Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/4ff06f-e97f-4c5a-9da7-7ee090504fba/1/C5Hk7pNvRejqtQ5PIAiIg1zKJ48.roa
File: C5Hk7pNvRejqtQ5PIAiIg1zKJ48.roa (raw, json)
Hash identifier: 0fXabv45tO9342gPnBt4VjyxNdNdoQq49f3ExNOGOMA=
Subject key identifier: 0B:91:E4:EE:93:6F:45:E8:EA:B5:0E:4F:20:08:88:83:5C:CA:27:8F
Certificate issuer: /CN=a7f00d1bffff3a53e94f867d743d031b922db5b1
Certificate serial: 019422FC38C75DA6E3D5A84AB0E6C5F6B787
Authority key identifier: A7:F0:0D:1B:FF:FF:3A:53:E9:4F:86:7D:74:3D:03:1B:92:2D:B5:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p_ANG___OlPpT4Z9dD0DG5IttbE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/4ff06f-e97f-4c5a-9da7-7ee090504fba/1/C5Hk7pNvRejqtQ5PIAiIg1zKJ48.roa
Signing time: Wed 01 Jan 2025 17:49:02 +0000
ROA not before: Wed 01 Jan 2025 17:49:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6663
IP address blocks: 46.29.0.0/22 maxlen: 22
46.29.4.0/22 maxlen: 22
2a03:6e0:8000::/33 maxlen: 33
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:38:c7:5d:a6:e3:d5:a8:4a:b0:e6:c5:f6:b7:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7f00d1bffff3a53e94f867d743d031b922db5b1
Validity
Not Before: Jan 1 17:49:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0b91e4ee936f45e8eab50e4f200888835cca278f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:2e:84:91:ae:ef:fd:10:64:0e:ba:16:83:13:
36:92:2e:a7:5b:c3:d2:04:3d:9a:c9:f7:d8:ff:19:
68:fd:9d:54:9d:31:2d:60:8a:35:4b:5d:c3:8b:08:
26:c6:88:3a:85:7e:55:e5:b6:d2:10:48:9d:bc:ec:
2c:af:1b:05:8b:62:1c:f9:33:24:ce:41:91:68:dd:
8d:c8:f4:55:e0:d9:1c:9c:60:a0:10:5f:89:96:ea:
84:48:58:e8:d6:5d:dd:73:dc:2d:c3:ba:68:ea:79:
e1:a1:4e:cf:5e:82:5a:e9:dd:ec:bf:1b:b1:74:98:
4d:5c:e6:5a:29:fc:95:73:5b:4a:39:ed:83:4c:4c:
34:cc:4f:f7:4c:07:7a:cb:75:be:46:9c:2b:ec:ac:
f7:b6:f7:08:c8:a5:71:2b:b2:57:f9:cd:60:b4:e8:
5d:ea:66:27:5d:f4:2a:b8:4d:af:c9:02:f5:a2:61:
9a:a4:dc:f2:81:7b:09:cc:9e:a0:bc:cd:87:4b:9b:
02:d1:ec:69:ec:7c:79:5b:8e:e1:bf:1a:64:a7:e1:
41:2d:e2:36:a2:6e:35:26:03:52:7f:13:87:a9:41:
8c:c0:9f:1f:43:16:03:a4:e1:8d:b7:c7:a4:2d:1d:
6b:40:75:85:c2:66:34:eb:37:a7:f6:35:73:5f:47:
5f:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:91:E4:EE:93:6F:45:E8:EA:B5:0E:4F:20:08:88:83:5C:CA:27:8F
X509v3 Authority Key Identifier:
keyid:A7:F0:0D:1B:FF:FF:3A:53:E9:4F:86:7D:74:3D:03:1B:92:2D:B5:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p_ANG___OlPpT4Z9dD0DG5IttbE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/4ff06f-e97f-4c5a-9da7-7ee090504fba/1/C5Hk7pNvRejqtQ5PIAiIg1zKJ48.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/4ff06f-e97f-4c5a-9da7-7ee090504fba/1/p_ANG___OlPpT4Z9dD0DG5IttbE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.29.0.0/21
IPv6:
2a03:6e0:8000::/33
Signature Algorithm: sha256WithRSAEncryption
5b:dd:ae:f0:58:0f:53:3f:7a:0e:42:de:8b:8a:02:6e:1c:d9:
d6:b0:c0:53:0d:fd:41:d0:c2:cf:84:e1:18:16:2e:1d:7d:c5:
52:75:30:5d:bf:73:3a:cc:bd:4e:c9:ae:3f:90:c0:60:7e:fc:
3b:4d:1a:5f:50:8e:a2:99:e3:8c:a7:dd:4b:66:ee:84:eb:47:
13:a4:2e:60:01:d2:db:f1:aa:ec:48:df:0d:c3:88:62:2b:5f:
49:cb:d4:b2:6d:e9:9c:50:d0:8c:e1:48:87:7f:c9:97:a2:d3:
a8:89:86:1e:49:f7:9a:8f:53:7b:cb:35:7d:13:78:0f:45:97:
c8:92:1b:35:a3:8e:ae:66:e3:d4:ee:a5:8f:56:e3:b4:51:07:
16:55:10:21:10:17:e2:c0:eb:ff:9d:fa:14:c9:71:08:db:c3:
4b:5c:a0:b6:94:43:aa:1c:c6:2f:41:e5:42:fe:bc:6b:33:29:
29:87:88:58:84:cb:23:61:9f:99:09:d6:3a:8d:6b:9a:62:27:
5c:ae:15:72:82:d2:0b:f8:4b:bd:95:85:90:28:1c:7c:d3:d8:
1c:60:4f:9d:f6:13:3b:67:19:82:14:cc:e0:c7:bd:eb:54:ff:
93:4b:5a:a4:57:37:c9:ac:82:ca:0e:35:46:77:c2:22:de:bc:
4b:1c:60:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 11:50:17 2025 by rpki-client