Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/79f78b-8229-4f2d-a158-a525136fe644/1/Bn9HRLkmEC2YZmXYjjBMxYYzRdE.roa
File: Bn9HRLkmEC2YZmXYjjBMxYYzRdE.roa (raw, json)
Hash identifier: m52Q4gJbAx6L4Na7v2+q0DrwQXorNgzmZzDn5xDN9sI=
Subject key identifier: 06:7F:47:44:B9:26:10:2D:98:66:65:D8:8E:30:4C:C5:86:33:45:D1
Certificate issuer: /CN=5c38a31c79a7db71726dae38ec9d6d2d1a21fd91
Certificate serial: 01851A2AE079F9E44D191D82CDB80105E4D9
Authority key identifier: 5C:38:A3:1C:79:A7:DB:71:72:6D:AE:38:EC:9D:6D:2D:1A:21:FD:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XDijHHmn23Fyba447J1tLRoh_ZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/79f78b-8229-4f2d-a158-a525136fe644/1/Bn9HRLkmEC2YZmXYjjBMxYYzRdE.roa
Signing time: Fri 16 Dec 2022 09:01:35 +0000
ROA not before: Fri 16 Dec 2022 09:01:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205836
IP address blocks: 46.149.106.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:1a:2a:e0:79:f9:e4:4d:19:1d:82:cd:b8:01:05:e4:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c38a31c79a7db71726dae38ec9d6d2d1a21fd91
Validity
Not Before: Dec 16 09:01:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=067f4744b926102d986665d88e304cc5863345d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:9c:82:9f:d8:38:b4:37:f9:fd:9c:75:c6:c8:
0c:ea:aa:4c:e6:b2:9d:01:a9:d9:1f:36:07:6f:8e:
8c:13:54:2b:40:1d:a1:05:cc:57:65:39:c4:66:c0:
ca:be:17:c4:69:f1:bf:c8:14:cb:be:7a:85:1c:05:
76:44:b9:5c:7b:07:fd:9c:54:0d:39:be:44:c9:cb:
60:7a:d5:a4:79:92:4a:38:73:f9:ff:6f:bd:bd:cd:
b6:43:52:a7:8c:dc:1e:6d:02:e0:ad:08:35:d9:bd:
0a:1d:fb:72:b7:83:4c:be:1a:a5:d7:3d:f5:9c:cb:
d8:c6:1d:9b:c7:a1:af:fa:72:c0:e3:06:a2:7f:65:
af:01:03:a8:13:ed:a5:9d:98:c4:cc:f5:4c:b6:d4:
5f:b0:67:9c:ad:83:01:36:08:88:a6:8d:2b:00:40:
7a:5d:9f:fa:fd:85:9b:43:ef:47:79:62:a5:b4:61:
a2:b1:9a:9a:5d:ba:da:41:df:bc:31:7d:c4:93:63:
80:38:26:95:6c:49:ab:9e:f1:54:fe:54:71:62:5f:
e0:38:d9:85:c3:e9:fb:7a:78:13:d5:b3:15:ad:8d:
75:87:dd:03:a3:ba:5e:e6:80:05:85:5a:1c:78:63:
9c:9d:44:96:ce:4c:8c:d1:09:3b:37:ac:27:b5:40:
68:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:7F:47:44:B9:26:10:2D:98:66:65:D8:8E:30:4C:C5:86:33:45:D1
X509v3 Authority Key Identifier:
keyid:5C:38:A3:1C:79:A7:DB:71:72:6D:AE:38:EC:9D:6D:2D:1A:21:FD:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XDijHHmn23Fyba447J1tLRoh_ZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/79f78b-8229-4f2d-a158-a525136fe644/1/Bn9HRLkmEC2YZmXYjjBMxYYzRdE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/79f78b-8229-4f2d-a158-a525136fe644/1/XDijHHmn23Fyba447J1tLRoh_ZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.149.106.0/24
Signature Algorithm: sha256WithRSAEncryption
79:db:ca:50:36:fa:4d:e3:99:a8:c6:79:59:fd:a0:6e:54:06:
c4:5a:75:3e:2c:f8:1a:e3:26:40:b3:d8:cb:c8:98:db:19:09:
2d:d1:96:e6:01:03:0a:ad:81:ed:7e:d2:7c:40:d6:d2:b0:2e:
40:4e:15:64:43:18:e4:4c:d6:88:43:82:d0:09:c4:6f:23:43:
a1:d9:2c:2c:85:6a:c3:01:a1:5e:a4:00:a6:90:90:3c:83:f8:
ab:1b:81:1b:41:77:32:2c:77:fc:9c:ef:6e:7f:a6:fe:d7:7b:
52:ea:e4:f2:cb:8c:e8:58:2e:95:d8:27:b4:d5:a2:cc:66:2b:
84:24:ad:80:38:95:c1:e7:69:5d:bf:92:45:60:30:6c:f5:4b:
46:d4:48:2e:37:57:32:5c:bb:6c:4d:d1:72:66:95:38:b9:ee:
eb:df:a2:39:19:d2:fc:9b:fc:8a:5e:4d:b9:5b:73:3f:5d:6f:
a9:43:a9:6a:1a:1f:fa:2c:b3:e9:e1:34:96:5c:49:f1:ef:c7:
1d:bf:a2:91:03:59:1e:4b:1f:5b:c2:e2:40:ff:d7:65:04:6d:
4b:5f:a6:7e:7f:89:4f:67:42:7d:76:c7:af:69:33:64:a2:75:
e4:d5:2c:5d:3e:8e:55:64:d9:a9:c7:77:9c:80:93:2a:2b:11:
88:87:34:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 07:53:31 2025 by rpki-client