Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/568e21-53a4-4e55-9c57-98282c89f516/1/kAKuIYXg1bp7KYEaGGpYw_p_ZEA.roa
File: kAKuIYXg1bp7KYEaGGpYw_p_ZEA.roa (raw, json)
Hash identifier: rN2Ict4bzybwIS6kDp0XozP6rV4PW6e1BfkoB7rQg6U=
Subject key identifier: 90:02:AE:21:85:E0:D5:BA:7B:29:81:1A:18:6A:58:C3:FA:7F:64:40
Certificate issuer: /CN=262341b433e1f8fcb796322d2fd926409396e7ad
Certificate serial: 019425FD673F6EC08A02304025CA7D3C61E9
Authority key identifier: 26:23:41:B4:33:E1:F8:FC:B7:96:32:2D:2F:D9:26:40:93:96:E7:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JiNBtDPh-Py3ljItL9kmQJOW560.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/568e21-53a4-4e55-9c57-98282c89f516/1/kAKuIYXg1bp7KYEaGGpYw_p_ZEA.roa
Signing time: Thu 02 Jan 2025 07:49:11 +0000
ROA not before: Thu 02 Jan 2025 07:49:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43088
IP address blocks: 46.31.16.0/21 maxlen: 24
193.200.225.0/24 maxlen: 24
2a02:2530::/32 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:67:3f:6e:c0:8a:02:30:40:25:ca:7d:3c:61:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=262341b433e1f8fcb796322d2fd926409396e7ad
Validity
Not Before: Jan 2 07:49:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9002ae2185e0d5ba7b29811a186a58c3fa7f6440
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:e9:3c:36:54:aa:bf:04:40:01:7c:e6:b8:35:
9a:4a:55:4b:00:e6:e6:d1:90:43:a3:05:ae:01:40:
0b:d8:34:45:ab:89:43:00:ef:2e:4d:42:dd:fb:0f:
e0:bc:c8:8d:21:e6:c0:03:0a:b5:b2:15:8f:ad:35:
a7:49:8d:6c:f4:4b:4e:b9:b4:66:ab:03:a6:84:5d:
af:7a:18:12:76:bf:d4:09:2c:95:41:52:34:7d:61:
05:dd:fa:46:1a:02:8f:95:99:31:99:c4:d8:3e:cf:
16:ba:d2:ff:f8:39:ce:0b:2d:9a:4b:e3:f0:16:e0:
2e:98:42:d3:22:f3:af:09:20:b6:68:99:d2:4e:ca:
e2:c9:49:71:3a:25:fa:cb:4d:fe:3e:84:bb:1b:9a:
88:c4:5a:d6:27:df:92:c8:51:c9:c7:8e:4d:01:df:
27:07:33:de:0e:05:42:c7:45:e8:e4:c2:99:d8:2f:
dc:78:41:02:6c:cf:e1:d7:7d:c2:08:87:1f:ed:64:
bc:cf:88:6a:e7:ca:53:81:41:96:a7:45:f0:7d:99:
c1:d3:b5:f8:01:06:f3:9d:30:92:e7:58:1e:8e:41:
b6:2b:b5:c6:f3:c5:17:64:72:ea:74:f7:76:42:fa:
92:34:76:fc:a1:5d:39:c6:0d:32:c5:01:4a:a7:80:
5d:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:02:AE:21:85:E0:D5:BA:7B:29:81:1A:18:6A:58:C3:FA:7F:64:40
X509v3 Authority Key Identifier:
keyid:26:23:41:B4:33:E1:F8:FC:B7:96:32:2D:2F:D9:26:40:93:96:E7:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JiNBtDPh-Py3ljItL9kmQJOW560.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/568e21-53a4-4e55-9c57-98282c89f516/1/kAKuIYXg1bp7KYEaGGpYw_p_ZEA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/568e21-53a4-4e55-9c57-98282c89f516/1/JiNBtDPh-Py3ljItL9kmQJOW560.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.31.16.0/21
193.200.225.0/24
IPv6:
2a02:2530::/32
Signature Algorithm: sha256WithRSAEncryption
2f:8a:b1:35:43:9b:90:f6:d1:d1:d0:ba:3b:69:30:38:98:1b:
42:8e:17:46:46:5e:b2:96:6d:ac:27:65:96:a7:9e:40:35:65:
13:4e:ad:69:0c:ef:b5:53:cd:f5:fc:0d:03:9e:4c:9d:f3:9b:
7c:87:9e:15:f8:15:bd:b8:f4:5d:26:df:4f:86:f3:53:d2:1b:
f9:70:e3:2e:88:17:fb:02:38:1e:18:70:b7:35:0b:4c:47:f6:
8f:12:18:29:f6:dc:d7:b5:2e:99:7f:bb:b3:10:2a:d6:86:9d:
74:71:7d:9c:d3:63:7f:61:4d:98:48:9a:c3:7e:29:e0:83:d0:
6c:fd:52:bc:f3:7f:04:01:40:ae:b1:a4:b7:90:f0:2e:80:36:
02:a7:43:08:3c:96:c6:27:9d:6f:be:ec:c2:04:61:26:c3:64:
cd:a4:5d:4a:8d:35:b0:f2:70:d2:fe:e7:65:d7:37:27:50:9f:
fc:29:0c:af:da:ee:87:b8:e6:9e:99:2f:36:c9:7c:e9:51:a6:
97:d6:b3:95:d5:a1:54:4d:ed:3a:f4:29:d6:57:26:93:6a:e9:
88:6c:22:ad:77:3b:e7:14:2c:ab:8b:4f:a6:61:a6:3e:26:fb:
52:69:cd:a6:8a:91:44:fe:54:96:b9:e7:fd:92:e8:12:a6:28:
8f:a2:ea:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:30:46 2025 by rpki-client