Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/kaxdAObFREj1plwjyMiF5Zs5InE.roa
File: kaxdAObFREj1plwjyMiF5Zs5InE.roa (raw, json)
Hash identifier: prfbiqk7+xfPmYDX6xrU2JEX2/XpeVkIfyHVMg9mCR8=
Subject key identifier: 91:AC:5D:00:E6:C5:44:48:F5:A6:5C:23:C8:C8:85:E5:9B:39:22:71
Certificate issuer: /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Certificate serial: 0186B681BBFA5BD1C2029E76E44353C1B46F
Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/kaxdAObFREj1plwjyMiF5Zs5InE.roa
Signing time: Mon 06 Mar 2023 10:40:00 +0000
ROA not before: Mon 06 Mar 2023 10:40:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50738
IP address blocks: 46.23.96.0/24 maxlen: 24
46.23.98.0/24 maxlen: 24
46.23.109.0/24 maxlen: 24
5.178.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:b6:81:bb:fa:5b:d1:c2:02:9e:76:e4:43:53:c1:b4:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Validity
Not Before: Mar 6 10:40:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=91ac5d00e6c54448f5a65c23c8c885e59b392271
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:05:4d:0b:94:27:ac:99:b5:b1:90:7c:ec:f0:
8e:1d:0f:75:18:c4:ac:34:9c:b9:db:d3:d2:ec:6c:
af:8f:9d:98:70:6d:bd:c3:89:dd:f2:19:40:39:7a:
23:cf:96:ff:11:cc:10:de:a9:96:8a:d3:c9:dc:db:
f5:cf:64:d2:f4:57:17:42:8d:0d:76:66:11:03:12:
7b:c8:00:e6:8d:c3:25:98:d6:d8:07:e9:99:a4:c5:
da:bf:8d:6b:68:1c:83:4b:2d:8f:c7:2a:86:77:be:
65:b2:66:22:eb:03:88:e9:bd:c2:3d:bd:06:b7:5f:
8a:8f:31:9a:d0:c8:e1:50:2f:ec:a2:dd:16:90:d2:
97:6b:da:9b:7e:be:68:1b:03:66:81:73:b7:3b:16:
15:86:8e:1e:25:6e:a8:13:57:4a:aa:40:1e:18:8f:
81:66:fc:0b:ed:ff:4c:60:2e:f3:84:1b:d3:3c:ca:
83:3f:28:57:dd:54:9e:56:83:db:da:2e:36:88:00:
f9:23:68:41:82:32:53:5b:dd:13:f1:7a:00:82:40:
49:10:ca:0e:f2:a0:cb:05:07:bd:c5:c3:87:2e:ff:
8f:85:0a:58:42:64:56:16:15:a0:11:0d:87:da:0a:
a1:2c:ec:87:ca:c4:cb:6a:c3:c9:2c:0f:fd:af:92:
ae:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:AC:5D:00:E6:C5:44:48:F5:A6:5C:23:C8:C8:85:E5:9B:39:22:71
X509v3 Authority Key Identifier:
keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/kaxdAObFREj1plwjyMiF5Zs5InE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.178.3.0/24
46.23.96.0/24
46.23.98.0/24
46.23.109.0/24
Signature Algorithm: sha256WithRSAEncryption
60:aa:84:23:d8:09:67:6e:8c:ec:10:22:25:9a:b0:ef:c2:4f:
c8:cf:eb:00:d2:e4:2c:63:1a:99:e6:ab:40:7e:3d:d4:56:09:
ac:4d:6b:fe:3f:df:ca:80:20:fa:43:fe:fa:85:32:f2:e5:c6:
40:8f:75:c9:f3:85:47:da:2a:6d:1b:b4:0e:6f:ac:3a:81:e9:
a8:5e:1e:73:0f:77:ca:0e:c1:fa:eb:be:1a:a8:22:ae:ed:7c:
22:cf:ba:75:0e:1f:1a:44:0d:19:44:8e:bc:fd:9e:30:6e:42:
df:9d:bf:72:91:3d:71:c2:39:8b:72:77:3f:93:b3:db:c5:96:
8c:76:c3:fa:e5:fd:69:d5:fd:b0:ba:d2:63:f3:08:05:10:f0:
59:a0:cf:40:36:ce:82:83:ad:90:f1:32:88:1e:55:42:18:7a:
20:ea:dd:f7:fa:04:76:f0:15:ff:23:7d:24:07:46:96:66:bc:
42:01:08:0e:df:1f:8d:36:74:a3:ce:57:8f:90:ea:ae:fd:3a:
7b:cd:1c:fb:e2:82:e5:fb:73:a8:72:ac:ad:fa:42:3a:3a:f3:
84:7f:4f:83:02:7e:bf:cb:df:5b:05:7c:0a:68:ca:e0:29:c5:
9a:a5:bf:53:ac:43:6e:23:3c:7f:7e:71:4b:36:49:21:e0:c2:
fa:45:78:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:46:00 2025 by rpki-client