Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/FvcaLEo9ePCgEvBVIK2eI87VCIQ.roa
File: FvcaLEo9ePCgEvBVIK2eI87VCIQ.roa (raw, json)
Hash identifier: tEu/ql9ub4L5vy+BTuIysc1oUr/aYIo+MTuSlbcYBuk=
Subject key identifier: 16:F7:1A:2C:4A:3D:78:F0:A0:12:F0:55:20:AD:9E:23:CE:D5:08:84
Certificate issuer: /CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Certificate serial: 019424453E2245638052CE7B2C870CD55A2A
Authority key identifier: 4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/FvcaLEo9ePCgEvBVIK2eI87VCIQ.roa
Signing time: Wed 01 Jan 2025 23:48:24 +0000
ROA not before: Wed 01 Jan 2025 23:48:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2914
IP address blocks: 46.34.60.0/24 maxlen: 24
46.34.61.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:3e:22:45:63:80:52:ce:7b:2c:87:0c:d5:5a:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Validity
Not Before: Jan 1 23:48:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=16f71a2c4a3d78f0a012f05520ad9e23ced50884
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:5c:e8:37:06:45:0e:3a:48:29:40:50:0b:e3:
d0:26:84:a4:4e:7c:2c:f5:3a:2d:d2:91:11:ed:6e:
ed:d8:58:39:71:e9:3f:f8:13:de:67:d0:cc:74:fd:
e7:51:e0:51:ca:bf:ec:78:63:18:a7:77:e7:59:47:
b8:44:53:0f:26:fb:9d:09:0c:a1:52:db:22:f3:04:
64:cd:67:53:8c:5e:9e:a0:7e:67:33:b7:5c:fe:af:
61:e8:9d:51:25:ae:73:ec:bc:44:8d:36:31:0f:54:
93:23:6f:e4:b4:fc:a8:7e:e1:2c:04:ba:fd:2b:1b:
05:ec:33:8b:c3:a3:5b:73:40:2d:ff:88:f1:3a:ae:
48:af:9d:58:70:a7:d8:9b:50:4f:dc:f1:d9:ed:a4:
d1:ad:ed:a4:43:1b:27:43:90:6f:1b:fd:ea:db:11:
15:35:f1:03:ba:02:3e:d4:df:f1:54:10:8f:4c:cd:
e7:cf:12:14:e9:85:7e:6b:f8:74:60:eb:19:0d:8c:
3c:8e:73:64:12:9d:ae:b7:ce:9c:1b:03:91:f0:84:
9b:dd:94:e3:ce:0b:56:39:fa:13:f7:14:c8:4d:0e:
59:41:3d:23:73:a4:d7:9a:6b:f3:5a:5b:68:06:6d:
7f:32:b6:6d:0e:92:62:22:c3:6f:d2:83:7b:f8:64:
62:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:F7:1A:2C:4A:3D:78:F0:A0:12:F0:55:20:AD:9E:23:CE:D5:08:84
X509v3 Authority Key Identifier:
keyid:4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/FvcaLEo9ePCgEvBVIK2eI87VCIQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.34.60.0/23
Signature Algorithm: sha256WithRSAEncryption
1e:cf:45:e0:20:03:83:0d:86:6a:87:89:06:08:1d:6d:b1:7b:
7d:70:07:d6:5e:90:60:83:f5:a1:38:bf:be:d2:f8:50:b9:c3:
87:ed:bc:28:09:62:05:ac:3b:2c:61:3f:ad:57:2d:08:d3:c8:
a7:02:91:7a:a7:f0:a5:5e:c5:59:c6:d2:9b:35:57:e2:e6:1e:
9b:07:10:d1:ef:2c:04:f4:9b:9b:5f:32:36:74:c6:bf:e7:48:
67:51:49:9d:54:ae:55:80:6a:c2:1a:be:59:bc:1c:7a:23:c8:
02:6e:7f:70:a1:91:ee:46:71:8a:bc:9e:5c:19:37:45:f9:57:
2e:19:80:95:48:32:2f:95:a9:4d:be:f5:c5:7c:3c:94:80:a8:
5d:d9:f7:46:30:3c:6b:54:3b:a2:8e:69:cb:51:af:14:c6:c0:
a1:cc:ce:5d:c1:f5:b5:d6:c2:4b:48:a0:05:b9:d7:a7:d0:c8:
64:2f:e8:ce:ba:f3:89:d2:35:a9:c8:df:07:a1:8e:d6:1f:11:
f0:6f:fc:9e:d8:39:77:09:44:43:0c:d8:4d:41:e5:48:6f:93:
26:70:8f:a4:e0:3e:35:f1:78:c7:49:fc:e7:10:ef:1e:ac:c2:
6f:cd:11:0d:25:db:c4:ff:36:f2:ee:4c:15:3f:11:ea:2a:16:
fe:7f:0c:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 00:13:39 2025 by rpki-client