Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/AW8PieFMQBoi3APwxlc0tINpN5k.roa
File: AW8PieFMQBoi3APwxlc0tINpN5k.roa (raw, json)
Hash identifier: GJZom47spxp3fCx1v/TjnUwK4CUloOxC4Cgu7jXnsIs=
Subject key identifier: 01:6F:0F:89:E1:4C:40:1A:22:DC:03:F0:C6:57:34:B4:83:69:37:99
Certificate issuer: /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Certificate serial: 01859BE69994C214D7A5486FF658B4E8732A
Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/AW8PieFMQBoi3APwxlc0tINpN5k.roa
Signing time: Tue 10 Jan 2023 13:37:39 +0000
ROA not before: Tue 10 Jan 2023 13:37:39 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208485
IP address blocks: 46.23.98.0/24 maxlen: 24
46.23.96.0/24 maxlen: 24
46.23.99.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:9b:e6:99:94:c2:14:d7:a5:48:6f:f6:58:b4:e8:73:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Validity
Not Before: Jan 10 13:37:39 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=016f0f89e14c401a22dc03f0c65734b483693799
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:8b:38:b0:ce:32:3d:99:75:f0:5a:27:30:dc:
e7:a0:12:31:1d:74:4c:40:1a:c8:7f:9b:f8:64:fc:
f2:84:26:d2:37:ef:0a:d9:e4:23:25:ee:3e:00:cf:
b1:b7:94:cd:9b:ea:e1:4b:92:df:30:2a:48:20:d2:
7d:1d:77:f2:71:0d:1e:3d:f4:7f:15:54:18:55:78:
9d:e6:57:38:81:0f:cf:d9:39:db:bc:12:af:68:e8:
a8:42:21:47:90:36:bf:ef:36:e1:c9:a0:26:9a:35:
97:5d:43:ee:d9:52:a7:0e:17:d5:ef:e5:de:a6:10:
70:53:10:fe:65:e1:44:33:fd:46:2e:8c:19:02:58:
19:70:b2:40:24:21:cf:5e:3a:c6:af:a1:a0:aa:4f:
0b:7e:65:fa:c3:fe:83:55:1e:5b:9a:19:86:e5:f7:
2e:d6:11:dc:7f:84:a0:9d:12:fe:a8:7b:4a:2a:94:
e3:87:29:03:75:c0:eb:52:2a:2a:48:86:98:f3:9e:
b0:7d:7d:94:f4:cf:8f:87:49:25:9f:f9:8d:3f:e7:
be:df:2c:4b:0a:6a:6a:6e:ed:69:5b:a8:59:b7:d6:
09:67:0c:22:9b:a2:f5:bd:28:33:03:81:bb:2b:1e:
8f:34:e3:38:f7:2b:26:1b:ea:eb:90:6a:a1:d0:0e:
f4:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:6F:0F:89:E1:4C:40:1A:22:DC:03:F0:C6:57:34:B4:83:69:37:99
X509v3 Authority Key Identifier:
keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/AW8PieFMQBoi3APwxlc0tINpN5k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.23.96.0/24
46.23.98.0/23
Signature Algorithm: sha256WithRSAEncryption
22:4b:3d:52:ca:8d:a2:4f:bb:88:83:ab:d1:36:ae:cc:cb:dc:
c0:a4:36:bb:e9:50:26:e9:06:21:87:d0:d1:ff:a0:fb:6a:21:
41:9d:43:a0:46:64:ab:88:88:83:e2:64:20:ec:cc:b5:0a:59:
82:77:45:83:da:fb:55:28:d0:1e:57:d0:06:89:85:8d:43:6b:
b4:a2:2c:1d:28:fd:0c:4a:e8:c3:df:44:76:2d:9d:64:ed:1d:
ec:4c:7a:b8:39:c9:77:47:04:4e:64:ed:31:8f:e0:96:2f:8d:
f0:fe:9a:0e:93:ba:88:57:74:7c:f9:a4:c3:98:4a:d5:43:5c:
16:65:80:c2:fd:1e:a0:eb:8e:5f:69:b1:b7:dd:04:62:98:e9:
2a:d4:ea:52:63:b6:9c:83:93:de:db:f0:a6:7e:ba:20:39:1d:
1c:57:ae:22:9d:76:02:64:de:1a:9a:7b:26:54:e7:bb:f8:12:
cd:d6:da:d0:b8:64:0f:f3:f3:53:10:c4:69:cd:dc:7e:3a:52:
8a:73:d2:cb:d8:29:30:c5:42:e4:e7:c1:53:29:40:1a:2e:25:
3f:ce:f0:57:8a:e0:b5:61:df:3b:ce:35:0a:8a:fe:98:2c:67:
30:a1:64:45:6a:a6:7e:3e:5f:27:31:a9:91:58:f0:9d:26:d8:
f6:05:68:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:31:54 2025 by rpki-client