Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/dZ7SEMh6MTEf88vo8qxA84lZqkU.roa
File: dZ7SEMh6MTEf88vo8qxA84lZqkU.roa (raw, json)
Hash identifier: 1sNbmTZ8tPMc+SqP5mOPSNORa+xwt1rxj9RsAPbF/YE=
Subject key identifier: 75:9E:D2:10:C8:7A:31:31:1F:F3:CB:E8:F2:AC:40:F3:89:59:AA:45
Certificate issuer: /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Certificate serial: 01941FFAA0C9B7390DF50F18305703E9C7C7
Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/dZ7SEMh6MTEf88vo8qxA84lZqkU.roa
Signing time: Wed 01 Jan 2025 03:48:26 +0000
ROA not before: Wed 01 Jan 2025 03:48:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62010
IP address blocks: 46.243.174.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:a0:c9:b7:39:0d:f5:0f:18:30:57:03:e9:c7:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Validity
Not Before: Jan 1 03:48:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=759ed210c87a31311ff3cbe8f2ac40f38959aa45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:3a:31:e7:c0:c4:f6:90:c4:51:0a:f9:aa:77:
56:51:c5:6d:3d:27:02:c0:44:4e:ba:7c:3e:7b:76:
7f:4b:12:c4:d1:fd:8a:1c:fd:91:f7:12:58:1b:9f:
77:b8:10:ee:c4:60:18:78:31:72:0d:ef:4c:38:ed:
bc:79:71:56:d9:e2:46:29:5a:63:d3:41:ed:3a:3c:
f6:61:8a:02:69:08:53:e1:ef:d3:a9:04:e4:4d:0b:
79:38:9d:b8:c5:9d:25:52:59:f8:7f:11:96:70:80:
5b:fe:a5:7b:12:e3:e8:e9:68:ef:de:43:58:06:5f:
cb:60:b6:6f:a2:55:14:5e:10:78:6b:78:5f:c0:6b:
ee:fd:48:ff:8e:d8:b7:8a:d3:79:f5:71:1d:53:48:
0d:55:c0:5a:ba:4f:b6:e7:75:60:c6:05:a5:dd:60:
23:0b:a9:99:47:86:f0:f3:4d:36:0a:7c:c3:54:16:
f8:27:e0:d3:fb:bc:dd:70:5d:8d:6c:7c:fd:d6:58:
bd:80:70:15:54:48:2b:74:10:f0:83:da:79:57:91:
28:f2:9b:53:a5:a4:42:8c:47:a6:a7:92:09:e2:4a:
49:ad:88:93:80:74:03:0f:82:f3:98:a6:ff:95:aa:
47:9b:48:21:ad:b6:e7:f4:d9:51:51:d9:80:66:93:
1f:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:9E:D2:10:C8:7A:31:31:1F:F3:CB:E8:F2:AC:40:F3:89:59:AA:45
X509v3 Authority Key Identifier:
keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/dZ7SEMh6MTEf88vo8qxA84lZqkU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.243.174.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:2f:c1:c6:1c:7e:23:09:d5:a8:38:65:06:40:e1:f3:23:a7:
96:58:ee:44:97:b5:07:0d:43:24:84:41:50:26:94:fd:c9:d6:
4c:90:c4:10:33:ba:54:b7:e9:b5:d8:c4:32:ea:ad:91:02:08:
ae:bd:a3:b5:65:22:da:2f:ff:72:45:eb:e3:53:b3:f2:67:8b:
2e:25:0f:d2:79:ed:ed:df:f8:5e:6b:2f:fc:c9:34:1f:77:e3:
1f:25:48:1d:99:d0:1a:54:a1:f2:21:47:87:3d:fb:d2:53:95:
ce:74:38:34:0f:de:5e:20:e9:0c:79:51:5d:32:b6:4b:55:fa:
c0:63:21:64:c9:de:28:e4:81:f0:8c:5e:66:1d:17:e6:86:30:
54:19:fd:b1:8f:85:ee:13:49:b8:8b:85:ce:52:a9:4e:8e:5e:
7b:74:cc:6c:c4:09:38:fe:2e:fa:86:36:c8:0d:68:4f:61:f0:
20:f6:d8:ae:f3:86:75:7b:83:0b:ed:4c:59:6d:5a:1e:7d:a3:
ca:c3:57:90:1c:2f:07:87:93:d0:cf:cb:fb:4e:4e:f4:88:fb:
49:9d:6b:62:6e:d4:4a:1f:01:d4:e8:c4:52:c5:fe:b1:cc:8c:
17:82:b2:5d:1d:78:11:dc:63:a5:03:d6:29:b9:34:f6:75:84:
52:0e:ae:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:37:24 2025 by rpki-client