Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/b0c402-e09e-4c69-acc9-84da62066e8a/1/MjNTeuDZoZBSiYMMBlGbwm18F_4.roa
File: MjNTeuDZoZBSiYMMBlGbwm18F_4.roa (raw, json)
Hash identifier: xrzN9SEKC0+LvNwMnFZs7anGQYuDHjD+YhAY9xZXYug=
Subject key identifier: 32:33:53:7A:E0:D9:A1:90:52:89:83:0C:06:51:9B:C2:6D:7C:17:FE
Certificate issuer: /CN=026d511ce3af90c4d601c7ccf8360523713e2c90
Certificate serial: 019487943C23AFF4AB0C8149E53D211FE56C
Authority key identifier: 02:6D:51:1C:E3:AF:90:C4:D6:01:C7:CC:F8:36:05:23:71:3E:2C:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Am1RHOOvkMTWAcfM-DYFI3E-LJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/b0c402-e09e-4c69-acc9-84da62066e8a/1/MjNTeuDZoZBSiYMMBlGbwm18F_4.roa
Signing time: Tue 21 Jan 2025 06:37:06 +0000
ROA not before: Tue 21 Jan 2025 06:37:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29119
IP address blocks: 46.232.169.0/24 maxlen: 24
46.232.170.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:87:94:3c:23:af:f4:ab:0c:81:49:e5:3d:21:1f:e5:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=026d511ce3af90c4d601c7ccf8360523713e2c90
Validity
Not Before: Jan 21 06:37:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3233537ae0d9a1905289830c06519bc26d7c17fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:e8:e3:97:9b:de:51:8f:f8:9f:62:45:21:44:
d1:81:9f:19:ca:0d:a7:c2:39:79:df:3b:6b:93:2a:
e7:d8:07:ab:0d:26:d4:34:8d:65:e8:44:a5:47:4a:
3f:76:8a:58:9d:f3:6c:d8:1c:b4:94:2b:aa:66:80:
95:28:d0:66:ef:81:ad:8a:9a:24:75:7c:b6:10:f2:
4e:aa:6d:04:a0:e0:62:01:9c:be:29:ee:99:3e:31:
a6:c9:bc:c6:02:6b:37:b9:a2:ce:c4:13:56:b3:d5:
af:98:c7:9d:ee:be:e7:4f:0f:1d:9f:e7:bc:2c:6b:
73:c5:22:51:bc:81:4b:51:9e:70:ee:0a:01:6f:da:
34:c3:21:8c:e6:a9:47:d4:66:25:f6:d4:64:08:26:
ce:27:1b:c1:28:b5:bb:db:5c:36:8d:3f:f2:05:5f:
f8:47:2a:e8:f3:6c:a5:9f:b7:9d:7c:0c:12:d3:27:
08:5a:60:02:a2:ae:83:61:c1:b4:d5:d6:87:66:f0:
8c:cb:6d:f4:f7:61:db:05:5d:9b:c7:32:a8:b9:90:
94:5b:8c:17:ee:be:bf:97:53:d4:2a:b0:01:4e:1e:
e3:57:b6:05:c9:d6:ee:20:f3:f1:2f:6d:96:4b:79:
14:16:04:d2:2b:ae:fa:db:98:94:5c:84:03:fa:2c:
1a:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:33:53:7A:E0:D9:A1:90:52:89:83:0C:06:51:9B:C2:6D:7C:17:FE
X509v3 Authority Key Identifier:
keyid:02:6D:51:1C:E3:AF:90:C4:D6:01:C7:CC:F8:36:05:23:71:3E:2C:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Am1RHOOvkMTWAcfM-DYFI3E-LJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b0c402-e09e-4c69-acc9-84da62066e8a/1/MjNTeuDZoZBSiYMMBlGbwm18F_4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b0c402-e09e-4c69-acc9-84da62066e8a/1/Am1RHOOvkMTWAcfM-DYFI3E-LJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.232.169.0-46.232.170.255
Signature Algorithm: sha256WithRSAEncryption
c4:3c:fd:ae:37:fd:a4:25:69:e5:e1:c5:5e:d4:f2:30:e5:2d:
ef:13:c5:a8:d9:73:fe:f0:31:31:2e:51:24:50:1e:47:b4:86:
65:56:33:da:a5:52:37:e4:e1:b2:d4:fa:4a:59:6f:a6:e6:7f:
1e:d3:51:ce:7a:4b:d2:01:d1:3a:37:33:d1:cc:29:2a:45:41:
d5:50:64:21:be:b0:f3:6f:e6:ec:9f:74:64:9d:06:91:23:aa:
08:75:66:45:ad:3c:20:e0:42:cd:32:09:47:07:67:00:2f:7b:
4d:2b:ce:d3:e0:2f:8d:f5:a5:a1:b7:86:a4:0c:40:d5:8f:fc:
69:17:39:f1:4c:0a:6c:c5:94:03:3a:13:f8:cd:b3:1f:60:b2:
40:33:75:14:dc:39:86:65:25:72:d6:2d:be:05:31:85:1c:97:
35:b7:6c:27:8c:c3:28:4f:e0:65:7c:24:25:4f:90:44:20:b6:
27:ea:2f:0c:c9:41:fd:b5:11:bb:b5:76:81:1e:e4:28:31:9b:
4e:af:bf:68:80:ab:4d:ef:a6:0f:ff:cd:64:11:a4:c1:ef:9e:
15:37:e9:45:0a:5a:4c:87:c6:31:12:3e:13:1f:24:c8:a3:4e:
e2:9c:c1:c8:6e:d8:5a:12:24:8c:5f:50:5b:67:00:be:85:8a:
fe:8e:a0:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:12:16 2025 by rpki-client