Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/afcf64-0051-4da7-9b12-50e333384669/1/4euPgRI8peAtXVFX6sRIiF63Hf4.roa
File: 4euPgRI8peAtXVFX6sRIiF63Hf4.roa (raw, json)
Hash identifier: Q/jeTerSq3iHWfEt8s2/NsdSThKhl38+chGQZqGbuek=
Subject key identifier: E1:EB:8F:81:12:3C:A5:E0:2D:5D:51:57:EA:C4:48:88:5E:B7:1D:FE
Certificate issuer: /CN=c811029686b2c80a7f0460b6c6ef1b9086728097
Certificate serial: 019427473A28E59D983428B8684B6D03309D
Authority key identifier: C8:11:02:96:86:B2:C8:0A:7F:04:60:B6:C6:EF:1B:90:86:72:80:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yBECloayyAp_BGC2xu8bkIZygJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/afcf64-0051-4da7-9b12-50e333384669/1/4euPgRI8peAtXVFX6sRIiF63Hf4.roa
Signing time: Thu 02 Jan 2025 13:49:26 +0000
ROA not before: Thu 02 Jan 2025 13:49:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202013
IP address blocks: 46.235.7.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:3a:28:e5:9d:98:34:28:b8:68:4b:6d:03:30:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c811029686b2c80a7f0460b6c6ef1b9086728097
Validity
Not Before: Jan 2 13:49:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e1eb8f81123ca5e02d5d5157eac448885eb71dfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:6c:5e:3c:e0:7d:35:f7:fe:73:01:c0:ba:3e:
04:b0:3a:ff:d0:1b:21:80:1b:b6:58:e2:06:63:b2:
43:f1:3f:1f:75:a4:6e:65:5b:76:b1:f0:31:7b:cc:
8e:88:90:0b:d0:54:6d:36:fb:af:42:32:a7:06:22:
72:61:ff:71:fb:88:1d:4b:c0:16:39:e6:e2:b3:26:
ad:00:3f:fa:ca:18:fb:e4:df:a2:b1:bd:52:44:44:
ec:ab:21:b3:0f:f5:7f:7a:0f:fa:65:41:a0:f6:65:
5e:59:51:4f:0d:21:9e:d5:5a:a5:b4:33:3c:65:61:
13:3e:35:7a:5b:20:69:57:fb:10:6b:3f:fa:18:96:
5d:18:3d:ce:bf:2d:2a:28:5c:76:78:ca:2e:4c:d2:
a8:37:d8:c2:23:b7:2c:83:a5:68:c8:7a:cc:2b:d8:
56:07:de:45:f1:da:07:cb:35:de:9f:52:fa:e1:47:
07:15:a1:4b:56:bd:18:c7:9c:80:a0:d0:e3:92:2e:
0d:cf:f0:d6:cf:fb:09:b1:e4:34:a3:d7:6c:2e:53:
2c:12:7d:fb:81:e3:8c:f9:4c:f7:b3:e9:74:34:e3:
de:f7:8b:50:a7:83:e1:0b:a2:07:38:76:36:c8:79:
31:c8:48:51:7f:f3:e1:70:e5:83:3f:e7:88:ce:a2:
c6:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:EB:8F:81:12:3C:A5:E0:2D:5D:51:57:EA:C4:48:88:5E:B7:1D:FE
X509v3 Authority Key Identifier:
keyid:C8:11:02:96:86:B2:C8:0A:7F:04:60:B6:C6:EF:1B:90:86:72:80:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yBECloayyAp_BGC2xu8bkIZygJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/afcf64-0051-4da7-9b12-50e333384669/1/4euPgRI8peAtXVFX6sRIiF63Hf4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/afcf64-0051-4da7-9b12-50e333384669/1/yBECloayyAp_BGC2xu8bkIZygJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.235.7.0/24
Signature Algorithm: sha256WithRSAEncryption
77:7a:12:79:6a:d8:88:aa:d3:a6:07:1a:cd:e6:13:60:54:66:
20:c2:c3:00:fe:ab:0c:17:f3:ee:e8:55:9d:c9:14:70:c7:50:
fd:33:de:89:14:d7:62:87:86:4d:3f:03:39:5a:3e:63:3c:dd:
59:38:0a:6b:2d:ba:21:9e:17:94:0d:02:11:2a:4e:14:e2:d1:
e5:ff:73:9c:a0:82:01:ed:89:14:4c:03:4f:fb:af:fe:ca:25:
24:fe:00:ab:31:44:1a:dc:3d:bf:70:7a:0a:6a:67:06:c1:e4:
5d:e0:8f:8c:66:a3:91:39:ed:34:77:c6:37:f6:54:2b:f7:ce:
52:3e:0e:db:6e:e0:d0:3a:87:18:ce:0a:79:5d:6e:41:96:32:
22:16:02:fa:bf:0d:0e:db:09:c9:38:1b:7d:85:78:ea:74:63:
57:1e:78:73:09:df:9f:06:60:8f:15:87:38:e6:fe:2b:21:44:
95:8f:8d:c1:ba:6f:10:4f:e7:9b:d4:b8:e2:b0:99:db:62:4c:
3a:dd:f3:4b:db:15:86:b8:11:57:c2:f3:1d:ff:f8:53:c5:ac:
73:89:30:11:09:c1:76:52:03:03:d5:ce:5c:01:72:13:9b:28:
10:f8:58:27:b0:39:6f:3d:a9:41:5f:4e:69:aa:a2:8d:ce:f9:
22:20:a4:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 11:34:55 2025 by rpki-client