Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/3efda5-be8f-486d-b08f-2500420366fb/1/pS03aj6wmU86Zu9PqgpTPjvPCgM.roa
File: pS03aj6wmU86Zu9PqgpTPjvPCgM.roa (raw, json)
Hash identifier: aUGGuBTytMASII0PgxjFCUwQN+XTGnbhLsjxVU+JfJI=
Subject key identifier: A5:2D:37:6A:3E:B0:99:4F:3A:66:EF:4F:AA:0A:53:3E:3B:CF:0A:03
Certificate issuer: /CN=1495c6f815c70ef1910d37493963445af918ab59
Certificate serial: 0194252175566249BD6784C651644AF90F63
Authority key identifier: 14:95:C6:F8:15:C7:0E:F1:91:0D:37:49:39:63:44:5A:F9:18:AB:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FJXG-BXHDvGRDTdJOWNEWvkYq1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/3efda5-be8f-486d-b08f-2500420366fb/1/pS03aj6wmU86Zu9PqgpTPjvPCgM.roa
Signing time: Thu 02 Jan 2025 03:48:57 +0000
ROA not before: Thu 02 Jan 2025 03:48:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199226
IP address blocks: 46.35.96.0/20 maxlen: 20
46.35.112.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:75:56:62:49:bd:67:84:c6:51:64:4a:f9:0f:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1495c6f815c70ef1910d37493963445af918ab59
Validity
Not Before: Jan 2 03:48:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a52d376a3eb0994f3a66ef4faa0a533e3bcf0a03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:3e:57:ad:87:8b:74:4e:b5:5f:d9:ca:34:93:
77:70:0f:5c:f0:33:9b:fa:1d:52:29:4a:f5:ef:4c:
48:26:79:ae:fa:01:92:33:65:9d:fd:ec:e1:ba:d8:
2b:55:61:65:26:bb:4a:1f:90:d3:08:0c:2a:03:0c:
25:da:6b:5c:be:78:07:6c:8b:1e:8a:00:f3:c5:9a:
39:7b:19:ef:e2:7a:b4:0e:c1:a9:ed:e0:09:8e:1f:
af:9c:56:87:b7:80:3b:3c:73:60:2a:54:34:e3:09:
e3:72:c4:ba:c4:a6:9b:cc:6a:70:78:39:25:8f:18:
d2:98:fd:a2:c8:78:ba:29:f9:f4:5b:6f:c7:99:b7:
1d:15:04:4a:a2:13:82:ff:d5:a2:c3:c0:4d:10:0c:
0e:bf:49:a9:5a:23:5d:ee:cc:93:af:a8:da:bf:b1:
8c:fa:e0:ba:51:12:7a:a9:25:6d:41:d2:f2:8f:1e:
e3:fd:56:27:6a:6d:a1:87:4e:b5:f8:6b:1a:74:3b:
81:bc:fc:11:9a:fc:24:c4:ce:d5:9c:2d:11:3b:8d:
48:a9:2e:c2:1c:de:99:97:f3:76:6e:7d:80:54:47:
e9:1c:04:a5:93:be:7f:88:55:0d:ba:75:66:97:8b:
78:39:df:a9:53:23:fe:18:c8:54:42:b1:89:39:e2:
d3:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:2D:37:6A:3E:B0:99:4F:3A:66:EF:4F:AA:0A:53:3E:3B:CF:0A:03
X509v3 Authority Key Identifier:
keyid:14:95:C6:F8:15:C7:0E:F1:91:0D:37:49:39:63:44:5A:F9:18:AB:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FJXG-BXHDvGRDTdJOWNEWvkYq1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/3efda5-be8f-486d-b08f-2500420366fb/1/pS03aj6wmU86Zu9PqgpTPjvPCgM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/3efda5-be8f-486d-b08f-2500420366fb/1/FJXG-BXHDvGRDTdJOWNEWvkYq1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.35.96.0/19
Signature Algorithm: sha256WithRSAEncryption
37:2e:bb:68:82:93:c0:8f:00:f8:78:d0:86:96:d2:a1:16:d1:
5c:00:02:1f:29:bf:fd:94:2f:4d:59:3e:c7:d3:8b:a5:ca:73:
97:9d:cd:52:db:38:50:60:b9:92:8d:a5:1a:e1:d6:a5:c9:d7:
fa:5a:2e:3b:1a:6c:ed:5d:d0:ac:0d:08:e2:c7:64:d7:ec:3e:
43:59:3a:d1:8d:37:a7:3b:7d:51:91:23:0e:af:45:26:e6:58:
5b:f3:61:8d:86:01:af:35:bc:80:55:9e:01:2b:4e:04:d9:68:
4f:b4:77:72:ed:d2:3a:55:2e:12:1c:3a:9e:2f:d3:8c:90:8b:
36:7a:14:ba:f5:2a:6b:1e:90:71:49:8a:cd:eb:bd:86:05:be:
e6:06:85:1a:6a:31:7b:69:dc:f5:22:9f:9a:28:99:b1:59:de:
41:fa:52:36:2b:00:f7:34:86:c3:11:ed:8a:fb:5e:0b:55:52:
25:7f:6f:b2:98:24:88:ea:0d:54:2a:9d:f3:e0:cc:1c:92:a7:
33:70:6c:db:ba:cf:7d:3d:44:d6:b3:d9:22:b7:48:4c:4b:77:
35:71:0c:a2:03:2a:26:5d:d2:2d:7b:ad:fc:a9:f9:08:9e:83:
73:2c:40:91:2c:c1:a4:ea:78:c0:36:84:0f:c2:06:f8:17:43:
37:81:12:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:01:50 2025 by rpki-client