Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/IPFcr3SVsMO45CcvgFBNdZXFKXs.roa
File: IPFcr3SVsMO45CcvgFBNdZXFKXs.roa (raw, json)
Hash identifier: /7VeIgyIKlw9hTj1q7qRAKWUwYWQVMZL16M4EWKXr70=
Subject key identifier: 20:F1:5C:AF:74:95:B0:C3:B8:E4:27:2F:80:50:4D:75:95:C5:29:7B
Certificate issuer: /CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Certificate serial: 01942445451FDE96CBA5753F4AF99BAEF865
Authority key identifier: 4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/IPFcr3SVsMO45CcvgFBNdZXFKXs.roa
Signing time: Wed 01 Jan 2025 23:48:26 +0000
ROA not before: Wed 01 Jan 2025 23:48:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211439
IP address blocks: 46.34.50.0/24 maxlen: 24
46.34.56.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:45:1f:de:96:cb:a5:75:3f:4a:f9:9b:ae:f8:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Validity
Not Before: Jan 1 23:48:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=20f15caf7495b0c3b8e4272f80504d7595c5297b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e2:c8:45:e5:ca:89:fc:83:11:05:1f:39:bc:
97:13:a3:24:27:41:88:e6:7f:bc:ae:bc:78:11:bd:
a1:66:c1:a8:79:c8:56:18:50:ea:9c:a8:fc:35:54:
03:17:84:e3:f4:37:ca:62:9b:80:9e:6f:db:e1:65:
29:77:a9:f2:89:c7:70:98:f6:08:71:c3:8c:e6:89:
6c:8e:c6:aa:6a:56:54:7a:37:2e:11:a9:72:9e:cd:
ad:84:b8:e6:f7:d3:f9:0f:c0:86:c0:68:4e:4c:32:
1b:13:50:cc:20:4b:f5:c2:3c:90:1e:62:74:da:06:
f1:57:8a:f5:bc:37:c2:4e:de:51:15:cf:8f:81:53:
3c:21:44:16:04:5a:11:26:d4:e2:e5:d9:c0:e3:da:
27:47:23:0b:df:53:da:65:07:97:01:ed:6b:15:4f:
f6:1a:10:42:6e:ff:91:d6:13:58:c1:ff:63:c9:93:
b1:63:60:ef:c4:de:f5:3e:3c:54:f7:c6:95:b1:9b:
b8:d8:8c:b5:ff:f1:05:1e:e3:60:28:6c:f9:d0:5f:
b5:e9:89:fa:7a:a4:4e:e6:9b:3e:b9:72:b4:a4:6c:
14:6e:29:b3:2d:06:3d:0c:38:88:36:ad:34:67:98:
4d:ad:25:4a:82:6d:8b:f9:6a:4e:be:da:24:58:43:
08:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:F1:5C:AF:74:95:B0:C3:B8:E4:27:2F:80:50:4D:75:95:C5:29:7B
X509v3 Authority Key Identifier:
keyid:4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/IPFcr3SVsMO45CcvgFBNdZXFKXs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.34.50.0/24
46.34.56.0/23
Signature Algorithm: sha256WithRSAEncryption
22:0f:75:bf:99:85:e2:70:9c:e4:92:f7:fd:64:97:7c:eb:93:
a7:4d:4b:22:a1:66:63:5d:1e:19:0d:0e:ee:04:72:c1:e5:a1:
83:76:ba:bb:52:3f:4f:d6:0e:1b:10:64:1e:10:f3:a1:01:23:
96:f9:3c:bd:f0:06:0e:91:70:b2:2e:70:22:e8:bf:a1:1d:37:
f8:52:af:96:c2:f1:2f:37:a3:9a:a9:96:49:91:da:35:48:67:
45:53:11:e4:64:7d:0b:99:f6:43:50:fc:9b:28:b6:a9:08:01:
3f:13:f3:7d:68:76:44:e7:b4:9b:49:52:d0:5a:08:80:ed:51:
91:b5:ab:6e:71:d6:8b:11:53:c8:cf:35:ae:c2:40:05:8f:e5:
de:9f:57:4e:ec:ab:f8:c7:8a:2b:7b:f7:5c:a0:d7:af:94:cf:
ab:73:b5:e7:80:08:43:f6:c6:6c:de:35:e0:3b:b4:7d:1a:6c:
16:33:49:e1:3a:44:69:c1:32:79:31:a2:f8:e5:9f:97:47:32:
d7:1c:a8:06:88:d1:6a:50:82:11:65:f6:d3:d8:cd:f2:34:07:
c8:c3:ed:6f:1b:43:c3:e7:e0:07:37:c7:5b:96:c6:cd:e5:51:
a0:70:43:05:fd:ed:0e:ea:75:6e:73:ce:f2:aa:3a:c4:59:50:
76:38:d4:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:20:44 2025 by rpki-client