Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/de68c6-650f-4dfa-bd13-000082c123e7/1/LHapQb8ix5yDr9XdIdq3SLfgGJQ.roa
File: LHapQb8ix5yDr9XdIdq3SLfgGJQ.roa (raw, json)
Hash identifier: OTBcvGKIAwNH7dYThkaA46DYb8Du7nUhG7Wp8v0hqOA=
Subject key identifier: 2C:76:A9:41:BF:22:C7:9C:83:AF:D5:DD:21:DA:B7:48:B7:E0:18:94
Certificate issuer: /CN=3f058e432bbf72369750a9951d5259430b5ca4bf
Certificate serial: 019423D6E23356A0D64CF08CAA648B7D095E
Authority key identifier: 3F:05:8E:43:2B:BF:72:36:97:50:A9:95:1D:52:59:43:0B:5C:A4:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PwWOQyu_cjaXUKmVHVJZQwtcpL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/de68c6-650f-4dfa-bd13-000082c123e7/1/LHapQb8ix5yDr9XdIdq3SLfgGJQ.roa
Signing time: Wed 01 Jan 2025 21:47:52 +0000
ROA not before: Wed 01 Jan 2025 21:47:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49218
IP address blocks: 46.165.0.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:e2:33:56:a0:d6:4c:f0:8c:aa:64:8b:7d:09:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f058e432bbf72369750a9951d5259430b5ca4bf
Validity
Not Before: Jan 1 21:47:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2c76a941bf22c79c83afd5dd21dab748b7e01894
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:75:37:b8:13:41:54:7c:e2:95:d9:dd:d2:87:
b1:ab:26:85:0c:b2:f0:2b:13:cd:c6:e6:e6:92:ac:
81:55:db:c9:00:29:c5:09:b9:a3:f3:5d:77:5c:2d:
d4:bf:1a:7e:d5:3f:2a:08:9f:c9:ad:31:39:42:a0:
bf:61:d7:99:7d:45:67:84:44:9a:00:e9:f7:73:6b:
35:3c:c7:89:1f:61:6e:5f:f1:eb:a8:1d:7d:57:49:
b2:7e:18:3a:14:3a:4e:53:d9:99:b6:d1:8b:ea:9f:
99:7c:7b:3e:c7:92:a3:82:1a:42:51:27:22:16:3c:
c1:70:af:40:b3:d8:55:c4:d5:1a:73:0f:66:8a:aa:
62:e2:59:3d:54:27:48:ea:ac:e4:51:4e:2a:ba:6b:
48:61:61:2a:a2:15:a9:1a:61:76:d7:58:f3:06:76:
d0:a4:43:c4:f2:1b:64:54:4b:a4:0e:8d:3c:ed:41:
5b:ee:e2:94:31:45:2a:54:4d:f1:38:2f:38:80:5a:
c0:4a:e0:11:f3:88:39:ea:a9:57:23:79:30:55:d0:
6e:15:f4:4a:6b:ff:8d:c5:12:d1:b4:b2:d2:02:c4:
d8:81:08:73:de:e0:f1:51:8e:26:e9:c7:89:5f:fa:
8e:61:cd:50:02:64:b7:91:3a:93:fe:c6:04:82:fc:
b4:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:76:A9:41:BF:22:C7:9C:83:AF:D5:DD:21:DA:B7:48:B7:E0:18:94
X509v3 Authority Key Identifier:
keyid:3F:05:8E:43:2B:BF:72:36:97:50:A9:95:1D:52:59:43:0B:5C:A4:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PwWOQyu_cjaXUKmVHVJZQwtcpL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/de68c6-650f-4dfa-bd13-000082c123e7/1/LHapQb8ix5yDr9XdIdq3SLfgGJQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/de68c6-650f-4dfa-bd13-000082c123e7/1/PwWOQyu_cjaXUKmVHVJZQwtcpL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.165.0.0/18
Signature Algorithm: sha256WithRSAEncryption
b7:e0:d6:73:7c:e1:29:80:2a:0d:f6:62:19:ec:cf:5f:41:dc:
45:1f:cd:3f:e8:f9:d5:94:3e:f2:60:9d:0e:40:45:94:12:be:
53:5a:31:c0:5e:3d:c1:0c:3c:94:a4:fe:ea:bc:0b:7c:1a:ed:
82:2e:f7:b5:41:f9:37:f0:a1:0c:94:e0:a5:81:b7:03:14:60:
fe:bd:0c:07:11:e9:d4:67:df:40:d8:4e:03:70:0b:93:a0:a2:
55:dd:c0:3e:25:ba:58:76:ab:35:e4:98:f0:2f:3b:0e:16:11:
6f:89:33:2c:30:c9:8b:c6:7b:c8:55:0b:8e:ea:a1:a5:c2:7c:
bd:f0:57:40:7b:f8:6d:5e:83:25:fa:ed:a7:18:88:e4:52:67:
58:d0:03:ba:a5:f0:9c:d4:0b:8b:f8:b4:13:d2:28:44:98:ec:
6b:89:9b:d4:d7:4e:79:d2:d0:43:87:e1:42:22:a4:66:6b:8e:
49:cb:5e:3b:32:98:32:d7:fd:ef:08:ae:be:93:b0:2f:b6:ad:
b4:1f:51:59:9f:31:ac:11:27:5d:b1:c7:7e:d3:6c:80:8d:df:
e9:50:ca:1d:23:6c:b3:4e:bf:57:ee:30:fd:68:d2:bf:35:10:
48:20:b6:f5:47:db:56:50:de:f9:7a:cd:b8:5a:b7:e0:db:e1:
fe:55:f2:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:04:36 2025 by rpki-client