Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/9b8d3b-0c03-4591-bd0f-87750d6f77a8/1/N-nPI1g49f7ETAzdIo5yjbOdZtM.roa
File: N-nPI1g49f7ETAzdIo5yjbOdZtM.roa (raw, json)
Hash identifier: qC00kLedLYSFjjH9iYQzP0HBmWb73ml/Yv/mqD1i4KU=
Subject key identifier: 37:E9:CF:23:58:38:F5:FE:C4:4C:0C:DD:22:8E:72:8D:B3:9D:66:D3
Certificate issuer: /CN=88775003f7d9e8e6e1ef48db06728e668ed187bc
Certificate serial: 01941F8C7DBF75A0D8499477A8FE0DCEAF8A
Authority key identifier: 88:77:50:03:F7:D9:E8:E6:E1:EF:48:DB:06:72:8E:66:8E:D1:87:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/9b8d3b-0c03-4591-bd0f-87750d6f77a8/1/N-nPI1g49f7ETAzdIo5yjbOdZtM.roa
Signing time: Wed 01 Jan 2025 01:48:08 +0000
ROA not before: Wed 01 Jan 2025 01:48:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57588
IP address blocks: 46.149.96.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:7d:bf:75:a0:d8:49:94:77:a8:fe:0d:ce:af:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88775003f7d9e8e6e1ef48db06728e668ed187bc
Validity
Not Before: Jan 1 01:48:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=37e9cf235838f5fec44c0cdd228e728db39d66d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c9:8e:31:13:61:7f:e3:d4:79:eb:cc:42:df:
56:e8:d2:1e:e2:e5:b3:d9:6a:4b:22:0c:69:ba:1f:
46:41:d6:6a:1d:bc:7e:40:e7:fd:b6:fb:ca:d7:cf:
55:93:b0:e7:82:4a:81:4b:d5:5d:53:33:29:38:c2:
ba:c1:d3:43:a7:53:3d:1b:a8:ae:03:a9:8c:25:fe:
0c:67:cf:5f:30:a3:25:26:1d:cd:05:4a:3a:8b:26:
39:57:29:e4:20:c5:19:6b:23:1a:7a:2a:f7:ad:ed:
8f:82:10:c2:1d:0b:ab:c4:0c:19:1c:81:6b:79:bf:
82:91:79:ca:af:ba:c7:f5:4c:72:d9:3d:0f:83:fc:
c2:7c:d6:e9:e7:60:5b:93:3f:67:89:27:11:0c:57:
89:d7:b0:69:a9:1d:2c:bb:ce:1f:3e:64:ba:0f:81:
de:1b:6b:eb:05:a1:49:bc:38:90:2f:b2:ec:46:30:
c1:18:13:e1:8a:9e:13:4e:10:de:04:25:ab:0d:16:
a8:6e:2b:52:08:42:0b:96:fc:ef:d9:cb:1e:55:61:
29:61:2e:5b:d5:c9:3e:3c:fd:21:1c:80:a1:93:89:
18:d8:31:86:15:3f:34:6b:76:94:77:21:4b:51:92:
1d:7d:bb:4d:bc:19:50:3e:b4:eb:30:ec:95:e6:2b:
78:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:E9:CF:23:58:38:F5:FE:C4:4C:0C:DD:22:8E:72:8D:B3:9D:66:D3
X509v3 Authority Key Identifier:
keyid:88:77:50:03:F7:D9:E8:E6:E1:EF:48:DB:06:72:8E:66:8E:D1:87:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/9b8d3b-0c03-4591-bd0f-87750d6f77a8/1/N-nPI1g49f7ETAzdIo5yjbOdZtM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/9b8d3b-0c03-4591-bd0f-87750d6f77a8/1/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.149.96.0/24
Signature Algorithm: sha256WithRSAEncryption
10:09:d3:88:55:5f:c5:f0:ee:ef:c7:9d:88:b9:31:68:ac:ff:
88:10:9e:63:cb:c8:3d:cb:d8:b2:d2:b3:8c:65:f4:28:9d:93:
0e:b2:df:56:29:b4:a1:05:9f:82:2e:93:1e:d5:ff:08:84:b0:
48:7f:9e:ca:6b:e5:83:ef:6e:d1:9f:81:f8:8e:57:b7:12:9e:
60:1f:62:3f:46:79:15:c1:51:e6:0a:a5:29:9c:08:30:5a:b0:
36:ad:39:a7:47:71:1f:c9:72:a0:4e:ea:7c:19:0a:a7:2a:18:
09:33:64:d2:ba:d8:24:f7:ec:05:cd:18:c3:f3:d4:41:ee:1a:
8c:2b:b7:a6:f1:2c:4b:8c:94:0b:5f:fc:69:8c:13:1f:19:3d:
ad:c9:4e:03:b9:4d:ae:0f:93:ff:26:9a:13:16:ae:5f:ac:cc:
e7:2d:80:3b:6b:81:b4:fc:0c:d5:80:aa:c4:d8:ee:39:22:fc:
d7:8c:26:63:71:15:4a:39:b6:a8:02:e7:03:ef:80:a0:c1:4f:
1f:00:df:1c:9c:c7:db:b4:9c:42:78:9f:6e:df:6e:ef:83:09:
c0:b0:c3:f6:8e:1e:56:7f:a0:9a:3c:a6:c5:52:0e:cc:ec:0f:
5c:66:25:0c:91:29:56:14:70:8c:fa:98:15:fc:7f:70:ee:18:
73:41:68:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:38:42 2025 by rpki-client