Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/2HkBnlanOdUzmWf9Hl_U6GG-UuE.roa
File: 2HkBnlanOdUzmWf9Hl_U6GG-UuE.roa (raw, json)
Hash identifier: 1Wufa6HiHvWpFQaG3Xl8fTsSYIf48lD7RqqgQlltU14=
Subject key identifier: D8:79:01:9E:56:A7:39:D5:33:99:67:FD:1E:5F:D4:E8:61:BE:52:E1
Certificate issuer: /CN=a4bcc12afa4f05739f45f605e221c64c3c0d2ed6
Certificate serial: 019427B5EBD87296270E34FEF6BCF2E9083E
Authority key identifier: A4:BC:C1:2A:FA:4F:05:73:9F:45:F6:05:E2:21:C6:4C:3C:0D:2E:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pLzBKvpPBXOfRfYF4iHGTDwNLtY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/2HkBnlanOdUzmWf9Hl_U6GG-UuE.roa
Signing time: Thu 02 Jan 2025 15:50:21 +0000
ROA not before: Thu 02 Jan 2025 15:50:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208965
IP address blocks: 46.229.59.0/24 maxlen: 24
46.229.62.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:eb:d8:72:96:27:0e:34:fe:f6:bc:f2:e9:08:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4bcc12afa4f05739f45f605e221c64c3c0d2ed6
Validity
Not Before: Jan 2 15:50:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d879019e56a739d5339967fd1e5fd4e861be52e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:80:55:eb:1f:ab:36:f7:40:80:88:d1:fe:20:
a5:f8:a2:7a:5b:fc:de:07:08:59:55:ca:79:ea:91:
24:ce:34:a0:52:f1:14:d2:19:85:d2:89:71:2c:d4:
a9:40:1b:ea:1e:22:43:bc:7d:0e:e5:70:50:f0:18:
d5:ac:d7:13:1b:94:3d:80:04:e7:1e:44:e6:d5:36:
73:7a:14:d6:15:31:dd:ba:b6:a0:78:b8:75:26:79:
b0:81:5f:46:7c:ee:d2:a1:1d:48:e9:d0:4e:b1:90:
2e:6f:c7:53:e9:ed:e6:b2:34:eb:e3:f5:b8:b4:f7:
3b:dd:ea:76:29:8a:66:a1:fc:c0:6a:9a:a1:f9:9b:
28:92:a8:a7:84:8c:85:37:a4:ba:0f:8d:5a:ba:8f:
36:6e:66:a8:6c:5f:17:97:8b:4b:93:1d:27:6c:1b:
d8:b1:2b:f5:09:ee:dd:5b:2a:ae:64:a6:62:ee:5f:
03:07:8a:52:86:75:9a:08:44:77:38:29:53:67:80:
f9:31:f0:07:76:5e:51:d5:96:27:8e:6a:29:38:98:
d7:a4:d7:f6:c3:ad:aa:ea:5c:62:f6:d6:65:86:ee:
10:3f:fc:c2:4d:76:c6:47:01:8f:26:5e:ea:10:b3:
62:03:ea:4a:4b:51:29:19:d2:76:bf:76:2f:d0:b1:
f0:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:79:01:9E:56:A7:39:D5:33:99:67:FD:1E:5F:D4:E8:61:BE:52:E1
X509v3 Authority Key Identifier:
keyid:A4:BC:C1:2A:FA:4F:05:73:9F:45:F6:05:E2:21:C6:4C:3C:0D:2E:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pLzBKvpPBXOfRfYF4iHGTDwNLtY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/2HkBnlanOdUzmWf9Hl_U6GG-UuE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/pLzBKvpPBXOfRfYF4iHGTDwNLtY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.229.59.0/24
46.229.62.0/24
Signature Algorithm: sha256WithRSAEncryption
63:10:01:25:87:fa:58:4e:d3:52:c9:bf:fe:83:d3:d8:7f:ff:
89:9c:2c:04:d3:cf:81:e3:f7:bf:a3:66:1e:2c:2c:b0:ed:41:
bb:73:31:d3:27:95:35:e5:da:b1:13:61:44:d8:c3:38:6c:cc:
9a:00:e8:b0:64:b4:a6:a6:20:f9:c7:02:6d:19:6a:be:47:b1:
89:82:6c:7d:46:96:cf:52:3c:b1:5e:15:66:7b:cc:3c:84:81:
57:59:9d:e2:7b:24:2c:fc:08:9b:6d:0f:c4:4c:ae:0b:e1:79:
43:d0:6a:da:9d:05:42:53:60:a1:4d:13:0e:60:89:e7:81:d5:
44:47:71:ad:8e:a1:d6:d6:3a:cb:e2:0d:c8:84:9f:f1:78:79:
9f:86:0b:27:96:a6:4c:68:fd:56:8a:a4:84:11:a2:90:6b:c4:
ce:7c:56:f7:74:ca:21:06:77:9f:98:65:2d:06:3e:80:bb:81:
26:c8:f1:86:71:9a:67:ed:7b:14:17:9d:32:09:e1:99:57:98:
ab:27:41:9e:7e:78:34:7b:a6:4c:ec:9c:f5:b7:b2:3b:0a:58:
15:c6:48:91:98:ec:4a:45:4a:19:d7:3c:8c:e9:82:73:e7:ec:
f8:ff:b5:19:7e:db:71:ea:bf:b2:ab:3b:21:cf:82:bb:59:fd:
b9:ca:f3:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:32:06 2025 by rpki-client