Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/1X78ozO3_5ULJTTX4ARholYkMtY.roa
File: 1X78ozO3_5ULJTTX4ARholYkMtY.roa (raw, json)
Hash identifier: 1YfjPO55+mmSYnYEpQNn/8Y7Ymp0JTDMtIPTDKYWHh8=
Subject key identifier: D5:7E:FC:A3:33:B7:FF:95:0B:25:34:D7:E0:04:61:A2:56:24:32:D6
Certificate issuer: /CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5
Certificate serial: 01950A55B0468EF96A9707C0D801E7E3B370
Authority key identifier: 6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/1X78ozO3_5ULJTTX4ARholYkMtY.roa
Signing time: Sat 15 Feb 2025 15:59:02 +0000
ROA not before: Sat 15 Feb 2025 15:59:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42431
IP address blocks: 46.233.0.0/19 maxlen: 20
46.233.0.0/20 maxlen: 24
46.233.0.0/21 maxlen: 21
46.233.0.0/24 maxlen: 24
46.233.1.0/24 maxlen: 24
46.233.2.0/24 maxlen: 24
46.233.3.0/24 maxlen: 24
46.233.4.0/24 maxlen: 24
46.233.5.0/24 maxlen: 24
46.233.6.0/24 maxlen: 24
46.233.7.0/24 maxlen: 24
46.233.8.0/24 maxlen: 24
46.233.9.0/24 maxlen: 24
46.233.10.0/24 maxlen: 24
46.233.11.0/24 maxlen: 24
46.233.12.0/24 maxlen: 24
46.233.13.0/24 maxlen: 24
46.233.14.0/24 maxlen: 24
46.233.15.0/24 maxlen: 24
46.233.16.0/21 maxlen: 21
46.233.16.0/24 maxlen: 24
46.233.17.0/24 maxlen: 24
46.233.18.0/24 maxlen: 24
46.233.19.0/24 maxlen: 24
46.233.20.0/24 maxlen: 24
46.233.21.0/24 maxlen: 24
46.233.22.0/24 maxlen: 24
46.233.23.0/24 maxlen: 24
46.233.24.0/23 maxlen: 23
46.233.24.0/24 maxlen: 24
46.233.25.0/24 maxlen: 24
46.233.26.0/24 maxlen: 24
46.233.27.0/24 maxlen: 24
46.233.28.0/22 maxlen: 22
46.233.28.0/24 maxlen: 24
46.233.29.0/24 maxlen: 24
46.233.30.0/24 maxlen: 24
46.233.31.0/24 maxlen: 24
46.233.36.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:0a:55:b0:46:8e:f9:6a:97:07:c0:d8:01:e7:e3:b3:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5
Validity
Not Before: Feb 15 15:59:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d57efca333b7ff950b2534d7e00461a2562432d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:e5:a1:ed:53:30:ca:90:00:9d:db:cd:da:b6:
ca:03:0d:55:85:82:3e:04:6f:85:6c:28:96:f5:26:
b3:fb:f1:27:9e:9c:0f:48:19:0d:c9:a8:f5:c3:c4:
55:4e:ec:db:9d:42:11:65:23:0d:b9:eb:fb:16:62:
63:59:7e:a8:2e:5d:30:e8:04:b7:60:35:39:c3:be:
70:2b:d0:e1:1c:aa:aa:ca:6b:a0:14:25:34:9d:b5:
20:31:98:91:47:1e:bc:25:30:d0:64:47:da:a5:95:
51:74:a1:24:93:34:65:fe:6b:8c:70:2a:92:73:8b:
09:b1:2d:e5:48:ac:9a:f9:92:72:02:08:25:4d:02:
b0:7b:24:6d:93:4c:c8:59:7f:8f:04:b7:a5:4d:98:
c0:61:4d:f0:7b:ac:30:09:3a:93:8e:9e:59:62:0b:
e1:50:6d:fd:d1:35:3b:44:99:e2:c0:94:05:ab:c5:
ae:f7:9e:00:27:c1:a3:ac:06:fd:72:6d:04:2e:7e:
d2:c5:b7:0a:8a:b2:78:a8:1a:3c:88:9f:33:80:44:
95:20:a2:da:48:05:24:e1:69:24:01:aa:d2:e5:62:
3f:69:86:dd:67:ed:29:1d:56:5d:a2:c5:7e:e3:41:
b4:e1:4a:47:b7:bc:1c:fb:5b:23:80:9e:09:8d:ae:
da:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:7E:FC:A3:33:B7:FF:95:0B:25:34:D7:E0:04:61:A2:56:24:32:D6
X509v3 Authority Key Identifier:
keyid:6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/1X78ozO3_5ULJTTX4ARholYkMtY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.233.0.0/19
46.233.36.0/23
Signature Algorithm: sha256WithRSAEncryption
09:b5:21:27:35:06:5d:6f:80:4d:77:fd:96:74:ce:ed:ae:73:
74:8a:bc:36:99:5f:a4:e2:55:dc:30:c2:98:92:54:84:56:8a:
79:7d:9f:71:54:60:1b:0b:91:47:2b:04:f9:11:7e:84:35:5b:
54:7b:1e:97:ef:d4:3f:cf:be:e4:a0:7c:e6:47:ba:30:d1:f6:
a1:84:73:9f:00:99:91:85:ef:05:8b:7c:f4:72:77:7f:f5:92:
b8:9a:a6:b7:d0:0b:24:8e:ef:82:45:cb:1a:d6:5d:fa:a4:a3:
5c:18:44:93:b5:5c:e0:72:26:ae:3b:16:d3:56:5e:4b:59:4b:
2f:b8:12:5b:33:bd:de:5b:25:41:59:6e:86:6f:40:c8:9d:1c:
e6:c8:68:5d:72:1f:c9:05:cd:48:26:f1:21:0c:83:7d:a5:34:
0e:fc:8b:a2:99:63:e8:8d:05:93:cb:fc:6b:a4:e4:8e:6b:bb:
6a:e4:c5:ed:02:87:65:62:50:de:a6:4c:71:03:6e:e8:4a:1a:
34:8f:b9:3d:f0:7d:53:52:76:a2:56:de:89:58:a4:4d:08:23:
19:70:d6:21:e5:23:70:c5:ba:89:ad:c8:37:1a:c6:58:81:ef:
24:eb:fb:37:c3:72:ea:12:26:0e:2b:41:89:de:2e:09:16:37:
42:44:82:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:31:57 2025 by rpki-client