Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/35ff32-a687-4f50-969a-98648901688f/1/Tj8ieaPk-ZVdznj4QGZQsDa6PTU.roa
File: Tj8ieaPk-ZVdznj4QGZQsDa6PTU.roa (raw, json)
Hash identifier: rpKu+SpVkA4o9g3c9SIuQedHFHqzu4mcB4TaNuy/SKw=
Subject key identifier: 4E:3F:22:79:A3:E4:F9:95:5D:CE:78:F8:40:66:50:B0:36:BA:3D:35
Certificate issuer: /CN=b56a8c91ad31745ff727da0482ede1b2fab462e7
Certificate serial: 01941F8C82306DA0F4D997A1224F6A71386F
Authority key identifier: B5:6A:8C:91:AD:31:74:5F:F7:27:DA:04:82:ED:E1:B2:FA:B4:62:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tWqMka0xdF_3J9oEgu3hsvq0Yuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/35ff32-a687-4f50-969a-98648901688f/1/Tj8ieaPk-ZVdznj4QGZQsDa6PTU.roa
Signing time: Wed 01 Jan 2025 01:48:09 +0000
ROA not before: Wed 01 Jan 2025 01:48:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51625
IP address blocks: 46.31.112.0/24 maxlen: 24
46.31.113.0/24 maxlen: 24
46.31.114.0/24 maxlen: 24
46.31.115.0/24 maxlen: 24
46.31.116.0/24 maxlen: 24
46.31.117.0/24 maxlen: 24
46.31.118.0/24 maxlen: 24
46.31.119.0/24 maxlen: 24
185.204.232.0/24 maxlen: 24
185.204.233.0/24 maxlen: 24
185.204.234.0/24 maxlen: 24
185.204.235.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:82:30:6d:a0:f4:d9:97:a1:22:4f:6a:71:38:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b56a8c91ad31745ff727da0482ede1b2fab462e7
Validity
Not Before: Jan 1 01:48:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4e3f2279a3e4f9955dce78f8406650b036ba3d35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:9e:3a:52:41:ef:2a:fc:e0:4b:05:9b:f5:f7:
b0:9b:10:04:df:38:87:a9:6e:59:e3:fb:fd:4e:6f:
76:9a:10:5b:45:d1:a6:f8:64:48:91:13:fb:03:78:
ad:ca:c7:5c:8e:6f:ea:ac:a7:b8:e5:ad:40:d4:86:
94:f8:55:50:0f:31:35:cc:9d:d5:fd:83:aa:4e:4e:
1d:ed:f9:80:ef:aa:27:7b:12:30:9d:19:1b:1c:ce:
dd:5f:5f:8a:92:74:57:bb:8b:c0:fa:90:57:ab:d7:
d8:fd:78:8d:cc:8b:16:e1:26:44:f2:51:84:6c:4f:
26:1b:09:a3:6a:74:3d:5d:37:b8:10:f3:c7:6a:84:
b7:42:93:e5:f4:57:03:c4:3d:a9:62:b9:ac:70:4b:
56:77:42:86:74:23:b8:aa:b6:fc:f5:65:94:56:e9:
df:15:f5:c6:69:43:a9:93:3a:0d:5f:bc:dc:b1:27:
4c:b5:04:50:59:77:51:bc:9c:2b:f1:67:ea:78:c8:
8b:67:2c:c5:ad:c1:7f:39:b4:7b:d3:0b:20:45:91:
b0:d9:cf:d2:bf:40:bd:31:c6:6d:fb:0e:43:9c:28:
f0:65:fb:43:80:94:29:07:d9:0c:b9:ff:39:da:74:
1f:eb:88:4f:7d:24:14:cb:d3:9d:18:83:52:4c:7f:
d6:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:3F:22:79:A3:E4:F9:95:5D:CE:78:F8:40:66:50:B0:36:BA:3D:35
X509v3 Authority Key Identifier:
keyid:B5:6A:8C:91:AD:31:74:5F:F7:27:DA:04:82:ED:E1:B2:FA:B4:62:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tWqMka0xdF_3J9oEgu3hsvq0Yuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/35ff32-a687-4f50-969a-98648901688f/1/Tj8ieaPk-ZVdznj4QGZQsDa6PTU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/35ff32-a687-4f50-969a-98648901688f/1/tWqMka0xdF_3J9oEgu3hsvq0Yuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.31.112.0/21
185.204.232.0/22
Signature Algorithm: sha256WithRSAEncryption
18:e0:99:fb:2e:4b:c1:2c:39:08:3d:a7:5d:fa:87:4a:f7:ec:
45:22:31:88:03:ca:0e:5e:d4:5f:c8:83:4d:d8:cc:11:57:a3:
9f:62:5c:d1:a2:a9:8d:62:11:31:ab:b4:0a:5f:38:9a:8d:13:
21:c4:60:0a:e4:d0:09:42:13:64:3d:f5:ef:55:b3:90:37:32:
be:ec:a1:3f:50:3a:36:fa:0c:88:03:89:61:1e:c9:8e:17:ee:
b8:3c:ae:b3:a6:b4:bb:60:0c:08:a9:ba:48:58:07:81:93:03:
71:f8:03:42:4c:30:83:dd:f2:25:59:c1:4b:37:3c:52:f2:25:
33:cf:76:a9:40:ae:55:6e:92:7c:43:7b:11:93:5d:15:75:2b:
1d:b7:0c:6a:9e:f1:4c:31:92:55:40:ac:1b:b8:a8:20:cd:d0:
52:39:0f:e2:ad:3e:fd:67:ca:9f:e6:7b:e8:08:11:07:21:95:
62:9a:69:6c:31:df:66:2b:26:6e:cb:6e:d6:78:1d:cf:76:fa:
22:b0:82:04:e8:51:a6:e0:64:a0:b3:ed:13:e0:e9:af:85:10:
02:0d:9d:d6:d8:47:f8:6c:c1:ed:09:1d:2c:0a:02:27:5d:fe:
0d:ed:94:dc:4f:82:bc:e1:bf:24:3b:7f:b1:c3:e8:79:aa:ab:
9e:28:e7:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 01:33:41 2025 by rpki-client