Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/014924-5659-4a34-881c-1a4cc9c96170/1/IybeINOlNIhe1o-0OUm99rkliss.roa
File: IybeINOlNIhe1o-0OUm99rkliss.roa (raw, json)
Hash identifier: BWi9q/1v/lzQv7z84FNSH/kCVnRLay1cTPvOiCrlUAw=
Subject key identifier: 23:26:DE:20:D3:A5:34:88:5E:D6:8F:B4:39:49:BD:F6:B9:25:8A:CB
Certificate issuer: /CN=6dd57978e5d2f2654c97fdebc0d547ccfb586db9
Certificate serial: 018570E767EF74ADA2AE8432E7A2F78EE277
Authority key identifier: 6D:D5:79:78:E5:D2:F2:65:4C:97:FD:EB:C0:D5:47:CC:FB:58:6D:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bdV5eOXS8mVMl_3rwNVHzPtYbbk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/014924-5659-4a34-881c-1a4cc9c96170/1/IybeINOlNIhe1o-0OUm99rkliss.roa
Signing time: Mon 02 Jan 2023 05:14:51 +0000
ROA not before: Mon 02 Jan 2023 05:14:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6819
IP address blocks: 46.243.40.0/21 maxlen: 21
2a00:9a40::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:e7:67:ef:74:ad:a2:ae:84:32:e7:a2:f7:8e:e2:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dd57978e5d2f2654c97fdebc0d547ccfb586db9
Validity
Not Before: Jan 2 05:14:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2326de20d3a534885ed68fb43949bdf6b9258acb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:03:b5:33:c7:15:ec:1e:d8:f0:60:ed:f1:8a:
5d:86:03:b0:60:f3:be:d4:da:33:2e:fa:17:1f:9e:
c9:0e:f4:30:ed:57:34:d1:41:cb:92:a7:75:ff:42:
82:c8:26:af:e7:21:30:85:f3:00:b9:af:2d:e6:87:
2e:f0:81:33:fd:cc:b2:7d:f7:8b:94:1d:ed:fb:84:
84:65:ed:45:2e:ac:da:a5:ee:e0:fe:93:fc:08:2a:
db:d9:97:0b:ac:5a:29:b1:fe:79:97:d7:e7:77:bf:
e3:e1:e9:1e:64:26:11:ae:98:ec:a1:26:a7:53:7f:
02:c2:54:05:f9:b7:52:42:76:e9:94:44:96:36:cf:
42:e1:bf:76:c7:33:4f:a1:b6:88:90:4f:22:ed:ea:
78:f9:ac:7d:2d:03:43:0a:31:f7:23:84:05:ec:c2:
92:6e:6f:1d:1c:f9:38:ca:d3:ae:9d:46:69:dc:61:
f5:5f:da:c9:9b:77:6e:c7:c4:0f:ef:d1:f2:89:6f:
ac:e3:81:89:1a:ea:84:28:3b:36:11:cb:72:29:61:
7b:f4:8c:82:24:9a:98:83:dc:ef:95:73:5c:cb:1b:
87:b6:0b:35:58:94:60:4f:d3:c0:56:64:41:2f:bf:
2a:52:76:9c:94:03:d1:da:9b:90:25:1c:82:05:d6:
23:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:26:DE:20:D3:A5:34:88:5E:D6:8F:B4:39:49:BD:F6:B9:25:8A:CB
X509v3 Authority Key Identifier:
keyid:6D:D5:79:78:E5:D2:F2:65:4C:97:FD:EB:C0:D5:47:CC:FB:58:6D:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bdV5eOXS8mVMl_3rwNVHzPtYbbk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/014924-5659-4a34-881c-1a4cc9c96170/1/IybeINOlNIhe1o-0OUm99rkliss.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/014924-5659-4a34-881c-1a4cc9c96170/1/bdV5eOXS8mVMl_3rwNVHzPtYbbk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.243.40.0/21
IPv6:
2a00:9a40::/32
Signature Algorithm: sha256WithRSAEncryption
84:58:c8:ab:97:b7:f6:07:cd:c6:e3:15:d1:ed:2b:0e:12:41:
88:88:f0:77:93:2e:63:aa:10:ac:f0:2c:7d:f1:5a:de:48:57:
73:33:57:fa:bc:a9:c9:d6:54:a0:d9:2b:e2:d5:88:ac:ca:d5:
01:11:ea:1b:a3:a4:59:f9:9b:c4:83:41:b2:58:65:34:c2:81:
48:55:0b:4d:46:07:00:40:a8:6f:b7:54:0b:fa:a5:4f:f1:19:
c5:58:ee:83:96:b7:42:de:b5:21:3c:2a:2f:b8:7f:e2:75:20:
dc:2f:9a:7c:0e:9d:22:6a:e0:25:2c:42:b2:f7:84:d3:34:d6:
a1:b3:66:ea:9b:25:0e:7a:57:47:66:ca:af:43:c1:69:2b:02:
c0:89:67:02:ab:5b:91:72:ed:f1:69:56:c2:e3:14:77:4c:ad:
c9:35:27:39:81:c3:7b:1c:f3:19:c2:26:fd:98:42:4c:79:57:
63:98:7e:de:d7:55:7c:94:07:15:f1:cb:fe:f9:90:8a:72:17:
df:d4:32:2c:47:e1:25:a5:b7:ac:85:15:7e:71:a3:f6:eb:b9:
5a:85:91:ba:e3:1a:3e:3c:0b:12:e2:ef:7a:c7:8b:da:00:6f:
fc:d2:8f:f7:12:82:0d:5e:b7:92:d3:a1:fe:d5:0c:dc:6b:32:
d8:a5:94:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:12:22 2025 by rpki-client