Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/eb27f2-e369-4b07-8d1d-c3431d320406/1/Uk5lJNRKjuJq6lKJvhwoJEJ9L6o.roa
File: Uk5lJNRKjuJq6lKJvhwoJEJ9L6o.roa (raw, json)
Hash identifier: jQgrrIfqUuO7ESzWSuC23i9zq89C4vORwe7VA5ZQ+os=
Subject key identifier: 52:4E:65:24:D4:4A:8E:E2:6A:EA:52:89:BE:1C:28:24:42:7D:2F:AA
Certificate issuer: /CN=27321078f359d7990276dabb0f8c30070e685963
Certificate serial: 01941FFA00389A4F19856B5ED66D1301D605
Authority key identifier: 27:32:10:78:F3:59:D7:99:02:76:DA:BB:0F:8C:30:07:0E:68:59:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JzIQePNZ15kCdtq7D4wwBw5oWWM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/eb27f2-e369-4b07-8d1d-c3431d320406/1/Uk5lJNRKjuJq6lKJvhwoJEJ9L6o.roa
Signing time: Wed 01 Jan 2025 03:47:45 +0000
ROA not before: Wed 01 Jan 2025 03:47:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50576
IP address blocks: 46.231.228.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:00:38:9a:4f:19:85:6b:5e:d6:6d:13:01:d6:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27321078f359d7990276dabb0f8c30070e685963
Validity
Not Before: Jan 1 03:47:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=524e6524d44a8ee26aea5289be1c2824427d2faa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:5c:87:ca:c7:31:99:c0:0e:97:7f:32:8c:ae:
4c:ac:76:f8:2a:41:49:23:59:6f:91:24:06:75:a9:
b5:bd:6b:53:bd:2c:e1:35:0b:cb:f2:73:8d:c7:75:
34:0c:c3:16:cc:cc:be:5b:9f:a9:d8:45:2d:c9:fa:
a4:88:d4:6e:a4:2d:5c:95:f5:bb:fd:4b:ef:54:9c:
85:79:3d:89:33:78:47:cb:6f:ee:c4:2c:0a:ec:a6:
74:31:f6:f6:64:98:22:2c:57:46:76:c3:31:b3:f4:
2d:2d:a5:4f:4f:2a:7e:60:96:0e:9c:6c:4c:b2:33:
35:7b:c3:69:39:98:9f:9a:cf:c2:64:ec:8c:ab:30:
50:fc:a1:58:74:d8:7b:79:fc:17:55:fc:ea:24:ae:
74:22:65:16:55:4f:c7:61:b3:24:4b:3a:07:35:7b:
c2:60:e5:52:ca:c2:c3:3c:3e:ec:08:9c:eb:2e:8a:
59:31:97:aa:35:f5:9e:1f:ec:0e:16:3b:10:25:fe:
95:81:d4:80:8d:f7:96:29:91:c2:d8:38:41:ac:96:
ee:79:e8:23:ba:54:20:21:d6:4a:c9:73:81:47:7b:
11:1f:9f:21:3b:2e:70:a5:64:8c:ae:1e:1b:5f:8d:
80:f9:38:0f:3a:26:66:41:f8:53:55:a8:cc:aa:8c:
38:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:4E:65:24:D4:4A:8E:E2:6A:EA:52:89:BE:1C:28:24:42:7D:2F:AA
X509v3 Authority Key Identifier:
keyid:27:32:10:78:F3:59:D7:99:02:76:DA:BB:0F:8C:30:07:0E:68:59:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JzIQePNZ15kCdtq7D4wwBw5oWWM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/eb27f2-e369-4b07-8d1d-c3431d320406/1/Uk5lJNRKjuJq6lKJvhwoJEJ9L6o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/eb27f2-e369-4b07-8d1d-c3431d320406/1/JzIQePNZ15kCdtq7D4wwBw5oWWM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.231.228.0/24
Signature Algorithm: sha256WithRSAEncryption
51:a2:69:52:d1:86:2a:d9:54:36:44:78:a5:f3:1d:d8:bc:71:
65:b8:e9:3f:70:77:74:88:a3:6d:75:de:0b:7a:f8:3b:a3:32:
05:56:2f:47:eb:b9:33:4d:84:a0:50:58:bd:9c:c0:2e:9c:b9:
23:cf:3c:5e:01:0a:e4:d3:c5:a1:c4:c8:f6:b7:64:95:35:87:
ef:98:f6:70:69:32:ee:34:38:c2:e6:32:a6:33:12:76:5a:12:
3f:e4:c6:40:4a:55:4d:1e:74:35:97:36:91:90:ba:78:32:e7:
3b:fe:dd:cd:09:a1:84:9f:2a:a3:08:dd:ed:33:a4:49:7d:08:
58:91:40:b5:c1:a7:e4:e9:95:01:dd:d4:2b:bb:9f:8d:8e:0e:
9d:39:f7:24:52:54:66:d9:95:06:d9:2f:c2:bc:94:ae:e0:3e:
73:1b:cb:a4:09:ac:03:f9:67:c5:c9:81:03:3a:04:01:90:21:
06:f7:a6:2a:c3:ab:86:bb:33:9a:75:ad:28:93:23:8d:8f:2e:
c7:16:46:63:b5:41:7c:74:b6:f5:27:2e:4f:18:7a:78:2e:78:
e9:54:98:7f:ae:d9:d3:04:6e:12:62:6b:c3:06:4a:fa:56:53:
93:ec:9c:12:b1:94:07:da:61:34:54:e6:9c:64:d9:be:24:38:
a6:59:f4:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 22:24:08 2025 by rpki-client