Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/fadff6-5cc0-4694-9c62-1358c2b5d541/1/owqBee_Kxd5YjUschPQUDNZf4Dw.roa
File: owqBee_Kxd5YjUschPQUDNZf4Dw.roa (raw, json)
Hash identifier: ot8KQMk3wQ6FB25/lH0yWio9yVgR4a2T0TywwiUxMRc=
Subject key identifier: A3:0A:81:79:EF:CA:C5:DE:58:8D:4B:1C:84:F4:14:0C:D6:5F:E0:3C
Certificate issuer: /CN=5230b65d6116d4b60d36fdf7b6c6d5e5b954639e
Certificate serial: 01942521AEABAED22ED1714A648F451FEB24
Authority key identifier: 52:30:B6:5D:61:16:D4:B6:0D:36:FD:F7:B6:C6:D5:E5:B9:54:63:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UjC2XWEW1LYNNv33tsbV5blUY54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/fadff6-5cc0-4694-9c62-1358c2b5d541/1/owqBee_Kxd5YjUschPQUDNZf4Dw.roa
Signing time: Thu 02 Jan 2025 03:49:11 +0000
ROA not before: Thu 02 Jan 2025 03:49:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25593
IP address blocks: 46.19.176.0/21 maxlen: 21
89.107.168.0/21 maxlen: 21
93.188.168.0/21 maxlen: 21
185.48.44.0/22 maxlen: 22
185.48.46.0/24 maxlen: 24
212.67.32.0/20 maxlen: 20
217.19.48.0/20 maxlen: 20
2a00:1a00::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:ae:ab:ae:d2:2e:d1:71:4a:64:8f:45:1f:eb:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5230b65d6116d4b60d36fdf7b6c6d5e5b954639e
Validity
Not Before: Jan 2 03:49:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a30a8179efcac5de588d4b1c84f4140cd65fe03c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:aa:3c:7c:18:a7:46:3c:dd:3a:cd:cb:dc:86:
9c:f9:a0:de:d3:3c:ce:af:99:de:15:b9:31:45:52:
fa:1a:32:c0:20:02:27:d1:e5:93:34:ed:2a:c3:e6:
7f:9c:e3:13:97:08:6e:3e:5a:e1:0e:a2:d4:14:ca:
8c:1a:d7:c6:26:37:44:b3:70:c2:47:49:f2:2b:39:
ad:f6:69:68:ad:a3:c9:42:f6:a2:86:47:d7:8d:b2:
a6:70:96:20:c0:ab:df:dc:be:0b:f1:94:f7:a3:1f:
69:bb:8e:17:10:00:94:9f:1e:72:b8:1f:81:9c:95:
b3:a7:aa:7f:cd:54:ca:cb:2f:1e:c2:01:2f:6a:2b:
d6:10:42:3a:56:16:9d:93:2b:77:5f:b7:ad:0b:ef:
c7:ff:e3:52:8d:f0:41:8b:97:5e:f4:69:d5:25:a7:
36:99:c7:ef:17:1c:9b:c2:a1:9d:1d:60:24:cb:69:
1e:a7:74:cd:2b:90:34:12:91:2e:20:4b:43:56:54:
30:b1:e0:b1:b0:d9:52:ea:92:4e:1a:2f:ed:43:4f:
2b:18:f4:d5:60:b0:47:69:58:27:61:68:7b:34:bc:
05:bc:3c:77:22:cd:b5:35:e9:34:28:1b:f2:cd:20:
f7:fa:eb:ad:3a:2b:29:af:1b:c8:49:e7:64:5b:24:
79:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:0A:81:79:EF:CA:C5:DE:58:8D:4B:1C:84:F4:14:0C:D6:5F:E0:3C
X509v3 Authority Key Identifier:
keyid:52:30:B6:5D:61:16:D4:B6:0D:36:FD:F7:B6:C6:D5:E5:B9:54:63:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UjC2XWEW1LYNNv33tsbV5blUY54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/fadff6-5cc0-4694-9c62-1358c2b5d541/1/owqBee_Kxd5YjUschPQUDNZf4Dw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/fadff6-5cc0-4694-9c62-1358c2b5d541/1/UjC2XWEW1LYNNv33tsbV5blUY54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.19.176.0/21
89.107.168.0/21
93.188.168.0/21
185.48.44.0/22
212.67.32.0/20
217.19.48.0/20
IPv6:
2a00:1a00::/32
Signature Algorithm: sha256WithRSAEncryption
6c:bb:61:e0:3f:40:5a:82:b5:a9:fc:c3:26:0b:10:50:d1:a5:
f5:97:e0:7d:d8:3f:59:f0:1c:8e:ff:ee:f3:a1:60:fa:85:0e:
8e:6d:04:79:6d:8e:d9:b0:b3:07:8c:a8:73:91:af:8c:26:1e:
e2:00:be:2a:b0:5a:8f:47:58:cd:f5:c9:8d:db:23:09:70:95:
01:0f:35:a1:db:8a:6c:85:60:80:1f:67:00:c7:a2:b8:b6:84:
be:b6:ad:0f:57:4e:8e:5c:10:fc:40:2b:ca:42:b8:46:4d:e0:
9e:91:fa:f2:e7:80:83:c6:8f:ee:24:ee:ba:71:9f:9d:76:6d:
2c:ef:ca:55:6f:33:41:da:75:d2:72:39:58:7d:ce:c7:81:20:
a7:a8:f1:74:99:e9:2c:a4:62:73:a8:dd:23:04:77:3f:06:68:
3c:c1:71:61:e9:8c:b9:71:cd:9c:a1:94:a5:1d:27:be:36:84:
3b:4e:3a:e0:31:66:7f:64:c1:fc:ec:e5:07:f7:4b:5c:19:31:
6a:6d:23:e6:a0:c3:35:bf:a4:ac:e8:32:48:eb:0a:90:6d:10:
11:d6:34:0b:1b:56:b8:3f:49:81:a7:3e:c0:b7:59:79:26:5c:
ee:9d:3f:53:58:af:5e:bc:a8:19:4b:ee:84:7b:f0:43:22:6f:
b2:27:5c:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 21:44:53 2025 by rpki-client