Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/6d625c-7e60-4523-9491-d112299ff695/1/IThQt7fbZjTxBPjVToQUiBMJLfw.roa
File: IThQt7fbZjTxBPjVToQUiBMJLfw.roa (raw, json)
Hash identifier: oQVD23q0+FFPZozW7epeAMXOc9QR32sT9Z0RYH7NZss=
Subject key identifier: 21:38:50:B7:B7:DB:66:34:F1:04:F8:D5:4E:84:14:88:13:09:2D:FC
Certificate issuer: /CN=a34e6017e1fe0393278c2859f43043b31ee6c89a
Certificate serial: 019425221DB12433508078FBE45367998682
Authority key identifier: A3:4E:60:17:E1:FE:03:93:27:8C:28:59:F4:30:43:B3:1E:E6:C8:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o05gF-H-A5MnjChZ9DBDsx7myJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/6d625c-7e60-4523-9491-d112299ff695/1/IThQt7fbZjTxBPjVToQUiBMJLfw.roa
Signing time: Thu 02 Jan 2025 03:49:40 +0000
ROA not before: Thu 02 Jan 2025 03:49:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202757
IP address blocks: 46.247.132.0/24 maxlen: 24
46.247.133.0/24 maxlen: 24
46.247.134.0/24 maxlen: 24
46.247.135.0/24 maxlen: 24
185.88.196.0/24 maxlen: 24
185.88.197.0/24 maxlen: 24
185.88.198.0/24 maxlen: 24
185.88.199.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:1d:b1:24:33:50:80:78:fb:e4:53:67:99:86:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a34e6017e1fe0393278c2859f43043b31ee6c89a
Validity
Not Before: Jan 2 03:49:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=213850b7b7db6634f104f8d54e84148813092dfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ad:30:4b:a8:5a:26:c3:fb:74:ec:04:ba:af:
39:4d:11:f0:f9:4a:8c:3a:20:96:50:39:f1:10:67:
76:e6:0a:44:84:e3:d0:e0:82:8f:6c:e6:43:21:b9:
eb:a7:d2:59:ee:5c:f8:e4:bc:f8:66:7d:19:ce:be:
9d:47:4d:05:01:b4:fe:22:2c:8c:c9:da:27:7a:df:
d7:5a:7a:25:fc:c8:3a:5f:40:15:cc:78:c3:91:c3:
e8:68:8b:a3:75:5b:8f:e7:49:af:a8:56:ae:7f:67:
51:44:c3:19:ae:9d:2d:51:3e:86:51:29:71:f7:55:
6b:b0:2d:57:f8:a4:96:ca:8b:e4:0f:8a:4f:7e:a7:
f4:d8:22:d9:00:d2:90:a6:9f:99:80:b5:59:00:d1:
14:2b:29:5d:e6:76:62:4e:22:18:bd:81:1a:a8:97:
ac:d5:b8:e8:da:d7:b5:ed:4d:1a:34:c6:a7:bd:6f:
50:c7:fe:7c:7b:f0:be:4d:f0:03:7c:7e:7d:4b:e6:
dd:42:36:9f:28:9c:88:95:76:3c:aa:5d:d8:0e:5a:
18:81:7c:63:2c:46:3c:9f:6f:fe:37:0f:8f:84:16:
b5:1c:a9:b0:03:fb:86:db:1e:67:43:22:59:26:7c:
c7:eb:4f:f8:6b:04:4c:89:4b:56:71:6b:a7:36:b5:
c7:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:38:50:B7:B7:DB:66:34:F1:04:F8:D5:4E:84:14:88:13:09:2D:FC
X509v3 Authority Key Identifier:
keyid:A3:4E:60:17:E1:FE:03:93:27:8C:28:59:F4:30:43:B3:1E:E6:C8:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o05gF-H-A5MnjChZ9DBDsx7myJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/6d625c-7e60-4523-9491-d112299ff695/1/IThQt7fbZjTxBPjVToQUiBMJLfw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/6d625c-7e60-4523-9491-d112299ff695/1/o05gF-H-A5MnjChZ9DBDsx7myJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.247.132.0/22
185.88.196.0/22
Signature Algorithm: sha256WithRSAEncryption
3a:49:74:05:3b:17:fd:85:39:85:eb:85:be:75:43:56:b8:88:
ab:4b:4d:23:87:58:24:26:27:82:c3:44:5d:32:d5:d7:53:f5:
5a:65:2c:cf:e4:94:38:da:05:52:e2:68:16:0e:91:33:bd:61:
a5:09:cb:4e:91:5b:22:43:fc:6f:2e:53:bf:fb:be:e6:60:4a:
7f:15:60:32:71:fb:83:56:e5:de:87:7c:7b:34:8f:81:fb:9d:
18:49:e9:94:89:87:d5:e3:da:b0:7e:64:84:c4:35:79:9a:21:
a3:f6:07:7d:7b:68:38:2a:81:6a:31:c5:ee:f6:29:93:49:f0:
e4:cf:c0:0f:a2:b4:1d:ae:ac:40:fd:34:27:30:ee:b4:46:4b:
2d:4c:ba:61:2a:f5:9b:e0:0e:61:51:f8:c2:0a:8c:83:75:90:
fc:a7:f2:6c:5b:79:19:9e:b3:ff:a7:52:6e:a2:e8:38:4d:99:
aa:e9:3d:1a:7b:8a:32:0f:a2:e9:dd:7b:66:9d:d5:b5:0e:cf:
3f:9d:ef:68:d7:9f:41:66:2f:20:62:e7:d1:20:d1:13:8c:b6:
ea:6e:32:ee:c0:61:e0:53:59:ed:52:1a:5f:16:1a:8f:bc:56:
db:96:a5:99:63:ef:4b:dd:68:fd:35:de:3a:d4:2a:45:0a:8c:
40:78:cf:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:41:21 2025 by rpki-client