Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/5c3ae6-2934-479e-8c2d-8e8d5b3e5586/1/7LeNtT1Py-375udT6tgnEczdaA4.roa
File: 7LeNtT1Py-375udT6tgnEczdaA4.roa (raw, json)
Hash identifier: KcUWkl6MBuk85woap7zLa0rzE+sobb9Vo8npqesilrw=
Subject key identifier: EC:B7:8D:B5:3D:4F:CB:ED:FB:E6:E7:53:EA:D8:27:11:CC:DD:68:0E
Certificate issuer: /CN=23130c99ac7aa4086c71757114a4163f80090142
Certificate serial: 01942445550DB2D23BD6F50301C7EA01B170
Authority key identifier: 23:13:0C:99:AC:7A:A4:08:6C:71:75:71:14:A4:16:3F:80:09:01:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IxMMmax6pAhscXVxFKQWP4AJAUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/5c3ae6-2934-479e-8c2d-8e8d5b3e5586/1/7LeNtT1Py-375udT6tgnEczdaA4.roa
Signing time: Wed 01 Jan 2025 23:48:31 +0000
ROA not before: Wed 01 Jan 2025 23:48:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56347
IP address blocks: 46.175.64.0/20 maxlen: 20
46.175.80.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:55:0d:b2:d2:3b:d6:f5:03:01:c7:ea:01:b1:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23130c99ac7aa4086c71757114a4163f80090142
Validity
Not Before: Jan 1 23:48:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ecb78db53d4fcbedfbe6e753ead82711ccdd680e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:61:6f:e4:0b:b2:07:87:31:a2:54:dd:0e:47:
00:20:db:cd:42:6a:fc:b1:5f:3b:80:a3:98:29:50:
df:74:73:a2:6d:e7:46:27:1e:8d:3e:33:4b:e8:fc:
98:34:80:e0:57:73:ef:19:4d:19:ed:38:a0:af:89:
4e:08:4b:71:56:2c:9e:aa:8f:94:e9:42:70:47:98:
37:09:f1:fc:d0:cc:fa:0b:52:6e:f8:33:1d:f0:1a:
4d:8a:ac:64:80:1a:aa:e6:82:de:e8:17:49:60:d4:
aa:70:8a:10:b2:44:78:37:ca:17:9b:94:4a:b8:d3:
21:97:48:db:d7:af:a9:8f:67:c4:28:4a:f8:47:d7:
15:cc:2b:db:fa:d1:03:59:44:f6:ea:f0:3b:6f:8e:
38:18:7e:3c:05:91:0a:83:49:85:8f:1a:4f:00:93:
dd:56:f4:aa:fe:90:e9:40:76:be:75:6f:c2:b1:0d:
c0:33:32:9c:22:8e:f3:a5:fa:b2:3a:fc:cb:f9:ba:
64:eb:36:83:e7:07:bd:b5:df:ff:71:3c:8a:6a:a1:
a3:b9:64:a5:21:b6:a9:45:48:a3:84:1f:78:74:af:
7f:0d:13:ea:ee:6d:86:98:e4:a7:bd:45:05:b7:3f:
1d:a6:66:96:46:d7:06:ee:d1:a5:fe:20:26:8d:f2:
9d:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:B7:8D:B5:3D:4F:CB:ED:FB:E6:E7:53:EA:D8:27:11:CC:DD:68:0E
X509v3 Authority Key Identifier:
keyid:23:13:0C:99:AC:7A:A4:08:6C:71:75:71:14:A4:16:3F:80:09:01:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IxMMmax6pAhscXVxFKQWP4AJAUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/5c3ae6-2934-479e-8c2d-8e8d5b3e5586/1/7LeNtT1Py-375udT6tgnEczdaA4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/5c3ae6-2934-479e-8c2d-8e8d5b3e5586/1/IxMMmax6pAhscXVxFKQWP4AJAUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.175.64.0-46.175.87.255
Signature Algorithm: sha256WithRSAEncryption
71:3b:69:d8:41:ac:0d:81:44:53:05:2d:ca:b4:fa:af:ed:f2:
31:c7:69:6e:6b:27:19:4d:59:af:c2:a8:b4:e1:a6:93:5b:39:
29:f3:bd:fa:76:65:72:47:a6:b3:13:59:1a:29:48:f8:eb:6d:
e7:44:3f:45:df:8b:9d:96:de:2e:10:64:2e:4d:26:03:37:60:
08:89:cc:9b:d6:0d:9b:ee:13:e4:30:8b:c0:97:13:15:40:0a:
19:c1:01:8d:bb:bc:4e:b6:b6:01:0f:86:81:40:53:ca:87:9b:
73:33:63:03:39:ab:5f:af:5e:39:d1:19:40:15:2a:9a:97:86:
2c:85:8d:33:55:8d:1b:66:39:8e:ed:10:1e:14:8b:a5:be:a4:
23:fc:a7:70:6d:21:00:83:79:c0:91:5a:00:47:d9:5d:9c:24:
03:70:31:ab:a7:43:5e:82:b7:51:0b:60:f6:bc:3c:94:9f:9c:
4e:18:84:bc:7c:50:be:5d:7c:b3:47:f0:53:a4:f3:31:54:24:
0a:75:5d:03:f4:a9:d6:ce:ed:b7:22:de:62:1f:81:79:1f:33:
64:2a:bb:2c:5e:54:23:e8:e5:00:b2:18:df:73:58:f8:aa:b5:
90:71:53:db:87:0c:d0:f0:07:a0:2b:68:5e:74:aa:93:5f:fa:
d1:62:34:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:28:51 2025 by rpki-client