Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/c42ae7-5f64-4039-a051-403b857bf8b7/1/rMdX2eEDaioAgRa3aaKX-VEYlow.roa
File: rMdX2eEDaioAgRa3aaKX-VEYlow.roa (raw, json)
Hash identifier: wkQ0Qkb/oS/l+xc0Rub3Gd2Qiyy5kmWIynopHt+m4kI=
Subject key identifier: AC:C7:57:D9:E1:03:6A:2A:00:81:16:B7:69:A2:97:F9:51:18:96:8C
Certificate issuer: /CN=c4232bd5238dc4010d1c52929ddea4f23c042574
Certificate serial: 0187B6B7A51B6E4D5B173D88D50271CE4212
Authority key identifier: C4:23:2B:D5:23:8D:C4:01:0D:1C:52:92:9D:DE:A4:F2:3C:04:25:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xCMr1SONxAENHFKSnd6k8jwEJXQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/c42ae7-5f64-4039-a051-403b857bf8b7/1/rMdX2eEDaioAgRa3aaKX-VEYlow.roa
Signing time: Tue 25 Apr 2023 04:41:41 +0000
ROA not before: Tue 25 Apr 2023 04:41:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 46.254.108.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:b6:b7:a5:1b:6e:4d:5b:17:3d:88:d5:02:71:ce:42:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4232bd5238dc4010d1c52929ddea4f23c042574
Validity
Not Before: Apr 25 04:41:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=acc757d9e1036a2a008116b769a297f95118968c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:a4:60:b4:73:12:4d:70:dc:9a:9e:39:ac:53:
b1:f3:60:ba:3f:81:5a:26:7e:98:04:02:28:ff:eb:
2b:33:89:43:2b:bc:44:16:c8:1f:b2:25:01:fb:1c:
5e:68:e4:60:77:95:4b:40:35:3d:dd:d3:1b:e0:58:
75:15:16:77:a0:d7:1c:08:24:e3:70:fe:b6:df:8f:
19:2d:03:c3:d9:18:e4:dc:70:49:d2:5c:47:51:16:
84:22:03:19:ea:c8:0c:64:21:89:cf:89:14:74:58:
df:c8:e7:b1:2e:34:1e:d6:3d:23:7c:9f:66:e8:30:
d2:50:a6:34:db:7a:d1:ac:c9:f8:27:b2:c8:46:7c:
a6:8d:01:05:4b:51:bf:0f:7b:96:7e:70:73:66:e0:
e8:83:90:56:68:6a:09:05:a2:46:d7:f7:d2:c3:55:
b0:93:47:88:01:c4:0c:87:32:8b:0e:32:ee:f7:ad:
e8:f9:54:10:58:21:8d:d8:6a:cb:9c:50:c4:69:48:
b3:ac:02:fa:95:aa:78:84:a3:08:f3:0c:68:19:26:
12:9a:aa:46:a6:a2:a4:61:d6:97:57:06:36:3f:28:
76:ec:93:85:28:af:74:44:ef:db:21:6e:33:ee:2d:
27:a0:54:5a:c3:10:c3:f0:14:e2:18:32:80:e4:41:
4f:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:C7:57:D9:E1:03:6A:2A:00:81:16:B7:69:A2:97:F9:51:18:96:8C
X509v3 Authority Key Identifier:
keyid:C4:23:2B:D5:23:8D:C4:01:0D:1C:52:92:9D:DE:A4:F2:3C:04:25:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xCMr1SONxAENHFKSnd6k8jwEJXQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/c42ae7-5f64-4039-a051-403b857bf8b7/1/rMdX2eEDaioAgRa3aaKX-VEYlow.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/c42ae7-5f64-4039-a051-403b857bf8b7/1/xCMr1SONxAENHFKSnd6k8jwEJXQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.254.108.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:b3:f4:1d:ad:ee:56:d4:64:90:be:31:1d:ca:03:08:0d:3a:
96:44:19:37:90:a3:bc:53:e4:13:d2:17:d9:e8:64:6e:11:2d:
f0:7f:3e:10:ca:1f:51:ad:d2:f8:f7:af:3e:d6:ad:f4:19:59:
c9:7b:ce:ef:d2:cc:cb:47:5f:af:80:e4:77:19:4c:4c:be:22:
2a:c4:b2:39:3c:f5:ac:85:4e:17:00:a3:63:95:b2:09:20:d6:
02:22:48:8f:af:a7:75:0b:6e:5b:c7:1a:13:da:32:64:49:0a:
ac:61:40:37:d4:c3:f1:4b:b5:4c:6b:50:7a:15:f9:20:49:d8:
c2:4d:46:8b:b4:f6:1e:45:a7:a2:e3:26:7a:b7:15:7f:ae:78:
9a:0b:32:f2:05:d7:5a:02:f6:7f:02:d3:b9:b8:48:94:cd:4b:
92:41:d1:4e:9d:ab:3f:ed:01:80:64:2d:fa:16:f4:60:7b:b2:
26:c4:4b:48:df:0d:ba:fa:e8:1a:84:01:f2:89:23:96:5e:08:
6a:0a:4b:5e:db:8b:40:e9:83:da:85:9a:7e:fd:14:28:2b:91:
42:11:36:9a:8c:e0:71:25:ba:6e:b9:1c:c9:1b:9d:cc:32:04:
fe:a1:06:fa:32:39:a0:d4:2a:60:34:e6:9c:75:ce:1d:6f:a7:
ac:46:0c:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 12:46:07 2025 by rpki-client