Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/6dc978-bfd6-41ec-8a3a-c03017e98c53/1/enPD3-QsFIqtt3EF5KftpfxUk2c.roa
File: enPD3-QsFIqtt3EF5KftpfxUk2c.roa (raw, json)
Hash identifier: rDghkTed+eOeVJOAKp4pbkGhNVT2Qd4XEKwo+0zek5w=
Subject key identifier: 7A:73:C3:DF:E4:2C:14:8A:AD:B7:71:05:E4:A7:ED:A5:FC:54:93:67
Certificate issuer: /CN=80e48485ce9b0e425640804edc0ed2ba6b8f4b8f
Certificate serial: 01857169BF1C9FE8FDA85C0D0F07F56C7BB7
Authority key identifier: 80:E4:84:85:CE:9B:0E:42:56:40:80:4E:DC:0E:D2:BA:6B:8F:4B:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gOSEhc6bDkJWQIBO3A7SumuPS48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/6dc978-bfd6-41ec-8a3a-c03017e98c53/1/enPD3-QsFIqtt3EF5KftpfxUk2c.roa
Signing time: Mon 02 Jan 2023 07:37:13 +0000
ROA not before: Mon 02 Jan 2023 07:37:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 398465
IP address blocks: 46.254.106.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:69:bf:1c:9f:e8:fd:a8:5c:0d:0f:07:f5:6c:7b:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80e48485ce9b0e425640804edc0ed2ba6b8f4b8f
Validity
Not Before: Jan 2 07:37:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7a73c3dfe42c148aadb77105e4a7eda5fc549367
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:49:35:fb:5b:95:4a:6f:44:d9:9f:bd:b8:0e:
41:37:65:2c:5e:e9:1d:a1:23:70:1b:67:95:4c:97:
ab:17:51:33:40:87:2f:9b:9b:8a:85:87:34:91:e0:
79:cc:86:ce:f4:05:3a:0d:d3:7c:fe:39:8b:62:78:
a2:0a:07:69:5e:80:80:cf:86:2c:2f:58:da:79:d5:
21:36:da:eb:0f:52:c0:3e:ca:0e:58:f6:9f:f0:36:
17:1a:d4:12:79:75:c6:d5:a7:c0:a9:e7:92:0a:61:
0e:27:2a:fc:5d:5f:27:25:ef:a3:a4:b7:d1:3f:a7:
2f:61:c6:6f:07:4c:1d:e9:ef:30:a7:63:34:13:d5:
8e:67:b3:98:34:5a:c5:66:9c:10:8c:8a:41:96:95:
a2:f0:37:c6:0a:24:aa:50:64:26:84:d5:ef:86:33:
4f:66:1e:4f:21:1b:a6:5f:95:15:86:7f:c7:d2:8b:
e8:b9:f1:d1:e6:b3:1b:be:ee:47:d0:15:38:54:ee:
c6:53:ee:af:c9:ae:33:bc:77:6b:1f:82:48:a1:fa:
2e:41:47:2d:00:39:7d:9f:52:69:16:b4:22:67:30:
1b:f5:00:3b:50:98:03:e2:85:e0:f6:ed:0a:b3:6b:
51:5c:7b:e9:ac:04:b4:fc:61:d9:f4:f7:ee:27:bb:
e7:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:73:C3:DF:E4:2C:14:8A:AD:B7:71:05:E4:A7:ED:A5:FC:54:93:67
X509v3 Authority Key Identifier:
keyid:80:E4:84:85:CE:9B:0E:42:56:40:80:4E:DC:0E:D2:BA:6B:8F:4B:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gOSEhc6bDkJWQIBO3A7SumuPS48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/6dc978-bfd6-41ec-8a3a-c03017e98c53/1/enPD3-QsFIqtt3EF5KftpfxUk2c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/6dc978-bfd6-41ec-8a3a-c03017e98c53/1/gOSEhc6bDkJWQIBO3A7SumuPS48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.254.106.0/24
Signature Algorithm: sha256WithRSAEncryption
12:4c:11:57:84:e8:93:31:dc:9a:d9:e2:9e:d6:43:28:43:86:
28:12:0e:2b:b1:c4:04:c8:cd:eb:73:7e:90:0b:a6:4c:1a:5b:
f2:36:84:22:8f:7f:07:86:4c:ad:b4:02:c5:68:c2:c8:26:89:
08:b8:2e:46:52:11:1a:f5:28:ad:7f:31:de:89:6c:db:a0:da:
f7:a6:d7:cc:86:9d:7c:36:b9:da:21:05:5f:32:22:e7:25:df:
a4:51:fc:1c:07:eb:c9:ab:0d:f9:43:0c:09:9b:48:b8:ba:15:
a3:8b:34:ec:d2:81:b8:b9:6f:80:ac:25:34:cd:11:6b:ac:78:
63:a8:49:ff:20:93:50:ea:54:34:f6:2e:81:34:66:6e:3f:dc:
48:ea:0b:9f:ff:1e:42:29:5d:29:12:68:9f:e9:16:14:c5:3d:
95:4c:f8:75:cf:52:28:66:d5:01:8d:6e:cb:68:d7:4f:8c:64:
8f:c3:5b:91:2f:d4:9f:df:fc:45:52:51:51:20:2b:9e:7f:f0:
6d:02:19:65:be:94:8b:43:f4:0f:e5:87:2f:03:5d:88:b9:68:
1b:28:a8:d3:77:bc:36:6c:4e:d0:a3:da:fc:49:dc:bf:f4:86:
c6:0c:97:77:ba:61:cb:9a:37:76:13:3f:ce:9f:76:b9:6c:fb:
71:b1:a0:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 04:40:57 2025 by rpki-client