Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/BYaIGhP_gQl2AwPkX9iTx0zM8fk.roa
File: BYaIGhP_gQl2AwPkX9iTx0zM8fk.roa (raw, json)
Hash identifier: AC4UlXmoKoezD5R7m6XOVi4NLNBueDiCfropIOMZ1Aw=
Subject key identifier: 05:86:88:1A:13:FF:81:09:76:03:03:E4:5F:D8:93:C7:4C:CC:F1:F9
Certificate issuer: /CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5
Certificate serial: 01938154AB4D7F2FB70F9B6B834DD23DF949
Authority key identifier: 6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/BYaIGhP_gQl2AwPkX9iTx0zM8fk.roa
Signing time: Sun 01 Dec 2024 08:27:09 +0000
ROA not before: Sun 01 Dec 2024 08:27:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 46.233.32.0/22 maxlen: 24
46.233.42.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:81:54:ab:4d:7f:2f:b7:0f:9b:6b:83:4d:d2:3d:f9:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5
Validity
Not Before: Dec 1 08:27:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0586881a13ff8109760303e45fd893c74cccf1f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ff:0e:08:32:4f:74:bc:6c:03:36:b1:17:26:dc:
93:ae:e0:4a:f2:e0:7c:1f:ba:a1:8e:c4:f4:30:08:
f1:8d:26:b3:cf:1e:e2:78:00:66:0a:e5:09:e0:75:
98:fc:3b:30:1d:62:01:6d:45:4e:67:a4:a8:6c:05:
19:1b:bc:df:cf:df:53:5f:ab:bb:b3:e4:2c:85:be:
a5:0e:b8:8b:57:47:26:fd:04:61:24:c8:57:2a:2e:
d2:33:d8:4e:82:c0:1a:dd:cd:fd:cb:1a:9c:8e:43:
d3:0f:04:2b:fc:13:4e:60:11:26:f0:de:04:20:0e:
c4:96:92:51:b0:81:43:81:21:b4:6e:03:92:43:48:
40:70:5c:e6:27:f9:00:09:b8:b9:b5:bf:fd:62:c3:
83:e3:d3:32:39:46:35:19:e4:3a:08:07:b7:60:63:
9f:09:cd:ec:36:8a:32:f6:69:d0:c8:ad:8c:cc:1c:
6b:d4:f7:ae:bc:30:72:2e:96:e5:3d:d4:86:db:e6:
c7:2c:f8:df:33:4e:f5:0f:b5:3c:80:11:5b:98:0b:
c1:25:7f:dc:8b:fe:b5:86:6c:6e:0d:13:87:7e:18:
aa:50:72:e9:76:18:d5:43:c6:4e:f6:74:0b:4a:27:
04:02:7b:4e:06:7b:42:0b:9a:61:3f:bc:6d:72:74:
69:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:86:88:1A:13:FF:81:09:76:03:03:E4:5F:D8:93:C7:4C:CC:F1:F9
X509v3 Authority Key Identifier:
keyid:6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/BYaIGhP_gQl2AwPkX9iTx0zM8fk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.233.32.0/22
46.233.42.0/23
Signature Algorithm: sha256WithRSAEncryption
69:45:1a:63:a2:dd:29:d9:7b:25:88:49:aa:6b:e9:33:14:23:
a5:ba:a3:fc:de:c8:57:be:22:1b:26:11:a0:16:19:6a:6d:52:
bc:3b:4d:a5:21:c3:0e:92:e0:46:f2:4d:ef:41:91:6f:86:87:
85:0c:18:83:d9:f5:ba:94:6a:59:fd:f8:6f:09:18:f8:7a:b0:
0f:03:0c:10:e3:df:4c:ad:71:41:e8:cc:10:9d:51:f5:64:ec:
af:9d:aa:7e:74:c5:b7:56:33:c4:63:38:d0:5e:7c:89:6d:01:
21:14:78:a7:7d:71:35:78:ed:b3:a6:1d:ce:bb:86:d4:1b:99:
dd:57:cc:ee:61:4e:a6:aa:26:a4:2c:ab:fd:72:6b:a2:65:9d:
3b:ba:38:64:39:e4:f2:3f:ed:84:47:9c:01:6c:93:db:c2:da:
82:6d:e5:9a:b1:3c:07:f2:9a:ae:38:f6:d7:64:bd:a4:88:af:
f7:15:eb:f1:d0:05:db:1b:20:79:d0:01:63:86:86:79:b5:64:
5f:04:49:d2:71:ca:f1:af:f1:78:9a:49:0f:bc:11:72:fe:39:
91:33:71:b8:1e:f3:34:d2:93:6b:9e:0f:90:21:73:00:5a:d3:
34:da:ca:5d:d0:2a:3d:ec:3e:7f:95:76:1f:31:65:95:4d:83:
ec:f1:96:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:42:24 2025 by rpki-client