Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/ec4a2b-76d7-4473-9945-2f2f8b590503/1/AQb4NA0iIwYMaS4khoDyVt9RCG4.roa
File: AQb4NA0iIwYMaS4khoDyVt9RCG4.roa (raw, json)
Hash identifier: 58LXgLCBDudul5koOz+4VHQS0wDCBrVYTUIAiNkgAxo=
Subject key identifier: 01:06:F8:34:0D:22:23:06:0C:69:2E:24:86:80:F2:56:DF:51:08:6E
Certificate issuer: /CN=15f1fb12903a5cd4bc17abb59873c9d6da7e69b5
Certificate serial: 019424B2C3D8B1C51BCC9C36097359814ACC
Authority key identifier: 15:F1:FB:12:90:3A:5C:D4:BC:17:AB:B5:98:73:C9:D6:DA:7E:69:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfH7EpA6XNS8F6u1mHPJ1tp-abU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/ec4a2b-76d7-4473-9945-2f2f8b590503/1/AQb4NA0iIwYMaS4khoDyVt9RCG4.roa
Signing time: Thu 02 Jan 2025 01:48:02 +0000
ROA not before: Thu 02 Jan 2025 01:48:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51993
IP address blocks: 46.149.48.0/23 maxlen: 23
46.149.48.0/24 maxlen: 24
46.149.49.0/24 maxlen: 24
46.149.52.0/23 maxlen: 23
46.149.52.0/24 maxlen: 24
46.149.53.0/24 maxlen: 24
46.149.54.0/23 maxlen: 23
46.149.54.0/24 maxlen: 24
46.149.55.0/24 maxlen: 24
46.149.56.0/23 maxlen: 23
46.149.56.0/24 maxlen: 24
46.149.57.0/24 maxlen: 24
46.149.60.0/22 maxlen: 22
46.149.60.0/23 maxlen: 23
46.149.62.0/24 maxlen: 24
46.149.63.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b2:c3:d8:b1:c5:1b:cc:9c:36:09:73:59:81:4a:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f1fb12903a5cd4bc17abb59873c9d6da7e69b5
Validity
Not Before: Jan 2 01:48:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0106f8340d2223060c692e248680f256df51086e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:41:f8:31:25:bb:9e:20:11:20:14:25:74:1a:
f2:51:99:51:69:19:75:06:cd:51:b6:26:a1:fa:eb:
d8:b8:40:6d:f1:b9:e9:ca:05:72:c0:15:ee:d7:6b:
43:af:71:1e:27:10:ba:d5:87:43:9d:a0:52:27:31:
8b:0b:68:bf:c2:9f:cb:a5:e6:4b:7c:b4:05:b3:1c:
46:d6:46:66:23:40:0c:a7:93:48:86:4a:c8:b0:86:
65:e8:a8:cf:40:5b:6d:0e:1d:c2:d7:11:87:d8:b8:
1f:45:a4:57:8b:27:0c:d6:37:91:2e:43:aa:e0:9b:
d7:e9:eb:ea:4c:a0:f0:7e:71:42:be:6f:2a:93:12:
76:4a:b7:1b:ab:9f:6a:ee:f8:bf:fc:11:d1:f6:da:
cd:23:ed:55:11:43:e8:36:51:16:50:b3:80:c4:ed:
24:b7:ca:ac:0a:20:19:d1:36:c3:6b:07:75:72:dd:
4a:5c:3d:ad:47:be:32:ed:20:96:50:c1:02:57:0b:
90:4e:86:37:f8:68:53:ce:5d:04:6c:79:1b:27:be:
dc:4b:25:5a:4c:a6:3c:59:a1:50:eb:dc:a1:da:cb:
38:d0:1c:a0:16:10:29:af:d7:cd:91:34:84:3a:46:
17:df:f7:31:ff:8e:1f:44:55:f2:36:00:6c:f8:1d:
61:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:06:F8:34:0D:22:23:06:0C:69:2E:24:86:80:F2:56:DF:51:08:6E
X509v3 Authority Key Identifier:
keyid:15:F1:FB:12:90:3A:5C:D4:BC:17:AB:B5:98:73:C9:D6:DA:7E:69:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfH7EpA6XNS8F6u1mHPJ1tp-abU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ec4a2b-76d7-4473-9945-2f2f8b590503/1/AQb4NA0iIwYMaS4khoDyVt9RCG4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ec4a2b-76d7-4473-9945-2f2f8b590503/1/FfH7EpA6XNS8F6u1mHPJ1tp-abU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.149.48.0/23
46.149.52.0-46.149.57.255
46.149.60.0/22
Signature Algorithm: sha256WithRSAEncryption
58:b2:8d:14:51:79:eb:5f:19:1a:b1:8b:8d:99:4f:c8:4c:92:
11:d3:c1:8f:ec:41:71:fb:4c:7d:a7:99:4e:e9:2c:c0:77:85:
b9:be:1d:9d:20:e5:d5:f4:7b:10:3f:aa:80:5b:e2:ae:48:2d:
8f:d5:4a:72:41:dd:c8:55:5c:21:f7:6d:8f:8f:e0:c1:2b:5e:
fd:53:2c:23:bf:65:c4:ed:92:5a:ca:cf:41:50:46:99:6e:8f:
e1:cb:a2:75:cd:3a:9e:7d:47:cc:10:ad:3b:3e:49:9b:05:00:
eb:67:66:ce:43:60:5e:b4:ec:b4:4d:f9:54:87:ed:d6:cb:37:
38:f3:f3:55:89:74:38:0a:16:0a:0c:12:c5:93:6a:97:62:5b:
34:8d:48:80:8b:69:b0:01:ce:a2:0f:d8:26:d3:c4:8d:56:e5:
f6:81:5c:a7:5b:e7:ca:bf:50:0c:56:49:05:54:de:43:e6:7f:
47:c7:2a:26:b4:77:db:8a:2c:76:73:fc:20:b8:dd:c6:44:47:
a5:a7:06:f7:8c:67:98:6f:32:8c:e3:49:62:16:fb:c9:a0:84:
ae:db:38:4c:b1:36:16:80:7b:eb:0c:4a:74:0d:d3:a1:cd:ca:
d7:34:ba:a2:c9:6d:d5:df:a0:95:37:f0:43:43:48:4a:64:e6:
38:b5:82:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:18:34 2025 by rpki-client