Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/bb0480-66ad-4288-b8d3-1004c1e50dfe/1/J54Y1IoCU6EUYDsQwZq0KC6RsFc.roa
File: J54Y1IoCU6EUYDsQwZq0KC6RsFc.roa (raw, json)
Hash identifier: xhKFAcEbOSjBXoqtlWbGh1EqEqQx5jRVKa/Fp/J2eqc=
Subject key identifier: 27:9E:18:D4:8A:02:53:A1:14:60:3B:10:C1:9A:B4:28:2E:91:B0:57
Certificate issuer: /CN=8ca8a4d42a0196df7cc0e14f597cf5660d63c09f
Certificate serial: 019422FC2BABC24827D08A366FC5DC60B23B
Authority key identifier: 8C:A8:A4:D4:2A:01:96:DF:7C:C0:E1:4F:59:7C:F5:66:0D:63:C0:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jKik1CoBlt98wOFPWXz1Zg1jwJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/bb0480-66ad-4288-b8d3-1004c1e50dfe/1/J54Y1IoCU6EUYDsQwZq0KC6RsFc.roa
Signing time: Wed 01 Jan 2025 17:48:59 +0000
ROA not before: Wed 01 Jan 2025 17:48:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8075
IP address blocks: 46.29.242.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:2b:ab:c2:48:27:d0:8a:36:6f:c5:dc:60:b2:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ca8a4d42a0196df7cc0e14f597cf5660d63c09f
Validity
Not Before: Jan 1 17:48:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=279e18d48a0253a114603b10c19ab4282e91b057
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:20:04:c8:de:aa:f4:83:83:3c:d8:fd:a6:2b:
07:60:6b:d5:26:b1:5e:67:66:a7:83:47:5a:94:e0:
08:9e:0f:8d:c8:7a:d1:e5:cd:fb:29:c7:59:50:7f:
a4:d9:0e:85:34:9e:d0:a2:b8:e3:e8:6c:23:42:62:
c8:04:ac:bf:81:43:07:a4:fc:f2:54:7d:aa:d1:44:
3b:08:b0:56:58:59:64:04:69:6a:72:fe:ad:35:33:
ea:68:23:f9:7b:c2:84:56:30:fe:9a:6e:8f:c5:45:
d2:ef:d8:d1:f5:f5:ac:83:48:9e:2b:18:b4:4b:f0:
cc:b8:05:81:d0:c6:54:7b:ec:3e:28:4f:97:87:e8:
3b:35:44:3d:29:d9:af:2a:95:a6:b0:76:56:02:f3:
a7:de:b3:ed:1d:4e:b5:c4:57:de:af:83:b5:99:76:
c2:76:8e:ba:b4:6d:94:28:c0:a3:44:56:8c:1d:64:
60:b6:ac:b6:0b:e0:83:f1:01:67:e7:6c:94:25:43:
91:b9:55:79:6b:53:f9:1d:b1:8f:0d:ce:da:df:8a:
89:26:50:35:64:26:72:3b:15:51:ea:84:a4:cd:67:
cd:e4:32:02:eb:88:8f:15:a7:58:4f:20:46:2b:c7:
4f:42:a5:8e:ed:6a:9e:56:52:b8:2c:aa:20:31:21:
86:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:9E:18:D4:8A:02:53:A1:14:60:3B:10:C1:9A:B4:28:2E:91:B0:57
X509v3 Authority Key Identifier:
keyid:8C:A8:A4:D4:2A:01:96:DF:7C:C0:E1:4F:59:7C:F5:66:0D:63:C0:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jKik1CoBlt98wOFPWXz1Zg1jwJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/bb0480-66ad-4288-b8d3-1004c1e50dfe/1/J54Y1IoCU6EUYDsQwZq0KC6RsFc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/bb0480-66ad-4288-b8d3-1004c1e50dfe/1/jKik1CoBlt98wOFPWXz1Zg1jwJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.29.242.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:e4:2b:ed:42:c1:f9:ce:00:39:ac:6e:8e:d8:48:21:b6:6c:
25:94:83:6f:a9:32:7a:f8:19:f6:aa:20:64:de:b2:77:37:09:
22:d5:b2:db:8d:ce:76:12:06:c1:96:6b:bf:57:69:ef:16:1c:
d3:04:ac:81:b1:b4:c1:ea:e4:72:ac:89:75:80:c5:a0:3a:23:
e7:ba:3b:01:3c:1c:2c:ee:b6:0e:2a:e5:8d:b3:b1:be:28:a7:
4c:74:fb:b7:94:36:f1:7e:54:7d:d4:62:fa:49:6d:63:c2:e2:
1a:a3:21:f2:9a:e9:ec:4b:f3:91:ff:a0:83:03:5d:3f:c0:cb:
3c:ef:cc:07:56:8b:36:1d:84:4c:c6:34:af:a9:ad:36:c3:84:
46:74:61:4e:d5:57:31:5c:1f:29:82:ad:b3:37:c5:89:9e:7b:
a5:b8:d7:af:9e:88:5e:6b:63:25:21:08:06:cb:46:1c:5c:00:
7c:74:d7:41:f6:2b:4f:0e:8a:d9:6d:09:6d:11:28:49:38:7b:
38:a3:21:4b:e1:4a:df:3b:79:1d:ff:d2:75:46:4e:cf:81:17:
66:f2:5b:f0:a0:02:10:72:1e:5a:05:38:44:89:96:98:31:bf:
d0:89:b9:59:46:49:dd:14:7d:71:79:bb:ac:96:7f:d7:5d:09:
4d:9a:c4:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:07:24 2025 by rpki-client