Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/659064-157b-46ed-abe0-1c805d603343/1/2pEN9yXeR71HVTZRLkvSms-fhug.roa
File: 2pEN9yXeR71HVTZRLkvSms-fhug.roa (raw, json)
Hash identifier: MUeTmcE82N53+LsLzYkZn4tnQVIp+Bm6nt/uK/JTj80=
Subject key identifier: DA:91:0D:F7:25:DE:47:BD:47:55:36:51:2E:4B:D2:9A:CF:9F:86:E8
Certificate issuer: /CN=fe0b3e321ff93f31632eb9928f55c80de242efc5
Certificate serial: 01833E2A7F13F8EFCD7B0DD37A0C44836E84
Authority key identifier: FE:0B:3E:32:1F:F9:3F:31:63:2E:B9:92:8F:55:C8:0D:E2:42:EF:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_gs-Mh_5PzFjLrmSj1XIDeJC78U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/659064-157b-46ed-abe0-1c805d603343/1/2pEN9yXeR71HVTZRLkvSms-fhug.roa
Signing time: Wed 14 Sep 2022 22:41:55 +0000
ROA not before: Wed 14 Sep 2022 22:41:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15924
IP address blocks: 46.226.121.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:3e:2a:7f:13:f8:ef:cd:7b:0d:d3:7a:0c:44:83:6e:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe0b3e321ff93f31632eb9928f55c80de242efc5
Validity
Not Before: Sep 14 22:41:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=da910df725de47bd475536512e4bd29acf9f86e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b6:e5:55:d0:77:a1:70:73:d3:70:66:30:be:
23:de:7e:25:0f:10:99:98:2f:f8:c5:14:36:3e:b4:
e5:ad:e0:2e:a4:ed:45:6c:0d:09:34:7a:fd:1a:ee:
51:f9:32:1b:b9:d6:82:a8:68:84:26:0e:fe:36:58:
30:9e:e2:16:4e:87:a4:ce:2a:ad:c2:0e:90:51:7d:
b5:6c:3b:01:7a:22:59:d9:22:da:46:76:d2:87:a9:
40:8a:c3:b4:9b:fd:d0:5e:af:4d:d0:7b:22:2c:fd:
50:29:b4:f9:90:1f:03:d5:63:29:4e:47:73:54:e3:
e0:f9:b0:67:29:b7:af:5e:1c:4b:8c:5f:40:b4:05:
9b:ec:2f:fe:a9:d1:92:29:93:7f:e4:43:4a:42:37:
8b:29:18:b7:11:79:f6:10:76:6e:0a:2e:ef:1c:68:
8b:7d:96:25:17:c9:6d:54:a1:14:38:c7:38:9a:1d:
d4:66:0a:09:d1:38:ea:3c:25:49:8b:ca:9a:44:35:
49:2d:bb:db:91:e1:4b:b4:f0:39:fd:01:42:41:72:
d9:50:e2:13:54:44:6d:6c:39:d3:f4:c5:20:ed:6e:
1a:44:db:ac:3a:52:86:0e:e3:c2:38:2e:20:02:85:
c7:c8:cc:65:2d:3f:8a:e2:3b:1c:3a:00:01:6d:93:
42:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:91:0D:F7:25:DE:47:BD:47:55:36:51:2E:4B:D2:9A:CF:9F:86:E8
X509v3 Authority Key Identifier:
keyid:FE:0B:3E:32:1F:F9:3F:31:63:2E:B9:92:8F:55:C8:0D:E2:42:EF:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_gs-Mh_5PzFjLrmSj1XIDeJC78U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/659064-157b-46ed-abe0-1c805d603343/1/2pEN9yXeR71HVTZRLkvSms-fhug.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/659064-157b-46ed-abe0-1c805d603343/1/_gs-Mh_5PzFjLrmSj1XIDeJC78U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.226.121.0/24
Signature Algorithm: sha256WithRSAEncryption
91:b2:4e:9d:de:06:81:84:4b:cd:78:be:86:82:3b:96:2a:85:
d7:5e:21:38:50:eb:24:46:c0:d1:23:81:75:18:15:5c:d8:21:
a2:dd:6d:ff:8d:f4:dd:f3:e6:5f:b3:33:3e:76:c8:ac:4e:e4:
8f:8d:f5:a2:6d:ee:3d:9a:ca:ab:33:f2:3e:45:b1:ef:e0:32:
57:b6:dc:6c:a5:c5:b6:8e:d0:06:49:1e:95:50:88:9d:1c:16:
63:44:32:3e:4e:ec:08:df:c2:cf:ab:c6:e0:94:6f:15:40:f0:
a8:8c:15:83:f2:8e:90:4d:19:d7:bf:9a:0a:d5:43:f6:af:d6:
12:42:d9:ce:c7:ee:72:41:ad:42:02:50:c5:96:2c:94:eb:ac:
95:17:37:e8:e9:cc:8d:c1:54:ec:ea:b1:de:7b:88:6b:e7:5f:
6d:32:11:df:fe:97:b1:13:cf:d7:f4:ac:34:29:e6:84:09:c2:
f2:79:d7:43:b8:2b:5a:76:6a:15:86:00:0c:4b:9e:7f:0c:67:
8b:36:ad:db:58:32:15:b2:fd:b0:00:35:38:98:d5:7c:a7:e4:
ff:25:f9:87:88:b0:50:82:3d:69:03:8c:0a:82:4c:32:fb:4c:
6c:c7:08:34:ac:3e:5d:82:b5:eb:9f:59:fa:d2:b2:2e:e0:2b:
09:55:d7:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:50:14 2025 by rpki-client