Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/45a9c5-2cc1-4f45-ba80-ad58189de754/1/46cUFKURmF9XnPH8sSx3t3pgjTo.roa
File: 46cUFKURmF9XnPH8sSx3t3pgjTo.roa (raw, json)
Hash identifier: 0QimrSPj6EgGm2B8/lr6EDBnOBJIibCqv64JLqj1ceI=
Subject key identifier: E3:A7:14:14:A5:11:98:5F:57:9C:F1:FC:B1:2C:77:B7:7A:60:8D:3A
Certificate issuer: /CN=8ab6bd65fe2a86fd42f9c4f504e1eed58570f93d
Certificate serial: 01941FFA2A612289B1CEECF558A787AA6457
Authority key identifier: 8A:B6:BD:65:FE:2A:86:FD:42:F9:C4:F5:04:E1:EE:D5:85:70:F9:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ira9Zf4qhv1C-cT1BOHu1YVw-T0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/45a9c5-2cc1-4f45-ba80-ad58189de754/1/46cUFKURmF9XnPH8sSx3t3pgjTo.roa
Signing time: Wed 01 Jan 2025 03:47:56 +0000
ROA not before: Wed 01 Jan 2025 03:47:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57808
IP address blocks: 91.235.144.0/22 maxlen: 22
91.235.144.0/23 maxlen: 23
91.235.144.0/24 maxlen: 24
91.235.145.0/24 maxlen: 24
91.235.146.0/23 maxlen: 23
91.235.146.0/24 maxlen: 24
91.235.147.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:2a:61:22:89:b1:ce:ec:f5:58:a7:87:aa:64:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ab6bd65fe2a86fd42f9c4f504e1eed58570f93d
Validity
Not Before: Jan 1 03:47:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e3a71414a511985f579cf1fcb12c77b77a608d3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:9c:5b:6b:76:2a:02:ec:95:50:d2:5d:58:92:
ef:e1:1d:97:2f:a5:67:90:d4:18:ec:b0:f1:0c:d8:
fa:5a:74:ca:b2:52:25:57:6b:e0:34:d7:25:0c:a1:
7a:3f:eb:e5:b3:f3:17:77:65:fa:82:8f:1d:ac:7b:
96:62:97:9b:c9:1e:24:35:b6:2d:7d:b8:60:78:f5:
89:7e:05:e5:81:04:bd:e3:94:a4:b5:54:49:cd:60:
ce:8d:5f:a4:81:8f:43:88:51:6c:6b:91:ee:a2:c4:
b4:19:91:51:62:7c:60:30:15:73:f0:af:fd:e2:ad:
f8:26:28:82:bf:af:4d:cf:d4:0d:38:a5:4b:01:69:
d8:c7:60:44:c0:cb:40:52:3a:26:55:ac:5e:f5:e4:
a8:11:e5:a7:73:09:63:7b:1e:26:54:cd:a8:20:98:
b8:9a:bd:f7:fd:d8:a2:9f:2e:2e:68:f4:b3:09:19:
48:9d:43:72:f4:b0:1b:37:c8:ad:f4:a5:31:f4:3a:
d1:dc:87:56:26:c9:bc:24:1c:8a:69:71:c5:9c:33:
bb:af:13:eb:db:33:06:a6:a3:4c:93:32:26:d0:45:
8f:0e:c1:b1:23:c4:3b:dc:84:49:68:f9:44:1d:e2:
52:5d:2d:5f:4d:a6:c4:e3:48:89:25:3d:d1:36:37:
b5:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:A7:14:14:A5:11:98:5F:57:9C:F1:FC:B1:2C:77:B7:7A:60:8D:3A
X509v3 Authority Key Identifier:
keyid:8A:B6:BD:65:FE:2A:86:FD:42:F9:C4:F5:04:E1:EE:D5:85:70:F9:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ira9Zf4qhv1C-cT1BOHu1YVw-T0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/45a9c5-2cc1-4f45-ba80-ad58189de754/1/46cUFKURmF9XnPH8sSx3t3pgjTo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/45a9c5-2cc1-4f45-ba80-ad58189de754/1/ira9Zf4qhv1C-cT1BOHu1YVw-T0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.235.144.0/22
Signature Algorithm: sha256WithRSAEncryption
db:2a:de:89:79:5d:29:ad:1a:bf:f8:3d:24:0b:98:b7:0b:ed:
4f:3a:1e:96:c2:03:58:d2:1c:92:2a:f2:b3:29:99:4c:e9:b0:
ba:69:04:b3:5b:3e:64:f5:3c:5f:d3:ef:f5:a2:87:03:e1:dc:
b5:71:f6:ca:07:8c:d4:d6:7d:8a:fe:8c:6d:c6:76:bc:98:c5:
8a:4a:0c:36:ae:f7:3e:07:c2:95:8c:d4:ca:10:df:a1:ff:8c:
13:17:b5:1c:81:f8:24:3c:a5:c3:98:8c:63:f4:03:4e:fb:eb:
16:2b:b2:c8:32:7f:73:99:5b:45:b6:62:20:d7:29:6f:6f:98:
e5:c0:94:4b:7a:10:c5:c2:68:5c:9e:5e:5c:ee:28:51:9e:d2:
4c:4a:79:ea:17:5b:da:c2:51:4b:63:ac:5d:64:10:60:3d:f6:
15:2d:99:0d:2c:84:ed:f4:f2:c8:86:3a:15:65:e7:98:b9:00:
95:ed:7e:69:d3:4e:aa:65:5e:af:80:23:38:73:82:d8:af:09:
82:02:63:1d:ae:0c:a1:93:cb:a7:14:50:b8:f5:40:9e:b1:80:
5b:3e:14:23:b0:4f:d5:c8:8d:55:04:26:5e:76:c7:79:7f:0c:
f2:ce:26:5c:23:37:27:ec:33:ed:58:24:3f:ca:d2:7a:0b:6b:
4d:09:26:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:35:23 2025 by rpki-client