Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/gWRZ6-qCNTRJRCG-gfTNcsFAsBE.roa
File: gWRZ6-qCNTRJRCG-gfTNcsFAsBE.roa (raw, json)
Hash identifier: QOL4X1EOkUuVqlii/PMUvLb/9ta2Y6Qzfdv1kKmuBGw=
Subject key identifier: 81:64:59:EB:EA:82:35:34:49:44:21:BE:81:F4:CD:72:C1:40:B0:11
Certificate issuer: /CN=885b857706dac54e20ca0d11bd6416cb634203b4
Certificate serial: 01942747C69B2E61E3D6FB227FA847E1859B
Authority key identifier: 88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/gWRZ6-qCNTRJRCG-gfTNcsFAsBE.roa
Signing time: Thu 02 Jan 2025 13:50:02 +0000
ROA not before: Thu 02 Jan 2025 13:50:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51267
IP address blocks: 46.8.234.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:c6:9b:2e:61:e3:d6:fb:22:7f:a8:47:e1:85:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=885b857706dac54e20ca0d11bd6416cb634203b4
Validity
Not Before: Jan 2 13:50:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=816459ebea823534494421be81f4cd72c140b011
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:e7:5a:14:cb:aa:71:3d:99:8b:43:43:e6:df:
23:33:ae:7d:4a:e3:66:11:11:4e:4c:eb:eb:35:99:
06:dc:49:0c:7b:15:76:da:be:7d:26:3d:69:dc:aa:
56:51:26:f5:0e:a4:ef:d5:e2:78:ae:18:a4:15:7b:
05:ae:ef:a6:3a:96:62:16:95:cc:6a:18:34:83:7b:
47:4c:02:f9:d2:8e:f8:f8:1d:87:26:5f:99:83:e3:
7e:8b:05:63:4c:fd:01:bf:af:1b:c8:5c:55:8a:1c:
0a:a0:69:df:69:54:af:8e:44:02:08:3c:21:33:bd:
1f:43:9e:fc:12:3e:66:85:92:35:25:25:ab:c0:0b:
92:38:76:bd:48:7e:ae:27:0e:84:54:2d:e8:c9:36:
d8:15:4d:d0:9a:dd:66:30:93:f2:0f:23:10:49:e9:
6d:10:a6:6d:3c:2a:3b:46:3c:25:0f:ea:65:c3:8d:
10:b9:ef:a2:c6:14:c4:e9:44:61:e4:a9:1f:7d:84:
b9:bc:19:3e:48:5f:d8:6c:6f:4f:7a:7e:36:74:56:
49:d6:3a:2e:f1:56:e1:7c:91:0c:5f:42:4e:6c:2c:
92:e8:e2:88:f2:6d:76:6b:cf:3f:c6:1e:b3:33:4e:
72:ac:06:05:53:13:70:38:d4:56:a1:78:68:0e:0e:
5e:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:64:59:EB:EA:82:35:34:49:44:21:BE:81:F4:CD:72:C1:40:B0:11
X509v3 Authority Key Identifier:
keyid:88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/gWRZ6-qCNTRJRCG-gfTNcsFAsBE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.8.234.0/24
Signature Algorithm: sha256WithRSAEncryption
44:96:68:af:64:2f:1e:4e:15:54:81:9d:17:d6:90:43:bb:f6:
2f:19:f2:3b:66:ef:d1:81:8e:9b:d1:5e:27:9b:dd:c9:5d:99:
a1:0d:77:2f:bc:a4:71:d1:3e:1b:29:d2:38:30:5f:d0:d2:3a:
a2:c7:0f:83:07:3f:62:60:ff:4f:d3:13:6c:1c:af:64:2c:fd:
28:77:4f:57:e5:03:52:34:c6:dc:27:e4:45:4b:dd:48:9f:be:
58:7d:d9:27:8a:83:84:87:44:c3:c3:ce:cd:05:6f:85:84:c5:
e0:04:d7:ea:0a:d8:cf:bc:88:65:a8:d6:11:4b:30:c7:74:81:
8f:8f:30:35:5e:1a:93:6c:a4:2d:80:c7:ef:07:bd:23:91:39:
f2:46:42:44:c4:fe:c9:ca:97:31:ae:4c:7a:9b:97:cc:a3:46:
df:06:07:00:c1:8a:d8:4d:c3:57:df:e0:44:3a:fa:9e:e6:4f:
25:2c:a4:f5:d7:38:d7:54:41:68:60:76:38:12:f7:73:c8:e7:
78:50:2c:45:05:c2:d3:39:fa:cf:7a:47:a7:43:aa:a7:fe:4a:
a9:f0:63:54:31:83:61:37:91:3d:dc:d4:6b:bb:9b:a7:fc:eb:
61:95:b9:51:dd:a4:ee:11:07:69:a1:49:fb:b9:87:12:d3:4d:
99:cf:7e:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 09:55:38 2025 by rpki-client