Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/wSvOCQFNhMOtOIOnJS2uDLOjqIA.roa
File: wSvOCQFNhMOtOIOnJS2uDLOjqIA.roa (raw, json)
Hash identifier: WCMI9jcYKOPkrSfwEXHvtpsdR3oS5woJUqgCmi9vgNo=
Subject key identifier: C1:2B:CE:09:01:4D:84:C3:AD:38:83:A7:25:2D:AE:0C:B3:A3:A8:80
Certificate issuer: /CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5
Certificate serial: 019425FC529113407585CF74AB45989449FC
Authority key identifier: 6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/wSvOCQFNhMOtOIOnJS2uDLOjqIA.roa
Signing time: Thu 02 Jan 2025 07:48:00 +0000
ROA not before: Thu 02 Jan 2025 07:48:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20473
IP address blocks: 46.233.38.0/24 maxlen: 24
46.233.42.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:52:91:13:40:75:85:cf:74:ab:45:98:94:49:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5
Validity
Not Before: Jan 2 07:48:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c12bce09014d84c3ad3883a7252dae0cb3a3a880
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:cc:62:e7:c5:98:72:26:63:36:c8:e6:33:d6:
1a:70:35:3f:e0:d4:f5:7e:e2:4a:ba:98:fc:55:10:
34:05:49:88:94:58:9a:dc:f8:4e:f7:ad:8e:87:20:
b8:51:b4:ca:ea:12:5f:6e:1e:1d:f5:c2:f3:87:a3:
03:47:32:ac:2d:37:78:35:bd:49:61:2a:5d:23:d2:
e0:15:2b:fb:9a:9d:f8:20:d1:92:b2:43:ce:3c:3d:
90:42:3b:b8:ce:74:ef:e1:c6:e1:6b:27:55:63:e8:
53:c1:9d:6e:e4:ae:86:84:04:be:d2:d6:73:63:16:
63:af:0e:e3:68:0d:c0:fd:68:8b:4c:e8:bb:eb:0c:
78:db:96:31:6b:61:14:8e:79:fe:a3:04:49:a8:be:
26:3b:c4:f1:72:f6:4a:e1:6d:10:8b:26:07:f7:0b:
16:2c:4a:1e:9f:0d:47:fa:fe:5d:e3:aa:2d:0e:b0:
1c:8b:f1:3b:4b:ad:ff:03:8a:a8:d2:c5:0f:b3:48:
8c:01:b9:ae:b7:ab:21:55:1d:a4:bc:a6:40:92:fc:
6e:b0:9b:8b:9c:26:69:d3:d3:d8:25:1c:60:7b:27:
45:f0:b5:b1:fc:3e:c9:30:97:1a:85:f8:0f:50:f9:
4d:dd:4f:ca:26:27:a5:41:54:1f:43:6e:fd:0f:17:
77:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:2B:CE:09:01:4D:84:C3:AD:38:83:A7:25:2D:AE:0C:B3:A3:A8:80
X509v3 Authority Key Identifier:
keyid:6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/wSvOCQFNhMOtOIOnJS2uDLOjqIA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.233.38.0/24
46.233.42.0/24
Signature Algorithm: sha256WithRSAEncryption
87:59:3f:05:93:d7:97:89:14:2a:c6:9b:94:97:22:11:a7:58:
bc:87:3e:04:fc:25:e0:fe:2d:cd:5b:48:1a:96:18:88:a5:8f:
52:2b:e1:08:19:b4:14:22:e4:dd:fb:29:3c:1a:e5:fd:e1:b9:
c9:f7:d0:2d:82:30:1d:73:be:60:c9:da:43:e4:f6:4a:fc:7f:
6b:10:00:8d:6b:9b:a1:5d:9b:bf:95:c2:5b:23:59:56:d4:20:
f4:da:69:26:38:a0:61:86:24:1c:83:a8:c2:05:16:b3:38:1c:
fe:94:34:38:ad:29:90:50:04:03:fe:00:4e:ba:0d:bd:8f:27:
b7:da:4b:90:ca:fb:fc:26:a0:59:87:14:27:18:6f:e8:3c:b8:
a0:97:d1:a8:ce:56:ff:59:fd:cc:f8:0d:e5:9e:d4:73:35:05:
7f:ef:1a:9f:16:bf:04:4e:80:c6:0a:f0:a8:2f:3f:b2:3e:17:
9b:cd:0c:45:79:c1:d4:17:a4:e4:c6:40:17:fc:09:5a:87:46:
47:b9:63:f9:85:a6:0f:5f:69:09:58:2d:46:25:78:a3:67:1d:
fc:bb:e8:99:cc:59:a4:8b:92:c4:09:e8:14:3a:2f:67:a0:df:
68:be:fa:ba:13:dd:19:25:aa:61:cf:68:bf:70:1c:61:da:60:
8a:ea:01:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:39:54 2025 by rpki-client