Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/WabN-J1FDu6W3p8yB6HeIVyu7fM.roa
File: WabN-J1FDu6W3p8yB6HeIVyu7fM.roa (raw, json)
Hash identifier: 4LNC/qP52AV9uC8vUXLHv0auNiYxyYlw8sJ9ArCTUpg=
Subject key identifier: 59:A6:CD:F8:9D:45:0E:EE:96:DE:9F:32:07:A1:DE:21:5C:AE:ED:F3
Certificate issuer: /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Certificate serial: 019420D5DC6FAD4F96BFF5206AFF9849B30A
Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/WabN-J1FDu6W3p8yB6HeIVyu7fM.roa
Signing time: Wed 01 Jan 2025 07:47:53 +0000
ROA not before: Wed 01 Jan 2025 07:47:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49747
IP address blocks: 46.23.111.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:dc:6f:ad:4f:96:bf:f5:20:6a:ff:98:49:b3:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Validity
Not Before: Jan 1 07:47:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=59a6cdf89d450eee96de9f3207a1de215caeedf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:c7:11:29:d3:b6:28:ab:88:85:62:55:2c:a1:
1b:d8:f2:6f:37:3e:fe:e7:e9:e2:88:eb:2a:09:72:
32:60:94:fc:15:55:e5:20:47:8f:bc:a0:2c:9d:ae:
1b:a6:9b:16:8f:21:75:01:87:f5:fe:09:d0:4c:59:
72:e2:e0:be:87:1c:86:ce:e7:bd:e9:0f:92:d5:6f:
00:27:5b:84:7b:76:ae:53:65:c9:4f:a5:63:4b:3a:
61:03:c5:2d:d6:62:ff:22:b7:71:dc:0c:ae:70:cd:
5e:da:9a:f9:3e:b8:be:c2:be:79:47:ac:b4:e6:88:
37:09:17:d0:d7:29:ae:ea:bd:03:b1:aa:c1:c1:30:
4f:ec:06:5e:20:53:c4:8e:01:ce:75:12:ba:34:28:
c7:98:9c:2e:f2:c3:61:45:70:e6:77:55:21:72:cc:
be:08:ac:a6:4e:d4:e9:12:0f:4e:00:fb:85:ba:1e:
a5:c1:af:df:a7:49:69:30:b1:bf:af:54:e9:fd:d6:
38:d0:08:f2:c8:4b:7e:74:b3:53:35:96:0e:2e:b1:
89:95:7b:ee:79:65:a7:33:31:ba:1a:d7:c1:5b:6f:
34:d6:de:6b:37:b1:20:6a:74:90:63:94:9d:c9:a9:
68:8b:71:b6:03:7d:c7:91:86:40:94:16:af:fc:9d:
a4:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:A6:CD:F8:9D:45:0E:EE:96:DE:9F:32:07:A1:DE:21:5C:AE:ED:F3
X509v3 Authority Key Identifier:
keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/WabN-J1FDu6W3p8yB6HeIVyu7fM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.23.111.0/24
Signature Algorithm: sha256WithRSAEncryption
81:12:b8:77:d5:52:56:68:ca:18:4a:15:18:25:49:fd:48:bb:
71:95:44:4e:5e:29:db:1d:c8:b8:04:0b:99:eb:91:9f:e7:21:
5f:33:fc:a3:40:89:6d:e1:57:70:f6:37:f7:5f:18:0c:5e:b3:
87:31:6e:5f:ce:8e:66:53:99:3c:60:d8:f4:54:88:c5:af:36:
ce:88:54:13:72:a9:f8:ba:3f:45:22:57:4c:a2:a1:fd:c4:e6:
db:45:03:71:8d:ee:64:7b:7b:f3:d7:6c:ad:7a:93:17:b6:9e:
7f:51:f8:78:6c:ce:6e:9c:18:98:ac:38:3a:b0:3b:73:54:6b:
b2:b6:94:a2:11:e5:13:3b:cb:7f:44:4a:d2:71:15:c7:df:8b:
3e:82:7e:fc:81:9b:4e:7a:65:fe:a3:e7:06:a8:d8:d4:dd:dc:
78:fd:80:95:a2:8c:a4:37:2e:7e:f7:39:84:fe:80:91:f6:a8:
0d:6c:95:87:1a:95:ff:4b:91:b9:c4:46:9b:ad:0c:47:2c:5c:
e0:c9:de:15:4c:8c:b3:a1:c0:be:d2:2d:87:01:c3:af:1e:f9:
d9:bf:85:75:c4:94:66:e5:7a:64:18:dd:f0:40:fd:40:2e:97:
ba:c2:5b:8c:2d:a1:ed:ad:b6:bf:0d:e5:cc:75:45:fc:e3:22:
95:d0:d0:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:32:31 2025 by rpki-client