Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/Ud14hab_xfWtv2WkBDXSH2-QoMU.roa
File: Ud14hab_xfWtv2WkBDXSH2-QoMU.roa (raw, json)
Hash identifier: 0ea62yGnePCW0r+KNb+hoNpVhcyuwn9Yu4ztOYep1SU=
Subject key identifier: 51:DD:78:85:A6:FF:C5:F5:AD:BF:65:A4:04:35:D2:1F:6F:90:A0:C5
Certificate issuer: /CN=d4375814344df0bf6d017733acdc488f002631b2
Certificate serial: 0194221F36730C7D001C95660B59DD46B129
Authority key identifier: D4:37:58:14:34:4D:F0:BF:6D:01:77:33:AC:DC:48:8F:00:26:31:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1DdYFDRN8L9tAXczrNxIjwAmMbI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/Ud14hab_xfWtv2WkBDXSH2-QoMU.roa
Signing time: Wed 01 Jan 2025 13:47:38 +0000
ROA not before: Wed 01 Jan 2025 13:47:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 137443
IP address blocks: 46.8.176.0/23 maxlen: 24
46.8.178.0/23 maxlen: 24
46.8.180.0/22 maxlen: 24
46.8.196.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:36:73:0c:7d:00:1c:95:66:0b:59:dd:46:b1:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4375814344df0bf6d017733acdc488f002631b2
Validity
Not Before: Jan 1 13:47:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=51dd7885a6ffc5f5adbf65a40435d21f6f90a0c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:d2:b6:0b:06:50:51:05:e8:e8:e0:be:96:b4:
df:29:53:18:76:3e:fe:52:09:d3:1a:6b:c3:26:00:
3d:85:14:a4:04:4d:48:f7:72:59:42:f3:b6:d6:26:
b1:8c:cb:09:5b:ff:ed:78:d2:75:d5:e2:ec:bf:55:
63:45:ae:c5:c3:fa:0d:ac:3b:29:b8:4e:cc:69:73:
82:ab:e8:d4:de:0a:a0:c7:b8:b1:3a:62:03:c6:91:
37:e9:33:db:a2:0d:e1:c2:fc:c2:42:a7:48:d1:50:
a7:d5:34:ec:16:1f:89:f9:fd:da:6c:a7:2b:16:d3:
c7:4e:da:0a:5b:b8:bb:06:e0:6b:59:15:3d:7c:d5:
fd:e6:4c:ff:5a:fd:60:4e:c5:d5:84:a6:97:b0:f1:
20:93:5c:a2:22:8d:2e:0e:e7:54:2b:d2:e9:f3:27:
6c:ba:73:66:44:f9:a1:94:5d:dd:88:59:3b:b7:87:
19:dd:89:79:e0:6e:8e:b6:9d:04:a4:2c:1b:4c:ed:
29:9c:00:86:96:10:3c:02:e6:d6:a1:44:a4:2e:9f:
ea:99:80:d7:d4:14:83:d2:e2:8c:27:ba:2e:25:80:
79:44:89:43:35:c5:df:5f:4f:98:bd:e8:7b:d3:42:
77:33:89:f1:a0:1a:ec:16:27:7c:6c:41:a6:18:7a:
81:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:DD:78:85:A6:FF:C5:F5:AD:BF:65:A4:04:35:D2:1F:6F:90:A0:C5
X509v3 Authority Key Identifier:
keyid:D4:37:58:14:34:4D:F0:BF:6D:01:77:33:AC:DC:48:8F:00:26:31:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DdYFDRN8L9tAXczrNxIjwAmMbI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/Ud14hab_xfWtv2WkBDXSH2-QoMU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/1DdYFDRN8L9tAXczrNxIjwAmMbI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.8.176.0/21
46.8.196.0/23
Signature Algorithm: sha256WithRSAEncryption
4c:1a:5e:54:a2:ad:bb:aa:6f:62:1c:39:2d:be:52:08:bf:ee:
b1:47:7c:49:0f:9b:1b:b4:43:46:3b:42:88:ff:05:18:76:c7:
67:08:ad:14:76:6f:e9:9f:a7:fb:23:a4:e7:45:68:cf:41:eb:
09:69:17:5e:4a:51:22:1a:b5:fe:e0:e9:48:21:14:e7:9d:4f:
f7:39:0b:15:6d:d2:8d:64:75:9c:98:14:2f:da:6e:98:d8:b6:
f9:d7:cb:6a:89:c8:f2:d8:b4:4f:bf:79:ef:71:cd:a5:91:0e:
c9:02:ef:83:39:3e:c3:69:2e:35:da:89:a2:64:c3:aa:da:55:
54:7a:00:23:8c:2e:99:11:12:20:39:4f:75:31:45:66:3f:61:
2b:0b:e9:cc:86:d4:b5:7e:6a:e6:dc:f7:e6:d3:36:7c:a2:88:
04:f2:6b:2e:c3:13:be:01:cf:5f:26:d3:ad:48:0b:a7:a0:e9:
6f:73:bd:6a:3b:40:43:b3:cb:6e:b8:2f:e6:96:c9:9e:75:9e:
dc:80:f0:e2:91:0f:4d:9d:9f:4c:1d:ea:2d:86:ef:39:a3:7c:
25:9f:b3:88:f7:8e:5c:18:de:99:ce:62:07:3a:77:a8:d3:c4:
d0:a9:30:cd:58:27:f7:69:b5:8d:80:3a:2c:a3:af:30:5b:ec:
f9:0c:15:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:30:30 2025 by rpki-client