Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/3WjrOwTqNuDHyMFHXrGmWNjSdHE.roa
File: 3WjrOwTqNuDHyMFHXrGmWNjSdHE.roa (raw, json)
Hash identifier: A4fHLw3NnTXWeiTMQD2wK3ZifdEjzlGKbCjJsigXu2c=
Subject key identifier: DD:68:EB:3B:04:EA:36:E0:C7:C8:C1:47:5E:B1:A6:58:D8:D2:74:71
Certificate issuer: /CN=b72945f57103153a07854e74e227f2aec1c5f430
Certificate serial: 0194222007820F740792E6BB286E58DF34D9
Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/3WjrOwTqNuDHyMFHXrGmWNjSdHE.roa
Signing time: Wed 01 Jan 2025 13:48:31 +0000
ROA not before: Wed 01 Jan 2025 13:48:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213732
IP address blocks: 46.38.146.0/24 maxlen: 24
46.38.147.0/24 maxlen: 24
46.38.149.0/24 maxlen: 24
185.29.223.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:07:82:0f:74:07:92:e6:bb:28:6e:58:df:34:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430
Validity
Not Before: Jan 1 13:48:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dd68eb3b04ea36e0c7c8c1475eb1a658d8d27471
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f2:fc:3e:2e:01:96:ab:f7:0d:22:13:70:b2:
d7:bd:bd:3c:e6:fc:3f:64:f2:15:f8:80:32:72:18:
01:87:dd:ee:13:06:06:99:cf:09:9d:a0:ff:8d:8a:
c6:db:0e:6c:44:10:96:d7:6d:21:11:38:f3:ef:70:
6f:80:99:df:98:12:4b:8c:c6:04:fd:bd:52:7c:4f:
33:81:3f:a6:26:ed:eb:96:67:f9:1f:96:54:d7:e1:
f5:38:f5:6d:98:3a:f3:18:f5:13:9f:84:e4:1a:58:
1d:2d:0c:64:b4:85:0a:8d:41:59:ca:36:c2:77:4f:
e2:cd:7b:3d:b3:43:5c:9b:7e:69:86:55:34:e6:c3:
6a:e4:ee:d3:c4:ec:59:a7:7f:05:6f:06:81:dc:57:
52:84:75:0a:70:70:9f:86:ae:71:f6:63:67:79:63:
34:cb:f5:53:f0:e6:f0:b4:44:6f:37:9c:fa:b6:e0:
79:da:6c:3d:d4:fd:1f:e3:d6:6c:d2:df:50:79:00:
37:ed:f9:c9:69:76:1f:bb:f7:b2:94:8d:72:1c:44:
c3:a5:38:e0:76:c3:43:61:d0:5b:94:64:89:89:a1:
0d:bc:9b:03:e4:9b:3c:d6:53:1d:03:e5:76:40:7b:
d4:e2:f0:f8:80:94:55:25:5c:e6:8f:a1:ec:af:99:
9d:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:68:EB:3B:04:EA:36:E0:C7:C8:C1:47:5E:B1:A6:58:D8:D2:74:71
X509v3 Authority Key Identifier:
keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/3WjrOwTqNuDHyMFHXrGmWNjSdHE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.38.146.0/23
46.38.149.0/24
185.29.223.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:64:6b:04:c0:60:c3:3d:41:7a:75:dc:a2:47:0a:33:24:48:
a2:f0:51:c6:ec:dd:5c:1c:8d:9f:af:44:08:33:19:2d:3c:48:
06:02:2f:c4:8e:c2:0f:00:7c:81:23:fe:53:5f:50:6a:9f:f1:
1d:c8:1e:8b:61:0f:d9:e7:05:8f:a0:ce:b4:c6:9e:02:6c:3b:
eb:dc:70:d4:b5:1f:71:f8:e4:48:77:fd:82:4b:ac:41:ba:04:
69:70:bf:ea:8d:4a:4e:4a:6f:03:b9:de:86:13:d1:0b:7e:02:
e0:4c:6e:50:f8:57:5c:b9:03:d6:f8:40:02:5d:97:93:41:29:
dd:ad:1b:01:53:25:79:90:18:08:43:95:c5:97:5c:6d:12:b9:
fd:8f:97:b0:32:23:72:1c:67:af:44:99:31:0b:0e:2e:0a:b7:
56:d9:d3:d4:d6:f0:2a:bf:1b:f3:2c:40:d9:14:56:2d:7b:86:
eb:f6:0c:0d:01:f3:6e:5b:cd:fe:79:ff:51:e3:d9:79:86:cc:
5b:21:03:97:a5:eb:a2:a1:b4:ec:64:b2:a5:6a:0d:83:a2:c6:
5a:f0:07:42:4b:7b:3d:e7:db:27:ce:02:e9:62:be:1c:21:74:
a7:e2:f0:6c:28:d4:1a:5e:d7:93:38:96:3e:03:b6:68:19:6e:
b7:95:de:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:22:00 2025 by rpki-client