Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/OlniWp0Pd8fZCfiSDEEb8kyXsrQ.roa
File: OlniWp0Pd8fZCfiSDEEb8kyXsrQ.roa (raw, json)
Hash identifier: l+KIZeRhNBzjbOwocD6kT63sZzOEhQAUgN5ODt1OUOM=
Subject key identifier: 3A:59:E2:5A:9D:0F:77:C7:D9:09:F8:92:0C:41:1B:F2:4C:97:B2:B4
Certificate issuer: /CN=d4375814344df0bf6d017733acdc488f002631b2
Certificate serial: 01866F57E6F0C21FD82E1365DAB2FAEEB8DD
Authority key identifier: D4:37:58:14:34:4D:F0:BF:6D:01:77:33:AC:DC:48:8F:00:26:31:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1DdYFDRN8L9tAXczrNxIjwAmMbI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/OlniWp0Pd8fZCfiSDEEb8kyXsrQ.roa
Signing time: Mon 20 Feb 2023 15:01:17 +0000
ROA not before: Mon 20 Feb 2023 15:01:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 397423
IP address blocks: 46.8.100.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:6f:57:e6:f0:c2:1f:d8:2e:13:65:da:b2:fa:ee:b8:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4375814344df0bf6d017733acdc488f002631b2
Validity
Not Before: Feb 20 15:01:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3a59e25a9d0f77c7d909f8920c411bf24c97b2b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:83:10:e9:c2:49:ea:5b:10:e6:8a:6a:cf:1b:
3b:43:28:08:2a:92:3a:ff:93:ca:19:83:d0:bc:b6:
a2:ae:ef:8f:53:bb:fc:4a:26:14:82:6f:5c:93:94:
a3:34:41:fb:22:cd:49:bc:1f:fe:28:fb:28:09:2e:
40:56:31:0c:b4:14:d4:4b:c0:80:85:a8:a5:47:e5:
17:fb:29:68:fa:ac:ba:7c:ee:87:4e:49:ce:18:10:
4e:a6:86:ad:cd:07:3d:50:5f:8a:80:c8:08:3f:56:
11:d1:e1:9a:2c:38:c0:f8:51:3a:35:24:e2:25:16:
e1:32:ac:ad:c2:25:1f:fa:71:7d:de:5d:ca:64:1c:
ec:8f:1d:88:a7:ba:ba:78:07:7c:70:de:12:d1:be:
8b:ba:14:e4:29:05:d0:ab:73:dc:84:16:e5:62:95:
42:c9:6e:cd:e3:f4:5a:ab:11:a9:3e:0e:7f:b7:15:
8e:bb:f8:c5:9b:a2:c4:5b:54:ed:09:4a:e9:9f:2f:
db:dd:26:2f:c0:78:46:19:92:64:8e:53:ca:83:51:
0e:1f:02:c8:e4:7c:30:6e:38:4a:5f:1f:db:b4:ce:
c3:fc:9d:7f:6c:73:ae:89:2f:23:06:3b:2f:79:a1:
81:2f:46:5c:34:fb:42:a6:3d:5a:84:23:6b:9e:5d:
8a:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:59:E2:5A:9D:0F:77:C7:D9:09:F8:92:0C:41:1B:F2:4C:97:B2:B4
X509v3 Authority Key Identifier:
keyid:D4:37:58:14:34:4D:F0:BF:6D:01:77:33:AC:DC:48:8F:00:26:31:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DdYFDRN8L9tAXczrNxIjwAmMbI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/OlniWp0Pd8fZCfiSDEEb8kyXsrQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/1DdYFDRN8L9tAXczrNxIjwAmMbI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.8.100.0/22
Signature Algorithm: sha256WithRSAEncryption
4e:a5:74:99:c0:f1:79:eb:93:58:aa:e6:ad:78:a5:d2:f1:0d:
8b:b4:56:bd:8c:f0:47:ca:06:81:f0:26:20:9f:a3:de:ce:ce:
0c:25:3e:f6:cc:74:c5:29:db:74:9e:13:d7:b2:28:0d:9f:c3:
b4:fe:a0:30:67:aa:d4:f8:66:db:e9:18:8b:10:12:cb:b4:f1:
22:f6:46:ba:b7:38:a3:4b:32:6d:05:70:70:87:b9:fe:14:e9:
e5:0c:78:63:ce:71:bc:b8:8a:25:72:b1:e2:78:b2:e0:d1:5b:
7e:7f:5e:4c:56:a9:06:d6:71:8c:cc:e1:58:fb:45:31:65:11:
2f:bd:2e:02:cd:58:04:8e:d8:81:f3:83:6f:39:2c:0f:8d:64:
c4:c9:0f:d8:ec:32:21:93:af:eb:ce:72:81:63:a8:30:8b:b2:
04:c1:55:04:27:36:d1:81:7d:12:1e:27:c8:3c:0f:da:fc:ef:
20:d2:1a:36:6f:7a:7d:6c:74:38:01:82:6e:a1:a7:40:71:b6:
e2:bb:48:bc:0c:a3:c3:0a:ad:02:0e:e6:94:87:20:85:c7:0d:
29:8e:43:11:b2:75:f0:8c:14:6b:36:fe:9c:bc:c9:93:39:e1:
72:30:02:75:b8:aa:2b:f7:b0:51:07:fa:13:a2:26:3e:5a:32:
10:f1:f8:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:44:20 2025 by rpki-client