Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/6c0563-6a1c-4432-a58d-3b64cc336c79/1/mSKL5dZ-DfhQmd3vDgNujHfDeWQ.roa
File: mSKL5dZ-DfhQmd3vDgNujHfDeWQ.roa (raw, json)
Hash identifier: kM0tftmTBoswJU9/17L/nHsaIm00B47zHx/WZDRsoCQ=
Subject key identifier: 99:22:8B:E5:D6:7E:0D:F8:50:99:DD:EF:0E:03:6E:8C:77:C3:79:64
Certificate issuer: /CN=e0a00292c2a1062bb32980a3c443fff383a41002
Certificate serial: 019420D6441F0CE2DB9FB0383F48066E0798
Authority key identifier: E0:A0:02:92:C2:A1:06:2B:B3:29:80:A3:C4:43:FF:F3:83:A4:10:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4KACksKhBiuzKYCjxEP_84OkEAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/6c0563-6a1c-4432-a58d-3b64cc336c79/1/mSKL5dZ-DfhQmd3vDgNujHfDeWQ.roa
Signing time: Wed 01 Jan 2025 07:48:20 +0000
ROA not before: Wed 01 Jan 2025 07:48:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34047
IP address blocks: 46.151.40.0/21 maxlen: 21
91.211.172.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:44:1f:0c:e2:db:9f:b0:38:3f:48:06:6e:07:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0a00292c2a1062bb32980a3c443fff383a41002
Validity
Not Before: Jan 1 07:48:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=99228be5d67e0df85099ddef0e036e8c77c37964
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:89:bd:95:f0:76:30:4c:b5:24:de:30:1f:dc:
3e:84:45:76:57:09:db:83:51:80:34:d6:39:7a:f3:
b6:0a:bd:db:a1:36:6a:ad:89:d4:f8:91:7a:35:53:
ef:3e:16:ed:d0:b7:0f:af:43:20:51:a0:3e:91:86:
d2:a1:c6:ed:fa:e4:42:01:dc:9f:34:a1:c9:95:09:
0c:85:76:77:72:2f:56:6e:8d:cd:20:e0:d3:50:0c:
7f:cb:ef:08:6e:ae:00:18:f9:6f:04:39:80:79:59:
90:06:fd:f1:10:eb:3c:79:a2:b1:d4:41:db:df:02:
f3:87:e8:63:8c:99:61:fd:7d:6e:91:b9:88:0f:95:
15:57:a2:b1:0d:80:4d:35:46:4e:1e:21:aa:71:f3:
8e:09:54:8d:fa:d7:81:c4:1e:5b:65:8e:b2:be:0f:
ea:6d:0a:f1:2f:a7:05:04:94:37:8a:9a:9f:bd:da:
46:17:cf:16:30:92:c2:97:ac:17:6d:21:3d:02:ac:
7b:67:94:08:f7:76:6f:fa:cc:f5:14:bf:43:22:23:
e1:1c:12:bc:03:45:e7:08:3f:37:aa:22:2a:d2:bc:
17:6a:f4:3a:6c:43:14:e3:60:18:d9:7f:3a:1e:20:
35:7f:91:bb:c2:e9:e9:44:a3:c1:bc:4d:8e:63:f5:
bf:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:22:8B:E5:D6:7E:0D:F8:50:99:DD:EF:0E:03:6E:8C:77:C3:79:64
X509v3 Authority Key Identifier:
keyid:E0:A0:02:92:C2:A1:06:2B:B3:29:80:A3:C4:43:FF:F3:83:A4:10:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4KACksKhBiuzKYCjxEP_84OkEAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6c0563-6a1c-4432-a58d-3b64cc336c79/1/mSKL5dZ-DfhQmd3vDgNujHfDeWQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6c0563-6a1c-4432-a58d-3b64cc336c79/1/4KACksKhBiuzKYCjxEP_84OkEAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.151.40.0/21
91.211.172.0/22
Signature Algorithm: sha256WithRSAEncryption
4c:f3:a7:30:80:82:33:ca:7b:58:8c:69:34:88:b6:cc:d1:33:
76:b5:58:66:06:af:9c:76:f3:f4:7c:2c:10:0c:7c:98:16:75:
7e:dc:e9:16:0a:03:a5:6c:36:5a:bb:44:6c:bb:38:f2:a3:d7:
76:07:c4:1c:6d:62:db:26:58:b5:29:bb:50:c3:9e:9c:b5:0a:
08:bd:0f:a6:dd:10:f5:5c:e0:54:5f:2d:2c:ab:21:87:e7:b8:
c7:7c:4e:6f:55:f4:71:4b:fc:f2:11:81:5b:f1:2d:82:a2:cc:
03:92:f7:6a:60:88:9c:5b:b3:67:69:61:30:12:e5:60:d6:4b:
49:2c:07:30:bf:b5:2e:9a:12:87:50:77:e4:41:1b:53:6b:de:
24:8c:88:d9:af:8a:11:01:d4:22:44:37:48:b9:13:48:7f:91:
37:09:73:58:fd:5f:0d:78:a4:c2:b3:22:50:89:be:f4:43:92:
5d:d0:ca:e2:b4:92:ef:a6:cd:6a:b1:28:ad:49:9c:4c:9a:36:
3b:04:b6:8e:e7:7c:95:cd:ac:92:41:12:cb:94:e0:bf:0a:ff:
62:c0:ca:21:09:0f:cb:27:e2:5e:e9:5f:0d:12:5b:4f:a2:90:
19:7e:2f:db:60:a4:f4:ef:a5:26:78:8c:05:72:8e:59:3f:bf:
0f:6d:5b:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:41:18 2025 by rpki-client