Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/ca5paVbd9snqxpLr9ruQJAAq4dY.roa
File: ca5paVbd9snqxpLr9ruQJAAq4dY.roa (raw, json)
Hash identifier: 7XRHLPrMc+bAZpofyyUropQAc1T4wET+IY5us3KScs4=
Subject key identifier: 71:AE:69:69:56:DD:F6:C9:EA:C6:92:EB:F6:BB:90:24:00:2A:E1:D6
Certificate issuer: /CN=d4375814344df0bf6d017733acdc488f002631b2
Certificate serial: 0189E59BC5EE7F161965F5F01B1398C0B800
Authority key identifier: D4:37:58:14:34:4D:F0:BF:6D:01:77:33:AC:DC:48:8F:00:26:31:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1DdYFDRN8L9tAXczrNxIjwAmMbI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/ca5paVbd9snqxpLr9ruQJAAq4dY.roa
Signing time: Fri 11 Aug 2023 17:18:58 +0000
ROA not before: Fri 11 Aug 2023 17:18:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 26968
IP address blocks: 46.8.200.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:e5:9b:c5:ee:7f:16:19:65:f5:f0:1b:13:98:c0:b8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4375814344df0bf6d017733acdc488f002631b2
Validity
Not Before: Aug 11 17:18:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=71ae696956ddf6c9eac692ebf6bb9024002ae1d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:81:c7:8c:0b:98:bd:ef:6d:a3:91:77:41:57:
4a:5e:d4:0e:2c:36:12:4d:33:57:17:f6:ea:a2:13:
3b:dd:9c:cf:ba:6b:7d:30:1a:03:9a:15:0b:46:11:
2e:84:75:82:03:f6:5c:b9:09:77:ba:49:c9:a3:38:
33:7a:07:21:1d:4e:37:56:d4:cb:a0:12:e0:90:05:
b4:94:e2:d4:39:8b:51:e6:87:19:c7:5e:29:16:58:
f0:bc:ae:eb:7b:40:c0:39:ed:a2:66:79:6f:86:0f:
00:de:94:b0:6f:7c:7c:94:79:ca:c8:af:29:f5:b3:
cb:51:c2:13:25:f4:58:81:a6:36:31:77:bd:6e:95:
4b:34:4a:d4:09:10:a3:60:ee:c9:74:76:4f:41:29:
f3:78:87:dd:fd:06:ad:4f:94:9f:c0:2e:8a:16:2d:
cb:f7:83:11:7e:1c:fc:2c:73:c3:4c:fd:a7:af:bd:
50:8e:9d:04:ef:d5:09:0b:e6:a8:42:9f:99:b4:53:
cf:8e:38:64:7c:5a:9f:52:45:ec:46:15:7d:7d:30:
06:c0:d7:14:e1:d4:1d:48:70:58:05:b3:15:7e:f1:
67:61:f0:ad:bd:f5:f0:42:4d:f2:5b:2d:6a:79:70:
75:a6:88:1a:51:dc:ad:9a:e7:34:32:9e:b2:2d:eb:
bf:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:AE:69:69:56:DD:F6:C9:EA:C6:92:EB:F6:BB:90:24:00:2A:E1:D6
X509v3 Authority Key Identifier:
keyid:D4:37:58:14:34:4D:F0:BF:6D:01:77:33:AC:DC:48:8F:00:26:31:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DdYFDRN8L9tAXczrNxIjwAmMbI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/ca5paVbd9snqxpLr9ruQJAAq4dY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/1DdYFDRN8L9tAXczrNxIjwAmMbI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.8.200.0/23
Signature Algorithm: sha256WithRSAEncryption
74:02:b7:67:72:43:e3:d3:a6:b2:ef:7f:9d:b3:b3:49:1a:f8:
e7:29:b8:a6:b6:f2:ac:66:63:8d:d6:ca:29:d7:c3:87:61:ba:
1e:33:bb:c9:49:fd:15:e4:e3:8b:0d:f0:7d:96:a9:69:ee:44:
bf:7e:ec:5f:30:0b:90:91:a9:bc:36:4f:74:13:4f:1b:0b:a4:
15:9e:18:59:4c:41:06:7e:77:26:13:6c:88:58:0a:7d:1c:94:
8b:e9:cf:62:08:e8:68:1a:43:45:16:2c:84:b8:40:40:68:f5:
46:5f:ab:23:6e:4b:4b:20:45:af:e3:20:a5:ca:db:32:2c:f0:
58:b1:c7:6d:f7:69:5b:55:69:e8:ac:81:66:6d:a8:0a:76:0e:
68:e8:cb:13:0f:80:6d:57:0a:1e:5c:7a:bf:89:00:62:69:76:
47:f1:36:3a:8b:94:7f:fb:70:1e:23:bf:bd:20:b3:67:27:ac:
55:be:53:b2:eb:ff:4f:0c:a4:a8:cf:2d:96:11:da:5f:f2:32:
dc:90:78:97:7a:89:2f:f6:63:b1:3f:fb:19:89:6f:e9:0f:17:
0f:58:6e:fb:02:53:b5:e7:e0:10:5d:45:34:c0:da:de:bd:88:
bd:26:d1:a8:65:56:61:99:08:d7:70:52:b4:fd:01:d2:19:be:
cb:25:cb:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:35:24 2025 by rpki-client