Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/43afb6-0d21-4ff6-9863-bc517e121d54/1/wITBUH3fVii4QvavQf9IYQ9sIA4.roa
File: wITBUH3fVii4QvavQf9IYQ9sIA4.roa (raw, json)
Hash identifier: sUVkY3RRTmkWlOCgQmin3wil/Gjs5wSpMGd2nMYWzJU=
Subject key identifier: C0:84:C1:50:7D:DF:56:28:B8:42:F6:AF:41:FF:48:61:0F:6C:20:0E
Certificate issuer: /CN=89f4c7873b7fea49ff6eb90d502c1dbc3a5f8c33
Certificate serial: 019426D9A8172518030ADCAD1A5B3061B773
Authority key identifier: 89:F4:C7:87:3B:7F:EA:49:FF:6E:B9:0D:50:2C:1D:BC:3A:5F:8C:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ifTHhzt_6kn_brkNUCwdvDpfjDM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/43afb6-0d21-4ff6-9863-bc517e121d54/1/wITBUH3fVii4QvavQf9IYQ9sIA4.roa
Signing time: Thu 02 Jan 2025 11:49:46 +0000
ROA not before: Thu 02 Jan 2025 11:49:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60788
IP address blocks: 46.227.48.0/21 maxlen: 21
185.47.104.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:a8:17:25:18:03:0a:dc:ad:1a:5b:30:61:b7:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89f4c7873b7fea49ff6eb90d502c1dbc3a5f8c33
Validity
Not Before: Jan 2 11:49:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c084c1507ddf5628b842f6af41ff48610f6c200e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b3:fe:f8:25:af:77:07:64:c4:c8:30:3c:10:
21:fe:69:aa:05:6e:68:8e:ba:43:ac:23:6c:f9:46:
ef:82:16:06:de:3e:ef:d4:f9:de:39:2d:35:f3:3d:
ea:0a:2b:d8:42:c3:a7:27:a6:fb:52:e9:4f:61:fd:
2a:1e:53:ae:24:1f:f7:96:22:bf:dd:e1:5c:3b:9f:
4d:15:e3:43:d9:40:64:cb:28:30:72:6e:c7:f1:7a:
51:ec:c5:45:b6:b6:2a:7d:3a:62:c5:5a:fe:ae:95:
44:b3:1c:ba:75:62:ee:80:7a:5a:03:ad:43:0a:7d:
e1:e3:5c:f2:63:3a:dc:1d:8d:20:ac:43:ae:05:88:
df:8b:7e:a7:8e:af:b7:5a:99:0b:bc:8c:3b:96:d7:
ed:93:6e:ca:37:55:22:e0:9a:04:c7:81:f1:aa:6e:
a5:d0:f6:97:aa:92:1e:7e:b3:db:e0:ae:4b:d3:f8:
a2:b5:f1:e3:32:ee:30:3f:50:1a:a1:ad:90:3a:02:
d5:c2:92:e7:77:ca:00:55:85:d0:a0:2b:98:54:78:
85:4b:b3:10:be:61:1e:25:d6:59:54:17:3f:11:2e:
c5:b3:56:ce:6b:16:59:51:cc:83:10:11:2c:27:bd:
0a:d3:81:c8:38:46:d3:ae:c5:fd:e1:b4:8d:f3:63:
4c:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:84:C1:50:7D:DF:56:28:B8:42:F6:AF:41:FF:48:61:0F:6C:20:0E
X509v3 Authority Key Identifier:
keyid:89:F4:C7:87:3B:7F:EA:49:FF:6E:B9:0D:50:2C:1D:BC:3A:5F:8C:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ifTHhzt_6kn_brkNUCwdvDpfjDM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/43afb6-0d21-4ff6-9863-bc517e121d54/1/wITBUH3fVii4QvavQf9IYQ9sIA4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/43afb6-0d21-4ff6-9863-bc517e121d54/1/ifTHhzt_6kn_brkNUCwdvDpfjDM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.227.48.0/21
185.47.104.0/22
Signature Algorithm: sha256WithRSAEncryption
02:27:e8:60:c1:50:8e:8e:82:ab:47:03:0b:d0:2e:7f:5b:ed:
2d:00:2e:0d:06:c1:a0:98:12:32:b4:a8:6b:91:9e:30:c3:48:
35:0d:08:0a:e3:42:3c:d5:cb:d9:b5:d2:5f:9d:e7:4f:f5:a2:
29:a5:57:2d:fe:6c:3e:97:f0:0b:a7:25:32:ee:46:ce:f8:d0:
ba:87:8a:45:82:f1:44:8c:ec:a1:43:ce:ec:22:c4:bc:46:22:
25:d9:e5:a4:ed:73:57:dc:95:58:bd:c2:46:bc:6c:2a:d8:f9:
b1:f6:fa:8d:fb:7e:9e:50:0d:c1:e3:47:bd:d9:73:85:73:1f:
53:e1:5a:08:63:88:6e:9b:27:d7:4e:e6:45:1b:72:c3:1f:0c:
2b:07:43:df:b1:01:53:1c:12:bd:5e:e3:03:15:ce:c7:9e:06:
24:3b:85:44:fb:6f:03:21:0e:d6:3a:c0:be:3c:1b:8f:2e:d2:
0b:41:d4:2c:d5:18:dc:ed:b2:44:25:a1:7d:cc:9d:9e:7d:b4:
8c:72:ba:b0:7f:ed:82:0d:42:b7:79:a8:6a:fe:b9:7d:dd:70:
31:b4:06:83:c1:12:86:64:58:ba:06:c7:d3:24:b6:68:b9:12:
4e:61:69:e5:4e:25:84:4e:25:90:0a:21:ea:44:c2:33:0e:30:
a9:c8:de:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 13:03:38 2025 by rpki-client