Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/wLN3myAi5FHIgidXi2ZFfeK2zhA.roa
File: wLN3myAi5FHIgidXi2ZFfeK2zhA.roa (raw, json)
Hash identifier: Is7r3lXrGXrQ9R7HkhJRLTlHy8dhLBmgwx27pXJaQBQ=
Subject key identifier: C0:B3:77:9B:20:22:E4:51:C8:82:27:57:8B:66:45:7D:E2:B6:CE:10
Certificate issuer: /CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9
Certificate serial: 01942445610EE20110F4767C770757C64DCD
Authority key identifier: 56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/wLN3myAi5FHIgidXi2ZFfeK2zhA.roa
Signing time: Wed 01 Jan 2025 23:48:34 +0000
ROA not before: Wed 01 Jan 2025 23:48:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 65595
IP address blocks: 46.234.9.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:61:0e:e2:01:10:f4:76:7c:77:07:57:c6:4d:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9
Validity
Not Before: Jan 1 23:48:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c0b3779b2022e451c88227578b66457de2b6ce10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:6d:b7:68:82:f0:ac:26:94:ff:7c:12:cc:63:
ba:9a:2b:75:18:ad:52:a1:8e:7e:78:54:2e:95:93:
1f:fc:5c:10:73:1d:5b:10:6c:8a:60:d6:c3:9c:5b:
75:5e:54:8d:2f:9f:af:de:77:89:ab:c2:da:e4:2c:
78:aa:b2:e2:af:1a:34:8c:3b:48:51:16:a1:3b:84:
f8:99:ff:37:8b:55:9a:a9:59:54:0e:e8:6f:32:50:
af:38:dd:97:43:07:71:3d:54:75:bb:02:5c:52:3d:
32:70:d9:c1:fc:de:f8:b1:b8:5e:da:84:f5:d8:ee:
7a:4f:a2:36:6a:7a:d5:6d:29:93:b5:76:9f:0b:7a:
27:2b:98:e0:04:7c:e2:68:43:80:fe:a6:44:4b:31:
a8:eb:d9:92:cc:58:c8:80:cf:54:34:98:ad:61:ec:
ab:31:7b:ef:d1:f4:9c:5d:17:df:9b:b2:c7:0f:9c:
2f:d8:d1:13:d4:db:3f:9b:46:69:d8:6f:b4:45:0e:
7c:f2:cf:95:72:50:6d:41:92:5a:67:e1:e8:c6:c5:
2c:52:6a:7f:6c:a9:62:40:eb:32:8b:ec:78:8e:8e:
d8:e4:ed:c1:5d:d7:ba:ae:7f:8e:25:62:92:55:c1:
7d:94:07:9f:a7:55:a6:5d:ba:52:84:f6:8a:50:4c:
ac:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:B3:77:9B:20:22:E4:51:C8:82:27:57:8B:66:45:7D:E2:B6:CE:10
X509v3 Authority Key Identifier:
keyid:56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/wLN3myAi5FHIgidXi2ZFfeK2zhA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.234.9.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:0a:9e:3c:f0:64:52:fa:e5:55:f5:72:89:fd:04:11:74:7b:
5d:0e:79:82:d1:a2:b0:22:db:9d:98:cd:0b:50:47:0c:af:62:
5d:5f:68:c0:a2:1f:6d:3b:8f:8b:b4:dd:90:19:a2:c8:86:7e:
94:93:b1:66:94:bb:4c:b4:76:0c:09:e7:44:46:64:9f:cb:15:
1d:18:50:06:a1:7c:c4:ef:af:c8:ed:4e:a2:5f:89:07:ed:4b:
86:c2:2e:47:31:fe:75:53:3b:30:f4:04:10:b0:4b:2e:b3:30:
63:3c:3c:2f:e0:9f:e2:e0:62:08:7b:c3:9e:16:5f:84:0e:e5:
37:36:87:16:51:5c:77:16:e2:df:86:12:0e:27:6e:ce:fe:b6:
9a:e9:16:b7:c2:a9:ab:22:2b:0c:2a:02:eb:44:f6:2a:df:26:
ba:96:c9:aa:d3:cf:cb:8e:af:c7:e3:50:91:a1:c5:b7:7b:d5:
0a:a9:29:96:59:55:2b:e0:5e:7f:3f:2e:11:88:5e:33:c6:3f:
a3:a7:59:b8:f3:e0:96:f0:4b:6d:53:4f:d2:0a:74:24:92:6e:
38:5d:e3:2f:76:95:b3:ce:da:b2:f9:6b:3a:ba:b9:f7:b9:e1:
f0:cf:0a:61:a3:61:69:1b:bc:2f:6a:76:50:64:5c:ae:98:b6:
13:90:64:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:01:39 2025 by rpki-client