Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/pWuQiH7oCzI0HQTOK5N0XFIvpC0.roa
File: pWuQiH7oCzI0HQTOK5N0XFIvpC0.roa (raw, json)
Hash identifier: i9S7NxmicTLIf3yhZDDOTywtRB20Rf0o941WAv3hGkY=
Subject key identifier: A5:6B:90:88:7E:E8:0B:32:34:1D:04:CE:2B:93:74:5C:52:2F:A4:2D
Certificate issuer: /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Certificate serial: 019420D5E1BB331CCEC5E49004B65B6BCBB0
Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/pWuQiH7oCzI0HQTOK5N0XFIvpC0.roa
Signing time: Wed 01 Jan 2025 07:47:55 +0000
ROA not before: Wed 01 Jan 2025 07:47:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208685
IP address blocks: 46.23.99.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:e1:bb:33:1c:ce:c5:e4:90:04:b6:5b:6b:cb:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Validity
Not Before: Jan 1 07:47:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a56b90887ee80b32341d04ce2b93745c522fa42d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:0e:d0:a4:84:cc:ae:4b:69:5f:3b:9f:9c:8a:
0c:ed:38:a5:9f:c6:08:0c:85:a7:15:43:1e:09:c7:
c3:c4:6b:3e:56:71:c5:7e:49:42:96:71:6b:ae:0f:
e0:f2:07:38:e7:42:b5:a7:1c:d9:fd:42:3c:28:98:
ee:00:a4:c2:05:a5:28:68:98:72:fe:73:c6:d2:be:
ba:d2:13:11:8f:b8:70:46:20:3e:7b:fd:e2:28:69:
78:d9:4a:8d:a1:0b:30:2d:17:cb:07:aa:8c:4b:fe:
ee:29:f9:dc:f6:d8:ea:e8:6d:27:01:58:cb:90:bd:
20:af:1d:30:af:40:64:55:d1:4f:d9:ab:26:ce:ad:
15:12:24:41:bb:82:2f:6a:e3:d6:94:96:9d:b1:7f:
6c:b7:17:0c:fa:3a:d6:18:3b:dc:3a:06:f7:3c:3e:
73:27:c8:4b:bf:a2:45:e9:eb:7a:53:b5:6b:5a:6b:
ed:bf:a9:ed:a4:9e:a6:ca:bd:7d:7d:ce:3d:b0:0a:
90:c5:ce:64:44:d5:ff:27:e4:fa:8a:8b:fe:1f:4a:
8a:b4:33:0a:85:26:65:5b:6a:49:14:52:9f:97:68:
81:7d:cf:68:97:c7:70:38:75:d4:2c:c6:71:7c:f4:
8b:76:f7:63:14:71:2a:45:8f:c3:ac:18:2c:43:5a:
46:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:6B:90:88:7E:E8:0B:32:34:1D:04:CE:2B:93:74:5C:52:2F:A4:2D
X509v3 Authority Key Identifier:
keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/pWuQiH7oCzI0HQTOK5N0XFIvpC0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.23.99.0/24
Signature Algorithm: sha256WithRSAEncryption
02:71:f6:01:86:2f:2c:a0:95:43:d8:7f:bd:40:0e:d8:f3:91:
45:88:41:7d:c8:3c:44:e8:dd:d1:ca:f4:0c:80:22:44:9d:a2:
c4:7f:13:99:b3:dc:fc:d2:f4:5a:93:ee:7b:65:7e:e5:d9:2e:
99:17:e4:d4:0a:b5:89:51:75:26:0f:d2:f1:a4:94:42:f4:85:
53:90:97:25:9a:43:30:d5:f4:d3:ae:a0:17:a8:f1:93:03:e0:
8a:a5:6f:d8:9c:e2:b1:1a:64:95:98:01:f0:4d:53:43:c4:48:
e9:b4:1e:dc:ec:2a:dd:b4:8d:86:94:11:fe:ae:78:96:20:29:
dc:90:18:c5:c1:a6:aa:8b:f8:17:46:9f:17:a5:f1:cb:15:af:
aa:34:97:5d:42:26:dc:68:50:5b:50:e2:00:29:be:81:09:4c:
9b:15:69:bb:f4:af:44:04:f5:5d:5c:93:ed:40:4a:aa:89:be:
21:28:3e:33:8c:af:aa:21:69:c4:a8:f4:47:a6:6c:ce:a1:3a:
7d:f7:1f:23:04:5d:3e:a7:f7:83:4a:43:fa:25:e0:dc:44:c8:
f2:26:62:94:32:8d:1c:b2:38:c6:11:50:6e:26:7f:a0:12:a0:
09:28:b3:3d:4b:fd:c4:92:20:52:7a:58:21:13:e9:df:1b:0e:
7b:98:af:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:34:28 2025 by rpki-client