Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/IE5Ot6kXSpSm_XTJaCWCEcClZ1E.roa
File: IE5Ot6kXSpSm_XTJaCWCEcClZ1E.roa (raw, json)
Hash identifier: ecVDNUR7HlsILjWVcvUtVx/095hxRc4P38CIzJWANj8=
Subject key identifier: 20:4E:4E:B7:A9:17:4A:94:A6:FD:74:C9:68:25:82:11:C0:A5:67:51
Certificate issuer: /CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5
Certificate serial: 019425FC53B31BBC2D352A3E951E9F765740
Authority key identifier: 6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/IE5Ot6kXSpSm_XTJaCWCEcClZ1E.roa
Signing time: Thu 02 Jan 2025 07:48:00 +0000
ROA not before: Thu 02 Jan 2025 07:48:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42410
IP address blocks: 46.233.48.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:53:b3:1b:bc:2d:35:2a:3e:95:1e:9f:76:57:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5
Validity
Not Before: Jan 2 07:48:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=204e4eb7a9174a94a6fd74c968258211c0a56751
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:17:d0:23:ef:4a:55:87:d6:4c:39:e1:6b:64:
28:fb:da:51:f2:08:eb:62:eb:14:d7:7a:cd:fd:2a:
94:31:b4:6f:f2:f6:03:a6:33:5a:af:e0:a0:a6:16:
42:87:a1:40:29:ad:9c:40:1e:85:18:1c:e6:15:b0:
f3:ad:2b:a8:93:7d:22:25:14:83:6c:dd:18:19:2c:
22:7f:7c:7d:f8:e1:96:b0:0b:f0:0b:83:ee:3c:ad:
bf:4e:13:23:e5:75:f2:6d:04:84:5f:23:43:8e:5a:
68:a7:26:2f:f6:7c:f4:79:cf:c8:a2:56:42:e4:77:
c0:b4:d1:bc:c4:da:bd:c3:9c:5a:17:7e:90:79:bf:
1b:0b:c3:e9:57:4c:f8:0d:9e:7f:59:1c:36:ce:fc:
a6:da:c6:f4:90:2b:33:ae:c9:c3:3b:5f:85:db:8c:
7c:90:dc:93:67:ce:ea:9e:9c:1e:c0:34:7f:6e:fe:
8d:51:4c:f3:a0:82:3f:5a:64:c5:7c:91:31:69:69:
f0:b0:67:ac:10:be:ca:fb:cf:ea:83:db:d6:7d:73:
13:e6:94:bd:55:c8:55:6f:75:a9:f4:68:df:3d:2f:
34:82:bb:8e:08:7c:80:85:c1:d7:fd:a6:ce:d4:2b:
80:eb:59:8c:b7:ed:06:bb:fc:36:b4:f4:68:40:6b:
18:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:4E:4E:B7:A9:17:4A:94:A6:FD:74:C9:68:25:82:11:C0:A5:67:51
X509v3 Authority Key Identifier:
keyid:6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/IE5Ot6kXSpSm_XTJaCWCEcClZ1E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.233.48.0/21
Signature Algorithm: sha256WithRSAEncryption
35:5c:00:e6:41:67:b4:55:33:4a:44:1e:6c:5b:c2:d4:4b:12:
91:c3:3a:f8:bf:36:7f:c9:27:64:a9:c9:f2:41:e9:2b:cd:ee:
78:78:28:0c:be:c3:00:12:9f:10:7e:16:19:42:f1:be:cc:60:
d5:37:31:22:86:d3:13:96:c0:85:62:6b:fe:6b:e1:f4:ed:b8:
85:b0:92:ce:04:ca:d8:a1:fb:93:69:a1:38:89:17:18:28:5d:
ec:01:ab:01:eb:ab:69:82:40:73:37:1d:7b:77:44:38:d0:72:
ec:d5:83:6f:d5:16:72:6e:06:e5:e2:d4:ed:5f:63:e6:1d:d7:
53:2b:6a:2d:56:70:2b:ce:d1:52:76:ea:c7:ba:6b:8b:7c:88:
a0:ad:5d:a7:8a:0e:bd:31:c1:1c:f9:1d:56:4b:76:b5:4c:de:
bc:5a:6a:48:d2:87:c9:03:73:76:68:d6:d4:df:5d:61:bd:9a:
a5:ef:69:28:6a:55:92:9e:0e:d2:1e:9d:d5:39:47:87:79:e7:
06:c0:f8:73:5f:f0:7a:43:a2:ed:8b:6c:28:59:7e:af:76:91:
69:b6:00:bf:76:f6:5a:50:cd:6c:35:07:a8:9b:23:e4:7f:b9:
26:04:ff:ec:e2:58:9c:22:5a:d2:e8:72:29:b2:7b:56:c1:e1:
47:ef:b4:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:50:04 2025 by rpki-client