Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/SuBvsbdnb7suZ20zMIj-AHcn3Xk.roa
File: SuBvsbdnb7suZ20zMIj-AHcn3Xk.roa (raw, json)
Hash identifier: 1ynE/+DvpBIGYqcyID9qDgJtOGH/Y5keeGXFOICtfcE=
Subject key identifier: 4A:E0:6F:B1:B7:67:6F:BB:2E:67:6D:33:30:88:FE:00:77:27:DD:79
Certificate issuer: /CN=d4375814344df0bf6d017733acdc488f002631b2
Certificate serial: 01913261055484CDEB826F24C92F5BA96500
Authority key identifier: D4:37:58:14:34:4D:F0:BF:6D:01:77:33:AC:DC:48:8F:00:26:31:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1DdYFDRN8L9tAXczrNxIjwAmMbI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/SuBvsbdnb7suZ20zMIj-AHcn3Xk.roa
Signing time: Thu 08 Aug 2024 14:25:04 +0000
ROA not before: Thu 08 Aug 2024 14:25:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 46.8.100.0/22 maxlen: 24
46.8.118.0/23 maxlen: 24
46.8.195.0/24 maxlen: 24
46.8.198.0/24 maxlen: 24
46.8.200.0/24 maxlen: 24
188.130.224.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:32:61:05:54:84:cd:eb:82:6f:24:c9:2f:5b:a9:65:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4375814344df0bf6d017733acdc488f002631b2
Validity
Not Before: Aug 8 14:25:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4ae06fb1b7676fbb2e676d333088fe007727dd79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b2:f8:09:8c:9b:61:bc:85:ba:89:a9:a3:44:
3d:a2:63:b1:cd:67:d7:fd:6c:0e:37:af:bc:df:5a:
35:5a:27:d4:c4:f8:15:3e:87:d9:26:ef:96:3f:1b:
fe:63:2b:41:ab:61:57:0a:82:44:26:48:74:e4:76:
35:47:d7:68:73:30:64:d2:c5:2c:8a:5d:2a:11:4e:
fa:4d:03:47:05:57:b5:b8:0e:cb:43:98:f4:f4:f4:
b6:47:ae:82:20:e7:40:ea:32:33:c8:64:4c:62:c7:
7d:f7:ce:99:da:2a:13:40:aa:cf:a9:dd:d1:59:46:
dc:ad:59:ff:7f:42:58:8c:1d:5e:25:7a:6f:7d:d0:
88:e4:00:1a:0d:58:af:b2:45:93:03:57:19:2e:f4:
da:3b:4e:f6:30:d7:2a:e1:48:d9:8a:04:dc:89:ec:
f2:cd:3c:08:37:02:ec:74:51:4c:89:3c:ac:6a:19:
6c:1a:8d:e0:ee:b3:1d:ef:a4:3c:54:be:3b:57:de:
90:6a:66:56:c5:18:62:93:32:fd:7e:90:d6:67:e1:
47:6b:57:af:a2:b9:4c:78:f1:0e:de:52:69:01:17:
96:e4:08:a0:6c:64:51:0c:38:09:90:cc:69:17:22:
4e:0b:c8:4c:d1:ad:50:15:dd:ec:23:84:54:ce:77:
0b:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:E0:6F:B1:B7:67:6F:BB:2E:67:6D:33:30:88:FE:00:77:27:DD:79
X509v3 Authority Key Identifier:
keyid:D4:37:58:14:34:4D:F0:BF:6D:01:77:33:AC:DC:48:8F:00:26:31:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DdYFDRN8L9tAXczrNxIjwAmMbI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/SuBvsbdnb7suZ20zMIj-AHcn3Xk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/1DdYFDRN8L9tAXczrNxIjwAmMbI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.8.100.0/22
46.8.118.0/23
46.8.195.0/24
46.8.198.0/24
46.8.200.0/24
188.130.224.0/22
Signature Algorithm: sha256WithRSAEncryption
7b:93:0a:41:21:a2:c9:f3:f2:3f:16:3b:4d:d7:6f:e4:f8:c5:
b2:8f:b3:c1:78:e3:c3:e6:20:5c:d4:9c:17:62:17:20:10:5b:
7b:9e:c0:18:1a:c9:3f:b2:62:ee:83:dd:8c:88:3b:22:40:fe:
25:0c:4d:92:e6:f3:4c:db:4f:bb:7b:fd:35:a4:f3:52:ef:ad:
8f:68:98:e0:c2:5b:b1:a1:88:39:74:dc:59:da:16:c3:b8:5e:
8b:69:23:b6:65:41:a2:c8:28:c6:f5:97:59:16:0f:84:d2:6d:
b9:ba:5f:ba:82:df:c9:58:24:26:03:22:52:f5:16:23:85:3f:
3e:9e:4e:a3:83:24:ac:43:fc:8e:03:e3:70:c5:0b:ac:24:f5:
6e:f4:10:92:9b:e4:31:c5:95:ee:07:de:7f:2a:4a:a2:f6:f8:
d3:97:bd:6d:c0:bf:e9:d0:e3:ea:ed:92:c3:b2:9b:52:c0:0f:
04:3e:b9:a0:2f:d5:ea:89:05:29:80:2a:55:29:70:c2:c6:1d:
82:15:09:6d:e6:5a:d9:f3:a9:a9:4a:fd:32:b0:b6:43:b6:17:
b1:ab:4c:47:6c:91:1c:78:02:82:5f:98:cb:db:17:15:db:ff:
bb:30:cf:f8:39:e2:89:c5:91:93:91:02:d9:a6:e1:fa:86:a8:
ea:4b:53:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:44:21 2025 by rpki-client