Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/GAnOR60hpofm0szlGWoPLIE5k9U.roa
File: GAnOR60hpofm0szlGWoPLIE5k9U.roa (raw, json)
Hash identifier: lr43p+6HKeY7jXAlLyQZ1kcGKOOPGZSL2OJ25R36SAo=
Subject key identifier: 18:09:CE:47:AD:21:A6:87:E6:D2:CC:E5:19:6A:0F:2C:81:39:93:D5
Certificate issuer: /CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Certificate serial: 0194244543213488C816E955D02CC024D7DA
Authority key identifier: 4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/GAnOR60hpofm0szlGWoPLIE5k9U.roa
Signing time: Wed 01 Jan 2025 23:48:26 +0000
ROA not before: Wed 01 Jan 2025 23:48:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61317
IP address blocks: 46.34.46.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:43:21:34:88:c8:16:e9:55:d0:2c:c0:24:d7:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Validity
Not Before: Jan 1 23:48:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1809ce47ad21a687e6d2cce5196a0f2c813993d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:a8:04:a0:d5:4d:f6:51:8f:f4:be:86:6a:99:
78:09:f7:da:5d:aa:8b:de:a5:17:f9:01:a8:e7:82:
7d:da:0c:6f:94:12:1a:c7:23:d7:9c:89:ba:e5:68:
1a:f8:b0:34:8e:a2:e2:0d:13:41:3e:0f:6f:93:b4:
10:39:80:78:fa:1a:8d:14:2b:33:b5:d2:ea:90:35:
da:15:db:e9:15:2f:1a:3b:48:fb:47:a0:da:07:4f:
5d:87:a5:af:d6:e6:e6:08:d4:96:79:71:d7:30:67:
c4:00:bc:de:d2:82:6f:d8:19:da:81:05:44:56:e8:
6b:d1:f9:4f:bc:98:18:be:9b:47:04:50:5c:0c:3d:
99:e7:40:94:e8:62:b7:f4:fb:32:1b:dd:e6:a6:b6:
ba:d2:f0:a3:bb:b6:e0:f6:84:37:f5:51:30:6b:24:
91:b7:80:45:9d:fb:d4:7b:8d:8b:b4:41:da:05:b7:
18:9f:5e:e5:ea:ef:39:43:11:11:60:5d:52:79:2d:
5e:2f:20:38:6c:e2:73:4e:c2:0e:31:63:0c:b5:0b:
5a:b1:b3:c6:b0:f0:00:2b:ac:e4:16:87:e6:0a:37:
39:ac:8e:da:c4:a2:d5:34:17:b5:26:9a:02:04:62:
ef:63:72:ed:fa:3d:43:c3:dc:17:db:68:93:5b:d0:
98:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:09:CE:47:AD:21:A6:87:E6:D2:CC:E5:19:6A:0F:2C:81:39:93:D5
X509v3 Authority Key Identifier:
keyid:4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/GAnOR60hpofm0szlGWoPLIE5k9U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.34.46.0/24
Signature Algorithm: sha256WithRSAEncryption
09:3b:f9:93:80:8a:2d:93:3a:ad:19:84:2f:71:1e:8d:ee:c7:
6e:29:02:2b:ad:7b:cb:57:55:a8:f4:6a:38:86:8b:f9:48:1d:
6f:72:1a:50:08:e2:cf:a3:8f:0e:1b:b1:07:8f:be:4b:7b:5c:
83:a6:87:73:cf:ca:51:dd:17:65:63:56:67:55:af:cc:b3:37:
0b:4d:d5:66:9a:01:c2:93:38:5c:41:e4:94:05:35:3b:fa:fd:
c2:9d:a3:9f:81:1f:b8:e7:ae:3a:06:09:f7:2e:85:7d:d3:e5:
14:1a:23:b8:90:69:3e:0d:47:b2:39:db:ff:74:69:70:6b:e4:
9e:aa:44:61:f8:4f:b5:44:e5:c6:ed:f5:73:e9:4b:85:5b:b9:
ea:73:0a:be:06:eb:69:d3:47:16:c8:28:50:aa:ff:9a:f5:e6:
1f:c9:91:2e:2e:b8:d1:da:41:04:88:4c:d2:bb:d7:46:d5:e8:
fa:5c:0a:0f:51:56:3f:ac:1a:fb:73:a4:f7:24:d7:f1:58:fc:
d3:52:2b:cb:3d:d0:67:a9:93:48:30:1c:3b:ef:5a:db:6c:ae:
54:16:1e:26:99:7b:b7:ff:1e:0a:9c:27:fd:aa:5b:9a:3b:c3:
15:f2:f6:ba:3c:da:98:9d:5c:67:d2:0f:ca:ee:c6:3b:0f:aa:
24:f5:2d:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:29:42 2025 by rpki-client