Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/ffef96-bac5-4126-b2b7-0135d9128e86/1/6jOAX6ZKooyhgzG3-RXUavHtejc.roa
File: 6jOAX6ZKooyhgzG3-RXUavHtejc.roa (raw, json)
Hash identifier: zAiUnOceYAANogRzQmsXCXZI4dk5OulIUSwMR15rFvs=
Subject key identifier: EA:33:80:5F:A6:4A:A2:8C:A1:83:31:B7:F9:15:D4:6A:F1:ED:7A:37
Certificate issuer: /CN=a503b1dd410070ad62e4a2fc66a13b4eb61368f4
Certificate serial: 01941FFA49D4F1EB7E641961618EFFF556BE
Authority key identifier: A5:03:B1:DD:41:00:70:AD:62:E4:A2:FC:66:A1:3B:4E:B6:13:68:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pQOx3UEAcK1i5KL8ZqE7TrYTaPQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/ffef96-bac5-4126-b2b7-0135d9128e86/1/6jOAX6ZKooyhgzG3-RXUavHtejc.roa
Signing time: Wed 01 Jan 2025 03:48:04 +0000
ROA not before: Wed 01 Jan 2025 03:48:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207209
IP address blocks: 46.149.64.0/23 maxlen: 23
2001:678:9f4::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:49:d4:f1:eb:7e:64:19:61:61:8e:ff:f5:56:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a503b1dd410070ad62e4a2fc66a13b4eb61368f4
Validity
Not Before: Jan 1 03:48:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ea33805fa64aa28ca18331b7f915d46af1ed7a37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:34:17:1c:35:7c:52:90:43:0a:8c:85:43:08:
91:53:b1:02:ea:2d:8b:f7:60:63:69:8b:a2:9d:34:
3e:ad:55:5b:ef:c2:78:90:af:1e:2d:e4:49:22:c2:
de:c7:69:18:df:56:0b:6c:54:d9:8f:40:35:24:5c:
c1:dd:2b:19:57:0f:8d:a5:d5:7f:34:f2:c7:16:26:
33:fc:1c:d3:3c:41:a5:8a:2f:ec:54:72:ac:8d:d0:
61:99:f7:2e:03:35:2e:4a:9a:e3:88:c4:8d:fd:14:
7e:1e:88:5f:af:c9:b9:a7:c9:8f:cb:d9:5b:47:2c:
c4:f1:ef:f7:a6:09:60:cb:80:90:cf:e2:9a:67:90:
06:38:ad:59:b9:74:81:e7:6c:42:02:d8:ac:72:b8:
7c:20:30:eb:4e:d2:52:3a:30:eb:6a:23:f8:58:78:
f0:f9:7e:a0:0b:37:fb:69:a3:e3:79:b9:d4:3b:f5:
54:69:09:d8:1f:71:32:e4:db:65:7a:1e:89:a9:30:
f8:28:fe:83:56:04:82:43:49:cd:23:57:45:a5:3d:
9c:01:57:0f:8c:4b:95:ad:ee:4c:56:6d:44:a0:13:
99:fc:81:a1:85:1e:c7:95:15:5e:34:3a:34:ee:ab:
da:b8:b3:69:67:6e:cf:bc:1f:9e:23:65:47:b9:a5:
f0:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:33:80:5F:A6:4A:A2:8C:A1:83:31:B7:F9:15:D4:6A:F1:ED:7A:37
X509v3 Authority Key Identifier:
keyid:A5:03:B1:DD:41:00:70:AD:62:E4:A2:FC:66:A1:3B:4E:B6:13:68:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pQOx3UEAcK1i5KL8ZqE7TrYTaPQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/ffef96-bac5-4126-b2b7-0135d9128e86/1/6jOAX6ZKooyhgzG3-RXUavHtejc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/ffef96-bac5-4126-b2b7-0135d9128e86/1/pQOx3UEAcK1i5KL8ZqE7TrYTaPQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.149.64.0/23
IPv6:
2001:678:9f4::/48
Signature Algorithm: sha256WithRSAEncryption
9a:d7:b3:34:01:0d:95:8e:a6:c0:97:bd:25:f2:2c:87:dd:ae:
a7:d5:aa:43:5d:35:44:4f:39:89:4b:d4:21:10:86:82:1b:0e:
95:8d:af:dd:85:97:64:b8:23:ab:27:56:21:39:6f:69:ea:d8:
1f:5d:1b:78:12:1d:05:e0:8d:3e:14:17:ef:48:aa:5b:af:21:
8d:2b:d0:36:5b:f4:d2:f3:c9:65:88:c0:da:58:3e:68:d6:f5:
d1:dc:21:29:17:c9:d9:ae:ea:9b:bc:9d:68:0f:65:d6:55:35:
f4:6e:fb:0a:21:c7:33:b6:ab:4b:a9:ae:7b:8b:25:18:c1:88:
d1:d1:44:7c:66:4e:8d:fc:cd:e5:19:4d:2e:d3:44:2f:df:27:
83:71:00:8e:f6:5e:bd:69:49:ff:7a:95:ff:89:3c:73:5b:ce:
17:3f:71:c1:f0:fb:c8:c8:0f:38:0f:8e:4f:fb:c0:e3:da:29:
d5:6a:34:80:6f:6c:32:e2:de:1c:fc:92:6d:0d:88:e9:8f:0d:
b7:c0:e3:f8:1e:42:35:ae:7d:e0:55:8f:db:a7:ee:a2:7d:5f:
d4:75:d5:f1:a3:19:8a:95:7e:a8:40:7f:ec:d4:56:67:1e:0c:
b4:de:48:13:b2:ef:e3:49:9f:f1:5a:26:67:a1:08:5c:96:1b:
b3:90:8c:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:42:38 2025 by rpki-client