Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/376ccd-defa-4028-af1c-b99ce30d839f/1/m-uxR0_8eTmWZhstKF2AykIOlW0.roa
File: m-uxR0_8eTmWZhstKF2AykIOlW0.roa (raw, json)
Hash identifier: nD9JKASfoFUEslOSfBGoZNc0ukQrH6qex/4nKwJQ1Us=
Subject key identifier: 9B:EB:B1:47:4F:FC:79:39:96:66:1B:2D:28:5D:80:CA:42:0E:95:6D
Certificate issuer: /CN=ca707e086640056bc271d5d2b3e24d01440baa04
Certificate serial: 019428261D077BACF798E0E79C4DF5204BE0
Authority key identifier: CA:70:7E:08:66:40:05:6B:C2:71:D5:D2:B3:E2:4D:01:44:0B:AA:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ynB-CGZABWvCcdXSs-JNAUQLqgQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/376ccd-defa-4028-af1c-b99ce30d839f/1/m-uxR0_8eTmWZhstKF2AykIOlW0.roa
Signing time: Thu 02 Jan 2025 17:52:53 +0000
ROA not before: Thu 02 Jan 2025 17:52:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 400040
IP address blocks: 212.46.46.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:26:1d:07:7b:ac:f7:98:e0:e7:9c:4d:f5:20:4b:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca707e086640056bc271d5d2b3e24d01440baa04
Validity
Not Before: Jan 2 17:52:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9bebb1474ffc793996661b2d285d80ca420e956d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:f1:44:ec:42:77:8c:e8:86:6f:a7:3b:cb:7b:
fc:bd:3a:03:60:66:19:b2:03:66:4b:54:81:4c:7b:
3d:4a:8a:7b:b3:39:31:d4:74:f6:d3:1b:69:bd:0f:
71:b4:03:e0:3b:6b:22:dd:c7:21:33:57:c7:20:7f:
36:34:07:4e:d7:64:c0:b1:89:71:27:dd:f4:c8:cc:
aa:7e:24:20:5c:34:30:81:4b:e0:2b:3c:6a:a8:8f:
42:51:e4:8b:5f:d3:ab:72:d8:bd:70:10:12:eb:58:
60:62:66:6e:25:f9:bb:99:1d:97:e6:aa:e3:04:69:
48:09:13:c8:45:25:dc:00:2e:ea:2a:c5:c8:e2:4f:
59:3a:7e:14:18:17:a2:28:3d:fe:f7:06:f3:9b:a4:
b0:6a:6c:5c:0e:3c:48:8c:4e:6c:88:2f:ba:57:8a:
00:f1:87:1c:01:c1:05:14:22:de:cb:61:72:83:29:
77:06:db:10:d2:c9:0b:7f:a6:11:d1:8a:c2:ce:4e:
58:0e:d5:e4:47:c1:16:e9:14:8c:55:df:68:e6:6b:
a2:6c:43:33:5d:d9:ea:9d:9b:4a:a8:8e:ef:d4:74:
9b:0b:2f:bd:bc:0d:68:bd:7a:39:60:b2:e7:f1:a8:
8c:21:ba:a9:8e:07:c2:4b:ea:c1:1c:ab:e2:1f:b3:
77:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:EB:B1:47:4F:FC:79:39:96:66:1B:2D:28:5D:80:CA:42:0E:95:6D
X509v3 Authority Key Identifier:
keyid:CA:70:7E:08:66:40:05:6B:C2:71:D5:D2:B3:E2:4D:01:44:0B:AA:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ynB-CGZABWvCcdXSs-JNAUQLqgQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/376ccd-defa-4028-af1c-b99ce30d839f/1/m-uxR0_8eTmWZhstKF2AykIOlW0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/376ccd-defa-4028-af1c-b99ce30d839f/1/ynB-CGZABWvCcdXSs-JNAUQLqgQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.46.46.0/24
Signature Algorithm: sha256WithRSAEncryption
03:a2:cf:24:cd:5d:4b:f6:24:e1:41:e8:51:7f:03:b8:48:cc:
f2:a0:ab:65:39:b4:69:b5:a5:32:48:b8:46:a1:93:9a:11:34:
7c:a3:3a:93:93:8b:d7:3b:08:81:da:e1:fb:8f:dc:a3:cb:ad:
87:45:da:19:79:5e:96:d3:a9:0e:89:d4:0c:32:9a:b9:11:b4:
4f:15:b9:9c:da:36:4a:b0:33:51:a6:5f:91:f7:5b:a2:25:f8:
bf:45:14:36:26:b7:b1:06:1f:e8:57:2e:66:83:6c:de:08:49:
fe:52:6d:70:8a:a4:20:36:41:2d:44:58:a0:de:7f:56:a7:26:
74:1a:c2:6c:1f:d2:38:91:a5:c7:33:81:93:86:c9:14:e0:bb:
70:72:5b:e6:48:11:ec:8a:0a:a8:d3:0a:61:66:0f:03:e1:34:
2d:6e:b0:2f:d9:2b:c3:69:8c:f3:85:b7:85:df:ba:ed:63:4c:
8a:5c:bf:e7:ad:6a:10:37:a7:00:26:65:92:9c:7e:cc:44:ca:
37:44:c5:46:a3:07:9b:6a:5f:fc:f0:f1:e5:1c:c8:44:5b:63:
73:78:9b:44:d5:91:9f:2b:80:3a:2e:64:36:95:58:68:36:6c:
ea:aa:e1:75:94:0e:e1:f4:47:15:14:2b:2f:e6:7e:76:dd:f3:
25:bd:3f:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:28:09 2025 by rpki-client