Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/m_z6UEHaYMm8RB9aBbdZXghRciY.roa
File: m_z6UEHaYMm8RB9aBbdZXghRciY.roa (raw, json)
Hash identifier: XYIYD6GDlzc3UoJLMQ5D/ItlINY/4ZPFqoVDt6OlVmA=
Subject key identifier: 9B:FC:FA:50:41:DA:60:C9:BC:44:1F:5A:05:B7:59:5E:08:51:72:26
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 0194ED6360DE0D1624EEF03B1B7F8F1A2E56
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/m_z6UEHaYMm8RB9aBbdZXghRciY.roa
Signing time: Mon 10 Feb 2025 01:05:00 +0000
ROA not before: Mon 10 Feb 2025 01:05:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57043
IP address blocks: 46.249.109.0/24 maxlen: 24
82.115.28.0/24 maxlen: 24
89.251.10.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ed:63:60:de:0d:16:24:ee:f0:3b:1b:7f:8f:1a:2e:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Feb 10 01:05:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9bfcfa5041da60c9bc441f5a05b7595e08517226
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:5c:17:cd:61:bc:87:29:0c:92:24:a6:87:43:
4e:7d:a0:c2:20:a9:95:e6:2e:7b:88:69:e4:50:4f:
e9:e0:03:f1:27:f1:71:aa:62:4f:f5:bf:23:9e:b1:
65:f7:4d:25:d2:e3:f4:ee:e2:b0:b5:20:57:8e:9e:
73:47:12:62:06:9e:f2:a1:a9:c9:fd:10:07:46:8f:
77:b6:43:71:ea:26:96:bd:3f:92:11:f4:1e:aa:1d:
69:33:e2:85:19:23:4a:6c:6e:e8:97:a6:b9:85:36:
e7:56:c9:64:d3:e5:0b:44:3c:b4:0f:8a:89:5e:e3:
41:5f:83:48:cd:24:b4:e5:a2:b8:96:30:9f:eb:10:
90:4b:a0:77:2f:de:24:86:6d:45:08:13:b7:a2:9c:
8d:29:82:22:14:82:d5:e3:7a:89:31:e0:69:73:99:
4a:5e:f5:85:57:45:b4:8e:70:5a:35:55:4d:ac:a4:
89:43:a1:76:1d:c7:23:64:9c:3e:b4:e1:04:92:47:
60:89:54:55:70:32:95:85:bb:af:16:65:80:7b:fa:
ce:7d:f0:3d:7b:08:bf:3f:32:7c:50:5d:6f:76:c9:
a8:03:aa:28:f8:45:91:0f:f7:ed:82:5c:01:d8:69:
e8:9c:1c:d4:b7:84:0f:77:3a:f4:78:1a:6e:23:88:
78:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:FC:FA:50:41:DA:60:C9:BC:44:1F:5A:05:B7:59:5E:08:51:72:26
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/m_z6UEHaYMm8RB9aBbdZXghRciY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.249.109.0/24
82.115.28.0/24
89.251.10.0/24
Signature Algorithm: sha256WithRSAEncryption
37:3c:52:83:4a:4c:be:7b:b3:2f:b5:76:ae:d8:2d:a7:64:fd:
75:81:d5:d6:e9:0a:9b:a3:d2:b3:03:36:d0:4c:5c:13:c4:53:
2e:82:98:eb:e3:b7:e2:22:b9:a9:36:6d:8a:8c:06:e1:34:5a:
f2:a0:11:f9:9e:cc:7a:18:d6:77:ff:76:e7:8c:a3:a5:9f:b2:
b9:ea:a8:3c:77:08:da:d5:5e:e0:59:ee:51:97:dc:93:44:2f:
60:42:29:45:b3:95:b9:e3:b1:35:25:a6:a5:48:4d:02:06:da:
bd:52:0f:61:e0:f7:cd:28:86:d5:ea:04:04:eb:72:d6:87:f7:
c9:fd:89:e4:c5:5e:2e:be:a0:22:d4:d0:f1:a9:97:25:d3:3e:
a9:84:34:ca:ac:5e:56:c6:80:5a:1b:62:77:c2:3f:ae:c9:fe:
6f:81:74:9d:a4:11:d9:5f:ae:7b:5b:47:0b:f4:e8:66:a0:0c:
3c:f0:2e:b0:cf:8c:f9:63:1c:07:b1:e6:11:89:35:2d:06:20:
d6:75:7c:ff:29:fa:49:ef:90:09:af:96:94:6e:8b:0b:0f:af:
28:6d:b8:d7:a4:cc:47:16:d6:b4:f6:e4:fc:fe:93:b9:ff:9f:
dd:43:e8:d1:f3:f3:ea:e3:b4:f5:9f:d2:68:70:40:b7:19:55:
04:32:0c:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:38:19 2025 by rpki-client