Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/ey5hfbdWQgMGlLLRhHk4lxjHzcs.roa
File: ey5hfbdWQgMGlLLRhHk4lxjHzcs.roa (raw, json)
Hash identifier: 5pgkYJemSZ81sP39WKzYABVimxvElpEgqAb4FFIhI2k=
Subject key identifier: 7B:2E:61:7D:B7:56:42:03:06:94:B2:D1:84:79:38:97:18:C7:CD:CB
Certificate issuer: /CN=8eb441dadbbecb6965d4ea1f046cc5c8e28817fc
Certificate serial: 019424B3E5594AC06CB811FB9D468CCFA711
Authority key identifier: 8E:B4:41:DA:DB:BE:CB:69:65:D4:EA:1F:04:6C:C5:C8:E2:88:17:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/ey5hfbdWQgMGlLLRhHk4lxjHzcs.roa
Signing time: Thu 02 Jan 2025 01:49:16 +0000
ROA not before: Thu 02 Jan 2025 01:49:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200195
IP address blocks: 46.151.181.0/24 maxlen: 24
46.151.182.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:e5:59:4a:c0:6c:b8:11:fb:9d:46:8c:cf:a7:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8eb441dadbbecb6965d4ea1f046cc5c8e28817fc
Validity
Not Before: Jan 2 01:49:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7b2e617db75642030694b2d18479389718c7cdcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:fb:ee:45:58:46:47:63:1e:13:d7:f9:e3:f3:
f3:8c:2c:5c:93:eb:7a:63:49:87:81:fe:1f:c4:68:
a4:3d:58:fc:bf:5b:03:d8:9c:16:ea:d6:22:4a:60:
8a:39:b7:bc:6f:cd:9b:95:98:f2:8b:1d:be:22:77:
fe:72:65:9f:31:98:aa:9c:67:94:f1:64:d8:06:3f:
02:80:b5:2a:b2:18:00:a0:f1:3f:ce:e6:5b:c8:0c:
02:90:f3:2b:aa:2b:d9:68:97:5c:0f:d3:22:9d:4b:
26:7f:9e:69:cf:7b:58:68:56:a1:81:76:13:76:73:
54:69:1d:9f:89:27:b8:1c:63:bf:ea:03:be:8e:36:
5c:49:52:93:85:7a:1a:c2:5d:d1:2d:f0:5c:4c:e6:
e2:b3:35:9a:35:87:8d:db:30:31:69:02:76:6c:74:
6c:12:c5:a8:4a:76:1e:77:e7:a6:f8:f9:b8:12:4d:
67:98:b1:b0:1c:a6:88:63:41:36:af:5f:29:06:3f:
d6:82:dc:54:75:25:03:06:f4:89:7e:10:a6:86:53:
e3:ae:38:f4:52:26:fd:f0:75:62:1e:30:ef:5e:6a:
e2:68:6d:bb:b6:23:89:6a:8d:22:76:3f:cb:81:2c:
e1:98:70:32:18:9d:6e:da:df:60:ec:7a:7e:9d:ec:
46:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:2E:61:7D:B7:56:42:03:06:94:B2:D1:84:79:38:97:18:C7:CD:CB
X509v3 Authority Key Identifier:
keyid:8E:B4:41:DA:DB:BE:CB:69:65:D4:EA:1F:04:6C:C5:C8:E2:88:17:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/ey5hfbdWQgMGlLLRhHk4lxjHzcs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.151.181.0-46.151.182.255
Signature Algorithm: sha256WithRSAEncryption
a0:1b:06:cd:c3:df:f4:fd:2e:a1:e1:5e:94:33:1d:aa:a9:b6:
19:2c:23:6e:a3:7c:47:8a:0c:37:3b:a6:33:1b:c4:6d:99:df:
59:2e:1c:1f:05:db:e0:b8:89:0f:18:c9:be:07:1b:a0:b7:19:
1c:59:7b:56:e6:dc:85:a3:ca:3e:b8:5f:35:0f:61:31:c5:b2:
84:ec:01:c3:50:3e:e6:b3:db:6e:39:10:0c:dd:69:f2:7b:a1:
03:6b:3a:d1:b9:e8:86:02:14:3f:30:ee:0b:22:7f:59:d3:f4:
78:62:d4:17:69:87:c3:86:67:80:db:6f:d8:ce:a7:99:f3:d6:
fa:01:3c:12:9b:3d:ef:c4:f5:34:70:26:1e:ed:24:09:14:9e:
4e:34:39:5b:cb:26:19:80:a5:dd:b7:d0:47:a9:39:1b:70:41:
60:66:bd:48:cb:4c:c5:3f:9b:48:f9:f6:1b:fb:ea:11:e5:bf:
be:5f:eb:6c:de:14:3d:32:c2:56:bd:63:53:0d:c2:d1:0e:58:
ae:bb:de:aa:0d:bf:3e:bd:c2:74:3f:9e:17:fd:0e:e4:c7:c6:
38:bd:20:64:1b:dc:7d:61:65:3d:f3:1f:97:06:22:9c:4e:0d:
90:50:f9:0e:dc:a4:e1:47:f7:fe:b3:c5:92:e8:5d:a4:95:08:
65:de:a2:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 09:32:09 2025 by rpki-client