Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/ZxN8lhLxsa-NEEjNRgSh0RzU_EI.roa
File: ZxN8lhLxsa-NEEjNRgSh0RzU_EI.roa (raw, json)
Hash identifier: fEuA0PwrOwgLw9P6gOyOKfV/2HxY/omynBjOr24eKBM=
Subject key identifier: 67:13:7C:96:12:F1:B1:AF:8D:10:48:CD:46:04:A1:D1:1C:D4:FC:42
Certificate issuer: /CN=d4375814344df0bf6d017733acdc488f002631b2
Certificate serial: 0194221F33BB8192E6F0D3DD626F8C55FFC9
Authority key identifier: D4:37:58:14:34:4D:F0:BF:6D:01:77:33:AC:DC:48:8F:00:26:31:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1DdYFDRN8L9tAXczrNxIjwAmMbI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/ZxN8lhLxsa-NEEjNRgSh0RzU_EI.roa
Signing time: Wed 01 Jan 2025 13:47:37 +0000
ROA not before: Wed 01 Jan 2025 13:47:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 46.8.100.0/22 maxlen: 24
46.8.118.0/23 maxlen: 24
46.8.195.0/24 maxlen: 24
46.8.198.0/24 maxlen: 24
188.130.224.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:33:bb:81:92:e6:f0:d3:dd:62:6f:8c:55:ff:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4375814344df0bf6d017733acdc488f002631b2
Validity
Not Before: Jan 1 13:47:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=67137c9612f1b1af8d1048cd4604a1d11cd4fc42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:eb:be:54:f0:d4:97:40:15:a0:30:a0:97:a1:
5c:ad:bc:6d:f4:75:01:31:ad:8f:02:20:91:fb:28:
f0:fb:61:36:1c:55:d2:e6:61:a5:9d:2a:0d:ad:b4:
6b:36:88:03:c8:1c:b7:83:d1:0d:b1:43:3f:0d:c3:
30:64:85:d6:f3:77:15:8c:60:9e:40:5a:a9:21:ec:
1f:45:2b:46:05:d0:26:5d:4f:8e:bf:15:1e:5f:4e:
1a:67:04:f2:0f:d4:42:cb:f6:25:c6:87:a2:11:05:
d5:f5:aa:9f:af:8e:57:f9:3c:df:85:35:31:9f:f1:
6f:97:b0:c3:b7:ff:af:a2:c3:99:b8:0f:52:02:78:
5e:41:29:9a:29:cf:c8:04:5f:d5:e8:b2:0f:09:ce:
49:d4:6b:46:ba:5d:6f:32:4a:91:64:ce:69:f3:45:
b6:5d:bd:48:60:36:97:d9:7b:4a:a3:06:5a:a6:0d:
0f:61:97:64:f7:30:bd:d5:72:a5:b8:ad:16:84:6e:
80:f4:50:38:7f:fb:13:5d:20:99:ec:de:7a:57:38:
2d:71:24:43:9f:90:e9:0a:20:d2:bc:cc:3f:58:78:
38:fa:ab:ea:db:c4:0e:c7:60:74:d7:cc:66:05:4e:
45:ea:13:6d:bb:ea:bc:24:f3:1a:23:72:43:96:c9:
6a:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:13:7C:96:12:F1:B1:AF:8D:10:48:CD:46:04:A1:D1:1C:D4:FC:42
X509v3 Authority Key Identifier:
keyid:D4:37:58:14:34:4D:F0:BF:6D:01:77:33:AC:DC:48:8F:00:26:31:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DdYFDRN8L9tAXczrNxIjwAmMbI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/ZxN8lhLxsa-NEEjNRgSh0RzU_EI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/1DdYFDRN8L9tAXczrNxIjwAmMbI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.8.100.0/22
46.8.118.0/23
46.8.195.0/24
46.8.198.0/24
188.130.224.0/22
Signature Algorithm: sha256WithRSAEncryption
8d:ab:fa:34:ea:43:14:c5:60:1e:1b:48:cd:28:31:b4:85:15:
a0:c9:8d:79:60:77:ce:ef:23:f5:e1:0f:d0:d2:22:a7:9e:69:
ba:85:d2:a2:3a:77:28:09:36:9c:d9:34:42:57:49:53:15:9c:
61:e3:81:20:ca:9a:5a:09:4a:f8:bb:cf:8a:40:b8:21:be:5f:
ee:a1:b6:ca:06:9c:5e:f6:f7:da:a7:60:fc:04:20:d5:b8:b3:
85:51:37:da:61:04:36:ff:96:20:03:76:00:6e:20:e2:d4:94:
56:bd:5a:e2:63:5e:a6:5d:73:4c:14:c0:2a:ae:00:c8:eb:d3:
18:73:0b:64:26:06:cf:1d:b4:91:2b:cc:fa:35:03:0d:07:9c:
a3:36:ab:82:45:19:ec:12:35:10:4c:73:52:34:76:30:ff:60:
61:e3:f1:ec:41:17:c9:db:6b:d5:5c:1f:b2:02:3a:86:d4:31:
7f:a2:15:61:c5:f1:f2:a9:ac:a9:e0:90:28:3f:0d:e3:e0:8f:
75:22:7f:98:66:d8:3d:85:49:7a:d9:bf:19:39:bd:e3:ce:8e:
da:98:cb:e7:57:f1:5a:53:8e:ad:e1:22:35:4c:76:7f:20:54:
4e:8b:c7:8a:13:da:4c:3a:ae:c0:a3:c3:20:d1:c8:fd:a2:35:
7a:b4:1a:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:46:01 2025 by rpki-client