Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/435d88-371e-4f86-a90a-cfbbc14671a3/1/1-Ofv8tDBMWs_4Hbhr7lMN_HF2TI.roa
File: 1-Ofv8tDBMWs_4Hbhr7lMN_HF2TI.roa (raw, json)
Hash identifier: uH/td80fED56QPX1k1oOVphRVZ11UL29yzqyURnsYnc=
Subject key identifier: F8:E7:EF:F2:D0:C1:31:6B:3F:E0:76:E1:AF:B9:4C:37:F1:C5:D9:32
Certificate issuer: /CN=fd0c6b2bd29d3168487c9ec5fde4c3fc42d9cfbe
Certificate serial: 01942444CFE437410F31BD6A196CA442F8C6
Authority key identifier: FD:0C:6B:2B:D2:9D:31:68:48:7C:9E:C5:FD:E4:C3:FC:42:D9:CF:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_QxrK9KdMWhIfJ7F_eTD_ELZz74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/435d88-371e-4f86-a90a-cfbbc14671a3/1/1-Ofv8tDBMWs_4Hbhr7lMN_HF2TI.roa
Signing time: Wed 01 Jan 2025 23:47:56 +0000
ROA not before: Wed 01 Jan 2025 23:47:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198957
IP address blocks: 46.30.136.0/24 maxlen: 24
46.30.140.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:cf:e4:37:41:0f:31:bd:6a:19:6c:a4:42:f8:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd0c6b2bd29d3168487c9ec5fde4c3fc42d9cfbe
Validity
Not Before: Jan 1 23:47:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f8e7eff2d0c1316b3fe076e1afb94c37f1c5d932
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:3b:fb:86:ba:37:57:15:b8:04:1f:e6:59:f0:
0c:13:00:73:05:c4:d5:b3:b3:8c:0b:7e:c9:39:e7:
ff:e5:74:06:76:c2:c4:e0:9b:a2:c3:7d:8e:55:02:
e5:a1:5d:38:fb:c0:3d:78:2e:0c:c5:f0:2c:89:df:
d4:a3:f2:d5:fa:83:83:99:d2:aa:b3:c9:33:f9:5b:
d8:91:c0:49:3e:45:2e:0b:44:17:bb:86:2b:00:eb:
12:6e:95:8d:76:85:63:f1:4f:fc:3b:b7:8b:07:d5:
16:d0:4c:96:af:bd:14:3b:cb:1f:fc:b0:7f:1a:ee:
e4:07:6b:67:93:ec:7f:90:72:8c:bf:d9:8e:68:6c:
2a:56:50:ca:5c:25:ee:79:b6:27:45:18:01:06:37:
3d:0a:b6:80:28:15:e6:77:2c:60:87:d9:8d:99:d6:
c2:a9:b7:bf:ce:b7:2e:db:06:eb:a3:0e:b9:a5:ef:
69:f9:71:2c:ac:df:9a:7e:73:80:34:d9:6c:15:57:
97:a8:28:ee:67:5d:cc:14:d0:a9:eb:93:dd:54:99:
d0:44:1f:01:62:2c:82:e2:5a:9d:6d:6e:b3:6a:26:
ef:75:39:9c:eb:bb:fa:46:80:3c:1e:3a:08:3e:c6:
24:e3:b6:f1:41:55:8a:98:b6:e5:99:fc:4e:ba:75:
53:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:E7:EF:F2:D0:C1:31:6B:3F:E0:76:E1:AF:B9:4C:37:F1:C5:D9:32
X509v3 Authority Key Identifier:
keyid:FD:0C:6B:2B:D2:9D:31:68:48:7C:9E:C5:FD:E4:C3:FC:42:D9:CF:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_QxrK9KdMWhIfJ7F_eTD_ELZz74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/435d88-371e-4f86-a90a-cfbbc14671a3/1/1-Ofv8tDBMWs_4Hbhr7lMN_HF2TI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/435d88-371e-4f86-a90a-cfbbc14671a3/1/_QxrK9KdMWhIfJ7F_eTD_ELZz74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.30.136.0/24
46.30.140.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:0f:e0:a3:81:a7:bf:08:53:d0:ba:c2:e0:5b:4f:b5:29:0a:
35:5a:0f:ed:4a:bd:f2:5c:d7:ae:db:1c:b9:30:3a:f5:30:b5:
97:d4:19:73:6e:1b:6f:c6:cc:c2:5c:7f:b5:f4:aa:10:40:88:
b2:c3:c8:eb:41:c9:41:b6:d4:5c:ff:cf:1b:c0:d1:cf:c0:8a:
0e:6f:7a:0c:73:ab:4c:52:09:7a:1b:3c:d5:55:f9:49:f4:d1:
43:92:f7:50:b9:19:21:28:95:f0:24:27:08:7b:ff:ed:45:ad:
12:02:da:17:47:09:97:5f:c6:90:3d:ca:1a:88:79:28:3e:f4:
12:9f:91:4d:b6:a9:cd:ea:2d:7c:ef:83:a1:a1:73:09:24:2a:
75:8c:46:23:4e:40:9d:18:26:40:c8:e8:e6:7d:18:6a:0b:1e:
c4:1d:54:d7:11:27:34:47:eb:72:d6:c3:7e:4b:50:7c:c1:57:
2b:42:6a:f8:b9:8c:46:61:c6:39:63:6d:07:3f:a1:c0:62:85:
e4:c7:d2:41:a2:5c:a8:1d:f7:8c:b7:d1:b0:f2:96:1e:7e:5c:
bd:82:f2:d2:7c:d8:9a:b3:97:51:d7:b6:9b:b8:a1:8f:a5:c8:
df:94:62:20:d6:fc:a2:72:5a:f5:0f:04:8a:3a:9d:5d:91:5f:
2e:10:41:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:12:28 2025 by rpki-client