Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/703902-7061-4ecb-9df1-c45620326491/1/tOD7ZPqas8UpTT4bdLzx0MJD5rk.roa
File: tOD7ZPqas8UpTT4bdLzx0MJD5rk.roa (raw, json)
Hash identifier: k/eXxf7557SFB+l+Q/mWhChu1kZsTZ07A3b0mG1jAsA=
Subject key identifier: B4:E0:FB:64:FA:9A:B3:C5:29:4D:3E:1B:74:BC:F1:D0:C2:43:E6:B9
Certificate issuer: /CN=c592a06090f016940d31eb1b09bae12d94b195b0
Certificate serial: 01941FFA28DAFA801F97989EF233CB988304
Authority key identifier: C5:92:A0:60:90:F0:16:94:0D:31:EB:1B:09:BA:E1:2D:94:B1:95:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xZKgYJDwFpQNMesbCbrhLZSxlbA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/703902-7061-4ecb-9df1-c45620326491/1/tOD7ZPqas8UpTT4bdLzx0MJD5rk.roa
Signing time: Wed 01 Jan 2025 03:47:55 +0000
ROA not before: Wed 01 Jan 2025 03:47:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215234
IP address blocks: 46.102.118.0/23 maxlen: 23
46.102.118.0/24 maxlen: 24
2a14:2e40::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:28:da:fa:80:1f:97:98:9e:f2:33:cb:98:83:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c592a06090f016940d31eb1b09bae12d94b195b0
Validity
Not Before: Jan 1 03:47:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b4e0fb64fa9ab3c5294d3e1b74bcf1d0c243e6b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b3:f7:d2:c0:5a:31:0f:0f:20:9f:04:2a:0e:
29:8e:c9:46:e1:f9:68:9d:14:58:a7:d8:a7:ba:eb:
39:9b:b9:dc:2b:c0:54:57:44:d9:2d:b3:99:69:0b:
8c:86:55:fe:fb:bd:15:f1:d7:20:54:a6:64:66:fd:
9a:20:07:11:0c:53:5f:c5:ae:55:97:a2:52:85:9c:
7a:72:e9:5c:38:68:64:4e:f7:87:44:8f:7e:e5:8b:
c9:c1:82:ce:79:2e:59:de:3f:45:12:9c:28:9a:55:
d3:a2:06:85:96:3b:c9:ec:0f:0d:a7:ea:c4:cb:46:
f4:e2:6e:81:a2:8a:f9:dc:f3:f5:e4:5f:e9:34:62:
ab:1f:b4:d8:96:f5:7f:f3:e3:dd:e4:b1:78:37:dd:
9b:a0:e4:02:9c:b6:37:ef:70:31:60:42:4f:f6:f8:
48:04:b0:b0:d0:c1:64:c0:57:0f:27:d2:59:91:dd:
af:45:21:6b:26:43:32:e8:1d:4d:7c:0a:24:6f:27:
18:ba:c2:21:f5:14:03:67:1e:73:52:f1:7c:4e:66:
44:43:85:68:a5:dc:a9:e9:23:69:55:5b:3f:84:38:
13:b0:4a:88:3d:cc:63:95:10:37:0e:ba:bb:f4:b4:
ec:a1:18:f4:5c:31:e6:98:19:83:17:e2:2d:c5:9c:
2e:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:E0:FB:64:FA:9A:B3:C5:29:4D:3E:1B:74:BC:F1:D0:C2:43:E6:B9
X509v3 Authority Key Identifier:
keyid:C5:92:A0:60:90:F0:16:94:0D:31:EB:1B:09:BA:E1:2D:94:B1:95:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xZKgYJDwFpQNMesbCbrhLZSxlbA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/703902-7061-4ecb-9df1-c45620326491/1/tOD7ZPqas8UpTT4bdLzx0MJD5rk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/703902-7061-4ecb-9df1-c45620326491/1/xZKgYJDwFpQNMesbCbrhLZSxlbA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.102.118.0/23
IPv6:
2a14:2e40::/29
Signature Algorithm: sha256WithRSAEncryption
08:4b:8a:f8:e5:32:5d:9e:a1:68:c4:2f:f7:9e:c2:bb:5f:d9:
37:72:1c:5d:5f:0e:cd:b6:da:35:b6:b1:d3:99:aa:8b:b8:59:
4d:a7:ab:3d:70:92:cd:38:3f:e8:81:15:41:4c:61:b0:b2:40:
3f:54:22:ef:39:a6:bb:5f:e0:76:7a:e8:1d:e0:c5:d4:e7:cc:
5d:e4:7c:02:47:a3:65:af:eb:51:ca:7e:23:79:96:97:59:94:
76:ac:73:68:d5:60:11:63:7c:a9:6a:74:68:9f:80:7c:e1:49:
54:9d:f3:5d:11:fc:53:e2:c4:93:22:61:6c:1c:3d:b1:a4:c1:
00:81:c9:83:37:9a:dd:a1:ad:c4:41:c1:a2:28:40:1c:e3:c4:
ab:eb:ee:2b:7e:73:ca:1e:60:6c:03:a3:42:4c:6c:a2:44:20:
7d:87:e5:df:4b:2d:fd:a6:bb:0a:d4:a4:b4:47:de:ba:d8:5e:
88:57:98:e9:83:44:32:81:cc:c5:24:97:8c:91:60:21:96:3f:
46:29:c6:38:cf:94:19:57:68:3c:7c:d0:ff:88:4a:7b:8a:f7:
5f:f3:34:3f:3a:0e:5f:e3:94:ce:96:40:23:77:76:af:d6:bc:
80:de:b1:de:dc:de:82:b2:70:64:65:38:10:71:9d:71:13:ce:
3a:8c:b8:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:57:34 2025 by rpki-client