Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/4__K4OZne7-kL4jpVmFi22gbCy0.roa
File: 4__K4OZne7-kL4jpVmFi22gbCy0.roa (raw, json)
Hash identifier: SLPbyWB2Kz/8ocr0S7XW54bn/0pCOlx6oh0bpuwAh6M=
Subject key identifier: E3:FF:CA:E0:E6:67:7B:BF:A4:2F:88:E9:56:61:62:DB:68:1B:0B:2D
Certificate issuer: /CN=d4375814344df0bf6d017733acdc488f002631b2
Certificate serial: 0194221F3365709C6D0A61052ACC602E1E91
Authority key identifier: D4:37:58:14:34:4D:F0:BF:6D:01:77:33:AC:DC:48:8F:00:26:31:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1DdYFDRN8L9tAXczrNxIjwAmMbI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/4__K4OZne7-kL4jpVmFi22gbCy0.roa
Signing time: Wed 01 Jan 2025 13:47:37 +0000
ROA not before: Wed 01 Jan 2025 13:47:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16276
IP address blocks: 46.8.116.0/24 maxlen: 24
46.8.200.0/24 maxlen: 24
46.8.201.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:33:65:70:9c:6d:0a:61:05:2a:cc:60:2e:1e:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4375814344df0bf6d017733acdc488f002631b2
Validity
Not Before: Jan 1 13:47:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e3ffcae0e6677bbfa42f88e9566162db681b0b2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:6b:af:a9:c5:d0:e6:6c:b2:36:ba:0c:51:20:
41:ab:ef:6c:c5:ae:51:64:fe:46:79:9e:50:1a:da:
84:27:9c:6a:e1:22:14:b2:12:6f:cc:a1:b4:72:e9:
4c:2f:71:20:5d:61:aa:09:59:96:e4:a6:56:9b:81:
cc:8c:63:14:16:47:00:34:b0:7d:18:a9:36:5f:34:
12:9d:88:0e:d2:f6:fa:95:93:13:11:83:22:fe:7e:
a0:05:6a:56:26:06:8c:4e:41:fb:17:50:c2:da:ee:
54:6a:ef:65:c0:e3:2e:6d:2b:3b:b9:bd:ba:20:0a:
b5:eb:6b:68:80:41:f5:ee:5e:13:94:88:2f:81:71:
2d:38:09:7f:73:5a:60:72:81:06:9b:fc:4d:75:cb:
21:f2:e1:77:3d:b9:7d:de:f2:ea:b0:f1:02:20:10:
5c:99:d2:64:1c:90:cc:81:13:cb:c9:54:dc:57:c5:
7e:a8:b2:7d:03:a6:7f:83:67:13:5c:4b:92:20:21:
14:6a:3b:b4:ad:4d:ed:b3:68:97:e5:c0:38:db:30:
e0:a5:89:b4:98:69:72:62:ae:44:6b:5c:30:01:45:
c9:8f:22:72:d4:53:24:f5:82:32:2a:44:c3:87:ac:
4e:fe:85:72:3f:40:dc:7a:c6:f3:cd:fc:5f:22:ae:
e3:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:FF:CA:E0:E6:67:7B:BF:A4:2F:88:E9:56:61:62:DB:68:1B:0B:2D
X509v3 Authority Key Identifier:
keyid:D4:37:58:14:34:4D:F0:BF:6D:01:77:33:AC:DC:48:8F:00:26:31:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DdYFDRN8L9tAXczrNxIjwAmMbI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/4__K4OZne7-kL4jpVmFi22gbCy0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/1DdYFDRN8L9tAXczrNxIjwAmMbI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.8.116.0/24
46.8.200.0/23
Signature Algorithm: sha256WithRSAEncryption
90:37:65:65:fe:57:2d:bc:0f:ec:48:74:43:18:5c:27:98:1b:
2f:c5:b2:20:62:28:f7:11:b5:3d:13:d5:d3:2c:6f:7d:df:7b:
d3:e9:51:7f:31:7f:18:7a:12:4c:a8:d9:83:38:30:32:bc:9b:
48:ba:ef:1b:3b:e9:a2:e7:36:c9:29:fc:6b:5c:9f:c6:b3:98:
75:47:b2:e0:c3:c0:e2:55:06:20:b0:10:a3:83:39:19:55:4a:
fa:12:05:35:53:c2:a3:4a:2b:05:e4:81:c6:b6:60:2a:a3:1d:
5e:0b:3c:e7:08:2d:f3:26:e4:09:31:59:11:09:99:a0:22:c3:
45:f7:fc:7d:10:73:a8:52:a3:06:b5:2b:39:d6:28:0d:93:ba:
29:24:84:fd:2f:d6:67:93:73:e4:e2:f2:16:fc:ea:d2:ba:af:
45:fb:61:a1:31:d3:f2:8d:13:ef:34:8f:70:8a:51:1b:ac:34:
df:51:5a:ab:65:9f:cc:d4:a9:60:b2:3e:6a:7e:9b:b3:84:ff:
60:6d:3c:07:cf:6f:ce:8d:70:80:ad:d7:c9:8a:fe:55:5f:15:
3e:fd:38:36:12:ec:51:56:57:8a:6e:a9:69:8d:60:9d:f6:44:
da:ce:08:08:85:7a:38:2d:92:32:98:78:85:66:11:11:bf:af:
38:4c:12:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:35:46 2025 by rpki-client