Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/3pZPYhr4Qv57rM9meWqRtMmv_wM.roa
File: 3pZPYhr4Qv57rM9meWqRtMmv_wM.roa (raw, json)
Hash identifier: PIOVY12KDskkBmxbUkx21f1gZsYtnABPo4s2MMHWsuc=
Subject key identifier: DE:96:4F:62:1A:F8:42:FE:7B:AC:CF:66:79:6A:91:B4:C9:AF:FF:03
Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Certificate serial: 0194266C637FF7D8D16F154F8BBA7C34E127
Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/3pZPYhr4Qv57rM9meWqRtMmv_wM.roa
Signing time: Thu 02 Jan 2025 09:50:24 +0000
ROA not before: Thu 02 Jan 2025 09:50:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21403
IP address blocks: 46.61.137.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:63:7f:f7:d8:d1:6f:15:4f:8b:ba:7c:34:e1:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Validity
Not Before: Jan 2 09:50:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=de964f621af842fe7baccf66796a91b4c9afff03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:27:52:b0:0a:24:57:da:25:5d:5d:6e:45:97:
80:ab:f1:63:fa:ea:0c:b2:43:21:02:c4:ec:aa:eb:
02:2b:8c:c4:7a:fb:79:0f:1a:9c:0e:d6:3a:e3:ce:
5c:f3:f7:dd:fa:af:c4:e1:50:0f:55:40:2b:14:5b:
44:1a:40:83:f9:d6:87:fc:e6:66:67:c5:f3:36:da:
0e:8f:6d:b3:56:bd:fe:fd:1f:5e:b0:16:6d:2f:45:
af:3b:4a:b9:e2:1d:4c:d4:73:1c:57:d4:16:6b:0b:
d1:95:6e:95:8c:27:4e:aa:b9:14:b2:1d:cc:67:a0:
0c:b6:6e:c5:32:1d:f2:c0:18:82:e5:0d:ad:03:0f:
51:5f:86:13:18:9e:25:10:99:bf:ec:69:ee:48:d6:
66:96:23:ee:d5:97:e2:74:00:8a:43:56:96:07:41:
2b:37:b6:d3:de:63:09:c4:ab:62:55:27:e0:92:bd:
3f:07:d9:30:ce:b3:76:97:72:35:d1:51:8a:32:ed:
4e:90:f6:30:25:0a:55:c1:3e:27:31:fd:a4:08:36:
58:75:c9:f3:b7:fa:f9:86:55:87:19:1d:28:a5:8e:
26:d2:02:38:5f:cf:d1:92:96:a4:f6:bd:4a:d4:d0:
e0:9a:63:6b:f7:aa:bd:65:c0:98:fd:af:b5:9c:5a:
82:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:96:4F:62:1A:F8:42:FE:7B:AC:CF:66:79:6A:91:B4:C9:AF:FF:03
X509v3 Authority Key Identifier:
keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/3pZPYhr4Qv57rM9meWqRtMmv_wM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.61.137.0/24
Signature Algorithm: sha256WithRSAEncryption
87:b2:bb:40:04:4b:e6:da:4f:52:84:89:b2:5d:c9:fe:b5:a9:
df:0e:3e:c5:4d:ff:0b:86:8c:4b:7c:e0:68:a8:4f:bd:f7:64:
3e:57:12:d7:5e:59:09:e6:74:a9:2b:ed:f0:48:72:e0:c3:23:
77:ea:da:ba:a9:f3:79:82:df:e0:7e:de:1c:5d:3e:71:52:6f:
a7:96:0a:cc:fc:32:e5:20:23:22:03:4b:a0:7d:33:24:92:e2:
65:2d:14:1f:42:41:d5:f4:eb:97:8f:db:82:fe:fb:00:ae:58:
3a:48:f0:e7:55:32:de:1f:f6:a8:d4:c9:61:d8:a8:d9:2b:f1:
05:95:b0:c3:41:2b:85:06:b0:3d:2c:6d:9e:8d:f1:fc:a2:5c:
aa:b3:5e:e8:23:e4:b3:b4:17:9e:81:83:55:74:4b:cb:95:22:
8e:9b:3f:58:23:1f:0e:3f:f1:13:e2:c5:b6:ad:d4:a5:12:e2:
55:ea:5d:17:94:c9:3a:95:37:b0:8c:a8:de:99:60:61:53:d1:
0d:a3:24:9a:d3:b6:26:86:89:04:7a:a5:43:58:9a:de:ad:e5:
24:c5:9c:cb:43:29:78:67:11:2b:10:7b:90:2b:3e:93:86:2e:
9b:12:f3:ab:44:6e:b7:c6:77:5b:78:69:61:b4:c8:85:b7:8e:
b5:6a:59:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:43:25 2025 by rpki-client