Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/jvrFj6uplGyn_4RH_gnZ3WttdUg.roa
File: jvrFj6uplGyn_4RH_gnZ3WttdUg.roa (raw, json)
Hash identifier: 7f2WNciCzUNIEz9ZUeD4xu3Pq6FX/hCCRVQiUxjl1Gk=
Subject key identifier: 8E:FA:C5:8F:AB:A9:94:6C:A7:FF:84:47:FE:09:D9:DD:6B:6D:75:48
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 019425FC7F2149DB3CAA3F74D49F6E47258F
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/jvrFj6uplGyn_4RH_gnZ3WttdUg.roa
Signing time: Thu 02 Jan 2025 07:48:12 +0000
ROA not before: Thu 02 Jan 2025 07:48:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197730
IP address blocks: 46.249.112.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:7f:21:49:db:3c:aa:3f:74:d4:9f:6e:47:25:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Jan 2 07:48:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8efac58faba9946ca7ff8447fe09d9dd6b6d7548
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:3a:f7:6d:7c:12:4c:d4:0f:14:46:5b:5d:62:
30:78:24:20:67:9a:ad:f1:7c:b5:36:6d:66:b4:dc:
8a:48:07:7c:15:af:bf:f8:c5:59:2a:8a:b8:64:4d:
47:c8:c0:9e:f1:24:84:d9:86:62:2c:9c:b9:bc:ce:
80:75:48:c0:90:c1:bf:3b:44:e8:51:5c:91:ea:0e:
20:77:7c:a7:49:39:00:01:b4:64:a8:e0:f8:b8:02:
77:da:cd:07:51:28:2d:8c:c7:dd:30:8b:f6:fc:d0:
05:ea:8c:08:18:29:9e:22:3f:c3:73:94:6a:70:65:
3d:f7:97:f8:31:3c:cc:ef:0c:44:ea:70:38:3d:8b:
3c:ae:84:59:01:b1:44:a7:b0:3f:e3:ee:d1:a7:9b:
d8:8b:c5:df:a3:46:28:d0:aa:aa:0e:5a:3b:e5:6a:
0c:e5:91:61:8b:d8:79:e0:18:4e:86:92:92:56:41:
7a:7e:75:f2:1a:84:a7:00:ae:a1:9e:92:aa:f4:41:
3f:ab:26:26:6a:49:9c:e8:4d:f7:0d:98:49:f7:c8:
2b:35:a9:15:bf:57:c2:d4:57:36:ce:52:5d:5f:8e:
f4:84:47:1a:49:02:77:96:a1:b2:4f:b4:0b:8c:bc:
1b:72:e3:bf:5e:2d:cf:e9:e7:5d:81:2b:e0:f8:11:
8b:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:FA:C5:8F:AB:A9:94:6C:A7:FF:84:47:FE:09:D9:DD:6B:6D:75:48
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/jvrFj6uplGyn_4RH_gnZ3WttdUg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.249.112.0/21
Signature Algorithm: sha256WithRSAEncryption
5d:58:d9:2c:50:ff:3a:d5:d8:89:be:65:27:af:8f:30:c7:1b:
af:4b:f3:20:33:d5:11:16:09:66:3e:77:a5:60:15:1f:91:99:
12:ca:41:a6:af:37:e9:36:52:aa:81:ff:8d:86:1c:97:b6:0d:
83:58:bb:f2:2d:3f:e0:55:c3:94:b7:4a:53:50:27:89:d3:f4:
d8:ff:6d:ca:15:67:9b:8e:53:fe:eb:5f:7a:10:d7:a6:0a:39:
16:8e:fa:d2:3e:a4:fc:c8:9f:6a:e9:fb:a2:bf:25:6a:1c:96:
44:00:ee:78:5f:b4:f3:79:cc:7e:23:a5:fb:0e:fb:10:58:47:
1b:f5:6b:61:a4:6d:20:62:9e:e5:59:bf:b0:08:6f:3b:7c:f3:
ac:5a:2f:71:3d:bc:66:45:75:8f:6d:27:ff:2f:03:19:4a:b3:
8a:1e:8f:2c:b5:6b:e6:39:53:0c:21:7d:dd:80:c3:4e:b1:2e:
20:6c:51:77:96:b9:9b:7d:8e:61:71:c4:8e:b3:23:08:d9:6b:
94:7b:b9:a3:39:04:86:b8:4f:0b:23:a1:f8:b0:ca:2b:28:58:
44:49:38:45:0d:d7:c6:63:52:bd:73:cb:40:aa:3e:cd:01:24:
19:29:09:55:dc:c5:96:b0:3e:18:9f:61:7f:ea:ec:22:92:89:
8b:c0:d3:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 16:12:04 2025 by rpki-client