Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/2fdd56-ba2c-46fb-9882-9b257f4fea8d/1/g7sPwfEyrg2GU6nX9GnEZI5ry6U.roa
File: g7sPwfEyrg2GU6nX9GnEZI5ry6U.roa (raw, json)
Hash identifier: gvrZns7JDU/MxjbK6KJTEHNI6mOo43rYah4+1PHu7cs=
Subject key identifier: 83:BB:0F:C1:F1:32:AE:0D:86:53:A9:D7:F4:69:C4:64:8E:6B:CB:A5
Certificate issuer: /CN=77bc534ba44e9d3cba2f2446d4a3dd6eea9b8f61
Certificate serial: 0194266C1713E8A432184DBDDF65E047563E
Authority key identifier: 77:BC:53:4B:A4:4E:9D:3C:BA:2F:24:46:D4:A3:DD:6E:EA:9B:8F:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d7xTS6ROnTy6LyRG1KPdbuqbj2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/2fdd56-ba2c-46fb-9882-9b257f4fea8d/1/g7sPwfEyrg2GU6nX9GnEZI5ry6U.roa
Signing time: Thu 02 Jan 2025 09:50:05 +0000
ROA not before: Thu 02 Jan 2025 09:50:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212217
IP address blocks: 46.253.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:17:13:e8:a4:32:18:4d:bd:df:65:e0:47:56:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77bc534ba44e9d3cba2f2446d4a3dd6eea9b8f61
Validity
Not Before: Jan 2 09:50:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=83bb0fc1f132ae0d8653a9d7f469c4648e6bcba5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:00:5b:bf:ac:e6:17:4b:d0:9e:e3:da:63:46:
3f:a5:f4:58:c8:17:4a:dc:af:2c:48:82:d3:1d:1d:
cc:73:e0:bf:a8:fb:64:33:5e:cd:47:7c:1f:f1:29:
67:cc:cf:ad:93:5e:5c:78:7f:88:58:de:0f:41:55:
6a:25:5b:eb:92:2b:f1:44:1a:4f:91:73:42:24:e1:
b0:dc:d6:b4:29:86:6c:19:d0:13:81:61:d9:a9:e8:
eb:b6:1f:d8:48:c7:62:45:c7:ba:ae:68:e5:ca:e7:
82:a5:86:55:24:ec:14:ef:5c:de:24:21:f0:eb:55:
6f:f5:3d:1f:81:e0:a7:01:ff:10:96:6a:d6:5b:de:
2b:4c:98:b0:bd:e6:9d:b1:23:fe:90:fa:19:b5:ac:
7f:81:bf:9d:c2:74:c7:23:40:ad:80:10:7a:5c:8f:
2b:19:5a:9e:af:27:1d:76:71:6c:37:a1:d9:2a:94:
98:eb:b6:58:5b:70:c3:f4:8c:42:ff:f5:e1:b7:b5:
4d:a5:6d:12:74:ef:1c:b8:b3:5d:fd:ac:12:cf:8d:
eb:af:68:90:f6:4b:41:b4:37:04:f5:72:e8:32:a9:
36:c0:ea:92:27:95:15:2c:64:40:58:33:90:74:b8:
51:7b:c7:f5:9a:6a:dd:a4:5e:ad:a9:fc:9a:2a:9e:
64:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:BB:0F:C1:F1:32:AE:0D:86:53:A9:D7:F4:69:C4:64:8E:6B:CB:A5
X509v3 Authority Key Identifier:
keyid:77:BC:53:4B:A4:4E:9D:3C:BA:2F:24:46:D4:A3:DD:6E:EA:9B:8F:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7xTS6ROnTy6LyRG1KPdbuqbj2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/2fdd56-ba2c-46fb-9882-9b257f4fea8d/1/g7sPwfEyrg2GU6nX9GnEZI5ry6U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/2fdd56-ba2c-46fb-9882-9b257f4fea8d/1/d7xTS6ROnTy6LyRG1KPdbuqbj2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.253.129.0/24
Signature Algorithm: sha256WithRSAEncryption
74:4e:97:b3:ee:be:19:8d:6e:3f:77:c5:eb:ce:dd:f3:b9:62:
c4:69:55:b2:8f:8e:2a:42:68:4e:95:19:97:24:84:b1:88:35:
b4:f7:f8:af:c5:05:57:43:8f:5b:87:dd:b3:43:7f:69:40:bf:
29:62:fe:bf:d7:4e:9f:39:47:58:b8:c1:5e:d5:b5:66:a7:a9:
b7:32:7a:64:b1:f1:9c:cd:1e:9d:18:e3:5b:cc:da:b6:9b:d9:
42:10:94:77:b3:3f:90:99:5d:82:16:8c:13:21:a1:5e:c4:d9:
79:78:5b:3b:8a:6a:db:2c:90:1e:a2:4e:ba:c4:af:ce:95:dd:
1b:4d:6f:e4:c0:28:00:8b:c7:65:a2:1d:9b:77:df:f7:2c:98:
bd:92:6d:15:b4:53:58:00:51:b3:2a:aa:a5:53:4a:0b:a7:95:
4b:58:81:93:59:e5:42:ec:ff:49:45:a6:11:20:94:5f:a3:a0:
d0:d7:21:97:2b:a2:08:cd:39:6a:04:99:e0:d9:7a:7b:5e:64:
d9:16:b2:c6:17:0f:04:8c:0f:93:19:db:d5:a7:d6:c5:dd:85:
67:34:5c:bf:26:3b:34:74:c5:60:1d:aa:ab:6e:bf:21:6d:74:
05:a3:49:e7:7d:1b:3b:ba:b2:1e:9e:e7:84:4e:7a:e9:d0:74:
42:59:7b:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:54:35 2025 by rpki-client