Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/446d40-5782-4de0-a2c5-b68f5d8f651a/1/kdM69EkWu9GxJCcShuJ7ttDKH4Y.roa
File: kdM69EkWu9GxJCcShuJ7ttDKH4Y.roa (raw, json)
Hash identifier: vxcNPrB9DwOKLJbClf/tkagm/g99z1Vy26rmuXa9BjQ=
Subject key identifier: 91:D3:3A:F4:49:16:BB:D1:B1:24:27:12:86:E2:7B:B6:D0:CA:1F:86
Certificate issuer: /CN=d737824e0ffa79f18b9fc49d6cb0dd81c9a6ca28
Certificate serial: 0194221FBF65C328D38D4185516543685A95
Authority key identifier: D7:37:82:4E:0F:FA:79:F1:8B:9F:C4:9D:6C:B0:DD:81:C9:A6:CA:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1zeCTg_6efGLn8SdbLDdgcmmyig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/446d40-5782-4de0-a2c5-b68f5d8f651a/1/kdM69EkWu9GxJCcShuJ7ttDKH4Y.roa
Signing time: Wed 01 Jan 2025 13:48:13 +0000
ROA not before: Wed 01 Jan 2025 13:48:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61150
IP address blocks: 46.18.111.0/24 maxlen: 24
2a0e:11c0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:bf:65:c3:28:d3:8d:41:85:51:65:43:68:5a:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d737824e0ffa79f18b9fc49d6cb0dd81c9a6ca28
Validity
Not Before: Jan 1 13:48:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=91d33af44916bbd1b124271286e27bb6d0ca1f86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b5:4e:37:76:28:94:9e:38:ec:f7:9d:f1:70:
17:67:59:e8:d7:df:34:a1:7e:fa:3a:1f:95:ae:1e:
3b:75:7f:e9:00:74:2b:b6:f1:8a:98:3d:c1:95:d3:
6c:5c:37:3e:11:5a:a2:18:3d:24:01:4d:b9:81:a7:
29:5c:68:60:fc:9a:b4:67:68:82:9c:4f:1b:d4:83:
ee:0c:b2:55:17:25:d9:0d:76:48:fb:a5:a4:b9:c2:
d8:36:a9:c9:4e:82:81:8e:1f:c1:05:1e:f0:44:a5:
20:56:a7:8f:33:68:2d:b3:90:a4:03:63:c0:48:6f:
f4:11:75:4c:87:d8:53:e6:dc:bb:41:57:66:50:54:
a8:ea:fc:e0:5d:f8:64:8f:7f:a5:64:52:fb:59:59:
ee:5d:12:fb:7f:52:b1:2a:c2:1b:87:2e:f1:22:da:
03:b8:fd:fc:ca:31:44:fc:01:ea:ef:71:95:73:96:
4d:65:d6:e9:ee:87:3d:9b:cf:8b:ca:f5:6a:fa:8d:
c2:41:84:d3:e3:e7:eb:06:b5:17:af:85:dc:77:6d:
0b:ae:5e:b5:71:01:2b:68:6f:0c:c7:cf:ca:dd:e0:
ac:c8:8a:a2:77:e0:ce:3a:0e:ca:12:2d:85:6b:fa:
08:90:fa:c3:4e:2d:2b:12:2c:b7:d7:2c:81:72:a9:
c3:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:D3:3A:F4:49:16:BB:D1:B1:24:27:12:86:E2:7B:B6:D0:CA:1F:86
X509v3 Authority Key Identifier:
keyid:D7:37:82:4E:0F:FA:79:F1:8B:9F:C4:9D:6C:B0:DD:81:C9:A6:CA:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1zeCTg_6efGLn8SdbLDdgcmmyig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/446d40-5782-4de0-a2c5-b68f5d8f651a/1/kdM69EkWu9GxJCcShuJ7ttDKH4Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/446d40-5782-4de0-a2c5-b68f5d8f651a/1/1zeCTg_6efGLn8SdbLDdgcmmyig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.18.111.0/24
IPv6:
2a0e:11c0::/32
Signature Algorithm: sha256WithRSAEncryption
4f:9e:b3:86:39:fc:35:91:6e:16:cb:03:3c:59:fa:b6:54:22:
b8:d0:c4:bf:df:f3:ee:dc:33:13:b5:62:d0:5d:39:16:6e:24:
d3:0d:b4:bd:93:0f:d4:c6:5d:6a:a9:6e:ea:3a:ad:88:02:4a:
bc:8c:5b:ca:c4:eb:6a:b9:63:5a:bf:74:97:08:a0:45:29:e6:
a8:05:17:04:bf:a6:f3:82:a2:82:8e:74:ca:d5:f0:9b:8f:bc:
59:ca:4e:59:08:49:57:52:69:16:3c:8c:85:7b:df:c1:40:09:
37:45:8a:0a:19:5e:18:a9:cd:ce:e7:3f:90:4d:78:77:c4:73:
e1:bc:78:30:2f:1f:a2:bd:f9:91:3e:6d:1d:c1:7b:03:20:1c:
ff:81:5b:23:7b:4f:58:18:16:09:b1:80:a4:40:aa:c9:4e:5c:
9a:0e:b1:8a:e4:3f:54:de:23:59:e8:03:2e:08:46:86:fc:d8:
92:48:dc:dd:dc:9d:49:5c:81:d9:b6:5c:48:31:d6:5a:da:ab:
7c:b5:cb:ee:58:5b:2f:51:8d:99:f5:27:75:04:ce:53:41:66:
9f:af:4b:ee:1f:bf:fb:35:02:a1:fd:54:07:aa:3c:30:26:15:
8b:99:45:e4:81:b5:0a:35:06:a5:79:c3:a5:35:79:43:2f:a6:
c8:72:0a:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:05:41 2025 by rpki-client