Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a6ad9f-8d69-46ea-bd7c-32b150f8e61f/1/Fhfce2LXRC0PPV0-nkdhoq5vUhA.roa
File: Fhfce2LXRC0PPV0-nkdhoq5vUhA.roa (raw, json)
Hash identifier: 3no3OUUslJGjNOaj6rJ9fSzDG6+jsjVJ2+K3mnyt+RI=
Subject key identifier: 16:17:DC:7B:62:D7:44:2D:0F:3D:5D:3E:9E:47:61:A2:AE:6F:52:10
Certificate issuer: /CN=46eb3b3b579c90b4b996a7fe40f20503913a25cf
Certificate serial: 01856C53CD769F2D8D7CF7981677EE4BB515
Authority key identifier: 46:EB:3B:3B:57:9C:90:B4:B9:96:A7:FE:40:F2:05:03:91:3A:25:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rus7O1eckLS5lqf-QPIFA5E6Jc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a6ad9f-8d69-46ea-bd7c-32b150f8e61f/1/Fhfce2LXRC0PPV0-nkdhoq5vUhA.roa
Signing time: Sun 01 Jan 2023 07:55:09 +0000
ROA not before: Sun 01 Jan 2023 07:55:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42637
IP address blocks: 86.106.133.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:53:cd:76:9f:2d:8d:7c:f7:98:16:77:ee:4b:b5:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46eb3b3b579c90b4b996a7fe40f20503913a25cf
Validity
Not Before: Jan 1 07:55:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1617dc7b62d7442d0f3d5d3e9e4761a2ae6f5210
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:86:3f:b7:b9:d6:ac:40:50:9d:cb:53:00:25:
ed:a9:ed:d0:7f:71:3b:f7:f5:58:63:e8:31:b1:76:
e4:3a:b8:28:55:cf:03:69:85:35:72:50:77:1a:8c:
fa:a5:3d:2d:bd:a9:3e:50:aa:3c:1e:05:e6:a0:3d:
f8:e2:9c:68:7e:7f:80:65:bd:d0:9d:bc:85:3c:9d:
0d:61:94:5b:44:3e:a5:0f:1e:07:da:8f:b8:ef:19:
53:c3:c2:c1:cd:11:3d:bd:4a:8d:b6:32:f8:29:f1:
dd:40:03:7f:fa:e5:49:9b:9c:45:a0:d9:e1:6d:78:
4b:13:70:8d:28:50:7b:0f:f1:fb:c2:1e:4b:c4:91:
c2:24:6c:02:27:fa:42:82:f9:55:5f:73:15:d8:c7:
87:94:95:14:3f:a0:6f:26:23:10:22:c8:f2:31:68:
2b:a6:20:07:6c:d3:32:59:2f:1f:c5:54:4a:69:49:
d7:8c:ad:23:a6:1c:57:5d:ae:cb:6d:f7:c2:00:29:
a9:45:b2:ab:ab:b7:aa:54:d5:b7:5c:67:01:ef:11:
a2:a2:56:09:fa:73:65:01:72:82:ff:e0:46:97:e8:
80:68:68:71:75:3b:dd:63:e9:e9:25:08:dc:d1:2a:
ac:75:ea:4f:75:2a:c9:01:91:71:8e:b8:50:ba:43:
77:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:17:DC:7B:62:D7:44:2D:0F:3D:5D:3E:9E:47:61:A2:AE:6F:52:10
X509v3 Authority Key Identifier:
keyid:46:EB:3B:3B:57:9C:90:B4:B9:96:A7:FE:40:F2:05:03:91:3A:25:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rus7O1eckLS5lqf-QPIFA5E6Jc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a6ad9f-8d69-46ea-bd7c-32b150f8e61f/1/Fhfce2LXRC0PPV0-nkdhoq5vUhA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a6ad9f-8d69-46ea-bd7c-32b150f8e61f/1/Rus7O1eckLS5lqf-QPIFA5E6Jc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.106.133.0/24
Signature Algorithm: sha256WithRSAEncryption
c0:d3:f3:c6:1b:5a:8c:49:9d:4f:6b:c2:25:31:1c:7b:1d:51:
5c:19:67:6c:73:e6:a8:e4:df:84:b4:4c:e6:29:f8:db:df:db:
c4:fd:7c:9a:4c:8e:05:bc:69:98:9d:a1:2c:50:9e:6b:ab:72:
3b:ae:7a:be:fa:e1:61:39:75:83:d7:38:5a:46:db:62:d9:fd:
30:9f:b5:e8:6f:ed:1d:de:5a:2c:b1:1b:28:3c:6c:29:b5:c1:
06:26:78:85:45:0d:28:6f:4c:c1:d7:de:d0:fb:7f:7d:0b:11:
5c:f3:59:a7:a2:c2:41:c2:60:7a:71:74:ae:ed:39:f7:a7:b0:
25:c4:ca:a4:3f:e5:80:c6:dd:0f:bf:f3:60:ed:ae:4a:e6:e1:
d3:1f:a4:2e:b9:a0:4b:35:5c:53:70:ae:98:7d:da:64:c1:a0:
5d:ce:2e:6c:40:12:cd:74:b9:4e:ac:e6:e0:c3:fc:51:4f:e0:
2d:af:1c:9b:8b:17:58:7c:12:9a:6b:9b:f2:47:ef:1d:7e:6e:
0b:02:89:bd:d3:16:b6:c1:a3:0d:c5:a7:e9:71:7c:b5:f5:4e:
7a:2f:0e:4e:d5:8d:9a:4a:b4:c7:ff:05:2d:46:8e:0e:24:49:
25:b5:a9:19:40:b0:a9:30:85:27:be:aa:56:ac:94:5f:e4:02:
1e:f5:69:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:39:47 2025 by rpki-client