Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/09f918-aced-42a8-8a3a-33e2705b4c3e/1/hD4ft5vuw1Wk9UZZqMkIcSTxRFk.roa
File: hD4ft5vuw1Wk9UZZqMkIcSTxRFk.roa (raw, json)
Hash identifier: h4/9pXQ7Wpk9BBxdxTpq0aRzvgxJkU0Udbbc6bAhob8=
Subject key identifier: 84:3E:1F:B7:9B:EE:C3:55:A4:F5:46:59:A8:C9:08:71:24:F1:44:59
Certificate issuer: /CN=ce2c505f77dca8117ef0625710744cb359736b19
Certificate serial: 01942369F0D65F0EC7587EFFEE951FB597E9
Authority key identifier: CE:2C:50:5F:77:DC:A8:11:7E:F0:62:57:10:74:4C:B3:59:73:6B:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zixQX3fcqBF-8GJXEHRMs1lzaxk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/09f918-aced-42a8-8a3a-33e2705b4c3e/1/hD4ft5vuw1Wk9UZZqMkIcSTxRFk.roa
Signing time: Wed 01 Jan 2025 19:48:53 +0000
ROA not before: Wed 01 Jan 2025 19:48:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197290
IP address blocks: 46.31.128.0/23 maxlen: 24
46.31.130.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:f0:d6:5f:0e:c7:58:7e:ff:ee:95:1f:b5:97:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce2c505f77dca8117ef0625710744cb359736b19
Validity
Not Before: Jan 1 19:48:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=843e1fb79beec355a4f54659a8c9087124f14459
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:8d:10:81:87:6c:21:40:73:3a:05:9d:76:bb:
1f:fa:a8:56:31:26:32:c3:f1:a1:7c:45:54:fd:99:
c7:96:0f:08:7c:a4:08:81:8f:69:58:69:53:bd:11:
cd:f5:e3:3b:f6:87:a6:5d:cc:0f:b5:79:ab:b6:c9:
28:5a:7d:77:51:de:d9:6d:85:71:38:4b:20:37:1e:
f8:39:45:0e:96:dd:f5:47:c0:5e:af:ab:41:96:04:
84:3d:99:9a:83:54:5c:0d:7f:72:30:80:99:55:50:
e2:09:70:6a:e1:88:08:46:fc:22:a0:1d:a3:91:6a:
7f:50:68:c1:3d:f6:bb:dc:75:d1:44:23:06:1e:af:
2d:0c:21:f2:4d:89:ed:fc:e8:fc:66:07:e8:bd:6c:
84:84:e1:f6:ad:81:9a:0e:30:6e:62:19:58:b5:1a:
5a:39:52:f9:d2:7f:0b:72:fb:30:de:3f:01:92:64:
15:ee:91:82:82:62:64:6b:e5:37:cc:d6:e9:ac:aa:
e1:c0:57:72:9b:b6:f3:cb:70:91:43:da:21:bd:51:
ea:3e:03:b4:1e:20:53:a3:95:66:7d:5e:0f:54:05:
07:56:72:50:0e:3a:39:99:54:90:c6:a2:6e:f7:77:
f9:fb:4a:34:b9:4a:0d:33:39:9a:7a:e1:f3:63:d3:
12:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:3E:1F:B7:9B:EE:C3:55:A4:F5:46:59:A8:C9:08:71:24:F1:44:59
X509v3 Authority Key Identifier:
keyid:CE:2C:50:5F:77:DC:A8:11:7E:F0:62:57:10:74:4C:B3:59:73:6B:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zixQX3fcqBF-8GJXEHRMs1lzaxk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/09f918-aced-42a8-8a3a-33e2705b4c3e/1/hD4ft5vuw1Wk9UZZqMkIcSTxRFk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/09f918-aced-42a8-8a3a-33e2705b4c3e/1/zixQX3fcqBF-8GJXEHRMs1lzaxk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.31.128.0/22
Signature Algorithm: sha256WithRSAEncryption
5a:87:4c:c5:43:ce:45:a8:d4:46:b2:d5:fe:44:ab:d3:99:d5:
61:fe:b5:72:bd:f4:0b:52:91:8b:c0:6f:9d:1a:66:ea:bf:f8:
0a:80:e6:9a:73:df:d1:d9:43:fd:86:63:bf:e7:6a:fd:ce:0e:
73:f1:96:8f:f3:b3:c3:23:1b:96:8d:32:66:c1:3f:4d:e4:b2:
b6:42:ce:89:06:e3:52:78:db:03:f2:41:46:fd:1e:8f:eb:82:
a0:56:68:c3:01:8a:e2:ad:d3:6d:aa:44:3b:f4:24:37:6a:e1:
06:33:02:e6:cc:66:99:0a:41:45:e3:ee:37:e7:8b:43:0c:08:
52:04:ed:4b:d4:c8:9d:74:d7:67:1e:bc:f2:d7:c5:4c:43:b7:
b8:9b:a5:db:11:a8:f8:b7:d2:d9:7a:97:63:59:55:50:95:c7:
d7:d4:09:c2:0d:ed:ce:78:97:be:b6:c4:2b:42:e9:22:60:72:
c7:a7:cf:89:06:b4:54:20:43:06:39:c8:39:70:ba:db:b6:3f:
20:c0:bd:2b:2a:ba:0e:b3:f9:c8:8a:a8:68:5a:0b:d9:06:77:
95:6a:23:2d:cb:36:3f:0b:aa:fe:4c:af:5b:f1:af:f8:b7:77:
40:7e:2e:5c:51:d3:f3:5a:e6:13:3e:d3:53:82:51:98:37:9b:
d3:d2:ed:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:01:12 2025 by rpki-client