Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/659064-157b-46ed-abe0-1c805d603343/1/3dXqUC_a4hqSuluubtB7d2TNyZ4.roa
File: 3dXqUC_a4hqSuluubtB7d2TNyZ4.roa (raw, json)
Hash identifier: wEePoFAA0PIhTSlR7/cjxov6l3vyzcpFQBh8lG8d6DI=
Subject key identifier: DD:D5:EA:50:2F:DA:E2:1A:92:BA:5B:AE:6E:D0:7B:77:64:CD:C9:9E
Certificate issuer: /CN=fe0b3e321ff93f31632eb9928f55c80de242efc5
Certificate serial: 013E7485
Authority key identifier: FE:0B:3E:32:1F:F9:3F:31:63:2E:B9:92:8F:55:C8:0D:E2:42:EF:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_gs-Mh_5PzFjLrmSj1XIDeJC78U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/659064-157b-46ed-abe0-1c805d603343/1/3dXqUC_a4hqSuluubtB7d2TNyZ4.roa
Signing time: Sat 01 Jan 2022 13:03:36 +0000
ROA not before: Sat 01 Jan 2022 13:03:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15924
IP address blocks: 46.226.121.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20870277 (0x13e7485)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe0b3e321ff93f31632eb9928f55c80de242efc5
Validity
Not Before: Jan 1 13:03:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ddd5ea502fdae21a92ba5bae6ed07b7764cdc99e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:70:72:97:a0:24:69:79:c3:90:12:10:10:25:
f6:0e:a9:9c:3c:2c:77:86:7b:91:90:81:28:da:cc:
50:9b:42:bb:48:c6:d9:23:56:27:8b:a7:f2:dc:0f:
86:58:b8:10:4b:db:b3:5f:13:fc:2e:9c:d1:31:42:
82:94:76:60:15:3e:f7:56:71:2d:80:29:2d:1a:15:
d3:e1:1f:5c:1c:00:b7:50:81:5e:11:ff:20:93:82:
3a:92:e2:e9:7c:44:8e:e9:3a:48:28:c6:e8:8f:96:
d1:77:08:ab:16:b1:8e:18:91:8e:80:ac:f0:59:b4:
76:cb:d2:0f:55:e0:b1:68:cb:aa:00:a2:c8:94:ac:
46:4c:a2:df:c3:c9:11:c6:ea:fa:1d:2c:dd:60:7a:
a7:c8:da:22:90:46:b9:0f:df:0d:56:d2:02:46:3b:
cf:3c:e4:2d:25:f3:d7:40:19:82:f8:7b:e0:ce:e0:
b1:fa:3f:7d:79:cb:4a:39:3a:e5:dc:71:b9:8a:5a:
37:62:fe:38:ac:84:e4:29:d9:73:8d:a2:e1:53:d4:
d1:8b:ce:d9:42:36:3b:bb:64:eb:c0:ff:7a:cc:72:
95:a3:86:dd:10:94:c7:ab:d2:7f:cd:8b:69:0b:3e:
1b:8e:03:2e:66:7e:08:e4:4d:6b:6d:98:ab:5d:73:
97:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:D5:EA:50:2F:DA:E2:1A:92:BA:5B:AE:6E:D0:7B:77:64:CD:C9:9E
X509v3 Authority Key Identifier:
keyid:FE:0B:3E:32:1F:F9:3F:31:63:2E:B9:92:8F:55:C8:0D:E2:42:EF:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_gs-Mh_5PzFjLrmSj1XIDeJC78U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/659064-157b-46ed-abe0-1c805d603343/1/3dXqUC_a4hqSuluubtB7d2TNyZ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/659064-157b-46ed-abe0-1c805d603343/1/_gs-Mh_5PzFjLrmSj1XIDeJC78U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.226.121.0/24
Signature Algorithm: sha256WithRSAEncryption
82:84:a8:76:08:b5:5d:9a:57:f5:cd:f6:de:be:59:20:c2:39:
6a:18:64:26:87:2f:7e:53:ed:ee:f3:3c:4a:37:ba:52:89:be:
f1:56:22:be:2f:8e:bd:5d:fd:16:2b:97:04:91:70:17:cf:97:
46:82:1b:4f:5f:2c:ad:ca:21:cd:a9:a0:f3:c6:30:63:fe:21:
0e:7c:de:b7:c1:0b:98:cb:c5:e2:3b:2e:12:33:d9:70:32:f9:
4a:32:e4:a6:5a:44:70:dc:72:13:8e:85:33:75:28:46:3e:00:
ab:53:75:c4:16:1f:96:dd:85:bf:1f:a0:ac:fe:7e:c9:36:2e:
76:39:5d:52:66:89:1b:77:72:35:cc:ca:23:61:bf:e8:f0:0c:
f0:fa:6f:e1:85:ec:58:c9:c6:72:12:87:6d:72:1c:62:16:65:
84:55:70:88:6c:86:ad:f6:6f:03:7e:fc:f4:bc:a0:65:5b:1c:
91:77:2f:38:35:46:8e:bc:5a:0a:86:47:5d:b7:7c:32:8e:25:
81:81:a5:19:19:9b:69:6e:4c:da:17:0f:0c:1f:9d:e8:52:91:
df:d5:8a:83:f0:de:7f:33:d5:1a:33:a3:e7:72:fa:b5:cd:19:
4f:33:d2:21:be:f2:80:31:c7:b6:09:b5:7f:44:cc:9c:7c:a3:
30:17:36:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:49:46 2025 by rpki-client