Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a6ad9f-8d69-46ea-bd7c-32b150f8e61f/1/4xcRWVI4BgQthtqJn_UYBkRr5rM.roa
File: 4xcRWVI4BgQthtqJn_UYBkRr5rM.roa (raw, json)
Hash identifier: t3Zez0N0GhnChdGMHKWwrnhzHwLSNZpEBBEXAOllk4Y=
Subject key identifier: E3:17:11:59:52:38:06:04:2D:86:DA:89:9F:F5:18:06:44:6B:E6:B3
Certificate issuer: /CN=46eb3b3b579c90b4b996a7fe40f20503913a25cf
Certificate serial: 01856C53CF847AFD38D4361BCCEAA8B39F77
Authority key identifier: 46:EB:3B:3B:57:9C:90:B4:B9:96:A7:FE:40:F2:05:03:91:3A:25:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rus7O1eckLS5lqf-QPIFA5E6Jc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a6ad9f-8d69-46ea-bd7c-32b150f8e61f/1/4xcRWVI4BgQthtqJn_UYBkRr5rM.roa
Signing time: Sun 01 Jan 2023 07:55:10 +0000
ROA not before: Sun 01 Jan 2023 07:55:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56795
IP address blocks: 85.204.46.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:53:cf:84:7a:fd:38:d4:36:1b:cc:ea:a8:b3:9f:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46eb3b3b579c90b4b996a7fe40f20503913a25cf
Validity
Not Before: Jan 1 07:55:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e3171159523806042d86da899ff51806446be6b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:21:54:da:a6:b2:4f:32:8c:bc:87:38:14:18:
4b:1c:75:cd:24:8e:f8:57:b8:b1:aa:c8:a9:77:a7:
a7:a6:d9:5c:e5:f3:2b:83:68:f0:4d:af:1e:b0:dd:
b3:bb:b7:fd:a9:77:1e:0a:4a:8d:cc:2d:12:f1:68:
99:91:ae:0c:78:cd:cb:44:77:0b:92:57:28:40:0a:
2f:95:8b:cb:cb:ae:92:69:42:31:29:9f:b7:3d:71:
ce:04:4d:f5:f4:be:25:b8:fc:9f:87:c7:37:e9:88:
e0:14:1a:46:8f:55:6e:cb:56:27:2a:d4:d6:7b:9f:
12:e1:65:b4:1a:f6:e1:15:fc:b0:cf:95:19:0d:b4:
1b:fd:71:f3:fe:cf:2e:c5:63:0a:84:64:28:34:0e:
12:01:bd:3c:cf:59:6a:b8:fd:c1:db:2e:60:ca:95:
a0:3b:a9:42:df:85:87:a9:a1:d9:ca:34:68:85:25:
98:56:ab:21:ba:e0:2d:ac:df:29:b9:78:ab:02:74:
da:20:fe:af:89:5a:ae:2c:cd:f1:f5:72:1c:83:50:
a1:41:dd:9f:66:fa:8e:61:c7:b8:6f:1c:31:69:ab:
ae:48:a6:6f:fb:d5:98:12:1b:4a:6b:c7:b2:20:31:
2f:a0:e1:52:85:15:eb:4e:30:a0:14:23:be:51:ab:
e5:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:17:11:59:52:38:06:04:2D:86:DA:89:9F:F5:18:06:44:6B:E6:B3
X509v3 Authority Key Identifier:
keyid:46:EB:3B:3B:57:9C:90:B4:B9:96:A7:FE:40:F2:05:03:91:3A:25:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rus7O1eckLS5lqf-QPIFA5E6Jc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a6ad9f-8d69-46ea-bd7c-32b150f8e61f/1/4xcRWVI4BgQthtqJn_UYBkRr5rM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a6ad9f-8d69-46ea-bd7c-32b150f8e61f/1/Rus7O1eckLS5lqf-QPIFA5E6Jc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.204.46.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:e1:e4:e1:3a:40:63:ee:af:03:e4:c6:e0:c8:8c:e7:2e:eb:
0a:87:56:44:49:ca:4e:44:08:8f:ee:88:e4:17:e2:86:f2:1d:
a4:b3:13:b4:56:54:42:2d:f0:f0:71:e9:62:7c:b5:68:92:ca:
7a:5d:1e:90:67:50:4a:03:a8:ac:6c:45:bd:7b:bd:44:0e:98:
ab:13:f5:e5:4a:9a:6c:22:8d:73:44:f2:c7:19:b9:b5:c1:69:
b8:e8:43:ec:86:fa:25:b7:43:f5:9b:43:b4:f8:b4:d5:4d:11:
1c:6d:ec:e8:ad:68:c2:8e:b8:ca:7a:3b:70:60:39:82:f0:0c:
3d:cf:e2:52:76:cd:8d:0e:91:47:e1:78:d9:56:df:7f:bc:1d:
52:cf:b4:36:6e:b0:0c:a9:a1:65:7c:50:5b:14:ea:d8:40:20:
bc:16:3f:96:2d:33:0b:07:fd:db:22:be:9a:0f:a9:92:46:de:
e3:43:92:ff:a1:30:85:1c:be:3d:62:1b:46:5e:ea:9d:f6:ca:
64:bf:22:1a:dc:5a:a0:9a:1e:4b:2a:a7:6a:0f:ca:b3:4e:36:
60:d2:0e:d4:df:86:44:91:65:79:f4:3a:81:cb:40:df:03:5c:
4d:48:dd:4c:45:ac:56:97:38:85:13:3a:48:43:16:d8:f0:0a:
24:7d:ea:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:09:14 2025 by rpki-client