Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/W3XNe6FZ3SrkOn_ptXu-Jgr_r14.roa
File: W3XNe6FZ3SrkOn_ptXu-Jgr_r14.roa (raw, json)
Hash identifier: pkpVGIFWE4bTvRUZqaHICE4dYy6+7gOqSzTuzp57AJ0=
Subject key identifier: 5B:75:CD:7B:A1:59:DD:2A:E4:3A:7F:E9:B5:7B:BE:26:0A:FF:AF:5E
Certificate issuer: /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Certificate serial: 01941FFAA2447FA41A2178E285B28F9C55C4
Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/W3XNe6FZ3SrkOn_ptXu-Jgr_r14.roa
Signing time: Wed 01 Jan 2025 03:48:26 +0000
ROA not before: Wed 01 Jan 2025 03:48:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198690
IP address blocks: 46.243.200.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:a2:44:7f:a4:1a:21:78:e2:85:b2:8f:9c:55:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Validity
Not Before: Jan 1 03:48:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5b75cd7ba159dd2ae43a7fe9b57bbe260affaf5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:28:47:7b:74:bd:ab:f5:77:9e:96:ea:20:cd:
81:6e:cd:ad:76:58:c9:13:df:ab:a9:44:d2:c6:9e:
15:44:21:19:a8:6e:4c:4f:1b:73:5b:1e:aa:5f:1f:
1c:d6:b7:3e:2f:48:20:56:7f:67:74:2f:f7:ba:b7:
cc:8a:ed:fe:4c:6a:82:2f:6b:64:91:97:73:45:13:
4a:04:16:69:70:5d:03:7a:d0:e1:01:0f:e3:74:e9:
27:b4:53:db:e0:70:61:23:6e:43:03:1b:51:e9:3d:
f7:80:4a:da:bc:52:38:76:c3:1d:e7:6e:c3:ac:63:
eb:85:67:b8:b4:d0:3d:12:62:50:39:ec:2b:1a:4e:
1b:51:1b:78:d8:ed:8e:06:90:1d:61:b2:e5:eb:75:
e0:81:8e:2e:98:4d:ab:2b:2f:35:ab:97:a1:d6:d3:
51:76:0a:98:82:d6:b5:50:b9:21:3f:4f:d7:af:8b:
21:32:2d:2b:cd:1e:4c:88:f0:38:01:71:44:3a:27:
54:b3:86:35:fd:44:1a:55:d7:44:f5:08:c3:7f:e3:
b3:74:6e:d2:9b:f1:a0:a3:b4:1e:d9:ae:75:84:d5:
3f:66:e8:da:c0:e4:96:13:90:a4:d5:8c:7f:f7:00:
03:92:71:2c:29:8f:86:5c:ef:2d:ff:78:1c:ae:17:
cb:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:75:CD:7B:A1:59:DD:2A:E4:3A:7F:E9:B5:7B:BE:26:0A:FF:AF:5E
X509v3 Authority Key Identifier:
keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/W3XNe6FZ3SrkOn_ptXu-Jgr_r14.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.243.200.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:3b:29:e5:66:22:f0:0e:f7:d4:7a:dd:f9:ed:48:ff:9e:fb:
ea:fe:7f:df:0f:6b:22:37:d3:60:8a:ef:bf:18:24:e2:0b:dd:
9d:be:86:72:18:6b:e2:f1:6d:ac:f5:d4:99:9b:a9:82:70:8d:
02:8f:e8:88:8b:92:60:a8:58:dc:e8:c7:58:78:77:2e:98:75:
76:ce:67:7c:a7:47:10:68:a7:32:d1:eb:0c:cb:d6:a6:23:13:
5d:53:83:2f:af:1f:68:a7:16:67:f5:21:db:fe:98:e4:c5:12:
d1:1b:ea:bb:d3:c9:c8:88:d9:14:8e:db:9e:86:b3:f8:ca:65:
e7:a1:7d:7b:ee:50:d7:bb:57:13:97:fc:b5:f4:22:ad:04:28:
26:64:65:ec:ec:e8:50:a2:26:87:34:c0:9c:b8:53:c1:29:41:
29:28:85:31:f0:65:7c:b3:bd:5a:80:24:83:a9:d8:3f:c2:33:
06:ae:cf:0e:95:42:47:74:30:70:aa:d2:3b:89:a2:68:7d:39:
f2:7d:c6:81:a0:5f:89:df:bc:b1:a7:a5:4b:1b:e0:7d:1a:57:
28:fe:0e:16:c0:3a:19:8e:46:0a:c5:39:12:dc:b9:78:67:11:
1a:42:73:99:3c:d3:a3:19:bc:b6:dc:18:74:e9:80:02:7b:31:
75:21:91:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:13:04 2025 by rpki-client