Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/3f7463-4d4f-41a6-8d72-3951378aa766/1/dXZ-6UVHqdia25OyDn-Duexa4bY.roa
File: dXZ-6UVHqdia25OyDn-Duexa4bY.roa (raw, json)
Hash identifier: 0T5UCEoUYDMxK/4Yih5THGiZdvmX2Rir43/xhLtG52s=
Subject key identifier: 75:76:7E:E9:45:47:A9:D8:9A:DB:93:B2:0E:7F:83:B9:EC:5A:E1:B6
Certificate issuer: /CN=9813e2f6351d3b4d1e61aa4016f1b2cfa62d7cdf
Certificate serial: 019422FB039D26330C40EEA139B489A5B7C7
Authority key identifier: 98:13:E2:F6:35:1D:3B:4D:1E:61:AA:40:16:F1:B2:CF:A6:2D:7C:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mBPi9jUdO00eYapAFvGyz6YtfN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/3f7463-4d4f-41a6-8d72-3951378aa766/1/dXZ-6UVHqdia25OyDn-Duexa4bY.roa
Signing time: Wed 01 Jan 2025 17:47:43 +0000
ROA not before: Wed 01 Jan 2025 17:47:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201342
IP address blocks: 46.45.123.0/24 maxlen: 24
2a03:24c0:ffff::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:03:9d:26:33:0c:40:ee:a1:39:b4:89:a5:b7:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9813e2f6351d3b4d1e61aa4016f1b2cfa62d7cdf
Validity
Not Before: Jan 1 17:47:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=75767ee94547a9d89adb93b20e7f83b9ec5ae1b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:cb:9d:20:29:7c:ea:1e:4c:65:6f:6d:6e:5f:
70:50:f1:91:86:4d:6a:9d:2a:19:08:84:40:04:6d:
1d:06:09:ed:d4:c3:a6:90:7c:77:70:34:c9:f4:d0:
96:97:f5:fb:b6:62:3a:6b:da:b3:56:58:fd:21:ca:
30:ff:2f:9e:a7:d9:36:8b:ca:2b:9e:b6:6e:5e:07:
cc:c5:26:4e:d9:16:a8:4c:f1:1c:f4:15:4c:0b:02:
d1:9a:a8:97:e9:4d:30:aa:9d:a5:6d:6f:77:15:34:
95:b3:22:63:5e:84:21:17:74:69:63:8f:3c:92:fe:
9f:63:8e:1e:9f:14:fd:f0:08:3d:91:66:c4:5d:87:
b6:3e:c8:2b:b9:5d:11:63:d2:10:18:b0:c6:67:40:
c3:28:6c:44:f5:39:3a:1a:98:6c:5d:d3:1f:36:37:
d4:25:a5:d4:cd:91:d7:44:67:a5:9b:39:86:01:6e:
26:01:61:a6:e7:22:3b:54:53:95:d2:6d:0d:04:43:
03:27:cd:b2:8e:6d:a2:53:a7:ae:21:c5:89:1a:8b:
a5:cb:2c:09:cf:2c:2e:27:8c:e6:97:66:a5:21:f7:
d2:d3:c6:87:28:15:6a:df:52:f9:95:ad:8b:7a:d6:
7f:88:f0:2e:8e:d8:4f:75:3d:59:56:ab:e3:30:dd:
87:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:76:7E:E9:45:47:A9:D8:9A:DB:93:B2:0E:7F:83:B9:EC:5A:E1:B6
X509v3 Authority Key Identifier:
keyid:98:13:E2:F6:35:1D:3B:4D:1E:61:AA:40:16:F1:B2:CF:A6:2D:7C:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mBPi9jUdO00eYapAFvGyz6YtfN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/3f7463-4d4f-41a6-8d72-3951378aa766/1/dXZ-6UVHqdia25OyDn-Duexa4bY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/3f7463-4d4f-41a6-8d72-3951378aa766/1/mBPi9jUdO00eYapAFvGyz6YtfN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.45.123.0/24
IPv6:
2a03:24c0:ffff::/48
Signature Algorithm: sha256WithRSAEncryption
4d:18:df:71:12:5d:5c:a2:31:ee:c7:39:c8:b2:54:c7:49:38:
dc:00:ec:64:5f:bc:e8:4c:65:df:56:09:1e:7c:ff:4b:39:47:
12:e0:5d:5f:c2:6c:a8:a3:2d:0b:e6:78:1d:7f:2d:f3:da:db:
59:76:e9:79:f9:5e:5a:55:18:e3:38:28:2b:d8:92:c8:4f:d0:
48:ff:2a:07:d1:15:ab:fb:8f:a2:8b:5f:a0:8f:34:95:aa:ea:
6c:07:27:63:10:8b:f7:6f:29:6b:eb:46:b3:b0:3f:57:6b:8c:
21:50:0c:1a:49:b0:96:65:d1:4b:ce:f2:61:76:11:5c:20:7e:
96:0f:0d:e4:98:6f:c8:19:01:fd:1f:a4:7d:58:57:1c:ac:81:
cb:bb:e1:db:78:88:70:ee:b1:e5:ce:e2:ef:f2:cc:61:09:0f:
e4:67:9a:01:62:29:6e:6c:42:66:c3:51:f8:1e:82:9e:a4:c7:
ee:6b:50:9e:5f:57:e8:c1:b8:35:9a:b6:ea:a0:f6:6d:32:a0:
6c:cc:80:bf:24:98:37:8b:a0:84:57:f7:2f:5a:2b:f9:d7:98:
ee:22:c8:a9:f6:f1:7c:42:f4:12:55:bb:f1:ae:7f:90:b1:a5:
bd:cf:2b:4d:f1:2d:ba:0f:1b:4c:61:f7:6d:ca:1a:82:9b:ea:
47:3a:80:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:59:43 2025 by rpki-client