Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/4c1f59-0c12-4153-a15c-715f9cd63086/1/5XqYz3igdHBUJOarhV6UCk20p4g.roa
File: 5XqYz3igdHBUJOarhV6UCk20p4g.roa (raw, json)
Hash identifier: OiTQYPv4ItBCPhGaoL4ocDwYxXkvxpj8Eo+XMn3YAwI=
Subject key identifier: E5:7A:98:CF:78:A0:74:70:54:24:E6:AB:85:5E:94:0A:4D:B4:A7:88
Certificate issuer: /CN=4c988b93ab7a2999a3255eeae4e18ab23b2e0f3e
Certificate serial: 01942521964D4BFC26291CB1DA332FE830C6
Authority key identifier: 4C:98:8B:93:AB:7A:29:99:A3:25:5E:EA:E4:E1:8A:B2:3B:2E:0F:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TJiLk6t6KZmjJV7q5OGKsjsuDz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/4c1f59-0c12-4153-a15c-715f9cd63086/1/5XqYz3igdHBUJOarhV6UCk20p4g.roa
Signing time: Thu 02 Jan 2025 03:49:05 +0000
ROA not before: Thu 02 Jan 2025 03:49:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49101
IP address blocks: 46.36.32.0/19 maxlen: 24
2a02:25b0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:96:4d:4b:fc:26:29:1c:b1:da:33:2f:e8:30:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c988b93ab7a2999a3255eeae4e18ab23b2e0f3e
Validity
Not Before: Jan 2 03:49:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e57a98cf78a074705424e6ab855e940a4db4a788
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f7:f5:22:32:e9:f4:6e:af:00:62:3e:b1:c8:
d3:9d:0d:70:12:e4:1d:de:02:ef:67:9d:56:39:62:
49:ce:74:6f:6f:e8:5f:b1:1a:f5:72:8c:da:a0:22:
b7:52:55:eb:39:66:fd:55:bc:fc:36:5d:fb:fe:aa:
ef:1b:97:99:a6:ba:ed:80:17:17:80:29:6c:11:09:
df:e0:36:87:5c:77:e9:eb:5b:0b:74:c9:6a:e6:2d:
f2:71:37:3a:ae:d3:bc:5c:c1:e0:7c:72:7d:b1:c2:
e3:f2:52:0b:8f:de:6a:77:3d:14:44:c0:6d:21:59:
23:3c:e3:9a:30:6f:6a:f2:52:6b:7e:63:78:2b:68:
3a:8a:2c:34:7f:12:05:b1:e5:42:57:fc:b1:bf:17:
c3:35:39:9a:24:0b:b8:1c:51:9f:80:3d:89:eb:4a:
e2:ac:7c:96:ba:50:41:7b:11:d3:c7:68:0c:d3:5d:
e3:6c:60:91:c1:e8:45:98:ea:e1:12:2e:03:38:44:
3d:1b:2f:c3:e1:06:31:6c:e4:c5:2e:d6:44:7c:6f:
93:fa:bd:e1:36:e4:17:56:66:73:26:9e:21:cd:9e:
a6:15:8c:2b:3c:9b:38:fe:c9:b9:24:10:aa:00:f0:
5a:0e:56:2d:37:72:00:8f:79:13:4e:3e:62:45:02:
e1:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:7A:98:CF:78:A0:74:70:54:24:E6:AB:85:5E:94:0A:4D:B4:A7:88
X509v3 Authority Key Identifier:
keyid:4C:98:8B:93:AB:7A:29:99:A3:25:5E:EA:E4:E1:8A:B2:3B:2E:0F:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TJiLk6t6KZmjJV7q5OGKsjsuDz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4c1f59-0c12-4153-a15c-715f9cd63086/1/5XqYz3igdHBUJOarhV6UCk20p4g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4c1f59-0c12-4153-a15c-715f9cd63086/1/TJiLk6t6KZmjJV7q5OGKsjsuDz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.36.32.0/19
IPv6:
2a02:25b0::/32
Signature Algorithm: sha256WithRSAEncryption
73:e5:54:58:1a:53:f7:7d:86:c1:69:97:09:71:c0:63:79:1f:
e9:82:bf:a3:c2:98:db:f1:f4:4f:2c:74:b3:0a:cd:c8:7c:fe:
32:bb:c9:11:66:64:dc:47:1b:9c:06:e6:16:fe:da:79:a3:92:
26:8c:1e:be:47:e0:aa:15:fb:9e:7b:e1:40:3e:f4:90:9e:e9:
2f:7b:04:f4:76:f3:e7:7c:cc:f1:e2:bd:ee:13:f8:e7:f8:95:
50:d6:53:fe:ff:dc:17:b2:54:9a:07:e1:62:ce:c4:2c:c3:5b:
8a:23:ae:34:dc:a5:88:e9:9e:fe:37:ba:fa:ac:bb:cb:00:30:
d1:d9:59:06:4e:31:5d:15:55:75:71:35:e4:fc:89:7b:3e:8d:
9b:5c:5b:07:78:f7:3c:ea:f6:70:60:a6:36:de:64:91:e8:bd:
12:4a:74:ba:44:d7:c6:bc:77:ad:8a:5b:fd:20:cd:81:27:b4:
12:1e:6c:1b:2d:50:89:7a:a3:60:61:21:94:ca:37:eb:20:50:
9b:ba:e5:57:0c:0a:e7:d9:37:10:6c:99:4e:14:68:17:50:9a:
8e:bf:c4:68:55:d9:06:fd:ba:85:87:b9:b6:4a:ab:7e:b4:e7:
c5:f9:cb:b9:c4:55:5b:58:84:58:fd:c3:3f:6e:03:5b:d1:cb:
f8:b2:45:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:06:43 2025 by rpki-client