Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/mCecvopZfXG3WIu7Fhw-f_4DPAk.roa
File: mCecvopZfXG3WIu7Fhw-f_4DPAk.roa (raw, json)
Hash identifier: MecNKHL4HsnfTECbSBEtAo1C5aYtC+yZbiahatmHpI0=
Subject key identifier: 98:27:9C:BE:8A:59:7D:71:B7:58:8B:BB:16:1C:3E:7F:FE:03:3C:09
Certificate issuer: /CN=ed6da9e41686d21c12799c8e84b274aa8241508c
Certificate serial: 019424B382806C542B920A553EC1D14E36C0
Authority key identifier: ED:6D:A9:E4:16:86:D2:1C:12:79:9C:8E:84:B2:74:AA:82:41:50:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/mCecvopZfXG3WIu7Fhw-f_4DPAk.roa
Signing time: Thu 02 Jan 2025 01:48:51 +0000
ROA not before: Thu 02 Jan 2025 01:48:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 46.143.204.0/22 maxlen: 22
46.143.204.0/24 maxlen: 24
46.143.205.0/24 maxlen: 24
46.143.206.0/24 maxlen: 24
185.84.220.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:82:80:6c:54:2b:92:0a:55:3e:c1:d1:4e:36:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed6da9e41686d21c12799c8e84b274aa8241508c
Validity
Not Before: Jan 2 01:48:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=98279cbe8a597d71b7588bbb161c3e7ffe033c09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:b4:e0:45:e4:8f:ef:e4:8b:ac:33:2b:14:3e:
0f:f5:4f:01:2f:48:b3:52:1c:1a:da:95:66:65:97:
59:6f:8d:2c:4f:c8:45:e7:90:b8:73:9f:1c:3d:fd:
c9:8b:6d:b9:5a:16:c9:9f:2f:b6:04:e7:75:10:33:
90:24:fc:39:b4:30:a1:be:da:75:d3:b1:e7:55:87:
ce:e4:92:f0:7b:37:0f:92:16:5b:ec:ce:0c:91:3b:
9e:b9:f0:7c:01:db:58:7d:2e:86:80:7b:b4:62:15:
ab:17:f2:84:32:48:f8:33:68:76:27:c9:d1:e6:2a:
a1:b8:44:f5:af:78:a7:5f:ab:37:5a:ef:d7:be:15:
21:37:87:ff:dc:d1:d0:99:ef:c8:05:05:68:cf:9f:
6e:fe:ba:3c:33:0b:98:61:4c:22:1b:09:80:c2:8a:
ab:da:6e:5f:27:94:41:20:f3:3d:3a:fe:56:85:f5:
d4:de:46:9c:57:57:7d:e5:3d:f4:67:24:4a:86:14:
d1:a9:c0:fa:17:bc:6e:98:9b:d9:06:fd:3b:e5:b4:
47:db:b7:4e:ff:ea:b8:35:1e:00:19:ba:5e:a7:9e:
ff:10:45:99:4d:67:3f:c9:47:f1:56:3d:b0:d0:a5:
ab:d8:1b:76:a6:f4:95:c0:5c:92:9d:c7:45:97:01:
34:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:27:9C:BE:8A:59:7D:71:B7:58:8B:BB:16:1C:3E:7F:FE:03:3C:09
X509v3 Authority Key Identifier:
keyid:ED:6D:A9:E4:16:86:D2:1C:12:79:9C:8E:84:B2:74:AA:82:41:50:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/mCecvopZfXG3WIu7Fhw-f_4DPAk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.143.204.0/22
185.84.220.0/22
Signature Algorithm: sha256WithRSAEncryption
30:55:a0:04:00:a4:85:3d:d9:8d:19:3a:69:b6:5b:1e:b1:cd:
41:65:93:da:6f:78:51:f3:c0:83:0b:31:3a:6d:9e:a2:41:af:
cd:3d:9b:25:50:3f:72:25:03:31:4d:a9:80:cd:dd:0f:fe:9b:
f0:17:ef:97:aa:fb:56:6c:db:1a:da:12:38:02:c5:dc:48:4d:
01:1d:e9:b6:f0:d4:c9:a7:1a:55:5e:b8:46:e6:85:ad:05:2d:
93:7a:b7:07:08:d6:f9:17:36:94:a7:6b:ba:af:9e:40:90:92:
97:c7:e6:d7:ef:b0:9c:3f:b4:22:2c:45:05:35:bf:45:8f:25:
9d:71:cf:22:c6:1f:ae:3c:32:b2:68:8d:d6:0f:e2:71:a3:ab:
f8:ce:fb:7f:f8:06:9a:d6:6f:98:70:66:d9:c5:41:54:4e:13:
e6:84:27:95:33:db:ce:e0:0a:f2:79:da:4e:09:06:ed:69:05:
35:ea:d9:f1:04:35:7d:43:f7:aa:53:97:5d:3c:4b:69:cd:8b:
f5:ce:ae:53:09:6a:c2:b2:3b:23:37:c5:a2:21:63:78:f0:cf:
1c:7f:ed:87:8f:b8:47:75:c8:28:7b:a8:28:e6:dd:cb:3d:fd:
ed:c4:62:cd:64:db:7e:3a:f4:e8:f7:d4:4e:30:d5:56:51:e8:
c9:87:2f:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:28:08 2025 by rpki-client