Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/VC5hlv51XUM-fTv0TarOkog36Eo.roa
File: VC5hlv51XUM-fTv0TarOkog36Eo.roa (raw, json)
Hash identifier: i0HIbim1XqFQS5v9TBK3Ih1ht6iGfzysoGaV/HogUR4=
Subject key identifier: 54:2E:61:96:FE:75:5D:43:3E:7D:3B:F4:4D:AA:CE:92:88:37:E8:4A
Certificate issuer: /CN=1e36de27974727aa0046b3e9c8d0624674541255
Certificate serial: 01880514314E8BA0366A064B5B4E41714B95
Authority key identifier: 1E:36:DE:27:97:47:27:AA:00:46:B3:E9:C8:D0:62:46:74:54:12:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HjbeJ5dHJ6oARrPpyNBiRnRUElU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/VC5hlv51XUM-fTv0TarOkog36Eo.roa
Signing time: Wed 10 May 2023 09:53:09 +0000
ROA not before: Wed 10 May 2023 09:53:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207713
IP address blocks: 46.29.234.0/24 maxlen: 24
46.29.235.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:05:14:31:4e:8b:a0:36:6a:06:4b:5b:4e:41:71:4b:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e36de27974727aa0046b3e9c8d0624674541255
Validity
Not Before: May 10 09:53:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=542e6196fe755d433e7d3bf44daace928837e84a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:74:d9:11:02:b4:ea:1b:ba:5a:b7:1e:9b:19:
75:e8:a8:e1:7a:ae:38:e6:52:67:1b:3d:76:14:4f:
a2:7c:2e:a8:5e:1a:51:ba:50:40:50:0e:f2:27:7e:
08:37:ad:d1:b4:ef:7c:5c:0c:ca:cf:60:ea:30:9c:
a8:85:3d:3f:28:d5:df:e7:aa:37:98:27:cd:1e:9a:
bc:3f:e5:29:f8:c2:79:e5:64:6e:7e:8c:99:82:bd:
c0:b7:6a:03:a3:41:e8:59:f5:95:fb:20:d8:5b:f4:
e3:13:a7:9f:ae:6e:15:f0:ce:b0:e9:7c:31:98:ca:
73:3b:e2:f1:37:a0:63:68:ff:62:bc:6c:38:2a:ae:
ea:22:b6:98:44:9c:7b:62:e5:38:65:11:3b:06:f9:
d8:26:2c:76:0e:e5:16:ce:f4:20:9e:70:ce:4f:b0:
f3:ee:81:97:25:aa:33:71:9c:d7:bc:40:63:b1:48:
a2:2f:c6:f9:fd:90:a1:7a:25:41:d3:9d:81:02:91:
ff:85:c5:cf:c5:19:1a:16:40:31:e9:29:e9:f4:13:
59:13:8c:dc:86:cf:56:55:47:f7:08:a0:95:a4:34:
3c:7b:e9:20:c8:af:0e:e8:5f:14:57:44:27:86:f8:
0c:77:c5:96:b1:ce:56:37:93:63:e9:42:31:c8:22:
8c:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:2E:61:96:FE:75:5D:43:3E:7D:3B:F4:4D:AA:CE:92:88:37:E8:4A
X509v3 Authority Key Identifier:
keyid:1E:36:DE:27:97:47:27:AA:00:46:B3:E9:C8:D0:62:46:74:54:12:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HjbeJ5dHJ6oARrPpyNBiRnRUElU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/VC5hlv51XUM-fTv0TarOkog36Eo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.29.234.0/23
Signature Algorithm: sha256WithRSAEncryption
79:1c:24:95:46:5d:26:27:2d:b5:6c:64:4f:3e:4a:60:cc:08:
6c:4a:d7:0c:f6:a1:07:68:d9:49:11:6f:ea:a0:d4:f4:97:fd:
d5:94:cf:56:8b:16:3c:23:d8:39:f0:07:bb:21:51:f8:52:99:
b7:7f:b1:82:63:18:ce:bb:2f:15:dc:0e:0e:90:77:83:77:e7:
7e:36:99:8c:3b:40:cf:70:b9:ac:86:ea:48:e0:6a:7a:ac:43:
cf:cb:d0:b2:91:e4:87:47:41:00:e7:74:4c:3a:75:89:72:fb:
d9:e6:c2:e8:d4:7d:6b:02:7f:ae:45:0e:1d:c4:0d:b2:84:37:
18:74:13:35:c1:06:26:1f:a2:52:2d:07:26:b1:5e:30:00:f8:
b1:39:74:fa:fe:5d:c3:e0:f0:60:c6:9b:8b:92:66:82:b9:d1:
fc:06:22:c9:ab:92:26:3f:9e:4e:82:72:9e:47:7c:06:48:2f:
6b:55:bf:5b:d3:ac:48:a7:4d:e6:32:a9:48:22:3c:4d:b8:c4:
b0:52:31:fe:5e:11:bc:b9:4f:58:3d:41:b1:dd:88:1c:a0:05:
0e:a7:a7:f5:5e:4b:c9:7e:1a:94:72:13:aa:54:d7:6e:74:c8:
e4:b2:de:bf:4e:34:eb:ea:59:ac:72:9c:ea:2d:b9:3c:74:a0:
58:f5:78:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 05:00:30 2025 by rpki-client