Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/brY4nnZyBTnIJY3z6C6ymKubOY0.roa
File: brY4nnZyBTnIJY3z6C6ymKubOY0.roa (raw, json)
Hash identifier: pc5OYc6oXnHxBvDdnE06MSd2CPJ6fIkq22aelBFfNl8=
Subject key identifier: 6E:B6:38:9E:76:72:05:39:C8:25:8D:F3:E8:2E:B2:98:AB:9B:39:8D
Certificate issuer: /CN=d4375814344df0bf6d017733acdc488f002631b2
Certificate serial: 0194221F3CE923B641ECCF0C8E19AA6C0540
Authority key identifier: D4:37:58:14:34:4D:F0:BF:6D:01:77:33:AC:DC:48:8F:00:26:31:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1DdYFDRN8L9tAXczrNxIjwAmMbI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/brY4nnZyBTnIJY3z6C6ymKubOY0.roa
Signing time: Wed 01 Jan 2025 13:47:39 +0000
ROA not before: Wed 01 Jan 2025 13:47:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213870
IP address blocks: 46.8.117.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:3c:e9:23:b6:41:ec:cf:0c:8e:19:aa:6c:05:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4375814344df0bf6d017733acdc488f002631b2
Validity
Not Before: Jan 1 13:47:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6eb6389e76720539c8258df3e82eb298ab9b398d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:6d:39:b4:85:af:a0:05:75:86:cf:14:d3:e8:
fc:75:fa:85:89:7d:2b:13:b4:e7:1a:2a:16:73:c2:
24:97:ad:c5:96:0f:1d:19:e2:74:dc:71:f2:9b:99:
01:3e:83:c2:fb:ab:e6:2e:a7:3a:40:d9:d3:85:36:
03:0c:d9:23:7c:1e:13:85:47:3f:d6:e6:57:3b:5c:
9a:59:7a:c3:5f:9d:00:63:fb:17:9d:63:b2:83:37:
63:bd:63:ea:04:16:f1:6b:d7:4a:b0:51:63:0e:dc:
b2:07:c7:8a:d5:88:99:68:60:fa:20:19:c3:4a:ea:
b2:d1:93:9c:56:ad:e6:bf:66:a2:3d:67:45:34:b7:
12:88:da:c8:ed:eb:1f:a0:a2:8d:2c:f6:84:82:28:
f7:cd:da:f1:95:75:70:39:c4:3d:11:23:2d:41:01:
6d:46:ee:59:4a:21:64:b4:0c:ad:34:14:e0:12:8a:
2b:b4:0c:5c:67:ed:28:6c:9f:80:41:04:6c:bf:bc:
a2:33:1a:eb:f7:fd:bc:df:42:1c:ee:c9:91:cf:9b:
cd:c7:ff:5c:3e:02:fe:6e:08:82:9f:da:ed:04:a0:
39:99:c9:6b:79:7b:26:0d:b2:30:3c:fc:9c:6b:18:
d3:88:dd:70:4d:66:b7:86:2c:df:20:49:61:75:3f:
e5:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:B6:38:9E:76:72:05:39:C8:25:8D:F3:E8:2E:B2:98:AB:9B:39:8D
X509v3 Authority Key Identifier:
keyid:D4:37:58:14:34:4D:F0:BF:6D:01:77:33:AC:DC:48:8F:00:26:31:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DdYFDRN8L9tAXczrNxIjwAmMbI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/brY4nnZyBTnIJY3z6C6ymKubOY0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/1DdYFDRN8L9tAXczrNxIjwAmMbI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.8.117.0/24
Signature Algorithm: sha256WithRSAEncryption
48:44:cb:68:1b:a9:75:ed:82:4f:e1:c7:19:9c:f8:c7:1c:8a:
a7:e6:3f:10:f9:51:ab:07:87:30:c3:8b:27:49:70:60:9f:f4:
43:0f:b2:97:3c:25:3c:ee:bf:fd:48:9d:b0:d2:d9:6d:24:04:
d4:8f:cd:67:7f:d1:c1:60:f6:5a:6a:81:66:c7:7e:00:5b:5f:
82:2f:07:16:6f:2d:87:e2:c5:cc:50:76:c9:f5:dd:a3:ba:c7:
82:2e:50:6a:2b:aa:8d:a9:a3:38:8e:8c:f1:61:9a:7d:53:99:
2f:4f:81:05:4f:8e:03:19:64:58:c1:94:6b:25:05:80:1d:d0:
f0:4c:89:53:77:b2:93:4f:1e:c1:73:45:95:af:ec:2b:48:99:
49:17:51:40:6b:e8:04:d4:d7:2c:84:b1:85:65:c0:c1:43:f8:
83:40:2b:ce:8a:99:fc:5b:c3:39:00:6e:7c:20:be:f4:0d:aa:
ac:bd:81:d0:4b:65:db:f9:1e:f3:5e:1e:f7:b0:20:f2:8a:c1:
40:63:d1:07:d9:32:03:3a:a4:8e:71:ac:6f:da:21:13:4f:ee:
15:64:f1:69:2e:8c:ee:ad:83:8e:b3:37:a8:19:50:40:bb:d2:
4b:e7:30:1a:9c:81:92:cd:d6:22:93:28:1f:15:cb:00:5f:24:
9d:b9:b3:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:40:07 2025 by rpki-client