Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/DoOST4_19kPZC4-v_g0JNLOzIro.roa
File: DoOST4_19kPZC4-v_g0JNLOzIro.roa (raw, json)
Hash identifier: PDY3hpNaDsG6elMh0KsFlJQYapiVLlcAAo6gZbGk2Gs=
Subject key identifier: 0E:83:92:4F:8F:F5:F6:43:D9:0B:8F:AF:FE:0D:09:34:B3:B3:22:BA
Certificate issuer: /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Certificate serial: 01941FFA96B4DD77C4B934DB09ED23F94305
Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/DoOST4_19kPZC4-v_g0JNLOzIro.roa
Signing time: Wed 01 Jan 2025 03:48:23 +0000
ROA not before: Wed 01 Jan 2025 03:48:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56595
IP address blocks: 46.243.200.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:96:b4:dd:77:c4:b9:34:db:09:ed:23:f9:43:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Validity
Not Before: Jan 1 03:48:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0e83924f8ff5f643d90b8faffe0d0934b3b322ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:38:6c:69:6b:c1:63:5c:95:0c:ff:01:f5:2b:
dc:f0:1c:2f:76:9d:e0:a0:65:3f:a5:87:90:bf:b1:
23:64:04:96:d3:88:8d:75:a9:00:74:3d:1f:09:b1:
93:52:06:9b:da:72:0d:3b:42:65:9d:3b:c9:85:40:
b6:97:9b:ac:67:df:22:a7:3b:42:b2:60:6a:64:74:
4e:02:5f:20:1f:1f:d7:2e:68:04:5d:2b:8d:b6:2f:
6d:84:fc:d5:27:52:fb:1d:33:a2:4c:93:ee:95:8b:
f0:8a:85:cf:ce:d5:59:1f:70:af:b7:01:8d:92:57:
7d:ac:2f:39:97:d2:55:57:d8:1a:30:e4:cf:37:e3:
b9:a9:cb:35:71:0d:c2:b9:57:f3:83:64:53:bd:b2:
9c:b7:9d:a4:c2:56:8a:b8:18:9c:d5:17:0f:50:34:
f4:14:00:85:3d:0c:f6:dc:8e:2b:cb:cc:d5:19:7b:
0a:45:bc:96:da:06:4e:0c:b8:1e:65:24:b2:88:74:
bf:b7:0a:21:e2:b9:a2:4d:99:06:0a:33:78:6a:c2:
7d:99:77:52:51:e7:72:4f:6d:d3:65:ff:bf:32:fb:
a4:db:30:42:ff:cd:5a:d3:1f:ef:78:e7:9e:9a:62:
ff:a3:c0:96:78:05:d1:55:08:bb:7d:8a:5d:b3:7b:
f5:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:83:92:4F:8F:F5:F6:43:D9:0B:8F:AF:FE:0D:09:34:B3:B3:22:BA
X509v3 Authority Key Identifier:
keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/DoOST4_19kPZC4-v_g0JNLOzIro.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.243.200.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:8f:a5:78:34:a3:97:fc:7b:47:73:7c:f7:3a:c8:7c:96:b3:
ae:02:a1:a9:f1:d9:38:85:e0:93:58:ef:10:91:b8:fe:fc:0b:
cf:2a:46:68:76:97:4f:f6:dd:4a:f1:e2:29:4e:b3:b4:a0:67:
21:23:e9:31:79:07:5d:aa:9a:e6:9a:1c:bd:a0:9f:43:4d:b7:
fe:97:57:e0:fa:8d:c1:76:24:60:14:9a:40:37:d4:25:ef:c1:
9a:90:90:cb:47:33:12:b8:a6:e3:5c:18:8e:53:d1:76:ed:db:
1d:8a:c6:bd:d9:9c:a7:30:60:d5:3a:e8:6c:38:de:7d:fe:61:
7c:8c:1c:e7:de:ee:a7:66:96:b6:f8:3e:f6:a8:c6:10:28:b5:
06:02:de:f0:e5:c0:b4:c6:a5:da:27:e3:80:11:14:e7:55:ab:
78:6f:49:54:36:3c:60:ba:b1:ad:17:c3:e6:47:33:4e:af:1f:
be:14:bd:00:99:bd:5f:80:1e:03:85:5e:bd:a7:fb:19:ed:2c:
2f:cf:e3:83:12:29:00:bf:df:f5:35:57:d2:3e:11:f2:ea:bd:
b8:9d:1e:0b:34:a8:c6:58:0b:70:88:1d:f9:38:85:1c:72:16:
31:d3:cf:9f:52:1d:a9:2d:34:4f:db:f2:e8:2d:c7:26:2b:19:
3b:81:23:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:17:49 2025 by rpki-client