Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/79f78b-8229-4f2d-a158-a525136fe644/1/CiU3GpUb_49wbuaCG2KEyrph9N8.roa
File: CiU3GpUb_49wbuaCG2KEyrph9N8.roa (raw, json)
Hash identifier: FIPMLLbtxZF+pb1D9bMTWdczb6Sah26SvnFSD3QrDJI=
Subject key identifier: 0A:25:37:1A:95:1B:FF:8F:70:6E:E6:82:1B:62:84:CA:BA:61:F4:DF
Certificate issuer: /CN=5c38a31c79a7db71726dae38ec9d6d2d1a21fd91
Certificate serial: 01856E2F9893B09CC7F2979E08A57D5A7573
Authority key identifier: 5C:38:A3:1C:79:A7:DB:71:72:6D:AE:38:EC:9D:6D:2D:1A:21:FD:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XDijHHmn23Fyba447J1tLRoh_ZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/79f78b-8229-4f2d-a158-a525136fe644/1/CiU3GpUb_49wbuaCG2KEyrph9N8.roa
Signing time: Sun 01 Jan 2023 16:34:50 +0000
ROA not before: Sun 01 Jan 2023 16:34:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205836
IP address blocks: 46.149.106.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:2f:98:93:b0:9c:c7:f2:97:9e:08:a5:7d:5a:75:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c38a31c79a7db71726dae38ec9d6d2d1a21fd91
Validity
Not Before: Jan 1 16:34:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0a25371a951bff8f706ee6821b6284caba61f4df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:8b:f4:38:45:d0:e3:8c:3a:3d:c8:a3:51:9a:
f3:45:e1:ce:e2:fc:68:57:4c:11:61:ba:92:0f:04:
f7:11:ed:e5:90:c9:74:64:ee:05:50:bf:a6:bb:48:
c1:97:09:bd:80:a0:6b:7f:6a:af:c4:34:8e:bf:5e:
3e:dc:a2:c0:42:ab:54:51:dc:fc:25:cd:3c:75:85:
30:8e:07:c2:13:88:01:4c:3d:a4:de:27:63:ae:9b:
ef:c2:91:19:4f:b3:81:07:d8:e9:55:d1:d8:d0:e8:
8c:49:fc:b1:d9:b4:de:d4:46:84:d3:f8:e0:6c:07:
8d:0e:53:47:7b:6e:ea:f2:51:e7:01:8e:9c:ef:7c:
b7:1d:65:b7:59:99:bc:e1:0b:12:f0:ef:02:3c:5c:
a5:fa:95:fb:88:3a:fa:2d:7a:a0:78:76:ff:66:d4:
a9:b1:ab:7e:4f:38:da:5f:a0:0b:cd:d0:10:4b:b2:
cf:ec:48:63:b1:12:86:bd:bb:e5:1d:fc:e3:29:20:
4e:00:41:a1:48:c9:ec:f9:d1:65:4d:02:f3:5f:0d:
ed:9b:20:ba:73:6c:93:ed:24:6a:dc:10:87:94:95:
21:b8:b2:c4:8d:d1:2b:3e:20:bb:2d:09:5f:63:77:
ff:e1:61:a8:ed:e6:7e:00:95:83:cf:bd:13:15:21:
a7:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:25:37:1A:95:1B:FF:8F:70:6E:E6:82:1B:62:84:CA:BA:61:F4:DF
X509v3 Authority Key Identifier:
keyid:5C:38:A3:1C:79:A7:DB:71:72:6D:AE:38:EC:9D:6D:2D:1A:21:FD:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XDijHHmn23Fyba447J1tLRoh_ZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/79f78b-8229-4f2d-a158-a525136fe644/1/CiU3GpUb_49wbuaCG2KEyrph9N8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/79f78b-8229-4f2d-a158-a525136fe644/1/XDijHHmn23Fyba447J1tLRoh_ZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.149.106.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:29:a5:6c:70:dc:cb:ad:a8:70:0b:e2:44:f9:0f:ab:9b:0d:
79:a0:ba:0b:e7:7f:04:fe:07:61:34:55:aa:f1:94:22:11:e3:
d9:77:d3:6e:9a:14:4b:4f:05:32:33:b4:c3:f9:50:94:6c:c6:
e9:74:0d:19:76:3d:d4:c9:2e:f0:1b:12:1a:f5:7a:59:34:25:
81:ef:e5:50:4e:b3:ca:5f:09:51:99:9b:bb:de:30:4d:5d:cb:
4a:29:d8:c9:17:bf:e9:3c:de:7a:4c:74:e4:2b:04:c1:b3:cc:
ac:7a:cd:f4:d8:b4:55:84:a1:7d:82:81:17:f5:63:44:90:36:
c0:e8:08:af:69:62:b8:3e:5e:58:de:42:4f:ac:4b:58:7f:71:
ac:57:bc:3a:78:24:4c:09:de:43:1d:0c:5d:e4:50:08:92:17:
93:30:e1:ca:92:70:88:0d:23:6d:2a:1f:8f:73:58:4f:b5:b6:
cc:c1:37:51:57:d4:fd:40:07:fc:f3:7a:df:cd:87:04:ae:82:
61:1a:6d:2b:af:d0:cd:8f:88:11:52:43:85:31:c0:01:85:31:
b4:23:25:a9:fc:db:46:b8:6b:8f:51:69:d9:ef:28:46:9b:bd:
d4:16:19:e1:a7:ae:1b:39:d2:36:ca:94:a3:39:15:5b:e1:ad:
97:da:7c:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 07:11:02 2025 by rpki-client