Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/a5ddfb-db21-4aa0-9202-f12d27b6ee78/1/IvXJxhrvQv-TZd6T5Z3U673nzg4.roa
File: IvXJxhrvQv-TZd6T5Z3U673nzg4.roa (raw, json)
Hash identifier: aQwcnM9ZOanXKYoANZiAsoraX8kMOnNpLaWMb7JdcIU=
Subject key identifier: 22:F5:C9:C6:1A:EF:42:FF:93:65:DE:93:E5:9D:D4:EB:BD:E7:CE:0E
Certificate issuer: /CN=9989ddf489ba45c98e28917018b565dac1b2ec2c
Certificate serial: 018571D7A28D28A89F716340E123BA4D94BC
Authority key identifier: 99:89:DD:F4:89:BA:45:C9:8E:28:91:70:18:B5:65:DA:C1:B2:EC:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mYnd9Im6RcmOKJFwGLVl2sGy7Cw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/a5ddfb-db21-4aa0-9202-f12d27b6ee78/1/IvXJxhrvQv-TZd6T5Z3U673nzg4.roa
Signing time: Mon 02 Jan 2023 09:37:15 +0000
ROA not before: Mon 02 Jan 2023 09:37:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 174
IP address blocks: 46.253.131.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:d7:a2:8d:28:a8:9f:71:63:40:e1:23:ba:4d:94:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9989ddf489ba45c98e28917018b565dac1b2ec2c
Validity
Not Before: Jan 2 09:37:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=22f5c9c61aef42ff9365de93e59dd4ebbde7ce0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:8c:5e:24:6b:67:1c:14:ee:f2:8d:61:2c:48:
d0:75:2b:a2:1b:a5:6a:78:fb:e1:8f:b3:27:f1:c2:
7e:0f:39:65:80:9e:e6:79:f7:b3:5e:55:35:e5:a5:
a1:a9:55:60:c0:60:be:8e:f4:18:8c:14:ea:e8:16:
b7:c6:c7:ba:7e:a5:3b:53:c5:36:91:5f:d3:ca:2b:
b6:1f:87:88:30:c5:23:c3:db:b1:7f:b0:7a:8c:0a:
62:07:58:bf:20:ae:5c:1e:07:58:f2:e7:3f:25:02:
f3:e5:f4:5e:ed:1a:cb:cc:93:f1:66:b0:9a:4b:fc:
db:47:8a:14:42:e3:9f:26:24:50:9f:47:48:ad:d7:
d6:38:6a:66:35:2d:45:5a:df:67:03:11:3a:59:9c:
17:7f:e1:06:f4:59:2d:66:29:68:db:53:b5:42:c0:
84:26:c5:5d:a7:b8:cd:35:16:1c:47:66:48:c9:60:
53:0f:75:58:a4:28:a5:c6:0c:7d:94:8c:d5:3f:00:
a1:2e:8f:13:ae:7c:da:96:db:24:24:2a:31:6e:c4:
f7:4b:ae:4a:76:6f:03:a5:94:74:a0:62:17:76:c5:
c4:28:d8:e8:5d:6e:25:12:cd:7d:38:57:3b:8b:da:
77:d0:9a:b4:de:e7:52:9b:22:f3:7b:70:e8:e5:fa:
d0:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:F5:C9:C6:1A:EF:42:FF:93:65:DE:93:E5:9D:D4:EB:BD:E7:CE:0E
X509v3 Authority Key Identifier:
keyid:99:89:DD:F4:89:BA:45:C9:8E:28:91:70:18:B5:65:DA:C1:B2:EC:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mYnd9Im6RcmOKJFwGLVl2sGy7Cw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/a5ddfb-db21-4aa0-9202-f12d27b6ee78/1/IvXJxhrvQv-TZd6T5Z3U673nzg4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/a5ddfb-db21-4aa0-9202-f12d27b6ee78/1/mYnd9Im6RcmOKJFwGLVl2sGy7Cw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.253.131.0/24
Signature Algorithm: sha256WithRSAEncryption
84:4e:c7:6a:c8:de:f3:dc:d0:d2:5d:c7:c0:93:fd:8d:5c:17:
f9:0b:74:e5:cf:f9:fc:02:66:48:57:90:7b:a9:48:d5:28:a0:
c5:6f:8f:2e:9e:20:90:dc:29:77:b9:25:c7:6e:19:2b:d9:1d:
26:13:a6:0c:0d:af:88:b4:c4:4f:59:98:61:44:b8:36:ca:87:
dd:e5:45:93:a7:2a:16:51:b7:55:6f:0d:3a:d2:b4:8a:b0:e2:
04:06:69:84:92:6c:20:b2:c9:f1:95:bf:66:6e:40:54:cb:86:
19:a2:f3:73:a8:44:56:4f:45:95:d2:09:8a:78:15:1f:c4:3d:
a2:84:26:62:34:d6:2b:bd:c3:84:8c:79:de:10:9a:e8:61:f1:
69:f6:35:b2:42:20:ab:d0:b6:6c:c4:42:f2:38:80:7d:da:c3:
ed:82:93:45:ac:a2:bf:05:c2:eb:54:8e:d0:2c:ac:d7:c0:02:
94:a2:2a:01:a8:0a:e3:57:90:7b:1b:d4:be:05:4e:7c:8a:0a:
96:0a:16:60:39:b2:54:2b:17:1a:aa:34:4d:b8:19:97:48:e3:
4d:91:f3:30:85:72:18:94:e5:ed:0a:c4:ce:c1:c2:6e:af:58:
9a:f4:d0:4e:e5:e4:12:00:32:15:59:25:c2:be:40:a7:e7:99:
95:b6:2a:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:17:06 2025 by rpki-client