Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/c88a8f-7be0-4e40-9ce6-d252a574ae8d/1/YeFUZsaHfHTPpiu7f2dFmo68C7E.roa
File: YeFUZsaHfHTPpiu7f2dFmo68C7E.roa (raw, json)
Hash identifier: VFJqwzLzDH7CjnLQbhz/bJw/ANPrHjYMaDgoQuDyxDw=
Subject key identifier: 61:E1:54:66:C6:87:7C:74:CF:A6:2B:BB:7F:67:45:9A:8E:BC:0B:B1
Certificate issuer: /CN=ec917c0afda449ecc0429c046df50fbc959b4eea
Certificate serial: 0194266ABD68D09B727330153A238B3CB1EE
Authority key identifier: EC:91:7C:0A:FD:A4:49:EC:C0:42:9C:04:6D:F5:0F:BC:95:9B:4E:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7JF8Cv2kSezAQpwEbfUPvJWbTuo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/c88a8f-7be0-4e40-9ce6-d252a574ae8d/1/YeFUZsaHfHTPpiu7f2dFmo68C7E.roa
Signing time: Thu 02 Jan 2025 09:48:36 +0000
ROA not before: Thu 02 Jan 2025 09:48:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48346
IP address blocks: 46.149.100.0/24 maxlen: 24
2a10:1c00::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6a:bd:68:d0:9b:72:73:30:15:3a:23:8b:3c:b1:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec917c0afda449ecc0429c046df50fbc959b4eea
Validity
Not Before: Jan 2 09:48:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=61e15466c6877c74cfa62bbb7f67459a8ebc0bb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:1e:73:8e:6c:27:ef:af:61:28:23:df:73:1a:
51:cd:0e:88:65:31:aa:14:dc:a4:34:e2:b8:e3:82:
a5:76:df:88:4c:fd:65:a3:4c:f9:b9:3b:33:59:ac:
19:38:ae:eb:25:86:a1:95:29:61:57:3d:63:43:86:
8e:70:2c:41:87:b8:80:48:8a:55:63:ca:be:2d:d6:
96:0b:73:de:cd:da:15:2e:cc:7e:4a:63:5a:f3:6e:
12:df:d2:ea:64:b1:d4:92:9b:94:9a:a9:64:ca:66:
19:a8:7e:31:17:24:ad:da:83:fb:67:da:e6:8f:44:
8f:dd:32:32:36:5d:b0:c6:0f:ab:28:6f:9d:95:97:
c6:f2:55:d8:38:62:e2:38:08:a8:90:93:89:f7:2d:
03:85:0d:70:05:33:3d:28:71:08:58:91:55:d9:0b:
8e:78:87:39:b6:79:48:ce:9b:7c:29:c2:0e:eb:ad:
5a:64:61:c6:4f:28:c0:16:01:01:7a:f1:7c:1d:a4:
4b:cc:ed:4b:1c:f0:39:32:6f:34:bf:e2:52:0f:24:
a0:14:be:96:c8:94:3e:03:3c:3c:a6:3f:2e:87:14:
57:71:ef:a5:6f:96:96:75:90:fe:65:6f:a0:68:7f:
dd:80:8a:39:7e:27:7d:27:0f:ec:95:0c:31:be:92:
06:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:E1:54:66:C6:87:7C:74:CF:A6:2B:BB:7F:67:45:9A:8E:BC:0B:B1
X509v3 Authority Key Identifier:
keyid:EC:91:7C:0A:FD:A4:49:EC:C0:42:9C:04:6D:F5:0F:BC:95:9B:4E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7JF8Cv2kSezAQpwEbfUPvJWbTuo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/c88a8f-7be0-4e40-9ce6-d252a574ae8d/1/YeFUZsaHfHTPpiu7f2dFmo68C7E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/c88a8f-7be0-4e40-9ce6-d252a574ae8d/1/7JF8Cv2kSezAQpwEbfUPvJWbTuo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.149.100.0/24
IPv6:
2a10:1c00::/29
Signature Algorithm: sha256WithRSAEncryption
67:ea:25:88:02:68:a0:eb:21:d0:d6:3b:e9:8a:54:3c:58:78:
86:99:3d:02:3c:09:a2:96:ad:9b:4f:f0:43:9f:4f:5d:2a:63:
5d:bb:85:04:31:5c:85:04:a9:ef:c1:94:20:33:c6:e6:ec:2a:
b0:85:91:82:0c:cd:64:bc:78:4a:58:40:96:da:51:1e:de:37:
14:0c:a9:63:b6:7d:ad:df:24:d7:87:07:82:33:b6:67:c1:89:
3e:0d:1c:01:d8:ed:b3:1c:28:76:eb:87:7e:7b:c2:2b:44:e3:
1d:35:ce:81:c2:0f:df:4d:62:42:28:68:e3:ec:6e:65:be:5b:
89:39:76:c7:d6:9a:91:70:72:4f:b1:1a:34:26:4e:e0:74:a1:
8d:ae:e1:01:6e:b8:6a:ba:25:74:ff:e7:5b:91:27:95:70:9b:
b3:c4:17:6d:7d:f5:91:cf:11:69:d8:b7:31:69:fc:24:31:80:
4a:a2:dd:0a:03:93:5f:88:b7:ad:ea:4e:98:7a:c5:d6:fa:c8:
7e:f5:c4:53:85:c4:82:ed:27:e4:0e:27:b2:e4:13:d3:22:f3:
5d:32:94:67:ac:f3:67:51:74:32:c1:ab:e1:36:9d:16:59:e7:
11:cc:06:fb:10:96:be:14:3f:a8:5e:7e:39:a0:a0:e3:cf:87:
c7:87:9b:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:44:52 2025 by rpki-client