Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/790648-dd90-44eb-9a8f-8fa09874113e/1/tv6tClbvL3fe6dvTJo3FM5f_h3Y.roa
File: tv6tClbvL3fe6dvTJo3FM5f_h3Y.roa (raw, json)
Hash identifier: A+tnxsTWmCeZid4USiunoHsPUSXZ+9POOmWlZ50vqKI=
Subject key identifier: B6:FE:AD:0A:56:EF:2F:77:DE:E9:DB:D3:26:8D:C5:33:97:FF:87:76
Certificate issuer: /CN=ed772c2fa23be6fa8e28aea4a715d5ac31f0cc9f
Certificate serial: 0194236A14284DE31B5504CBDC33960F2D35
Authority key identifier: ED:77:2C:2F:A2:3B:E6:FA:8E:28:AE:A4:A7:15:D5:AC:31:F0:CC:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7XcsL6I75vqOKK6kpxXVrDHwzJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/790648-dd90-44eb-9a8f-8fa09874113e/1/tv6tClbvL3fe6dvTJo3FM5f_h3Y.roa
Signing time: Wed 01 Jan 2025 19:49:02 +0000
ROA not before: Wed 01 Jan 2025 19:49:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16110
IP address blocks: 46.174.208.0/24 maxlen: 24
46.174.209.0/24 maxlen: 24
46.174.211.0/24 maxlen: 24
46.174.212.0/24 maxlen: 24
46.174.213.0/24 maxlen: 24
46.174.214.0/24 maxlen: 24
46.174.215.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:14:28:4d:e3:1b:55:04:cb:dc:33:96:0f:2d:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed772c2fa23be6fa8e28aea4a715d5ac31f0cc9f
Validity
Not Before: Jan 1 19:49:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b6fead0a56ef2f77dee9dbd3268dc53397ff8776
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:26:a1:dd:fe:cb:58:26:dc:5c:64:40:02:1d:
fa:f6:19:4e:07:e7:a4:40:11:e2:a4:bd:42:6f:21:
f5:53:af:17:bb:93:2f:81:bc:f3:87:6d:46:ae:10:
2c:92:5c:01:e8:b5:31:33:3a:3f:4e:65:e9:f4:32:
bf:6d:db:0c:ac:d1:ed:e9:97:86:42:cd:1e:e9:79:
84:62:15:46:69:ff:be:23:2b:0a:45:20:da:ec:d3:
44:dd:3f:1e:9f:de:98:3c:95:a8:36:fd:42:1b:5f:
94:58:af:eb:6a:97:ce:fd:37:fd:ff:5f:d4:1d:b1:
c7:85:98:d3:c4:12:45:d2:69:9b:6b:fd:6b:6c:2c:
eb:eb:a1:af:bc:48:bc:e3:38:b3:f4:09:3e:4f:da:
bb:00:17:77:36:df:39:6e:e6:ce:01:66:17:b8:70:
60:b5:d4:2b:ac:66:b1:b8:ff:8e:00:2c:4b:aa:84:
8d:09:b1:8a:67:29:b8:47:99:76:ec:49:1c:93:2a:
ef:4e:93:a2:6b:0c:8a:3e:48:75:1a:74:e3:4a:c6:
6b:79:14:d1:fd:c5:6a:bc:31:33:27:0d:62:8b:2d:
f4:39:a4:24:18:7a:1b:a3:7b:bc:ed:69:8c:f8:b1:
aa:c5:be:66:9f:a9:2d:86:bb:06:c9:1b:38:d3:81:
aa:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:FE:AD:0A:56:EF:2F:77:DE:E9:DB:D3:26:8D:C5:33:97:FF:87:76
X509v3 Authority Key Identifier:
keyid:ED:77:2C:2F:A2:3B:E6:FA:8E:28:AE:A4:A7:15:D5:AC:31:F0:CC:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7XcsL6I75vqOKK6kpxXVrDHwzJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/790648-dd90-44eb-9a8f-8fa09874113e/1/tv6tClbvL3fe6dvTJo3FM5f_h3Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/790648-dd90-44eb-9a8f-8fa09874113e/1/7XcsL6I75vqOKK6kpxXVrDHwzJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.174.208.0/23
46.174.211.0-46.174.215.255
Signature Algorithm: sha256WithRSAEncryption
3d:c2:9a:13:05:35:0c:5f:6d:ab:f6:b3:32:9e:8c:3c:02:f9:
27:13:dc:70:fc:3b:9e:d4:a6:19:7e:e6:a7:4e:58:e8:50:f4:
f7:e7:d3:7b:9a:c3:2e:07:da:d4:d0:a2:93:7c:d5:2b:f0:22:
6e:4f:49:73:12:b4:9d:79:b4:9a:5c:9c:c2:42:80:d6:14:a5:
91:7e:96:a7:0a:f6:61:9d:48:22:59:9f:80:27:93:ff:04:42:
29:e1:65:29:04:7f:2b:d9:e4:0c:32:c0:30:aa:48:4f:12:5a:
20:92:1c:ed:d9:92:8a:17:55:bd:ea:5c:80:43:bb:16:bf:6d:
37:8c:a1:2c:00:06:22:f6:06:17:cf:83:61:44:c9:06:a2:fd:
16:51:66:45:9a:c3:29:04:d8:1f:8c:9d:1c:f8:04:4b:25:ea:
26:dd:7c:2f:73:0a:ef:4b:c4:38:cd:8b:bd:f3:66:5a:be:ef:
89:28:46:e6:c1:d9:79:ea:b7:f1:bf:46:8c:20:5f:21:a6:d9:
3f:2c:9a:0f:c4:38:b7:5d:19:74:59:b4:7c:d2:88:80:aa:8e:
83:9b:18:3d:84:3d:07:86:ec:44:48:02:93:a8:13:61:86:74:
ba:fe:cb:05:fe:96:67:58:d8:7f:5f:87:03:f8:73:12:aa:dd:
30:f8:a1:dd
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:46:09 2025 by rpki-client