Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/b0c402-e09e-4c69-acc9-84da62066e8a/1/fT1ahSf9wi-gW3Iq--IGboVi4C4.roa
File: fT1ahSf9wi-gW3Iq--IGboVi4C4.roa (raw, json)
Hash identifier: YnGxJTeY8IKamyoquQxtFC7vxkI/y/D59R3eBCQNWcI=
Subject key identifier: 7D:3D:5A:85:27:FD:C2:2F:A0:5B:72:2A:FB:E2:06:6E:85:62:E0:2E
Certificate issuer: /CN=026d511ce3af90c4d601c7ccf8360523713e2c90
Certificate serial: 019423D78AE1C875717B181862E7BD460068
Authority key identifier: 02:6D:51:1C:E3:AF:90:C4:D6:01:C7:CC:F8:36:05:23:71:3E:2C:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Am1RHOOvkMTWAcfM-DYFI3E-LJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/b0c402-e09e-4c69-acc9-84da62066e8a/1/fT1ahSf9wi-gW3Iq--IGboVi4C4.roa
Signing time: Wed 01 Jan 2025 21:48:35 +0000
ROA not before: Wed 01 Jan 2025 21:48:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43885
IP address blocks: 46.232.170.0/24 maxlen: 24
46.232.171.0/24 maxlen: 24
46.232.174.0/24 maxlen: 24
46.232.175.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:8a:e1:c8:75:71:7b:18:18:62:e7:bd:46:00:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=026d511ce3af90c4d601c7ccf8360523713e2c90
Validity
Not Before: Jan 1 21:48:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7d3d5a8527fdc22fa05b722afbe2066e8562e02e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:34:bb:42:4f:b4:56:ab:15:9e:2a:4c:af:83:
7d:73:25:48:32:e7:7d:8e:dd:06:42:4d:58:ed:75:
93:da:b0:fa:77:bd:aa:dd:e9:6d:31:b9:36:1c:3d:
26:21:e5:cf:82:d2:2d:91:16:7f:5f:7a:a9:cd:c4:
de:47:1d:7b:a5:61:51:11:96:bc:60:7f:c7:70:0a:
b5:78:b4:ec:0a:38:d0:9f:88:e0:15:7d:07:c9:45:
b1:8c:2e:99:99:91:20:60:c9:80:00:4d:f6:e9:ba:
17:49:b0:2f:68:b5:a4:2c:af:02:a6:28:3b:8c:4f:
4d:47:3f:bf:13:3e:05:ec:7d:d7:39:31:52:ff:0e:
c7:b1:f0:3b:01:aa:62:fa:fa:fd:16:b0:84:94:93:
24:51:03:aa:4b:2e:f5:c6:0d:ca:79:0c:25:ff:c2:
b9:1c:63:cf:75:f5:65:f3:c4:0b:af:38:9e:be:60:
5d:70:a7:ce:4a:a2:03:8a:36:bd:b7:8f:df:30:9a:
33:0b:24:ff:35:8c:37:1f:02:c2:90:f8:7a:43:b3:
1c:3a:5b:23:ca:f4:a2:db:73:50:85:e1:32:01:bb:
68:94:1b:77:cf:27:e3:5d:54:00:17:9d:41:76:9b:
22:13:aa:b5:86:29:d5:34:b8:59:da:62:40:61:d3:
7b:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:3D:5A:85:27:FD:C2:2F:A0:5B:72:2A:FB:E2:06:6E:85:62:E0:2E
X509v3 Authority Key Identifier:
keyid:02:6D:51:1C:E3:AF:90:C4:D6:01:C7:CC:F8:36:05:23:71:3E:2C:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Am1RHOOvkMTWAcfM-DYFI3E-LJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b0c402-e09e-4c69-acc9-84da62066e8a/1/fT1ahSf9wi-gW3Iq--IGboVi4C4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b0c402-e09e-4c69-acc9-84da62066e8a/1/Am1RHOOvkMTWAcfM-DYFI3E-LJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.232.170.0/23
46.232.174.0/23
Signature Algorithm: sha256WithRSAEncryption
0e:46:35:3f:c9:27:3d:43:d3:93:fd:63:f7:0a:4d:50:2f:d2:
93:72:2d:3c:78:d6:50:ba:97:76:da:eb:e0:9b:ab:8a:b1:43:
dc:0a:f6:93:1f:2a:77:5a:76:15:f1:8c:ab:3e:82:2d:8e:66:
aa:22:85:7d:2a:ce:15:58:80:bc:d6:6d:06:a5:31:8e:04:ca:
68:23:9f:ca:21:f3:18:a5:5e:20:8e:d5:0e:9e:be:cb:5c:67:
dd:b0:31:64:48:b4:d7:6b:38:d2:ec:a9:63:a8:47:44:c9:bf:
96:52:c9:1c:90:39:8a:d8:b3:94:4a:5e:0d:00:7e:ed:05:5d:
13:88:8b:49:5d:f4:d6:8b:69:85:9e:71:cb:d9:ba:f6:96:05:
af:c2:79:d4:04:fe:86:8f:d8:fe:0f:63:e1:1e:ce:18:72:78:
23:df:f9:5a:73:dd:64:4f:ea:19:de:e0:71:fb:53:82:b3:11:
e2:b8:ea:f5:fd:14:34:86:f2:46:f6:8a:f8:5e:fc:1d:a5:d1:
bf:eb:a2:3e:db:3b:63:db:98:6d:f1:06:62:5d:92:7c:dd:f7:
d4:1b:5c:22:9b:e2:cf:cd:24:0e:9e:13:c0:2f:4c:6e:a4:ab:
17:45:62:ff:1a:5e:0d:31:13:35:91:16:5b:d1:cf:91:2b:c8:
07:1d:92:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:55:21 2025 by rpki-client