash identifier: 8K7uM33UFceZyt0IRn+MMblg+xrTYPathJDhX+/FGpY=
Subject key identifier: 7F:0E:36:AD:3F:6A:5E:8D:99:E4:9F:81:70:1B:6D:61:B2:35:A2:7D
Certificate issuer: /CN=885b857706dac54e20ca0d11bd6416cb634203b4
Certificate serial: 01942747C41392A264DFA796063B435ED894
Authority key identifier: 88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/fw42rT9qXo2Z5J-BcBttYbI1on0.roa
Signing time: Thu 02 Jan 2025 13:50:02 +0000
ROA not before: Thu 02 Jan 2025 13:50:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49357
IP address blocks: 46.8.159.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:c4:13:92:a2:64:df:a7:96:06:3b:43:5e:d8:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=885b857706dac54e20ca0d11bd6416cb634203b4
Validity
Not Before: Jan 2 13:50:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7f0e36ad3f6a5e8d99e49f81701b6d61b235a27d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d8:31:90:95:1c:47:a8:35:86:d8:47:e5:c9:
1f:ae:66:62:5f:c0:cd:d6:e0:28:0e:19:79:3c:91:
c0:6b:5b:00:70:d6:f2:52:94:e0:a7:7f:2b:54:7c:
62:4a:65:d2:3c:07:47:09:e8:56:f4:1a:c6:19:73:
96:62:22:cb:2c:f7:00:38:bf:f3:86:65:ea:fd:a9:
7b:c2:a7:e5:a8:97:42:97:93:7b:3f:20:5f:2f:69:
f2:e6:38:31:40:d7:da:57:8a:cd:ec:d1:9d:20:af:
ae:20:45:92:4d:1a:d7:79:43:f7:5f:b6:68:40:1c:
f5:cb:48:5b:41:ce:46:83:ef:c9:4b:5e:cc:1b:4a:
0c:28:56:8e:c8:ea:f8:7c:4a:ab:e7:ff:d9:ff:24:
b8:a4:9b:0f:7a:f7:4a:bc:61:c9:ae:34:d6:30:e1:
e9:33:a6:be:e1:15:88:fc:85:b0:cd:13:2a:18:44:
3e:75:de:8a:0b:c6:70:76:e3:d2:a6:4d:91:54:3f:
cb:05:cc:a0:b3:ea:45:26:26:e4:0d:3c:9b:74:6f:
b5:56:98:9f:dd:d7:74:de:ff:4a:85:cf:56:d9:99:
87:5e:8f:6e:d1:ca:16:67:33:de:85:aa:8b:5e:55:
87:84:64:67:a6:44:de:be:a4:f7:a2:96:4a:f8:10:
d0:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:0E:36:AD:3F:6A:5E:8D:99:E4:9F:81:70:1B:6D:61:B2:35:A2:7D
X509v3 Authority Key Identifier:
keyid:88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/fw42rT9qXo2Z5J-BcBttYbI1on0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.8.159.0/24
Signature Algorithm: sha256WithRSAEncryption
76:0f:9a:ca:bb:87:41:8e:a0:d0:b7:74:f5:8b:a7:da:ef:b9:
b7:1f:f6:f6:d8:da:e2:95:96:9a:d5:98:1d:5b:63:4b:c9:cf:
f7:32:4a:95:f1:8e:3d:27:3f:9e:e1:b6:fa:1d:61:c8:ae:00:
03:12:68:17:c5:01:95:e5:87:10:ab:e2:85:ac:e0:ff:47:7f:
52:59:80:52:81:da:f6:35:7b:5a:a0:15:e6:1e:8b:47:8a:6e:
66:fb:3b:30:61:92:51:87:1e:10:2b:5f:fa:2a:88:76:21:2c:
23:1e:c9:9a:fe:30:ac:d5:d8:09:ad:01:d0:1b:26:7e:ba:fe:
2a:6b:71:a5:6c:09:e6:7b:0b:ec:c1:e5:4f:a2:42:2a:05:7f:
8c:44:44:39:9a:56:5a:ff:f6:20:e6:5c:00:a1:0a:5c:bf:2b:
2f:5c:fc:5f:98:f3:e7:c5:ed:df:4e:40:b9:7e:5d:89:fd:eb:
20:98:d0:95:c8:ed:ce:a5:32:8b:db:75:dc:62:38:73:3f:eb:
36:99:29:94:46:62:6a:49:ee:73:c1:45:9b:1b:de:52:a0:8a:
28:38:ac:39:27:1a:2e:f1:2d:54:3f:2e:31:99:27:5a:c6:02:
b3:2f:ea:e2:a4:cf:42:90:89:a5:b0:55:3b:c7:a2:8a:7c:79:
3c:13:7a:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 09:41:42 2025 by rpki-client