Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/393d36-77bf-4ae2-9324-340f433584d2/1/gD2HCH7UZnug2JFbN0h_SjReLJU.roa
File: gD2HCH7UZnug2JFbN0h_SjReLJU.roa (raw, json)
Hash identifier: 46J5NZnwRfdk2xDFMSmrrq3sdpnGs3ijOq3oqLGBAkw=
Subject key identifier: 80:3D:87:08:7E:D4:66:7B:A0:D8:91:5B:37:48:7F:4A:34:5E:2C:95
Certificate issuer: /CN=106c0f395410f286c8576576d7d2f78304b5e83a
Certificate serial: 01942143CF58CAE5CBDEF67821E443EA967F
Authority key identifier: 10:6C:0F:39:54:10:F2:86:C8:57:65:76:D7:D2:F7:83:04:B5:E8:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EGwPOVQQ8obIV2V219L3gwS16Do.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/393d36-77bf-4ae2-9324-340f433584d2/1/gD2HCH7UZnug2JFbN0h_SjReLJU.roa
Signing time: Wed 01 Jan 2025 09:47:59 +0000
ROA not before: Wed 01 Jan 2025 09:47:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50802
IP address blocks: 46.151.104.0/21 maxlen: 24
195.135.240.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:cf:58:ca:e5:cb:de:f6:78:21:e4:43:ea:96:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=106c0f395410f286c8576576d7d2f78304b5e83a
Validity
Not Before: Jan 1 09:47:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=803d87087ed4667ba0d8915b37487f4a345e2c95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:33:e7:e3:ea:3c:70:e9:8d:57:29:5b:10:47:
7e:ae:41:19:f2:ab:59:e0:5f:02:de:c3:f2:a3:4c:
52:c1:93:65:0e:e2:2b:b0:ef:19:7c:64:81:33:2a:
78:71:de:9c:1b:0e:d8:81:8a:3f:76:8a:60:9b:ac:
32:0e:b0:1f:8f:02:12:44:ff:8b:8c:88:d1:28:f7:
03:76:15:36:99:df:1e:34:d2:0e:6d:2b:44:01:f8:
3d:71:4e:3b:9d:34:f3:09:92:b1:e7:30:d7:63:14:
d5:02:5d:62:6c:6f:ea:5f:1a:f3:65:4f:76:0e:7e:
4a:b1:15:95:d6:bd:fb:07:a2:5f:2b:ca:03:ce:17:
51:72:72:16:6c:c5:61:46:b4:ae:60:b4:e0:0a:87:
3f:5c:c4:a5:ad:47:23:88:73:c1:29:29:7e:4a:7f:
19:be:f1:fb:fd:4f:85:b9:b7:c5:d2:ed:2b:f0:04:
38:5b:20:64:f6:76:44:a1:d3:c1:0c:c2:56:d2:15:
d8:c8:97:95:40:8d:fc:00:44:df:6f:0f:18:14:de:
f9:fe:bf:61:df:00:be:62:33:01:53:7a:19:ac:81:
d9:77:cc:f6:d6:2b:04:b5:f9:77:e3:92:ca:22:4b:
30:c4:25:74:e4:a5:05:28:b7:14:5c:a5:a9:8c:5f:
d3:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:3D:87:08:7E:D4:66:7B:A0:D8:91:5B:37:48:7F:4A:34:5E:2C:95
X509v3 Authority Key Identifier:
keyid:10:6C:0F:39:54:10:F2:86:C8:57:65:76:D7:D2:F7:83:04:B5:E8:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EGwPOVQQ8obIV2V219L3gwS16Do.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/393d36-77bf-4ae2-9324-340f433584d2/1/gD2HCH7UZnug2JFbN0h_SjReLJU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/393d36-77bf-4ae2-9324-340f433584d2/1/EGwPOVQQ8obIV2V219L3gwS16Do.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.151.104.0/21
195.135.240.0/22
Signature Algorithm: sha256WithRSAEncryption
52:51:fd:5d:0b:b1:a9:14:18:1b:ae:f6:fc:53:6c:97:cf:86:
2b:2b:3d:43:88:b6:a5:58:24:51:36:42:71:ac:05:87:94:cf:
e7:74:b7:5f:0f:8d:fb:82:fb:6a:00:a8:74:47:87:d4:82:1c:
4a:ce:50:d1:06:41:5a:96:a5:a0:23:c4:d5:56:eb:4f:91:4b:
52:0a:70:81:3e:dd:4a:92:e8:9f:a9:86:ac:2f:90:7b:a1:9f:
e6:cb:a8:d5:fc:94:e9:a5:27:a4:b8:14:48:d8:b1:cf:ed:d5:
3f:3f:56:0f:54:9a:f3:37:4a:88:64:d9:e7:52:fd:a2:68:3a:
95:dd:08:21:70:c7:bb:9f:d5:94:f5:2d:4e:c0:57:7a:e6:53:
91:ff:9a:a3:98:1f:b1:15:f9:10:59:a5:52:61:4e:67:8d:20:
67:fc:ae:68:a3:84:4b:fe:5f:91:05:7a:de:40:34:bb:a4:5b:
ec:dc:1d:1d:60:f3:4d:3c:f5:1a:7a:08:59:4f:6b:3b:4d:09:
a1:d5:07:b1:26:50:5f:73:12:71:83:61:d3:9c:b0:fb:43:fa:
ef:21:af:e2:fa:9d:2f:6e:91:38:5e:f8:47:5d:da:20:41:21:
4b:2f:b1:ca:bb:8c:b0:0d:09:40:4c:54:cf:61:1c:c8:66:ee:
e1:6a:36:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:17:41 2025 by rpki-client