Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/2da43d-3997-40a6-accd-f6fd6bd857b8/1/Mls2HM8_FY_IKXa_7YokWR8k2as.roa
File: Mls2HM8_FY_IKXa_7YokWR8k2as.roa (raw, json)
Hash identifier: CiqhaGVIRMfnCHendb0wwlGmTiUs+e665f1gVqsw+T0=
Subject key identifier: 32:5B:36:1C:CF:3F:15:8F:C8:29:76:BF:ED:8A:24:59:1F:24:D9:AB
Certificate issuer: /CN=44d2e7578aac94f42960a780d3996da8bb469477
Certificate serial: 0194222008982F6C57B31A60771AA42EE9FE
Authority key identifier: 44:D2:E7:57:8A:AC:94:F4:29:60:A7:80:D3:99:6D:A8:BB:46:94:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RNLnV4qslPQpYKeA05ltqLtGlHc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/2da43d-3997-40a6-accd-f6fd6bd857b8/1/Mls2HM8_FY_IKXa_7YokWR8k2as.roa
Signing time: Wed 01 Jan 2025 13:48:32 +0000
ROA not before: Wed 01 Jan 2025 13:48:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47388
IP address blocks: 46.174.144.0/21 maxlen: 24
91.206.36.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:08:98:2f:6c:57:b3:1a:60:77:1a:a4:2e:e9:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44d2e7578aac94f42960a780d3996da8bb469477
Validity
Not Before: Jan 1 13:48:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=325b361ccf3f158fc82976bfed8a24591f24d9ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:76:b2:63:cf:53:3f:03:ab:1b:a8:73:a4:f2:
a4:2f:85:9c:88:7f:93:c6:15:af:9b:b6:d2:f5:ca:
c7:43:1a:f4:16:ce:c3:96:9f:7c:5d:d5:25:cf:9d:
24:fb:4f:69:f9:92:f0:20:98:b7:fd:b9:54:ba:9b:
27:6a:61:1c:94:3e:8a:3c:81:d9:69:86:e4:8f:3a:
b3:f9:f4:9d:d2:a2:bd:85:51:bf:13:c2:32:ac:54:
1a:c8:a3:6b:ea:3a:9f:22:67:a6:d0:82:5d:90:88:
cb:bd:8e:ce:bc:78:a7:33:f6:63:c0:49:d4:63:ba:
8c:54:17:de:e7:2e:5a:d5:41:1d:c1:19:d1:e5:4c:
b2:4e:57:34:a1:6a:25:2f:0d:25:74:f3:27:7c:7b:
3e:b2:15:80:25:41:8c:3e:95:e6:c1:b8:2c:ab:2b:
ba:2b:66:4b:b4:1c:03:38:a5:c6:ca:a5:ef:42:e4:
0e:be:b4:b6:2e:f7:6a:51:a8:a2:89:ef:b9:43:dd:
db:89:ee:a8:2d:18:4d:75:0f:79:00:89:c7:7b:17:
e7:49:00:a2:29:ea:d0:ce:6b:ef:d9:b5:69:e2:6c:
0d:89:79:9e:d4:57:e8:e0:c8:6a:8d:95:10:7f:d7:
c0:a2:d0:de:5e:17:9f:3f:92:8f:67:4c:54:7c:9e:
51:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:5B:36:1C:CF:3F:15:8F:C8:29:76:BF:ED:8A:24:59:1F:24:D9:AB
X509v3 Authority Key Identifier:
keyid:44:D2:E7:57:8A:AC:94:F4:29:60:A7:80:D3:99:6D:A8:BB:46:94:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RNLnV4qslPQpYKeA05ltqLtGlHc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/2da43d-3997-40a6-accd-f6fd6bd857b8/1/Mls2HM8_FY_IKXa_7YokWR8k2as.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/2da43d-3997-40a6-accd-f6fd6bd857b8/1/RNLnV4qslPQpYKeA05ltqLtGlHc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.174.144.0/21
91.206.36.0/23
Signature Algorithm: sha256WithRSAEncryption
7f:45:d4:0b:f6:4d:4a:57:fc:f1:f5:9c:b4:b6:b7:6e:26:17:
f0:cd:bf:47:29:67:3a:a5:a8:5a:64:6c:e5:8d:c8:60:07:41:
1d:6e:c5:bd:c0:8a:bc:2b:f4:81:03:e8:82:af:3b:e3:55:f1:
cb:b5:73:ba:ac:61:b8:48:ac:61:70:14:5f:19:c7:90:de:ed:
48:e4:18:30:9b:3e:bc:68:38:21:a1:36:18:11:64:59:50:49:
30:87:1b:55:b2:d8:19:71:7c:81:62:c5:74:9b:ae:e7:26:30:
84:a3:6c:4a:ec:db:28:7e:e3:1e:1d:ce:eb:22:60:03:f1:be:
67:a7:b6:f4:af:c4:49:c1:28:46:60:f1:ab:c5:d8:f7:bf:2e:
32:1f:e9:31:e2:da:19:71:44:ec:b0:f7:1c:5d:b9:81:55:ad:
a3:82:4a:f4:5d:7a:2d:9d:db:62:e1:5e:80:9b:ec:44:8f:10:
b0:4c:2a:71:e1:4a:b2:dc:c9:23:2f:50:26:80:27:52:83:82:
48:cc:e9:3f:49:62:68:05:51:80:41:fe:a4:5d:a9:20:da:a8:
36:e8:b8:d2:11:3c:c7:11:fb:ed:01:8b:a6:2e:e2:e3:a3:2e:
17:79:56:65:d2:bc:6e:3c:75:3e:74:9a:fb:35:ee:b9:6b:75:
8e:ed:6e:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 13:02:23 2025 by rpki-client