Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/iiEWkUxoXvnWVydpu0dagCSQVpg.roa
File: iiEWkUxoXvnWVydpu0dagCSQVpg.roa (raw, json)
Hash identifier: OBksw9xO5INaqvopdFNxLktTwvc18i++tsqNIqF6kb0=
Subject key identifier: 8A:21:16:91:4C:68:5E:F9:D6:57:27:69:BB:47:5A:80:24:90:56:98
Certificate issuer: /CN=c6e1c8c65c86e8d26ddbeb68658a39a7a8e27866
Certificate serial: 0194F3A58D3EFA52017AC3EB78C6A51D1B5D
Authority key identifier: C6:E1:C8:C6:5C:86:E8:D2:6D:DB:EB:68:65:8A:39:A7:A8:E2:78:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xuHIxlyG6NJt2-toZYo5p6jieGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/iiEWkUxoXvnWVydpu0dagCSQVpg.roa
Signing time: Tue 11 Feb 2025 06:15:00 +0000
ROA not before: Tue 11 Feb 2025 06:15:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214922
IP address blocks: 46.34.163.0/24 maxlen: 24
89.47.197.0/24 maxlen: 24
89.47.198.0/24 maxlen: 24
89.47.200.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:f3:a5:8d:3e:fa:52:01:7a:c3:eb:78:c6:a5:1d:1b:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6e1c8c65c86e8d26ddbeb68658a39a7a8e27866
Validity
Not Before: Feb 11 06:15:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8a2116914c685ef9d6572769bb475a8024905698
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:db:97:80:6f:31:d9:73:54:ea:e6:da:a3:31:
db:65:51:f2:89:8e:d3:be:ea:ba:f1:b6:99:14:b9:
4b:64:b1:98:1c:e6:d8:05:a5:54:7f:5a:f8:e0:d2:
d1:2f:4c:b8:da:46:57:35:91:ba:b5:6a:ae:3f:37:
dd:97:85:35:b7:f9:5f:37:0b:bf:a5:84:ca:44:15:
13:2b:a4:4d:9f:14:c8:78:11:1f:4f:54:4b:40:c2:
3e:ff:24:ad:e7:a0:34:13:8b:78:1c:cd:ef:6e:e7:
5b:64:7b:64:7d:52:a0:19:49:d6:c6:92:0c:c7:41:
40:bb:7a:08:44:52:0e:91:01:af:c9:64:38:c1:58:
d4:33:1e:a8:e2:a6:8f:6c:6d:97:cb:d8:b4:31:a0:
ce:ed:26:c2:14:ed:41:8b:43:cf:e7:e4:c9:3e:62:
c2:67:cf:9f:32:52:d8:72:4d:ad:80:bb:63:7f:77:
0c:2b:e8:2b:fa:7d:81:ca:7b:8d:26:53:df:e3:17:
59:f7:13:5f:be:64:6b:00:75:cd:8d:4b:4a:f6:9f:
db:d2:ff:bc:ec:ab:51:21:86:db:11:76:11:d8:2b:
b2:f1:4e:2a:76:bc:f7:11:8e:b5:64:1e:4e:36:38:
99:b9:a3:86:d4:60:cb:e7:7c:25:dd:3f:5b:47:92:
5c:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:21:16:91:4C:68:5E:F9:D6:57:27:69:BB:47:5A:80:24:90:56:98
X509v3 Authority Key Identifier:
keyid:C6:E1:C8:C6:5C:86:E8:D2:6D:DB:EB:68:65:8A:39:A7:A8:E2:78:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xuHIxlyG6NJt2-toZYo5p6jieGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/iiEWkUxoXvnWVydpu0dagCSQVpg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/xuHIxlyG6NJt2-toZYo5p6jieGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.34.163.0/24
89.47.197.0-89.47.198.255
89.47.200.0/24
Signature Algorithm: sha256WithRSAEncryption
64:2d:f0:90:95:1e:15:2b:42:c7:37:f9:20:7b:28:46:e8:49:
26:43:8b:3e:a1:6c:14:76:ad:8a:b1:94:63:67:9b:f0:5d:53:
14:42:e3:e1:25:0f:f5:77:35:46:1f:2a:76:0d:90:6e:b4:3c:
b2:04:d8:8f:2d:1c:73:d5:0f:7f:64:63:15:fc:1e:2a:8c:91:
a3:ec:23:dc:0f:78:57:be:af:c3:88:4c:2d:57:25:2a:89:23:
b4:37:bd:fe:4d:9d:87:b2:04:ba:ed:1c:d2:f3:13:bb:66:99:
95:1e:45:c7:fa:fe:0e:53:7c:88:c8:ab:01:2d:1a:31:c4:37:
4f:d4:a1:a4:e1:cb:88:16:91:d5:59:82:6a:e5:73:6b:89:8a:
d5:27:ba:1c:2f:7c:00:48:7f:01:d0:56:b7:b1:9d:ef:d0:b9:
22:af:ae:61:fa:da:7e:38:39:87:f4:28:d9:8b:32:f8:51:e3:
27:0c:cf:7e:c8:4b:e1:43:6e:d7:da:f6:b5:e5:fa:e8:8e:98:
73:b6:56:e7:19:7f:64:14:b0:ed:6a:6b:c5:c4:b5:5a:46:9f:
7e:55:a4:d1:e8:ab:04:79:c8:b7:3c:07:94:5e:c1:5f:71:5a:
15:3c:d5:c5:42:c6:52:43:3e:c3:53:85:eb:70:46:dc:4a:9f:
fb:6a:0c:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:34:20 2025 by rpki-client