Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/46Ve5aJFMm7qNobMGWo_CJCeoBk.roa
File: 46Ve5aJFMm7qNobMGWo_CJCeoBk.roa (raw, json)
Hash identifier: R2GULePGoK/dK4LpJe/eicL8Dudbhar9yLrSUuCGr+Q=
Subject key identifier: E3:A5:5E:E5:A2:45:32:6E:EA:36:86:CC:19:6A:3F:08:90:9E:A0:19
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 01942369A24A5D3B2B0627DBF4B33392403B
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/46Ve5aJFMm7qNobMGWo_CJCeoBk.roa
Signing time: Wed 01 Jan 2025 19:48:32 +0000
ROA not before: Wed 01 Jan 2025 19:48:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56417
IP address blocks: 128.0.2.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:a2:4a:5d:3b:2b:06:27:db:f4:b3:33:92:40:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Jan 1 19:48:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e3a55ee5a245326eea3686cc196a3f08909ea019
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:1b:57:a1:3c:49:f3:ef:48:65:98:41:e8:65:
9b:eb:20:89:b0:0a:61:36:9e:78:a2:5f:dc:cd:fb:
a6:41:0c:47:49:8b:5d:4c:c5:ab:f1:b9:9f:5d:14:
c6:da:66:7e:cb:4d:a8:59:00:e8:6a:e2:d0:6c:87:
de:45:26:9d:64:fa:b5:15:ce:73:b7:d1:fc:fb:f0:
d9:ca:be:49:6e:4c:9c:46:d1:a8:32:38:81:9b:51:
ae:a1:a3:d9:25:7e:3a:86:10:aa:8d:57:0c:86:1d:
13:35:2f:31:18:04:42:d6:04:11:6d:32:30:09:61:
dc:a2:2d:bb:0b:83:4b:76:fc:5a:2c:ed:4c:c8:84:
c7:6f:07:d9:fc:f3:8b:84:02:61:2c:77:25:04:87:
2a:62:a7:cd:f0:3e:cc:c3:50:34:2d:ca:5d:da:de:
2f:64:99:a5:af:ab:27:44:94:c3:4a:28:41:76:06:
a2:81:f5:52:d3:cf:f3:f0:b5:9a:97:cf:f2:eb:d5:
d1:1b:d4:20:90:14:84:00:6e:c9:ea:a1:1d:af:23:
a4:25:b2:0b:64:fb:d7:3e:67:74:ff:fd:88:ef:e3:
76:d6:58:aa:b9:76:f7:02:c1:f4:e9:50:eb:fc:18:
0d:9c:8f:31:39:89:31:a2:f1:3e:21:3b:b5:a5:84:
ac:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:A5:5E:E5:A2:45:32:6E:EA:36:86:CC:19:6A:3F:08:90:9E:A0:19
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/46Ve5aJFMm7qNobMGWo_CJCeoBk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
128.0.2.0/24
Signature Algorithm: sha256WithRSAEncryption
37:9b:42:45:9b:69:dd:be:51:41:01:eb:e3:e1:0e:bc:50:f9:
f7:99:08:af:24:2f:54:cc:08:36:e0:fe:9b:09:f5:bf:1e:9a:
ec:af:e5:b6:54:cd:81:cb:52:d3:f9:de:bc:7f:22:c2:5a:d3:
d9:eb:05:44:11:1a:ad:21:2e:13:f4:38:78:44:2d:35:68:81:
e0:cc:4b:21:76:b0:7e:9a:b2:b7:8c:d2:47:36:dd:d3:fb:05:
34:57:fb:45:05:de:dc:4e:6f:49:2c:3c:a8:1f:c6:e1:49:2f:
d5:4c:f7:04:ca:89:ef:7f:72:81:51:9d:7c:53:9c:54:f9:45:
f4:fc:33:8b:fb:6c:80:15:40:94:32:da:a2:5a:f7:a5:d9:a4:
5d:70:e9:28:5d:bf:03:c9:05:32:44:85:e7:1c:95:5e:3c:c7:
fc:46:41:f6:ed:cc:12:b6:9f:01:d5:55:b1:cc:59:55:36:20:
99:04:89:5f:b2:a9:95:48:0d:9d:98:7b:b3:33:18:c0:f4:a7:
3c:0f:ac:8d:3c:b6:5a:11:df:1c:4b:31:7e:f7:93:72:74:6a:
c4:15:31:4d:37:da:78:e3:f9:45:63:10:68:17:01:45:a3:33:
33:87:cf:bb:a0:3a:f5:2e:23:c8:2e:58:a1:ae:7a:04:dc:f7:
f9:a5:d1:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:44:41 2025 by rpki-client