Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/pa8fQ4jOrZ59vAyb7Lg7bj_QEgQ.roa
File: pa8fQ4jOrZ59vAyb7Lg7bj_QEgQ.roa (raw, json)
Hash identifier: Ep011ixCtG+lu/klHXgc5PQt2d4i1uDvMubTIvs6Oro=
Subject key identifier: A5:AF:1F:43:88:CE:AD:9E:7D:BC:0C:9B:EC:B8:3B:6E:3F:D0:12:04
Certificate issuer: /CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Certificate serial: 019424453FC6829BCF783EF01A9934B2F079
Authority key identifier: 4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/pa8fQ4jOrZ59vAyb7Lg7bj_QEgQ.roa
Signing time: Wed 01 Jan 2025 23:48:25 +0000
ROA not before: Wed 01 Jan 2025 23:48:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 7922
IP address blocks: 46.34.39.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:3f:c6:82:9b:cf:78:3e:f0:1a:99:34:b2:f0:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Validity
Not Before: Jan 1 23:48:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a5af1f4388cead9e7dbc0c9becb83b6e3fd01204
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:65:8f:2a:3a:7a:79:7a:c3:ab:17:fe:62:f0:
bf:92:0e:0a:c2:3a:df:80:dc:73:77:9b:8d:52:2a:
d8:77:e3:5c:e7:55:56:46:e4:55:92:3d:d6:f4:00:
0e:15:8d:e4:c1:4e:16:b6:cf:bd:a0:57:22:d2:f2:
ca:a3:0b:bc:60:36:6d:00:b5:b3:17:35:c5:87:c8:
f0:65:ce:30:a2:a6:54:02:44:b7:48:0e:0b:b6:8e:
9e:95:3f:5d:84:d2:3e:0a:05:c0:bb:9c:8e:76:0c:
e8:c5:7b:ef:c6:08:90:ca:25:37:c6:5c:ba:6c:d0:
51:50:cd:3f:7f:47:f0:b0:8f:a8:25:40:09:88:b2:
12:a1:85:a6:c2:b7:9a:85:98:60:fb:09:da:06:ca:
c2:23:b3:14:36:90:e0:0f:79:e4:b2:c3:f5:c0:44:
a8:df:42:f9:c3:6b:e8:f6:cf:6a:ea:f6:d2:84:6c:
90:bc:e4:11:26:fd:6a:e3:e3:60:c0:23:f0:b3:fd:
18:52:38:ef:81:a4:e6:62:28:6e:5d:0b:f5:39:d7:
1a:9a:38:16:03:27:af:10:7e:7e:49:b0:53:9a:46:
fa:d7:b4:53:28:36:c2:38:d1:6c:11:97:db:2a:e6:
8b:94:63:ec:78:9b:5c:6b:af:9d:c5:ac:88:36:54:
da:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:AF:1F:43:88:CE:AD:9E:7D:BC:0C:9B:EC:B8:3B:6E:3F:D0:12:04
X509v3 Authority Key Identifier:
keyid:4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/pa8fQ4jOrZ59vAyb7Lg7bj_QEgQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.34.39.0/24
Signature Algorithm: sha256WithRSAEncryption
06:e3:37:53:c4:fc:55:1d:5b:a3:c2:fd:8c:be:17:25:33:e7:
8b:e8:96:92:40:b5:46:33:d5:cc:63:57:3f:15:56:05:4e:e9:
5f:4a:71:43:74:1a:d5:d3:ad:ba:38:c6:ea:c8:a1:8f:f1:70:
48:ff:e7:31:3d:f6:fd:8a:7f:b8:67:28:15:6b:7e:8e:e1:de:
f9:91:ed:bb:04:58:a9:46:a2:9d:53:65:bd:15:ad:65:f7:7e:
5e:47:b9:ab:20:0c:64:82:24:48:69:35:6e:ea:e8:d3:6d:6d:
7e:d2:cc:a2:f7:48:c2:44:c3:19:2d:19:0b:aa:d3:53:ee:b9:
e0:06:7d:61:eb:48:06:6b:3a:2b:eb:8c:c8:de:88:46:6b:84:
d3:3b:57:32:fa:80:c3:8a:1d:a1:ce:67:8c:95:ea:d9:9e:5b:
b8:1f:3c:f7:3a:6a:d6:e7:14:d3:08:29:90:30:e4:66:36:e9:
0a:18:15:5d:7a:b9:97:9a:89:48:b1:38:94:70:2b:79:99:31:
81:bd:4c:cb:cd:b3:6c:b3:75:5b:5a:35:15:00:34:e9:62:ef:
c0:7c:11:14:ea:20:49:7c:4a:50:ea:c6:d2:a5:13:62:76:24:
54:dd:f1:ef:02:40:ff:29:38:a3:5c:4f:0a:21:d9:25:1f:ad:
b1:d5:b3:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 04:03:43 2025 by rpki-client