Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/dazeGv3OsOAFOUm2ksf-a0maimM.roa
File: dazeGv3OsOAFOUm2ksf-a0maimM.roa (raw, json)
Hash identifier: Cdh02tfEQePRadsU7XZnGAU6ziLLBW4A8Neysvsz21Q=
Subject key identifier: 75:AC:DE:1A:FD:CE:B0:E0:05:39:49:B6:92:C7:FE:6B:49:9A:8A:63
Certificate issuer: /CN=d4375814344df0bf6d017733acdc488f002631b2
Certificate serial: 0193AEC9383D737C67F81C758174AF2F0FA7
Authority key identifier: D4:37:58:14:34:4D:F0:BF:6D:01:77:33:AC:DC:48:8F:00:26:31:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1DdYFDRN8L9tAXczrNxIjwAmMbI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/dazeGv3OsOAFOUm2ksf-a0maimM.roa
Signing time: Tue 10 Dec 2024 04:17:22 +0000
ROA not before: Tue 10 Dec 2024 04:17:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 141167
IP address blocks: 46.8.112.0/23 maxlen: 24
46.8.114.0/23 maxlen: 24
46.8.118.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:ae:c9:38:3d:73:7c:67:f8:1c:75:81:74:af:2f:0f:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4375814344df0bf6d017733acdc488f002631b2
Validity
Not Before: Dec 10 04:17:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=75acde1afdceb0e0053949b692c7fe6b499a8a63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:34:3c:14:1f:96:48:72:8e:35:a3:27:1e:15:
68:18:0b:e7:fa:ed:d9:d3:df:ef:f8:a3:b8:61:f4:
ff:40:ec:51:d4:11:f0:7e:b7:d5:fe:92:52:72:e0:
a2:4e:be:ce:7a:6b:e2:ba:b8:6b:dc:f2:80:af:3c:
fb:b4:57:1f:03:ca:f7:29:5d:87:48:4d:c8:0e:55:
5b:c0:65:5d:42:39:39:d6:d7:64:a9:5c:a6:86:a5:
9f:a3:a6:d7:b9:e1:bf:39:92:ed:df:37:c6:50:3c:
83:89:09:d2:73:86:2e:d3:92:ce:5b:3a:79:6d:d0:
ec:4f:99:d6:bc:a6:98:de:57:3f:b5:d3:fe:1f:bb:
8e:dd:4c:8d:57:09:10:d2:6d:35:cc:1b:04:33:54:
7a:40:8e:4f:72:a8:0e:fd:58:55:1c:d2:0e:87:48:
c4:95:c2:95:09:47:8f:da:27:f0:28:c5:11:be:ee:
46:65:37:88:94:b2:76:d0:a0:b1:96:c3:45:11:16:
5f:20:b4:36:1b:c4:23:17:74:bd:6a:75:11:4d:6d:
aa:75:86:2f:f8:91:ce:aa:d4:ec:fb:dc:a6:53:b4:
8e:a7:4e:a6:16:f1:07:60:14:0b:a2:85:dc:a0:41:
6e:fb:2b:22:79:b5:eb:b4:53:f8:5d:4f:99:92:da:
ce:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:AC:DE:1A:FD:CE:B0:E0:05:39:49:B6:92:C7:FE:6B:49:9A:8A:63
X509v3 Authority Key Identifier:
keyid:D4:37:58:14:34:4D:F0:BF:6D:01:77:33:AC:DC:48:8F:00:26:31:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DdYFDRN8L9tAXczrNxIjwAmMbI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/dazeGv3OsOAFOUm2ksf-a0maimM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/1DdYFDRN8L9tAXczrNxIjwAmMbI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.8.112.0/22
46.8.118.0/23
Signature Algorithm: sha256WithRSAEncryption
97:b8:2b:08:49:26:44:ad:9e:c0:14:40:ff:e4:77:57:6d:9a:
ed:26:bc:30:a2:90:f8:ca:9d:4e:26:43:9c:00:ea:d6:92:b7:
2a:ef:f2:85:59:dd:3f:b5:84:6b:b1:1f:d6:4d:1a:7f:53:81:
17:16:33:3d:e0:b2:92:e9:f9:59:83:95:52:20:07:d5:fb:10:
fc:31:0b:12:8b:06:57:49:4f:ab:b8:32:3c:ae:e7:6c:b6:99:
31:c1:07:77:fa:81:c5:26:95:a9:0e:67:af:84:39:9a:51:e3:
2c:fd:ca:88:16:46:75:91:4e:fb:67:d5:36:3e:2a:57:eb:74:
b3:72:83:06:a2:27:a7:ef:a6:07:78:7a:6e:83:3d:57:6c:04:
f6:e0:19:9e:ca:36:53:04:59:c1:39:40:da:04:68:26:0f:cd:
04:77:cd:8b:3d:50:0f:f2:16:b3:62:b9:b2:57:6e:94:e7:72:
55:ed:bf:dc:39:24:70:59:19:92:aa:a1:91:2d:fa:af:dd:c0:
22:06:a0:30:e1:83:bc:bb:6b:4c:11:d6:d5:e1:85:36:7b:ca:
e9:21:92:13:1c:93:95:f0:5a:00:80:1e:0d:63:91:ca:da:c2:
54:18:e2:0b:b7:61:be:02:a8:0b:ae:7c:e7:b9:33:3c:7a:f6:
36:6c:6e:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:39:46 2025 by rpki-client