Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/cPX1rLru3EhLpPPW1MnKD3WDdJU.roa
File: cPX1rLru3EhLpPPW1MnKD3WDdJU.roa (raw, json)
Hash identifier: FlPB3PisSixKS60KrufI9cZqpGdplL3+VEjQPrfxXDw=
Subject key identifier: 70:F5:F5:AC:BA:EE:DC:48:4B:A4:F3:D6:D4:C9:CA:0F:75:83:74:95
Certificate issuer: /CN=a4bcc12afa4f05739f45f605e221c64c3c0d2ed6
Certificate serial: 019427B5E7ADE80E8ABDA9CE5E326171E7CD
Authority key identifier: A4:BC:C1:2A:FA:4F:05:73:9F:45:F6:05:E2:21:C6:4C:3C:0D:2E:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pLzBKvpPBXOfRfYF4iHGTDwNLtY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/cPX1rLru3EhLpPPW1MnKD3WDdJU.roa
Signing time: Thu 02 Jan 2025 15:50:20 +0000
ROA not before: Thu 02 Jan 2025 15:50:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34056
IP address blocks: 46.229.48.0/22 maxlen: 22
92.244.96.0/19 maxlen: 19
109.108.64.0/19 maxlen: 19
2a00:1688::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:e7:ad:e8:0e:8a:bd:a9:ce:5e:32:61:71:e7:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4bcc12afa4f05739f45f605e221c64c3c0d2ed6
Validity
Not Before: Jan 2 15:50:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=70f5f5acbaeedc484ba4f3d6d4c9ca0f75837495
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:fc:80:6d:c6:5b:d3:76:a3:55:9a:11:a4:73:
6d:55:1a:3b:b6:2c:6d:65:14:51:97:44:ac:5a:e0:
29:6a:0d:bc:a2:af:cb:c4:76:b7:02:47:28:1c:74:
79:82:f5:a3:82:68:88:3c:12:54:32:a9:2b:e0:67:
23:1e:4e:bb:4b:64:71:35:83:80:fa:30:19:07:0b:
5f:56:f1:b9:f1:92:c3:4d:47:95:16:7f:ce:df:7a:
18:91:6f:b0:11:57:06:48:49:73:2f:c7:53:df:25:
bf:9a:e8:6c:de:c7:41:bc:36:10:3d:83:d4:68:0b:
d5:39:e6:e9:6a:46:ce:56:d2:87:d8:51:be:12:66:
b6:34:72:f1:2d:38:86:16:d6:1e:61:e7:ae:6b:de:
a3:bd:dd:22:36:0f:77:f4:2f:ba:99:7d:9a:1e:e8:
da:db:5c:18:b0:13:48:af:dc:f6:75:02:8c:09:13:
3f:9f:6b:1c:6a:b2:b8:31:4e:31:f9:b0:4b:0e:a3:
0d:f6:c9:ef:e0:49:5f:69:b5:1e:78:b1:4e:89:c8:
cc:29:22:8a:71:8c:38:4b:a9:98:2b:01:89:56:e9:
08:a1:94:2d:68:70:71:6e:88:b7:04:c4:a5:13:25:
60:f8:e0:a3:cb:d6:82:79:de:a3:5e:30:fc:b9:ca:
d4:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:F5:F5:AC:BA:EE:DC:48:4B:A4:F3:D6:D4:C9:CA:0F:75:83:74:95
X509v3 Authority Key Identifier:
keyid:A4:BC:C1:2A:FA:4F:05:73:9F:45:F6:05:E2:21:C6:4C:3C:0D:2E:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pLzBKvpPBXOfRfYF4iHGTDwNLtY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/cPX1rLru3EhLpPPW1MnKD3WDdJU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/pLzBKvpPBXOfRfYF4iHGTDwNLtY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.229.48.0/22
92.244.96.0/19
109.108.64.0/19
IPv6:
2a00:1688::/48
Signature Algorithm: sha256WithRSAEncryption
75:b7:70:1f:92:81:77:ee:c3:f2:d0:72:f9:db:fc:e1:e5:8c:
e3:05:6a:da:ba:71:b1:07:c5:86:4b:e2:da:97:d2:da:8d:db:
1b:06:19:dd:58:de:21:e4:a8:63:f9:7d:90:97:6b:39:81:1f:
69:da:e0:37:8e:41:3f:c0:b4:56:a6:6e:0f:52:bf:f4:b9:c3:
6f:7e:60:64:33:a2:f4:d4:05:5a:c8:c5:d5:b1:3c:c4:79:42:
21:0e:3c:39:ce:13:3f:ff:a3:68:67:66:48:11:64:f8:6e:91:
db:c2:6f:a3:9a:8d:4e:3a:48:b3:15:00:d5:db:86:cc:d7:a2:
f8:c4:25:98:ec:68:a7:79:81:36:40:96:5b:6c:ba:12:f5:1a:
cc:50:f3:0c:6f:9a:ee:1d:71:cc:e6:36:ad:3c:90:e1:ee:c7:
55:4b:5d:2f:f0:3c:5a:4e:fc:41:26:97:2c:80:d1:15:af:e6:
b8:b5:7a:ed:ab:b3:da:4f:41:a5:ca:bd:90:0f:fb:78:25:61:
73:53:82:10:e1:74:59:c1:bc:d3:63:e4:17:40:af:ac:78:4f:
63:8d:d6:8f:d9:64:8a:76:48:32:88:e1:6e:f9:3d:cb:54:97:
23:3a:53:0b:13:b9:7c:99:c8:c6:08:2c:8c:1f:6a:78:57:fe:
f8:38:aa:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:42:51 2025 by rpki-client