Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/867209-d35f-49c4-a6ea-858dd1b1617f/1/vATjzltUGioFbSXszC6eHKiVm04.roa
File: vATjzltUGioFbSXszC6eHKiVm04.roa (raw, json)
Hash identifier: WrQvWZYHEUU0CIT92ou0xvlqebX8rZt2J+7+etH+4hA=
Subject key identifier: BC:04:E3:CE:5B:54:1A:2A:05:6D:25:EC:CC:2E:9E:1C:A8:95:9B:4E
Certificate issuer: /CN=7b2a8ac3028b70911cb6111ffda3a2efe558862d
Certificate serial: 019424459C899E37F004C80254BEC25AB2A9
Authority key identifier: 7B:2A:8A:C3:02:8B:70:91:1C:B6:11:1F:FD:A3:A2:EF:E5:58:86:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eyqKwwKLcJEcthEf_aOi7-VYhi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/867209-d35f-49c4-a6ea-858dd1b1617f/1/vATjzltUGioFbSXszC6eHKiVm04.roa
Signing time: Wed 01 Jan 2025 23:48:49 +0000
ROA not before: Wed 01 Jan 2025 23:48:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202891
IP address blocks: 46.245.152.0/21 maxlen: 24
85.117.160.0/19 maxlen: 24
85.117.192.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:9c:89:9e:37:f0:04:c8:02:54:be:c2:5a:b2:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b2a8ac3028b70911cb6111ffda3a2efe558862d
Validity
Not Before: Jan 1 23:48:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bc04e3ce5b541a2a056d25eccc2e9e1ca8959b4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d5:3a:00:2a:ea:ac:cb:a7:f2:a6:85:cf:f3:
a1:be:11:fa:39:93:6d:9a:99:0c:b6:d5:77:da:04:
60:14:ad:a7:0a:cd:90:67:56:3b:0d:61:34:02:d9:
b6:a4:f3:c7:00:c7:23:d9:72:d1:f5:3b:82:2d:cc:
a8:fb:05:02:0e:ea:8c:06:49:4b:a7:db:8b:0d:8f:
9f:bf:cc:a5:30:b6:9d:8b:0b:5c:05:41:c0:41:5f:
2f:8a:16:ef:8f:df:e9:2a:14:b0:fd:b8:d2:6e:28:
1f:64:a8:1b:9d:47:b3:e1:f7:96:7c:23:f1:35:56:
69:a7:de:d3:bc:bd:af:a5:e0:95:71:e1:2a:b4:51:
6b:29:15:5a:3a:b7:d1:ec:61:af:f9:8a:ab:d6:c0:
2e:a7:da:15:13:25:c0:b1:ef:18:77:ca:ea:05:bc:
3b:94:e8:d5:f2:75:95:c7:9b:47:97:23:51:5a:b5:
20:d4:db:a3:55:3e:b1:97:b0:9c:d1:89:ff:4d:76:
9e:af:5d:92:51:7b:3b:66:42:de:f9:89:40:bc:32:
1b:86:19:0d:d4:3c:96:de:69:9f:42:e0:46:c3:dc:
44:3b:93:84:88:bd:aa:1c:13:af:90:3f:96:a4:67:
9d:e5:85:7f:18:4d:be:77:01:d3:13:13:af:97:fa:
83:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:04:E3:CE:5B:54:1A:2A:05:6D:25:EC:CC:2E:9E:1C:A8:95:9B:4E
X509v3 Authority Key Identifier:
keyid:7B:2A:8A:C3:02:8B:70:91:1C:B6:11:1F:FD:A3:A2:EF:E5:58:86:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eyqKwwKLcJEcthEf_aOi7-VYhi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/867209-d35f-49c4-a6ea-858dd1b1617f/1/vATjzltUGioFbSXszC6eHKiVm04.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/867209-d35f-49c4-a6ea-858dd1b1617f/1/eyqKwwKLcJEcthEf_aOi7-VYhi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.245.152.0/21
85.117.160.0-85.117.223.255
Signature Algorithm: sha256WithRSAEncryption
4b:3b:c3:84:0e:a2:37:f5:02:75:d3:da:79:bd:8f:dc:55:ba:
69:88:ca:d0:7f:1f:66:9b:1b:49:e3:10:a3:1c:0d:9e:0c:cd:
6f:23:70:1c:d3:8d:e3:f2:83:82:db:b7:b3:45:af:a1:a9:f5:
72:d6:be:c0:2d:99:6a:97:0f:2f:13:f2:3d:15:38:3a:af:2b:
2d:3c:1a:09:bc:56:f2:3b:d5:6c:9f:96:23:6f:04:e4:6d:86:
95:63:e1:67:9a:20:04:c6:0e:f6:4c:e2:6b:7a:d1:c2:0a:83:
8d:14:b0:36:a7:72:d0:2a:2b:8e:82:d1:5e:b1:3b:93:dc:50:
c7:8b:ec:fd:c8:13:71:50:65:9f:20:b4:5b:f4:56:22:9a:18:
d4:f9:4a:1f:55:bd:1b:5c:ee:e8:f8:0d:ce:1b:e0:df:b4:b1:
71:21:1e:83:ef:82:e6:a4:00:60:5d:c1:ab:96:0c:e7:1f:35:
b5:49:61:aa:00:0f:09:88:4e:e2:ed:58:15:f4:1c:d9:b5:49:
ec:5a:d6:77:15:9c:73:86:32:36:d3:1a:6d:81:7a:28:28:24:
84:27:e2:b0:20:de:53:52:22:bf:34:68:ca:74:72:b7:50:fd:
b6:37:b4:39:ae:09:9c:16:60:c7:5d:7b:59:fa:01:a8:e9:c5:
6f:6f:41:d7
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 25 05:55:17 2025 by rpki-client