Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/eb27f2-e369-4b07-8d1d-c3431d320406/1/yp2S4h1PeKFgio_k5yvxqnOwxdI.roa
File: yp2S4h1PeKFgio_k5yvxqnOwxdI.roa (raw, json)
Hash identifier: t0RClSiDxenrtXOXJQcRLSbM9QhFLfZWpIHNNBennso=
Subject key identifier: CA:9D:92:E2:1D:4F:78:A1:60:8A:8F:E4:E7:2B:F1:AA:73:B0:C5:D2
Certificate issuer: /CN=27321078f359d7990276dabb0f8c30070e685963
Certificate serial: 01958ABF55989661C7CAE6D108F087ADA00C
Authority key identifier: 27:32:10:78:F3:59:D7:99:02:76:DA:BB:0F:8C:30:07:0E:68:59:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JzIQePNZ15kCdtq7D4wwBw5oWWM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/eb27f2-e369-4b07-8d1d-c3431d320406/1/yp2S4h1PeKFgio_k5yvxqnOwxdI.roa
Signing time: Wed 12 Mar 2025 14:25:49 +0000
ROA not before: Wed 12 Mar 2025 14:25:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212641
IP address blocks: 46.231.226.0/24 maxlen: 24
185.179.214.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8a:bf:55:98:96:61:c7:ca:e6:d1:08:f0:87:ad:a0:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27321078f359d7990276dabb0f8c30070e685963
Validity
Not Before: Mar 12 14:25:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ca9d92e21d4f78a1608a8fe4e72bf1aa73b0c5d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:3f:bd:47:cd:14:7e:ba:ce:7d:4b:6d:72:e6:
24:72:4c:58:00:21:33:4c:7f:b4:7b:9a:49:9e:cd:
80:7e:5e:57:24:49:d4:fc:f1:a8:a7:c2:e7:aa:9e:
7c:65:a7:cf:ee:22:00:62:99:40:45:47:3e:64:e5:
37:39:ec:eb:f3:a2:e6:a4:9d:02:c2:0c:c3:69:1f:
12:5d:10:8e:71:a7:8e:92:06:df:77:bc:0c:dd:5f:
00:dd:31:d7:5a:d9:64:0d:54:96:08:46:19:31:92:
71:a2:79:88:91:b3:46:ad:dd:94:d5:3a:0f:8a:91:
d4:ed:93:cf:a6:04:d3:a6:42:a3:e7:90:f2:25:7e:
a8:d3:4d:fd:f0:f1:7d:a1:cf:6b:31:e2:e0:c5:1d:
bb:ef:8a:dc:b1:b9:69:f8:11:5f:8f:0a:cf:a5:4e:
09:c5:83:e7:37:33:e9:76:8d:8e:78:4a:61:0c:bc:
dd:f8:7b:6a:ec:8f:4c:c8:1c:5c:67:35:62:42:e4:
b0:9a:72:26:28:65:7f:fb:ac:69:c2:69:12:83:0d:
53:c6:67:bc:9f:50:c3:e3:06:1b:20:97:5e:4d:b5:
0d:95:29:a7:6d:53:e8:cb:a4:6a:09:ec:35:f2:94:
06:b3:9f:f3:e0:56:81:52:61:7a:f2:04:39:74:24:
48:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:9D:92:E2:1D:4F:78:A1:60:8A:8F:E4:E7:2B:F1:AA:73:B0:C5:D2
X509v3 Authority Key Identifier:
keyid:27:32:10:78:F3:59:D7:99:02:76:DA:BB:0F:8C:30:07:0E:68:59:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JzIQePNZ15kCdtq7D4wwBw5oWWM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/eb27f2-e369-4b07-8d1d-c3431d320406/1/yp2S4h1PeKFgio_k5yvxqnOwxdI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/eb27f2-e369-4b07-8d1d-c3431d320406/1/JzIQePNZ15kCdtq7D4wwBw5oWWM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.231.226.0/24
185.179.214.0/24
Signature Algorithm: sha256WithRSAEncryption
97:c1:af:2a:76:3c:67:6f:da:80:9d:f5:b9:70:56:4b:e5:c7:
c6:27:92:b7:19:1c:69:bc:56:2f:75:3d:bd:21:7e:5e:74:de:
cf:24:96:91:ab:20:bb:d4:4b:e7:e2:f8:f3:66:76:be:8d:8e:
20:3c:92:4f:b6:ec:54:7a:9e:e6:2b:d0:6c:f7:10:af:fa:dc:
58:7e:47:bf:6f:f0:38:0a:04:c3:23:49:d4:89:d7:60:da:ea:
f3:2c:9c:30:92:aa:86:6d:b2:2f:11:97:dd:a8:a6:9c:f8:d0:
79:fa:e1:7e:e8:15:e5:52:4f:60:5e:99:3b:1a:8e:6d:f4:2d:
f8:10:b4:27:45:3a:0d:53:e3:b7:5d:d0:00:53:41:f6:8a:dc:
4c:2a:7f:ba:9a:1f:a2:f3:99:3f:7f:26:d1:0c:8f:ef:ca:7a:
1a:ba:1a:1d:c1:ad:e3:73:58:f8:44:5e:4c:59:0f:78:61:a3:
fd:2b:63:6d:02:eb:61:1c:21:a8:f1:38:d7:30:d4:e1:b9:31:
d2:ab:11:00:3c:81:70:a4:d0:b6:6a:c9:c5:a2:03:7e:e7:5f:
26:97:f7:61:37:a9:cd:23:e9:6e:6d:a7:fc:8e:18:bd:65:8d:
cb:81:3f:6c:9b:5f:ef:03:ce:2c:be:21:af:c9:e0:e2:18:ea:
a9:7d:b2:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 17:45:40 2025 by rpki-client