Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b97849-2af5-4c3e-8f0e-4dd3853a2241/1/lJ4tZxRFs8zm0c7vVrYQoA3wLAU.roa
File: lJ4tZxRFs8zm0c7vVrYQoA3wLAU.roa (raw, json)
Hash identifier: UW3HI87+Tvs0vPfpNH93w8VClrUvFKCrCGbfw0Tz9ZU=
Subject key identifier: 94:9E:2D:67:14:45:B3:CC:E6:D1:CE:EF:56:B6:10:A0:0D:F0:2C:05
Certificate issuer: /CN=77480527d0b35caf95b37502c4c6f9e3e81fd8a3
Certificate serial: 019427480EE37E01DA70EFA5660068F6411F
Authority key identifier: 77:48:05:27:D0:B3:5C:AF:95:B3:75:02:C4:C6:F9:E3:E8:1F:D8:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d0gFJ9CzXK-Vs3UCxMb54-gf2KM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b97849-2af5-4c3e-8f0e-4dd3853a2241/1/lJ4tZxRFs8zm0c7vVrYQoA3wLAU.roa
Signing time: Thu 02 Jan 2025 13:50:21 +0000
ROA not before: Thu 02 Jan 2025 13:50:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205546
IP address blocks: 46.229.246.0/24 maxlen: 24
46.229.247.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:0e:e3:7e:01:da:70:ef:a5:66:00:68:f6:41:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77480527d0b35caf95b37502c4c6f9e3e81fd8a3
Validity
Not Before: Jan 2 13:50:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=949e2d671445b3cce6d1ceef56b610a00df02c05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:1e:19:b4:52:60:0d:8f:c6:93:e3:47:8c:44:
16:40:19:18:d3:20:28:fc:c2:4c:31:65:5c:c0:d0:
ad:c7:41:1a:dd:a0:eb:94:bb:0c:2d:64:69:d2:c4:
99:2b:52:1d:2f:82:91:3d:98:78:17:0f:19:04:70:
51:6f:7f:22:f0:06:64:39:3d:8c:40:76:40:bf:9e:
07:7a:fe:be:9b:2d:9d:94:b9:94:13:4f:14:a3:88:
54:09:b2:8c:6c:dc:6d:c2:e2:46:ec:f8:eb:ff:0a:
f3:4c:2a:19:45:69:be:d5:9f:71:fd:a2:fc:d4:34:
9b:93:a6:40:ff:0e:cc:70:0f:e1:1b:8e:6a:05:e5:
16:80:c1:e9:39:c3:e3:cf:1c:6c:8f:95:5b:41:d5:
4d:18:5c:0b:a6:6c:65:0a:69:bc:c7:e6:c4:a4:ef:
4d:af:35:0c:93:59:ba:3b:20:00:b3:8b:13:07:83:
17:e0:75:b9:0b:ce:bd:f2:c5:c7:09:1b:e9:6d:34:
20:0e:d0:b1:31:c8:be:99:2f:e5:d9:e5:2f:ef:2c:
07:8b:ef:09:74:3f:f8:ba:fc:2c:e7:fc:b8:04:29:
a1:0f:b5:5d:d0:6c:8a:e5:0a:a5:94:27:e2:54:7e:
58:4b:10:aa:ce:9f:e7:57:9c:0d:35:6d:36:a0:0d:
e7:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:9E:2D:67:14:45:B3:CC:E6:D1:CE:EF:56:B6:10:A0:0D:F0:2C:05
X509v3 Authority Key Identifier:
keyid:77:48:05:27:D0:B3:5C:AF:95:B3:75:02:C4:C6:F9:E3:E8:1F:D8:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0gFJ9CzXK-Vs3UCxMb54-gf2KM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b97849-2af5-4c3e-8f0e-4dd3853a2241/1/lJ4tZxRFs8zm0c7vVrYQoA3wLAU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b97849-2af5-4c3e-8f0e-4dd3853a2241/1/d0gFJ9CzXK-Vs3UCxMb54-gf2KM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.229.246.0/23
Signature Algorithm: sha256WithRSAEncryption
27:30:2e:ca:69:8b:f1:f6:9e:f2:b9:71:1d:5a:d1:b5:ef:de:
93:5a:9f:61:3c:ea:2f:09:9b:0f:93:f0:08:55:10:b4:cd:12:
3a:6f:86:02:8b:3f:f1:df:0f:13:21:e6:fa:1a:96:d9:2e:c0:
78:bc:48:9b:c7:51:3a:01:58:c0:3a:14:41:0c:c3:fc:dc:a5:
82:c2:45:bf:cb:fb:83:cb:e6:90:e5:5b:4f:15:df:99:3d:35:
31:54:b2:28:a3:ce:94:c5:fe:fa:9b:aa:9d:7c:de:7d:18:17:
1e:8b:f1:8f:69:49:44:14:b8:cb:82:12:7d:3f:f8:b2:f2:a7:
9b:4f:c5:6e:e8:24:bd:25:93:f2:fa:b8:dd:2e:83:21:b1:c6:
62:86:cb:ba:31:a0:e0:d7:51:36:87:28:77:14:13:4a:99:09:
c1:60:0a:ce:03:32:c8:9e:22:4d:a8:ee:8a:58:b1:99:ea:0d:
ce:e9:60:d3:19:8e:90:6a:6f:2a:cf:d3:f7:8f:46:f3:8c:d5:
88:e8:8c:c3:95:21:3c:32:73:d7:a7:cb:d2:37:fc:c6:8e:f2:
ea:8e:b6:6c:74:87:ce:f5:c5:6e:69:5a:e8:b5:41:16:df:23:
00:8e:9a:09:d9:2e:5e:65:0f:9e:9a:61:ca:84:97:cc:34:55:
c9:3d:4f:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:04:55 2025 by rpki-client