Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/53ad2b-359b-436a-a2eb-afe84e18d56f/1/EBOIj8lPqb1xDaW8RBbB1Ok6-LE.roa
File: EBOIj8lPqb1xDaW8RBbB1Ok6-LE.roa (raw, json)
Hash identifier: QTASo2dR9S0FHaEMTzsEAOKw6oKeRRFkI+5ogAhRzoY=
Subject key identifier: 10:13:88:8F:C9:4F:A9:BD:71:0D:A5:BC:44:16:C1:D4:E9:3A:F8:B1
Certificate issuer: /CN=59a9e9f8ea47486d80c9d6dcfd568f654d4f07ee
Certificate serial: 019421442DAA53092A498244314E8E772CC7
Authority key identifier: 59:A9:E9:F8:EA:47:48:6D:80:C9:D6:DC:FD:56:8F:65:4D:4F:07:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wanp-OpHSG2Aydbc_VaPZU1PB-4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/53ad2b-359b-436a-a2eb-afe84e18d56f/1/EBOIj8lPqb1xDaW8RBbB1Ok6-LE.roa
Signing time: Wed 01 Jan 2025 09:48:23 +0000
ROA not before: Wed 01 Jan 2025 09:48:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51539
IP address blocks: 46.30.224.0/21 maxlen: 21
46.30.226.0/23 maxlen: 23
46.30.228.0/23 maxlen: 23
2a06:d980::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:2d:aa:53:09:2a:49:82:44:31:4e:8e:77:2c:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59a9e9f8ea47486d80c9d6dcfd568f654d4f07ee
Validity
Not Before: Jan 1 09:48:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1013888fc94fa9bd710da5bc4416c1d4e93af8b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:1b:7e:f2:80:fc:fa:7c:f2:4d:c6:28:a9:ff:
0d:50:48:2c:4c:69:5c:b4:83:e2:b4:6b:01:f3:1d:
6e:67:27:60:50:eb:3e:45:eb:cb:b8:f1:52:ad:91:
9e:03:74:34:11:d4:c7:1f:f9:20:83:a6:85:e2:5f:
31:3a:9d:3c:52:dd:5f:dd:5a:5b:d4:bb:3b:af:8b:
74:14:b8:f4:a4:7f:a0:22:29:92:9e:8b:99:df:79:
b3:6a:a7:6e:b2:8a:c3:6e:ad:31:2d:4f:31:d9:64:
eb:5a:26:b0:b1:f0:3b:3f:fc:32:63:dd:89:1b:ef:
08:0a:22:a8:f0:bd:7b:6f:65:66:30:83:61:b7:45:
57:88:59:5a:88:74:74:88:be:93:d8:f7:7f:a8:7c:
52:74:87:ae:1f:15:1b:97:42:a2:5c:c6:8d:c3:a0:
76:c8:c5:a1:33:e1:6b:a5:b4:12:8d:8f:48:67:22:
f1:2b:ec:bb:59:0e:3f:2c:50:eb:c1:75:6c:a8:ff:
67:84:86:22:f2:ac:3b:ba:9a:6f:d4:67:0b:d8:c6:
b3:9c:b6:10:22:ed:a4:85:88:7f:22:ed:38:bc:85:
24:ca:fa:70:f5:fd:63:1e:30:82:76:5f:5c:90:40:
f4:c1:18:46:76:bb:fb:87:61:91:41:f5:5b:6e:e6:
6e:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:13:88:8F:C9:4F:A9:BD:71:0D:A5:BC:44:16:C1:D4:E9:3A:F8:B1
X509v3 Authority Key Identifier:
keyid:59:A9:E9:F8:EA:47:48:6D:80:C9:D6:DC:FD:56:8F:65:4D:4F:07:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wanp-OpHSG2Aydbc_VaPZU1PB-4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/53ad2b-359b-436a-a2eb-afe84e18d56f/1/EBOIj8lPqb1xDaW8RBbB1Ok6-LE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/53ad2b-359b-436a-a2eb-afe84e18d56f/1/Wanp-OpHSG2Aydbc_VaPZU1PB-4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.30.224.0/21
IPv6:
2a06:d980::/29
Signature Algorithm: sha256WithRSAEncryption
22:9c:4b:4f:35:3b:4b:41:19:57:5c:16:e1:06:7e:01:52:3e:
f1:e5:b9:8f:f3:dc:11:af:a4:c3:4b:db:a9:54:9d:51:78:db:
ad:c1:21:83:c7:bf:72:1a:97:1d:a0:e7:20:13:e7:d1:44:a7:
bc:cf:03:e0:39:b6:53:1a:b2:58:b5:85:67:b5:75:10:fe:1a:
11:c6:01:9e:d0:5e:05:8d:5e:bc:d7:30:36:20:37:e7:b8:c7:
86:3d:86:dc:21:90:3d:ba:99:be:0c:dd:1a:de:f5:c6:56:8c:
bf:fa:a4:87:7a:51:7c:94:31:64:91:f5:d5:a7:69:a5:ae:d5:
aa:de:af:18:a5:89:3e:26:0d:86:6c:d7:c9:90:9b:bf:d1:ec:
4d:ad:67:1d:a8:dc:27:94:21:56:d8:ac:33:fe:82:20:c1:4d:
8e:1f:56:16:ce:dc:75:3b:fe:54:3a:12:7f:76:84:25:6d:5d:
e8:3d:b7:0e:3a:7d:c8:0f:62:41:78:94:70:19:24:3f:a3:ad:
be:37:97:d6:26:51:e2:de:7e:38:62:aa:62:1e:99:3c:c9:a9:
71:4d:b0:b8:f2:02:fd:3f:68:26:cc:16:da:d0:2f:31:bb:94:
e7:6b:60:dc:6b:d4:c8:35:95:92:af:00:ff:4c:06:f5:8d:1c:
e6:ec:2b:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:31:32 2025 by rpki-client