Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/JWsUbWewyvaa2vwqc8Z893t-FcQ.roa
File: JWsUbWewyvaa2vwqc8Z893t-FcQ.roa (raw, json)
Hash identifier: qeCFDBO6FaG5JMq8hl6qYD2Ax0AEocSatuqp0D4DsW8=
Subject key identifier: 25:6B:14:6D:67:B0:CA:F6:9A:DA:FC:2A:73:C6:7C:F7:7B:7E:15:C4
Certificate issuer: /CN=d4375814344df0bf6d017733acdc488f002631b2
Certificate serial: 0185B869EE9F25D0048925F21C431A6E3194
Authority key identifier: D4:37:58:14:34:4D:F0:BF:6D:01:77:33:AC:DC:48:8F:00:26:31:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1DdYFDRN8L9tAXczrNxIjwAmMbI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/JWsUbWewyvaa2vwqc8Z893t-FcQ.roa
Signing time: Mon 16 Jan 2023 02:30:28 +0000
ROA not before: Mon 16 Jan 2023 02:30:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 133952
IP address blocks: 46.8.203.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:b8:69:ee:9f:25:d0:04:89:25:f2:1c:43:1a:6e:31:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4375814344df0bf6d017733acdc488f002631b2
Validity
Not Before: Jan 16 02:30:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=256b146d67b0caf69adafc2a73c67cf77b7e15c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:a7:46:23:3e:1f:3b:c4:2d:c0:64:20:a4:96:
42:ef:41:1a:ae:dc:44:45:ff:4c:b9:16:94:b1:bc:
8d:c2:ff:0a:2a:8e:65:1a:28:75:1e:db:74:17:4d:
2d:91:ca:d1:5c:a9:84:0e:51:8a:02:f2:73:9e:d5:
21:29:2e:f5:4f:f6:02:a8:e6:3b:7f:2b:f5:f0:0f:
2c:95:04:45:cf:37:d8:75:d9:e8:31:6e:6b:55:64:
d9:bf:45:bd:13:25:47:d3:20:49:76:9c:73:5d:31:
1f:19:8f:be:4d:d9:42:c1:89:f2:3d:2f:91:11:44:
62:f7:11:88:e6:3a:72:b8:04:49:b5:17:77:81:c8:
d8:d8:f9:b3:8f:fb:1b:7d:1e:0c:a1:3b:0b:3a:ca:
6e:82:7a:87:69:7a:50:d0:b0:e2:67:f4:6b:ed:f6:
21:a4:c2:31:63:d3:50:41:e2:4f:60:1a:c9:07:58:
7c:ae:17:9e:e4:e6:fb:60:99:b3:a7:c7:9a:77:cd:
31:e1:d3:9e:e8:36:fe:9d:96:99:5e:ee:1d:8c:9a:
cf:d7:a8:33:f5:2e:4f:b7:1a:14:26:b1:79:4d:21:
b8:fd:f2:d3:3e:c3:76:a8:a1:5b:61:9a:89:c1:e2:
22:44:10:01:91:81:05:73:23:f0:32:81:76:b1:ce:
49:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:6B:14:6D:67:B0:CA:F6:9A:DA:FC:2A:73:C6:7C:F7:7B:7E:15:C4
X509v3 Authority Key Identifier:
keyid:D4:37:58:14:34:4D:F0:BF:6D:01:77:33:AC:DC:48:8F:00:26:31:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DdYFDRN8L9tAXczrNxIjwAmMbI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/JWsUbWewyvaa2vwqc8Z893t-FcQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/1DdYFDRN8L9tAXczrNxIjwAmMbI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.8.203.0/24
Signature Algorithm: sha256WithRSAEncryption
63:cc:dc:38:b1:4b:4b:74:0d:1f:f1:82:1d:be:69:a4:f7:69:
b0:6b:b1:9c:97:db:4c:7e:ea:08:d0:50:ba:6b:bb:0b:e1:85:
10:39:91:db:0d:37:69:a6:c0:4f:5a:99:1a:9c:17:47:1f:bc:
53:e1:4e:34:dd:ed:2a:36:f1:8d:2a:1a:38:9e:4c:ff:71:31:
40:bc:41:6e:50:86:5b:a1:97:9d:a6:b4:bc:8f:5b:f7:18:80:
52:b4:59:3d:fd:23:8d:3b:0f:c0:3d:0f:58:d0:90:55:46:29:
57:86:dd:5c:93:fe:57:b3:5c:29:8b:ae:81:95:e0:3a:51:4d:
38:88:6d:dc:55:60:83:e7:4a:b6:61:c3:c0:9a:bc:21:6b:be:
b1:5a:fc:3f:a0:35:ce:e1:50:09:94:18:3b:ed:71:11:f0:55:
aa:fa:39:f5:05:49:23:af:04:c7:34:7f:26:6a:2c:32:20:23:
88:1c:0c:f8:e7:88:50:e6:94:b4:c7:ed:d8:b8:36:0d:f6:7f:
b6:8d:9e:e2:f7:0f:e4:4d:cc:6b:b8:c5:10:74:3d:96:1c:c3:
98:27:19:6d:c7:91:b4:5d:55:d4:ab:90:08:92:ce:c7:ca:bb:
16:82:58:95:cb:2f:e3:4c:f9:f0:de:db:05:59:86:7b:72:fe:
54:bf:3d:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:32:35 2025 by rpki-client