Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/7b0aae-9d27-4951-bab7-da394384e925/1/TEuCPuBwv_2lyF72kvKuFoWc7_M.roa
File: TEuCPuBwv_2lyF72kvKuFoWc7_M.roa (raw, json)
Hash identifier: PAEddVQWD0GjFhS/Z0wF1zxF3c8P9Lqj+mpgI3WA80g=
Subject key identifier: 4C:4B:82:3E:E0:70:BF:FD:A5:C8:5E:F6:92:F2:AE:16:85:9C:EF:F3
Certificate issuer: /CN=63f14f8e144c6d50c38ab4faff5ac6e547fe1d47
Certificate serial: 019421B241D2961738F84629A9DB633FCBE2
Authority key identifier: 63:F1:4F:8E:14:4C:6D:50:C3:8A:B4:FA:FF:5A:C6:E5:47:FE:1D:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y_FPjhRMbVDDirT6_1rG5Uf-HUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/7b0aae-9d27-4951-bab7-da394384e925/1/TEuCPuBwv_2lyF72kvKuFoWc7_M.roa
Signing time: Wed 01 Jan 2025 11:48:37 +0000
ROA not before: Wed 01 Jan 2025 11:48:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43926
IP address blocks: 46.253.32.0/24 maxlen: 24
46.253.33.0/24 maxlen: 24
46.253.34.0/24 maxlen: 24
46.253.35.0/24 maxlen: 24
46.253.36.0/24 maxlen: 24
46.253.37.0/24 maxlen: 24
46.253.38.0/24 maxlen: 24
46.253.39.0/24 maxlen: 24
185.58.172.0/24 maxlen: 24
185.58.173.0/24 maxlen: 24
185.58.174.0/24 maxlen: 24
185.58.175.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:41:d2:96:17:38:f8:46:29:a9:db:63:3f:cb:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63f14f8e144c6d50c38ab4faff5ac6e547fe1d47
Validity
Not Before: Jan 1 11:48:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4c4b823ee070bffda5c85ef692f2ae16859ceff3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c8:cb:9a:48:3d:f4:53:40:9b:a8:3a:09:ef:
ba:75:7b:b1:1f:5c:07:36:f7:77:9e:e8:b2:64:59:
aa:8a:93:93:d8:25:92:17:3f:7e:a2:fd:27:0c:23:
d3:36:ed:30:33:32:ac:13:1f:09:08:67:86:9c:1c:
ad:16:f5:85:0d:13:3d:2e:1d:1f:35:03:02:5b:90:
ba:f9:a2:aa:80:03:87:3a:35:f8:40:40:23:e8:46:
4e:66:43:f8:31:6b:22:b3:2e:63:50:f7:b4:69:e7:
d4:e3:cc:62:bd:91:2a:d0:cf:dc:28:ee:b7:25:a3:
8a:41:c8:3a:ab:62:da:d9:ec:b8:97:0b:59:5f:b8:
d9:2e:7d:5d:1f:d2:e4:f2:b8:8a:43:45:47:f0:33:
99:3c:17:b3:ff:f5:97:9f:1c:5d:8f:23:45:81:eb:
11:fa:e1:02:1f:79:21:26:a2:3a:f6:c3:f8:f1:d0:
fb:dc:b0:ff:d2:35:1a:1d:5a:d3:99:c9:2f:58:aa:
3f:17:ba:24:a3:59:76:8f:ef:6b:b9:88:8b:6e:d2:
8e:0e:14:e1:7a:da:81:0f:e5:3b:ea:c7:d1:8c:8c:
94:dd:9e:8a:59:b3:e1:46:29:96:07:9d:e0:c7:b5:
25:8c:10:4e:e2:4d:85:3f:79:4f:fb:84:e0:17:e3:
43:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:4B:82:3E:E0:70:BF:FD:A5:C8:5E:F6:92:F2:AE:16:85:9C:EF:F3
X509v3 Authority Key Identifier:
keyid:63:F1:4F:8E:14:4C:6D:50:C3:8A:B4:FA:FF:5A:C6:E5:47:FE:1D:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y_FPjhRMbVDDirT6_1rG5Uf-HUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/7b0aae-9d27-4951-bab7-da394384e925/1/TEuCPuBwv_2lyF72kvKuFoWc7_M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/7b0aae-9d27-4951-bab7-da394384e925/1/Y_FPjhRMbVDDirT6_1rG5Uf-HUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.253.32.0/21
185.58.172.0/22
Signature Algorithm: sha256WithRSAEncryption
61:28:cb:22:c6:83:be:3f:d7:ef:c1:29:d7:a0:0a:90:b8:2f:
96:8b:b1:49:c2:ea:d3:9a:d6:47:fe:67:20:73:94:ab:11:b9:
83:18:55:a6:d8:56:48:ae:ac:44:fa:a0:6a:0d:6d:43:9e:c1:
ef:79:f0:11:ae:3c:ff:8a:d3:3c:11:89:87:6c:9d:93:e4:81:
25:b8:d6:d9:b5:e5:50:d4:67:db:17:f5:2d:02:4a:03:41:be:
c3:31:af:2d:4f:5b:65:1f:2c:0c:0c:d9:1c:53:a2:69:c5:af:
c9:f2:a6:5e:38:ac:7c:9f:ca:e4:b4:5b:99:43:58:e1:35:dd:
aa:03:4b:f2:93:44:1b:d9:52:ea:ea:5c:ae:07:48:d7:e8:9c:
ef:f3:76:d5:be:f3:2a:c1:49:d8:9f:7f:19:19:c9:fb:2d:e6:
30:1e:c5:d1:e3:72:c8:5c:b0:26:28:f9:d2:48:b3:af:30:0d:
b5:04:05:87:25:e6:f3:a1:00:89:5f:72:b0:33:21:b1:cd:84:
e6:1f:44:d6:06:6f:a5:1a:d2:97:b8:c8:1b:69:8e:59:ae:6d:
70:42:74:ad:f2:93:d9:72:dc:5b:96:ad:c0:76:ec:24:75:3b:
56:1b:3d:72:33:27:50:09:f9:b9:6c:18:b8:0c:54:1c:04:44:
6b:7b:25:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 05:54:35 2025 by rpki-client