Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/3f7463-4d4f-41a6-8d72-3951378aa766/1/RoGqfo5WHnk9aJGToptEEJnYgSQ.roa
File: RoGqfo5WHnk9aJGToptEEJnYgSQ.roa (raw, json)
Hash identifier: L10AuIcaDMRz0t+d0kRw1yKzyj6eu5ePd1bWDs52MY4=
Subject key identifier: 46:81:AA:7E:8E:56:1E:79:3D:68:91:93:A2:9B:44:10:99:D8:81:24
Certificate issuer: /CN=9813e2f6351d3b4d1e61aa4016f1b2cfa62d7cdf
Certificate serial: 019422FB055C80975362D60576C5870C098C
Authority key identifier: 98:13:E2:F6:35:1D:3B:4D:1E:61:AA:40:16:F1:B2:CF:A6:2D:7C:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mBPi9jUdO00eYapAFvGyz6YtfN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/3f7463-4d4f-41a6-8d72-3951378aa766/1/RoGqfo5WHnk9aJGToptEEJnYgSQ.roa
Signing time: Wed 01 Jan 2025 17:47:43 +0000
ROA not before: Wed 01 Jan 2025 17:47:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208066
IP address blocks: 46.45.64.0/20 maxlen: 20
46.45.64.0/22 maxlen: 22
46.45.68.0/22 maxlen: 22
46.45.72.0/22 maxlen: 22
46.45.76.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:05:5c:80:97:53:62:d6:05:76:c5:87:0c:09:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9813e2f6351d3b4d1e61aa4016f1b2cfa62d7cdf
Validity
Not Before: Jan 1 17:47:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4681aa7e8e561e793d689193a29b441099d88124
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ac:8c:51:15:ef:70:a0:76:ae:0c:c1:a0:72:
1a:9d:87:05:8e:c1:fc:70:51:01:8b:fb:c7:91:9f:
b5:3c:4e:b9:23:b8:1c:b6:5b:55:d1:15:40:ff:ad:
77:7c:83:a9:a6:dc:07:bd:21:83:40:e8:ab:67:51:
57:61:b0:fa:68:da:59:e9:08:6b:57:0b:14:48:95:
44:8d:45:47:09:b6:12:ad:1f:55:40:38:56:f5:3b:
5e:a7:ca:80:78:6a:27:1f:18:84:2c:0d:de:4a:96:
80:6a:9a:83:4a:f5:05:77:12:56:4c:65:71:6a:25:
ba:31:95:77:62:2c:2d:71:a1:bd:fa:25:7c:15:98:
04:32:d8:9e:a9:fe:15:3d:f5:8e:5a:04:99:b5:36:
50:33:27:e7:9c:aa:e9:01:6a:23:53:af:fc:0e:8e:
09:4f:28:ab:51:f3:d0:7c:99:37:72:a2:53:f5:d6:
3c:87:05:e0:0c:cf:66:ac:1a:49:ed:68:9b:8a:30:
e5:79:7c:2c:75:0d:cf:0e:7e:63:7e:ec:72:d5:bb:
09:81:31:36:b1:0d:7f:49:90:af:60:f0:d0:5b:ad:
1a:f1:08:e6:d1:45:24:09:62:ca:df:9d:5a:d5:d8:
0a:3a:7a:d7:f6:6d:f9:64:36:37:cb:df:c5:ac:32:
a7:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:81:AA:7E:8E:56:1E:79:3D:68:91:93:A2:9B:44:10:99:D8:81:24
X509v3 Authority Key Identifier:
keyid:98:13:E2:F6:35:1D:3B:4D:1E:61:AA:40:16:F1:B2:CF:A6:2D:7C:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mBPi9jUdO00eYapAFvGyz6YtfN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/3f7463-4d4f-41a6-8d72-3951378aa766/1/RoGqfo5WHnk9aJGToptEEJnYgSQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/3f7463-4d4f-41a6-8d72-3951378aa766/1/mBPi9jUdO00eYapAFvGyz6YtfN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.45.64.0/20
Signature Algorithm: sha256WithRSAEncryption
11:a4:f4:3d:00:0d:27:5f:be:96:4a:42:62:52:32:f4:44:ff:
ff:49:1d:bd:30:08:a4:26:2c:2b:4e:18:89:8f:92:88:c5:ae:
e0:11:e3:91:ba:8b:16:89:ca:04:4a:c8:d1:c2:e0:40:73:a7:
09:90:50:f3:3a:14:a5:42:4d:96:29:f8:e9:01:9f:c9:18:02:
a6:11:50:2e:d0:69:4f:f2:7a:bd:3f:92:eb:6d:c7:ba:fe:01:
3e:03:dc:85:2c:18:ed:a7:bf:c2:28:28:9c:43:57:82:ed:84:
27:79:63:57:96:91:f3:be:95:ef:15:13:d9:8e:c2:58:29:69:
77:37:ad:fd:aa:fa:9b:2e:34:8d:7c:15:ac:36:cd:4f:4b:43:
6a:ab:e2:fb:a2:79:80:a0:ca:67:aa:63:71:5b:c6:2c:90:fc:
8e:7c:d3:6e:85:72:e1:22:43:f2:64:1b:6d:30:96:56:3f:7b:
3a:8a:5b:b1:64:be:62:90:34:88:13:11:8b:4e:0d:27:df:9e:
0c:68:eb:d3:c2:bf:2c:9b:66:34:f5:a3:0e:1a:f0:a5:ee:68:
a7:a1:b3:60:a4:48:39:9d:4b:a6:3a:a0:d1:5d:ee:d0:40:42:
9b:f6:24:63:9a:57:f5:f9:d7:95:5b:c8:da:02:7f:b9:38:5c:
65:e3:78:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:52:33 2025 by rpki-client