Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/f1b3da-bebf-44b0-ab12-d32e27fb7e59/1/1ZLLlpQFZQkTqIBAHCc5d1VfoKs.roa
File: 1ZLLlpQFZQkTqIBAHCc5d1VfoKs.roa (raw, json)
Hash identifier: y420UM0xhYvhHVANW5cNvzv2FZY2TvVXtMQ3bLwlcAQ=
Subject key identifier: D5:92:CB:96:94:05:65:09:13:A8:80:40:1C:27:39:77:55:5F:A0:AB
Certificate issuer: /CN=b62d4cec783305923e3497ed884f1c445b4e78fb
Certificate serial: 01944AF469B26D9455690CA6C750C91CA2C8
Authority key identifier: B6:2D:4C:EC:78:33:05:92:3E:34:97:ED:88:4F:1C:44:5B:4E:78:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ti1M7HgzBZI-NJftiE8cRFtOePs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/f1b3da-bebf-44b0-ab12-d32e27fb7e59/1/1ZLLlpQFZQkTqIBAHCc5d1VfoKs.roa
Signing time: Thu 09 Jan 2025 12:05:19 +0000
ROA not before: Thu 09 Jan 2025 12:05:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47802
IP address blocks: 46.253.0.0/24 maxlen: 24
46.253.1.0/24 maxlen: 24
193.43.105.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:4a:f4:69:b2:6d:94:55:69:0c:a6:c7:50:c9:1c:a2:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b62d4cec783305923e3497ed884f1c445b4e78fb
Validity
Not Before: Jan 9 12:05:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d592cb969405650913a880401c273977555fa0ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:44:dc:e5:4c:7d:6d:68:30:e9:e3:99:1f:06:
64:91:6a:97:68:1b:36:aa:78:7a:b8:54:73:c3:4e:
b2:02:ee:c4:15:1e:35:ad:1b:44:8d:9f:ff:e1:fe:
28:fb:bf:8d:89:d9:fc:d5:8d:78:57:ab:12:00:ad:
f8:4a:b7:9c:8b:29:09:17:d1:7e:33:89:78:ea:2f:
1b:e9:9d:3d:37:f5:c3:c8:72:b8:8a:d3:d2:24:5c:
33:a9:08:60:17:e3:ce:cb:6e:65:4b:29:a0:eb:1f:
f7:22:41:9c:12:2d:f3:a8:ec:34:22:91:92:4c:b2:
ad:f5:f2:26:d8:55:e4:a9:eb:57:bd:81:83:3c:8a:
8d:15:5b:11:60:f0:6f:f4:40:d4:5a:dc:22:56:7c:
49:94:31:3c:9a:b1:f3:4d:76:98:73:07:0c:5f:27:
e2:ac:4a:9d:68:97:3e:fc:ef:b7:1e:a4:e4:9e:ce:
37:ee:f3:37:fe:c4:77:af:fb:1f:1a:a8:ec:f9:84:
2c:5d:d3:b1:1e:20:e8:6c:25:09:b1:a2:ac:a3:30:
af:48:10:14:e8:7f:e3:41:41:f7:95:f2:4c:7b:99:
e2:d8:35:5b:50:0b:fd:ad:68:42:bc:84:83:39:b0:
bd:77:64:a8:6a:ad:56:81:4d:92:83:e6:15:5e:66:
d8:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:92:CB:96:94:05:65:09:13:A8:80:40:1C:27:39:77:55:5F:A0:AB
X509v3 Authority Key Identifier:
keyid:B6:2D:4C:EC:78:33:05:92:3E:34:97:ED:88:4F:1C:44:5B:4E:78:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ti1M7HgzBZI-NJftiE8cRFtOePs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f1b3da-bebf-44b0-ab12-d32e27fb7e59/1/1ZLLlpQFZQkTqIBAHCc5d1VfoKs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f1b3da-bebf-44b0-ab12-d32e27fb7e59/1/ti1M7HgzBZI-NJftiE8cRFtOePs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.253.0.0/23
193.43.105.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:c0:6b:46:0b:33:e9:f1:09:e6:7c:17:94:2e:3f:f3:34:e8:
d3:4b:49:74:6b:2f:a2:85:3d:0f:7e:18:42:1a:56:6f:52:98:
30:28:7a:46:86:67:90:84:44:62:9c:c9:2e:e6:b4:2f:b7:22:
27:cc:49:61:76:c7:51:03:46:df:c6:98:6d:7d:90:0a:08:4c:
e9:df:8a:05:82:0f:43:54:37:86:ec:f6:58:f2:8e:b1:cc:09:
5a:a2:59:ab:a7:1c:db:22:cf:5c:4d:3b:31:1d:4c:98:91:b7:
fa:73:b2:df:30:a5:48:ac:70:b4:0a:eb:36:2e:04:95:77:47:
a0:79:d2:f4:b7:d5:75:4f:1e:4c:3b:92:f0:bd:3d:07:43:28:
99:7c:64:3e:4f:1e:9b:13:bc:bc:ca:c7:ad:fa:dc:d4:3c:5d:
d1:07:c8:23:e6:72:18:33:7e:ed:2f:be:b8:2a:1a:83:51:c9:
96:0f:ff:73:d1:ea:c4:d9:85:1b:5a:70:a2:31:4c:56:1d:86:
04:c3:0d:35:7e:3f:01:f1:65:5e:cd:81:dc:5f:a1:29:00:d3:
55:e3:78:ef:bd:33:48:b2:8a:7b:e4:44:28:d5:16:31:87:72:
75:5b:ab:b6:b3:ec:f0:f5:52:37:46:63:4d:54:6e:c3:d8:7d:
8a:6b:73:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:08:23 2025 by rpki-client