Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/RzzP2UDDSAPrZWNFm6aBz91iMgQ.roa
File: RzzP2UDDSAPrZWNFm6aBz91iMgQ.roa (raw, json)
Hash identifier: 1RDkfiEzt2ZEB4LXorNIAFk4fcDKeMEBcQ7w1edzRtU=
Subject key identifier: 47:3C:CF:D9:40:C3:48:03:EB:65:63:45:9B:A6:81:CF:DD:62:32:04
Certificate issuer: /CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5
Certificate serial: 019425FC576342788A0E3A02A915AC86EEAD
Authority key identifier: 6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/RzzP2UDDSAPrZWNFm6aBz91iMgQ.roa
Signing time: Thu 02 Jan 2025 07:48:01 +0000
ROA not before: Thu 02 Jan 2025 07:48:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61317
IP address blocks: 46.233.43.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:57:63:42:78:8a:0e:3a:02:a9:15:ac:86:ee:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5
Validity
Not Before: Jan 2 07:48:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=473ccfd940c34803eb6563459ba681cfdd623204
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:40:8b:e3:72:f7:11:2e:e9:12:7b:11:2f:63:
ad:fc:38:ca:ca:e1:1f:12:d8:8c:0d:82:44:9f:e7:
74:e3:bc:e5:68:84:34:c6:b6:67:b5:78:bc:5d:ff:
c0:63:c9:74:b3:8a:06:60:b0:bf:56:1d:88:c2:88:
b4:2a:64:72:39:f7:31:45:db:fb:af:cd:6c:01:c0:
32:93:dc:70:39:50:9c:dc:4d:e8:3c:50:68:a7:ac:
6e:54:04:65:6a:fd:76:4f:ed:a0:c8:18:cb:06:a1:
0b:67:4a:98:35:e5:90:1f:53:8c:8d:37:e2:9b:46:
b8:ad:34:93:8f:43:7e:ab:2a:0c:d2:a1:55:59:98:
cc:b6:23:2b:b3:7d:04:ed:84:7c:4c:de:b1:a2:f8:
e0:39:f4:c8:29:f2:5a:95:82:5f:c7:c0:d0:dc:c4:
fd:af:2e:bb:06:dd:ac:7d:64:7a:a6:11:74:ec:a8:
fa:fb:cd:71:37:6f:be:39:41:aa:88:63:c8:43:7a:
1b:4c:4e:b7:c3:18:87:7c:46:62:47:9b:ba:64:99:
c6:51:fb:f6:03:1c:c8:7c:54:ea:51:26:43:e7:ec:
50:e8:3f:3e:a4:35:7b:3a:7a:f9:d4:cd:22:32:4a:
02:19:8a:cc:e8:f5:5c:8a:0e:74:5e:30:f3:a8:a7:
21:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:3C:CF:D9:40:C3:48:03:EB:65:63:45:9B:A6:81:CF:DD:62:32:04
X509v3 Authority Key Identifier:
keyid:6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/RzzP2UDDSAPrZWNFm6aBz91iMgQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.233.43.0/24
Signature Algorithm: sha256WithRSAEncryption
88:25:9c:77:2f:5e:98:4e:cb:a2:b0:1b:b3:b9:44:29:93:15:
6d:e6:c6:79:95:5e:28:23:24:f5:1a:a1:75:b6:99:ae:42:89:
7c:28:7f:af:e7:e2:f3:e2:9c:9f:40:5c:e4:c8:fd:4d:43:df:
ba:fa:84:45:a1:78:8c:a2:ac:16:03:3b:69:78:d4:7c:af:7e:
aa:83:3c:f0:bd:e1:dd:b0:6b:f7:1d:8b:7d:c9:bf:32:58:c3:
bd:39:f8:1d:4c:88:e1:2c:26:c5:fa:bc:d1:dd:0b:cd:5b:3d:
09:bd:87:98:a6:8f:84:00:e1:cf:5a:fd:91:37:aa:38:8e:a6:
5c:cf:4f:b8:e3:d1:4a:f5:59:5c:5f:d0:f8:db:9e:09:a4:26:
a6:ba:ff:1d:96:2b:c9:a3:e5:68:63:fb:18:d2:57:b9:9b:85:
f7:d7:50:a0:30:89:72:11:67:04:17:48:db:ed:5c:b9:bd:26:
66:21:45:d6:4c:dd:5e:ac:ac:19:ef:e4:a1:69:16:1f:95:92:
7b:df:71:4a:ad:35:e1:e2:ef:07:98:2f:96:5c:cb:c9:b6:17:
0c:11:f2:7c:3a:d8:16:44:69:4c:15:09:4a:78:0d:22:2b:d5:
b3:b8:49:9e:99:53:b4:79:87:5c:f8:00:39:db:42:34:32:7b:
e8:0a:a2:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:12:24 2025 by rpki-client