Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/9adfw-3MhzS4peU7oq1guRQ7cCs.roa
File: 9adfw-3MhzS4peU7oq1guRQ7cCs.roa (raw, json)
Hash identifier: 5hXU1jBrtx0rcY0oxqJR4uUBE6NFrZEVimKFrXlY5tQ=
Subject key identifier: F5:A7:5F:C3:ED:CC:87:34:B8:A5:E5:3B:A2:AD:60:B9:14:3B:70:2B
Certificate issuer: /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Certificate serial: 04169A53
Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/9adfw-3MhzS4peU7oq1guRQ7cCs.roa
Signing time: Tue 28 Jun 2022 05:53:20 +0000
ROA not before: Tue 28 Jun 2022 05:53:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2118
IP address blocks: 46.23.98.0/24 maxlen: 24
46.23.96.0/24 maxlen: 24
46.23.99.0/24 maxlen: 24
46.23.108.0/24 maxlen: 24
46.23.111.0/24 maxlen: 24
88.151.198.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68590163 (0x4169a53)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Validity
Not Before: Jun 28 05:53:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f5a75fc3edcc8734b8a5e53ba2ad60b9143b702b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:7a:1d:7d:80:d7:ad:8a:6e:e8:27:0b:c2:3a:
5f:0c:e5:8b:d7:e0:a4:d3:79:3c:91:1d:88:90:f3:
24:42:d9:e7:8b:44:15:e3:31:c8:c2:f8:08:6b:dc:
67:d2:43:fe:d8:cc:92:4f:ab:1f:b9:13:96:b5:79:
49:61:bb:f8:1b:89:36:af:69:8f:7c:ef:76:61:2a:
03:de:8b:75:99:26:d7:36:49:ae:87:49:b6:e8:1e:
6a:79:15:ec:1c:e6:98:4f:ac:18:86:d8:d4:b8:2d:
16:4f:d6:9c:55:8e:e8:d6:cb:6b:da:e3:1f:52:4d:
7a:8e:30:3d:bb:68:c6:d8:75:f0:b3:a7:82:0b:1c:
e7:af:14:67:f5:04:4d:2c:77:52:df:21:08:d6:1d:
fd:a8:b3:de:10:95:67:77:fa:a3:35:21:92:c7:1f:
30:87:ef:d0:c1:72:f5:6c:a4:e3:81:21:32:f7:9b:
ed:f2:cb:4b:05:28:34:45:0d:0a:7b:4b:db:b5:ca:
65:3f:06:23:5b:74:b8:66:e5:0d:3a:60:26:34:5f:
7c:2b:18:fb:2d:a5:4a:11:b6:b0:e7:78:8e:ea:b4:
92:a0:4c:b3:f6:80:ed:e2:08:be:ba:60:64:a6:f9:
64:bc:07:ed:e1:e4:b1:ed:01:49:61:ce:b1:74:3d:
7f:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:A7:5F:C3:ED:CC:87:34:B8:A5:E5:3B:A2:AD:60:B9:14:3B:70:2B
X509v3 Authority Key Identifier:
keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/9adfw-3MhzS4peU7oq1guRQ7cCs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.23.96.0/24
46.23.98.0/23
46.23.108.0/24
46.23.111.0/24
88.151.198.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:f6:ff:41:10:92:b6:3f:6a:1a:00:88:c5:ad:57:ef:cf:74:
0d:d3:5f:73:9f:a3:dd:1a:fa:a3:66:58:58:e8:94:2e:bd:04:
28:da:88:a0:f0:be:de:4b:59:47:c9:9f:59:2a:c1:ba:8b:36:
98:cf:19:02:12:99:c2:3c:80:a2:65:cb:ae:ce:97:5e:b8:3d:
1d:22:24:34:cc:b8:7b:e5:9d:f2:8e:b4:00:ee:d1:5e:79:de:
be:c4:bc:4b:8d:08:d9:64:a5:af:a2:87:bf:b9:af:d9:ec:37:
31:1a:a6:5f:1c:61:65:90:58:aa:aa:62:30:9a:0b:21:89:48:
da:62:5b:13:3f:f2:a6:40:d1:d3:8e:40:4a:44:06:32:b4:6a:
14:99:20:4c:a5:dd:02:28:29:bf:97:1c:87:63:84:f8:3b:8e:
92:3a:96:10:c2:81:3b:bd:04:62:48:86:ef:56:73:b2:37:99:
57:9a:f0:7b:ac:76:41:d0:71:63:10:25:16:f4:83:a4:33:5b:
07:30:a4:c6:d9:67:6c:51:15:7a:73:42:7e:1a:d6:86:0b:f4:
1d:da:72:0d:38:6f:8f:b2:ea:4e:25:f2:0a:b9:2e:ce:4d:39:
d6:3a:fc:cd:15:da:c6:ab:a6:9e:79:85:a2:64:bf:05:fa:3c:
1a:35:98:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:45:04 2025 by rpki-client