Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/NkCEdq2ndobm6VmDQa-IZfuAZDY.roa
File: NkCEdq2ndobm6VmDQa-IZfuAZDY.roa (raw, json)
Hash identifier: qOcbuXOI6PfGqV0fypc3sx8Dz5dzMIOt/A/FbNV5s0s=
Subject key identifier: 36:40:84:76:AD:A7:76:86:E6:E9:59:83:41:AF:88:65:FB:80:64:36
Certificate issuer: /CN=a4bcc12afa4f05739f45f605e221c64c3c0d2ed6
Certificate serial: 019427B5ECBFF269C67311E41636E70581BF
Authority key identifier: A4:BC:C1:2A:FA:4F:05:73:9F:45:F6:05:E2:21:C6:4C:3C:0D:2E:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pLzBKvpPBXOfRfYF4iHGTDwNLtY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/NkCEdq2ndobm6VmDQa-IZfuAZDY.roa
Signing time: Thu 02 Jan 2025 15:50:21 +0000
ROA not before: Thu 02 Jan 2025 15:50:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210490
IP address blocks: 46.229.54.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:ec:bf:f2:69:c6:73:11:e4:16:36:e7:05:81:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4bcc12afa4f05739f45f605e221c64c3c0d2ed6
Validity
Not Before: Jan 2 15:50:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=36408476ada77686e6e9598341af8865fb806436
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:45:20:f5:22:30:b6:35:03:33:14:66:7f:d0:
e4:88:37:33:53:a5:6d:13:1d:bb:c2:32:7b:c2:40:
9e:15:94:14:9e:a5:a3:b4:54:27:8b:ac:ff:2d:40:
0b:01:88:7a:25:1b:34:e5:40:98:ab:2b:f5:a5:74:
1a:7a:57:79:85:d0:bc:b6:82:1b:6b:5a:95:53:35:
4e:60:85:13:9c:8d:5c:52:33:82:60:3e:89:99:1b:
09:49:0b:17:e1:96:16:e2:39:31:36:b4:d1:03:12:
60:ae:58:d1:46:70:ef:50:c6:30:78:39:ce:e9:c0:
e4:ed:4d:cc:66:9a:d9:ab:e0:de:39:b6:1e:f3:ab:
c3:e8:d0:2e:c8:c9:e4:31:16:5c:99:6b:84:7f:ba:
5d:cf:a7:f6:4d:6e:82:a6:21:84:e9:7a:26:2c:b0:
75:56:79:78:f1:81:24:57:59:a7:4b:6a:15:b3:53:
4b:6a:5f:da:d9:a6:41:24:74:88:e8:ca:0d:79:96:
bc:69:84:07:0f:04:50:9b:49:f9:a7:01:98:ba:31:
36:52:47:89:63:33:61:c2:12:6a:ce:2e:df:9b:92:
0e:89:a9:b8:fe:d9:16:24:cd:0e:30:6b:22:95:0f:
7a:b6:1a:34:b5:1d:03:ad:93:05:df:b4:ad:80:c3:
d3:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:40:84:76:AD:A7:76:86:E6:E9:59:83:41:AF:88:65:FB:80:64:36
X509v3 Authority Key Identifier:
keyid:A4:BC:C1:2A:FA:4F:05:73:9F:45:F6:05:E2:21:C6:4C:3C:0D:2E:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pLzBKvpPBXOfRfYF4iHGTDwNLtY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/NkCEdq2ndobm6VmDQa-IZfuAZDY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/pLzBKvpPBXOfRfYF4iHGTDwNLtY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.229.54.0/24
Signature Algorithm: sha256WithRSAEncryption
75:bc:4d:1e:25:d8:f6:2a:79:df:10:f8:4d:33:98:8f:92:e0:
2b:6f:d8:f4:81:70:f8:2b:85:f9:c6:cd:43:6c:b0:f6:09:8b:
7a:6c:e4:61:b5:31:ab:00:f3:95:31:30:39:2b:b2:34:cb:bb:
3c:4f:ec:94:7b:94:02:a1:93:a4:db:11:8f:02:12:6f:58:15:
93:55:62:d8:27:f3:de:24:d4:23:5d:d2:f5:9f:5b:84:6a:55:
2b:01:95:55:15:3a:09:54:8b:d0:4b:fe:e6:93:66:1a:00:a8:
fa:80:32:35:e9:b2:9f:57:dc:c6:ba:48:d6:d6:68:75:af:a2:
8b:65:9c:82:bc:a2:91:5d:43:99:d5:d2:40:5c:04:85:e8:4b:
23:9a:26:6b:fe:96:14:ff:3c:a1:e5:0e:a5:4a:3e:b3:91:be:
ef:22:5a:59:99:b8:a5:b7:35:01:6a:dd:ba:ff:2b:b7:d6:da:
b1:7f:b8:d8:cc:0d:86:b0:11:11:46:47:2f:f0:14:85:0a:78:
78:9f:90:94:b6:6b:d0:3c:8d:20:21:51:55:3b:0b:62:f2:8a:
49:cb:d7:41:49:4a:9c:2d:f0:3e:0d:26:25:c5:36:68:07:1d:
3e:62:ff:e0:94:d2:1a:58:64:0e:e3:37:9b:96:88:a7:e6:84:
d1:26:4e:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:51:18 2025 by rpki-client