Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/rWOOuxCxyBs229MgpWuVAQBH_O4.roa
File: rWOOuxCxyBs229MgpWuVAQBH_O4.roa (raw, json)
Hash identifier: 580cJpJ0TdvrJE/4swQ1qzvU30RgmSnFApL4JThlvgU=
Subject key identifier: AD:63:8E:BB:10:B1:C8:1B:36:DB:D3:20:A5:6B:95:01:00:47:FC:EE
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 01942369A0CB07312069547184A517CEDD7C
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/rWOOuxCxyBs229MgpWuVAQBH_O4.roa
Signing time: Wed 01 Jan 2025 19:48:32 +0000
ROA not before: Wed 01 Jan 2025 19:48:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51239
IP address blocks: 46.102.255.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:a0:cb:07:31:20:69:54:71:84:a5:17:ce:dd:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Jan 1 19:48:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ad638ebb10b1c81b36dbd320a56b95010047fcee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:f4:df:04:5f:82:5f:99:8e:13:33:e7:de:04:
e9:ba:05:e0:d9:25:41:42:e1:02:20:7a:fc:5b:bf:
69:ad:8e:92:22:e6:51:f6:d7:ba:c9:dc:c4:a1:08:
9e:3c:23:b6:20:a8:ec:3e:4e:80:a5:f1:19:a4:b4:
3d:52:a7:44:6d:26:80:cb:e7:f5:44:82:66:78:75:
0d:e3:bc:5d:ac:d0:c0:30:38:d7:03:63:d4:3e:47:
71:9b:c3:d8:f4:dc:ee:c3:4c:58:2c:65:8b:ba:f8:
0e:b9:59:ea:eb:eb:97:52:6e:dc:82:6c:45:cb:b0:
0d:88:ed:e5:d8:8b:84:f3:cc:a4:58:e9:97:34:78:
2d:9b:59:15:8f:0c:af:8d:e5:75:da:70:03:fb:d6:
85:0a:cf:b7:11:39:af:77:65:a0:5e:6d:41:21:e3:
81:0b:4b:4a:85:0e:ae:c5:84:fe:65:09:b0:97:26:
87:8e:69:2a:43:91:ba:6f:d5:05:cb:d8:a1:8b:9d:
ab:86:c0:1c:21:32:3a:59:b0:83:91:f1:1d:a7:82:
28:52:95:bf:ee:df:9e:22:38:79:3c:21:ca:04:10:
3a:76:5f:53:1d:72:bd:67:60:1b:42:af:4b:45:ce:
59:8f:5e:1f:b9:14:65:2e:33:60:00:34:08:c9:89:
a8:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:63:8E:BB:10:B1:C8:1B:36:DB:D3:20:A5:6B:95:01:00:47:FC:EE
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/rWOOuxCxyBs229MgpWuVAQBH_O4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.102.255.0/24
Signature Algorithm: sha256WithRSAEncryption
42:f0:d3:fe:05:b1:3c:37:ac:62:4e:b0:36:47:1f:16:bd:ff:
06:d6:78:3b:79:f5:4c:11:a7:cf:53:d9:af:5a:91:45:46:a6:
33:3b:22:9a:ea:92:83:ed:2d:f6:88:32:21:83:d7:ca:86:50:
93:0b:b4:ea:c3:e4:c6:45:19:fb:5d:da:05:81:a4:d0:4a:81:
96:3e:e9:91:64:64:e0:bd:4d:65:71:85:95:e6:7e:55:c5:96:
2a:0b:69:5a:25:ec:33:5b:72:93:f8:59:81:fe:04:1e:bd:c9:
5c:60:57:28:c0:95:cd:ab:2f:f0:01:fe:2b:76:d3:ce:b8:8d:
90:21:94:1a:90:8e:c0:4e:e4:06:f0:e8:63:d6:4b:70:15:46:
11:f4:20:ca:97:bb:55:48:5e:23:d1:e9:3e:a3:02:48:7b:41:
b6:3d:8a:27:72:8b:fb:51:ca:2c:76:ce:da:a6:b6:2c:f5:2f:
62:88:28:b1:87:e4:d5:9a:fc:29:fa:82:f4:67:a4:c6:4c:05:
7e:5a:5c:5b:74:22:f1:a6:2d:b0:57:43:2e:7d:14:a4:b0:e5:
c5:b0:f3:f5:a2:79:f2:c1:4d:c1:21:d6:98:5d:08:bd:57:41:
d4:5e:61:bb:33:10:ef:67:61:53:54:b9:ee:f7:e1:f3:ee:a4:
ed:b8:e9:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:37:50 2025 by rpki-client