Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/4ff06f-e97f-4c5a-9da7-7ee090504fba/1/eRwE37mv_L7KGZBN80LENZM6RLM.roa
File: eRwE37mv_L7KGZBN80LENZM6RLM.roa (raw, json)
Hash identifier: 5WbL1m/0wunIb0w9Td5o6yi8TyJFKtJL1DXw3oBzWKs=
Subject key identifier: 79:1C:04:DF:B9:AF:FC:BE:CA:19:90:4D:F3:42:C4:35:93:3A:44:B3
Certificate issuer: /CN=a7f00d1bffff3a53e94f867d743d031b922db5b1
Certificate serial: 019422FC3992227226A3209A0FF93DAAF769
Authority key identifier: A7:F0:0D:1B:FF:FF:3A:53:E9:4F:86:7D:74:3D:03:1B:92:2D:B5:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p_ANG___OlPpT4Z9dD0DG5IttbE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/4ff06f-e97f-4c5a-9da7-7ee090504fba/1/eRwE37mv_L7KGZBN80LENZM6RLM.roa
Signing time: Wed 01 Jan 2025 17:49:02 +0000
ROA not before: Wed 01 Jan 2025 17:49:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201924
IP address blocks: 46.29.2.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:39:92:22:72:26:a3:20:9a:0f:f9:3d:aa:f7:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7f00d1bffff3a53e94f867d743d031b922db5b1
Validity
Not Before: Jan 1 17:49:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=791c04dfb9affcbeca19904df342c435933a44b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:26:8a:23:d9:b7:7e:b0:7e:e3:aa:31:a2:c5:
3d:2e:a7:6d:28:5d:bb:47:89:d9:b2:2f:08:29:ec:
b5:6c:b5:13:6f:51:0d:d3:1e:42:7a:a9:e7:2e:71:
96:2a:7b:82:b8:df:a9:43:2f:b2:96:65:2b:2c:0d:
44:0a:61:dc:a0:c0:38:60:fc:ec:5b:9b:5b:35:c4:
10:7a:39:5f:b7:ea:d8:21:43:36:00:ad:78:a8:7f:
5d:e6:46:17:af:88:5d:db:c5:e1:1e:d1:2c:7a:4f:
ec:74:65:aa:cd:a7:cf:b1:84:d0:85:22:04:64:0a:
95:57:51:72:43:af:d2:4e:e8:82:d6:35:b5:53:7f:
75:74:15:1e:c4:d5:7d:f9:bb:d0:28:b9:65:51:72:
58:4b:e3:f9:b7:7b:74:40:05:7e:5a:70:75:65:ac:
c0:9d:f0:b5:a2:07:62:f7:62:53:d3:7e:12:0a:f6:
08:a5:4a:57:51:3b:d6:24:f3:be:a7:bc:41:7a:5e:
3a:f2:36:46:ed:ac:99:6f:cd:09:c8:ea:5e:c0:97:
18:64:39:08:d1:23:7c:8d:5a:f2:6a:ec:6b:7d:d0:
1a:31:2a:76:46:22:10:b2:f6:2d:c2:9f:4a:19:9f:
89:93:2d:1f:e2:8d:a5:f3:7c:9a:91:e6:89:ff:5c:
f3:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:1C:04:DF:B9:AF:FC:BE:CA:19:90:4D:F3:42:C4:35:93:3A:44:B3
X509v3 Authority Key Identifier:
keyid:A7:F0:0D:1B:FF:FF:3A:53:E9:4F:86:7D:74:3D:03:1B:92:2D:B5:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p_ANG___OlPpT4Z9dD0DG5IttbE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/4ff06f-e97f-4c5a-9da7-7ee090504fba/1/eRwE37mv_L7KGZBN80LENZM6RLM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/4ff06f-e97f-4c5a-9da7-7ee090504fba/1/p_ANG___OlPpT4Z9dD0DG5IttbE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.29.2.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:11:3c:21:ae:f7:d2:a0:d4:69:44:83:e2:e1:4c:69:c3:eb:
69:8e:aa:2e:fb:54:57:89:40:80:3b:51:2a:b9:15:04:5e:e9:
9c:34:19:cb:00:63:96:72:18:49:b1:f7:c1:be:c0:36:00:d2:
01:02:f9:58:e6:88:8c:2b:42:1e:5d:05:41:e6:1f:da:36:00:
c9:e5:13:d9:1c:3e:cf:aa:cc:ad:1b:84:ab:92:39:c3:fe:44:
0a:da:4e:db:c7:24:92:a6:c7:16:9b:34:65:1a:bb:8e:10:d3:
b1:b5:24:f7:46:3e:9f:66:30:bf:ad:28:fc:37:63:83:95:f7:
92:df:db:f7:df:9e:96:45:78:77:4c:c6:ca:d3:0a:61:86:0c:
c5:21:78:ea:db:84:36:9c:fc:f2:c5:4b:82:17:8f:ff:dd:04:
95:26:ba:6d:40:b3:09:4d:c0:73:ca:be:02:5a:35:bc:0d:9b:
a6:eb:35:b4:7f:76:25:95:b0:18:46:32:76:37:9e:3d:46:ce:
4e:5a:c2:be:c2:5a:eb:79:e9:01:41:68:60:03:6c:85:7d:19:
df:e3:a0:1e:79:70:86:bc:43:00:df:93:88:ae:cb:c2:9c:b4:
a6:b5:d3:50:16:88:61:cd:ed:74:59:96:46:0b:09:d5:1e:b2:
4e:28:f3:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:01:56 2025 by rpki-client