Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/db8oIlKGVHWxooRJlYbhdjvJsuA.roa
File: db8oIlKGVHWxooRJlYbhdjvJsuA.roa (raw, json)
Hash identifier: B2mnouT32lmNoI6k8Nzq2onaNqI5WNfO6AcQIGWRWaI=
Subject key identifier: 75:BF:28:22:52:86:54:75:B1:A2:84:49:95:86:E1:76:3B:C9:B2:E0
Certificate issuer: /CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5
Certificate serial: 0193CB874E430A4A55E00BCA3BF9B3F4BB54
Authority key identifier: 6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/db8oIlKGVHWxooRJlYbhdjvJsuA.roa
Signing time: Sun 15 Dec 2024 18:14:22 +0000
ROA not before: Sun 15 Dec 2024 18:14:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 174
IP address blocks: 46.233.32.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:cb:87:4e:43:0a:4a:55:e0:0b:ca:3b:f9:b3:f4:bb:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5
Validity
Not Before: Dec 15 18:14:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=75bf282252865475b1a284499586e1763bc9b2e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:fd:b5:af:f0:11:6f:f3:1c:76:95:a9:ea:70:
ef:f0:83:a5:3f:13:44:55:52:26:e3:f8:ca:19:57:
c0:d8:67:9c:08:d3:c9:1b:36:32:91:56:20:0e:c0:
f2:2d:35:58:fc:37:40:85:df:2b:d8:bd:4f:02:bd:
e3:8a:f7:dc:a3:0b:ee:b6:55:b2:45:50:1e:a4:bd:
07:a7:20:4d:40:41:ac:0a:1c:a2:5a:4d:93:4d:d4:
2f:f7:3b:2e:bc:79:6d:9b:06:b4:3e:d6:ef:83:f6:
a3:cd:0c:39:49:77:0a:16:6b:eb:68:33:b6:f8:70:
a1:bc:63:f7:0c:ad:c7:3d:e6:36:69:39:8b:8f:1d:
9a:ec:bd:93:b8:d5:dc:92:c4:10:a4:0c:0f:27:62:
3e:51:be:dc:02:d6:be:fe:f2:9b:29:e8:d9:48:0d:
30:e4:de:c2:2d:e6:18:b3:a2:58:1f:fa:42:51:a4:
84:02:1a:ce:9d:62:db:1e:b9:b7:e8:b6:70:04:25:
85:a2:48:bb:73:99:3d:2f:95:06:b0:b1:d6:c7:d4:
4e:48:52:2f:cc:25:7d:eb:59:5a:da:ca:36:19:fc:
03:06:cb:67:2b:9e:4d:73:ee:2f:d0:3c:82:ae:fc:
80:20:cf:b2:bf:79:93:93:11:9d:96:ca:b1:6d:1a:
f9:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:BF:28:22:52:86:54:75:B1:A2:84:49:95:86:E1:76:3B:C9:B2:E0
X509v3 Authority Key Identifier:
keyid:6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/db8oIlKGVHWxooRJlYbhdjvJsuA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.233.32.0/22
Signature Algorithm: sha256WithRSAEncryption
2b:f9:39:23:c3:6a:b1:12:34:d3:d8:05:1b:31:87:6c:8d:36:
46:a2:39:f0:21:1a:c6:31:af:f5:03:d7:db:26:6f:96:b3:84:
04:2a:bd:81:db:df:63:ff:cc:bd:eb:f0:7d:22:27:38:9f:bd:
ff:1e:e4:01:84:65:5f:bc:bb:86:de:01:23:97:b7:6a:5f:b0:
f0:a5:f2:13:0c:28:fd:0d:1a:b2:eb:1f:79:f7:05:6e:67:17:
f5:28:38:d4:30:68:05:92:14:28:35:d2:a0:0b:17:a4:6d:79:
62:ce:23:8b:c2:69:20:ae:10:83:b6:70:6b:4b:b8:b9:4f:b1:
17:07:c1:62:81:54:aa:b8:fc:7b:ba:bc:2f:eb:97:8a:d4:34:
8e:ba:a9:81:4d:1b:84:c7:6e:2a:68:8b:25:b8:76:ba:69:6c:
5f:e1:4e:43:c9:61:d7:dc:62:cb:76:52:ea:41:3f:19:74:b8:
08:c1:c8:25:60:65:9f:45:a9:9a:d0:c3:5c:36:1c:a7:7d:93:
fe:bb:fa:4a:94:31:59:1f:13:74:78:1c:b6:dc:72:e6:f2:3b:
99:71:61:2a:6f:3d:0b:4e:bb:aa:a9:f7:12:ef:90:24:5f:55:
7a:0f:08:27:0e:cd:c7:26:52:e9:24:6d:a5:b5:b8:1b:9f:e8:
08:39:80:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 12:36:02 2025 by rpki-client