Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/f34f2b-3662-41c4-8270-92ed2a000f1f/1/DxifjliCAIMd-eDzduM7cNAzSqk.roa
File: DxifjliCAIMd-eDzduM7cNAzSqk.roa (raw, json)
Hash identifier: k6vDWiqYMoUqtaBDC4CmzDCftBkvIoXMd8Al1paV0vg=
Subject key identifier: 0F:18:9F:8E:58:82:00:83:1D:F9:E0:F3:76:E3:3B:70:D0:33:4A:A9
Certificate issuer: /CN=c7aef2ab3f2e9d9ac01f727f730af7df1d04180f
Certificate serial: 019427B5E4BECA247392A83EF34DF2825017
Authority key identifier: C7:AE:F2:AB:3F:2E:9D:9A:C0:1F:72:7F:73:0A:F7:DF:1D:04:18:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x67yqz8unZrAH3J_cwr33x0EGA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/f34f2b-3662-41c4-8270-92ed2a000f1f/1/DxifjliCAIMd-eDzduM7cNAzSqk.roa
Signing time: Thu 02 Jan 2025 15:50:19 +0000
ROA not before: Thu 02 Jan 2025 15:50:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49106
IP address blocks: 46.150.160.0/19 maxlen: 19
46.150.160.0/20 maxlen: 20
46.150.160.0/21 maxlen: 21
46.150.160.0/22 maxlen: 22
46.150.160.0/23 maxlen: 23
46.150.160.0/24 maxlen: 24
46.150.176.0/20 maxlen: 20
62.122.192.0/21 maxlen: 21
62.122.192.0/22 maxlen: 22
62.122.192.0/24 maxlen: 24
62.122.198.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:e4:be:ca:24:73:92:a8:3e:f3:4d:f2:82:50:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7aef2ab3f2e9d9ac01f727f730af7df1d04180f
Validity
Not Before: Jan 2 15:50:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0f189f8e588200831df9e0f376e33b70d0334aa9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:25:ee:dd:08:aa:60:37:71:64:92:9b:16:38:
64:19:25:39:1e:85:98:73:1a:c4:94:73:5e:4c:12:
9f:b8:0f:12:06:70:ce:d9:70:e9:d0:05:1d:f2:e6:
97:49:bb:84:53:07:ad:9f:68:65:74:26:1b:cc:ef:
69:51:89:95:40:da:29:62:f3:2b:24:cf:d8:1f:4f:
24:7a:85:c1:e0:6d:c8:5f:fe:58:50:1d:88:df:2d:
af:aa:ec:ea:5d:c2:63:9f:f6:6d:69:be:86:c1:65:
da:de:94:0b:53:83:c0:08:21:a3:27:c7:ca:f0:ee:
92:c2:8c:05:bb:7d:c1:09:0c:5b:0f:f3:e1:31:31:
cc:97:7a:98:55:4a:4c:8a:80:93:93:f8:e5:2d:eb:
c3:56:ab:84:7c:f3:4a:c0:b4:2d:f1:28:df:ee:00:
33:c7:82:a0:27:d5:02:88:6c:89:27:f6:3b:68:fa:
63:40:7f:1c:f0:eb:f2:af:f1:fb:1e:41:f3:dc:c0:
90:50:fe:89:51:32:58:17:c3:6a:49:9a:36:09:1f:
33:16:ec:be:ab:6e:30:26:52:86:38:be:52:d7:09:
c8:f0:69:da:19:c0:12:af:13:cd:0c:68:18:f6:45:
a9:e3:cc:a6:ae:6a:ef:3a:2e:92:f1:7b:f4:65:6a:
32:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:18:9F:8E:58:82:00:83:1D:F9:E0:F3:76:E3:3B:70:D0:33:4A:A9
X509v3 Authority Key Identifier:
keyid:C7:AE:F2:AB:3F:2E:9D:9A:C0:1F:72:7F:73:0A:F7:DF:1D:04:18:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x67yqz8unZrAH3J_cwr33x0EGA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/f34f2b-3662-41c4-8270-92ed2a000f1f/1/DxifjliCAIMd-eDzduM7cNAzSqk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/f34f2b-3662-41c4-8270-92ed2a000f1f/1/x67yqz8unZrAH3J_cwr33x0EGA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.150.160.0/19
62.122.192.0/21
Signature Algorithm: sha256WithRSAEncryption
c2:33:96:02:ef:4a:26:8c:5e:30:42:82:04:d4:fc:63:21:44:
59:4b:52:0f:ff:20:04:e3:c3:4d:8b:9f:3c:6f:56:49:b9:81:
e9:69:88:e4:24:5d:23:89:96:22:64:8c:e8:be:94:e3:59:5c:
d0:08:3a:6a:61:54:ba:c9:ed:af:e6:49:aa:a0:7f:22:4f:99:
4e:9a:6f:34:51:69:f0:85:52:e6:27:0f:98:8c:4d:f2:94:69:
3a:a2:7e:74:f8:db:33:93:79:25:59:e7:d0:9d:57:ba:35:88:
6c:17:15:d1:fd:88:0d:27:98:af:3f:08:67:c3:eb:10:08:d6:
96:03:2d:25:c3:e1:98:8b:c2:b0:ca:7c:6e:e5:7a:b8:5d:8d:
c1:16:f8:2a:2e:ce:ba:b1:a4:97:e1:71:71:b2:ab:52:a7:c2:
4c:08:37:6a:59:03:5a:e0:c8:88:d3:b0:6b:fa:2d:25:c0:1e:
3b:2e:78:a1:aa:cf:bc:44:09:8d:d3:31:76:ab:dc:0c:56:cd:
1b:c2:40:c4:02:0f:06:46:35:7d:30:fc:6f:e3:c6:48:0b:64:
00:ac:5f:36:81:11:84:96:3e:03:ea:92:ed:f3:45:ee:d6:e7:
ef:3e:a5:12:1f:a1:c6:f4:8f:84:c9:c9:9d:ea:74:c6:99:93:
4d:37:ea:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:56:38 2025 by rpki-client