Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/YssK3tXRAC_I482IPPacpaLwIoE.roa
File: YssK3tXRAC_I482IPPacpaLwIoE.roa (raw, json)
Hash identifier: z7UBWge/PddBoL5S1hOwxEKDmOv/aF/oGd4MZjJviSU=
Subject key identifier: 62:CB:0A:DE:D5:D1:00:2F:C8:E3:CD:88:3C:F6:9C:A5:A2:F0:22:81
Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Certificate serial: 0194266C88DCEC8F716D13E32F7C050AE6C1
Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/YssK3tXRAC_I482IPPacpaLwIoE.roa
Signing time: Thu 02 Jan 2025 09:50:34 +0000
ROA not before: Thu 02 Jan 2025 09:50:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205576
IP address blocks: 46.61.184.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:88:dc:ec:8f:71:6d:13:e3:2f:7c:05:0a:e6:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Validity
Not Before: Jan 2 09:50:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=62cb0aded5d1002fc8e3cd883cf69ca5a2f02281
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:17:cf:7e:1c:ab:35:fa:99:d1:b4:4e:d1:29:
1c:55:71:4f:05:7e:22:5b:38:79:d1:7e:a9:2c:b6:
ee:e3:91:af:62:1a:e6:98:84:66:24:d2:65:8e:16:
b0:53:2f:b5:f0:34:8a:ca:ad:5a:ac:d8:b8:71:4f:
38:63:50:69:5d:d7:41:5f:7e:b8:9b:50:03:fc:0f:
1f:69:25:e7:cd:a7:0b:93:f8:9c:de:1c:46:43:4b:
6f:96:a4:6c:79:bc:f8:81:e9:f2:33:68:0b:f1:70:
89:e5:ba:6d:94:27:2d:0b:b3:0a:39:49:26:7e:29:
67:c9:05:e5:45:35:3e:6b:ab:7f:35:df:53:94:3b:
7b:3d:e7:4a:31:2c:10:bd:4a:6a:22:88:12:52:54:
cc:25:73:a3:f7:a4:12:c7:07:e3:81:7b:e0:ad:3a:
22:37:a8:62:67:91:c1:08:07:ab:d9:7d:bb:58:83:
a1:8a:3d:c9:56:03:ed:1c:5a:85:32:92:9d:02:cf:
95:80:93:35:cb:d0:57:92:a0:3c:b9:05:41:9a:51:
1c:4c:70:3b:57:a8:0b:3d:2d:f5:cb:1e:79:7e:09:
13:65:77:ca:ff:3f:28:82:2a:df:ed:6d:9e:10:04:
80:48:ef:65:0d:49:e0:07:db:0b:f0:1f:19:20:04:
d7:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:CB:0A:DE:D5:D1:00:2F:C8:E3:CD:88:3C:F6:9C:A5:A2:F0:22:81
X509v3 Authority Key Identifier:
keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/YssK3tXRAC_I482IPPacpaLwIoE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.61.184.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:97:54:5d:40:33:ec:cd:93:e6:b0:ff:2e:7d:1c:3d:b0:a0:
0b:fe:1f:bf:6d:51:d3:4e:b0:cb:66:e0:b9:16:e6:17:64:d9:
15:d8:8c:df:7a:94:5a:04:b4:04:73:b6:49:18:8e:9c:2a:96:
67:fb:fa:9c:33:09:0c:b6:62:b6:20:0d:e9:d5:12:06:48:fc:
61:18:e4:b2:31:ce:36:46:da:cc:08:d6:1f:f9:56:c9:56:fe:
1e:9f:4f:c7:c3:cb:30:44:6d:8f:ee:fe:1c:95:84:7a:b0:6d:
09:78:56:f8:5f:1b:17:dc:70:f0:d3:52:11:8f:8e:4a:44:a9:
29:8b:d5:6a:54:e3:04:30:e1:78:7e:1c:13:4c:b1:84:58:f6:
6e:be:a6:84:7d:6c:be:d9:0c:43:81:2c:d8:fb:23:3f:c6:bc:
ce:aa:b3:55:de:c6:6a:1a:e6:3c:55:d0:d0:39:51:df:c9:09:
c0:bf:37:8c:4c:22:06:95:cc:38:20:a7:bf:75:45:2b:dc:e4:
d0:47:c4:3c:51:a1:6c:7e:81:74:19:c1:b5:a9:cd:ea:3d:d5:
fc:9a:71:8b:91:0c:93:e7:88:6c:40:32:8e:bf:73:be:41:d4:
d6:51:a4:20:90:97:37:7f:c8:7b:76:d2:19:5f:91:16:f5:ca:
34:4d:05:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:44:28 2025 by rpki-client