Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/eb27f2-e369-4b07-8d1d-c3431d320406/1/hi7R4-iPmdgdfg2eleo1Cy9lXJ0.roa
File: hi7R4-iPmdgdfg2eleo1Cy9lXJ0.roa (raw, json)
Hash identifier: PTsKMqGz/0G6rvEIBYRlUFqTSn4CDa8w9j1hbAXDp6g=
Subject key identifier: 86:2E:D1:E3:E8:8F:99:D8:1D:7E:0D:9E:95:EA:35:0B:2F:65:5C:9D
Certificate issuer: /CN=27321078f359d7990276dabb0f8c30070e685963
Certificate serial: 01941FFA00E0A3BD0DAEF5DD9035D8E7BC02
Authority key identifier: 27:32:10:78:F3:59:D7:99:02:76:DA:BB:0F:8C:30:07:0E:68:59:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JzIQePNZ15kCdtq7D4wwBw5oWWM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/eb27f2-e369-4b07-8d1d-c3431d320406/1/hi7R4-iPmdgdfg2eleo1Cy9lXJ0.roa
Signing time: Wed 01 Jan 2025 03:47:45 +0000
ROA not before: Wed 01 Jan 2025 03:47:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200737
IP address blocks: 46.231.230.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:00:e0:a3:bd:0d:ae:f5:dd:90:35:d8:e7:bc:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27321078f359d7990276dabb0f8c30070e685963
Validity
Not Before: Jan 1 03:47:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=862ed1e3e88f99d81d7e0d9e95ea350b2f655c9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e4:0e:67:70:3b:29:a5:30:75:50:bf:f0:26:
b1:9a:ec:e2:b9:6b:66:4e:06:bb:6f:a9:f8:cd:e1:
7c:0d:9f:6f:a4:d7:0f:c9:90:be:f8:0d:a2:2d:f9:
1b:e2:a5:bd:9b:70:3d:cf:fd:7c:c1:aa:44:b7:77:
b6:e7:9d:11:ba:1d:d9:79:0f:1a:26:f6:59:28:30:
a5:77:fa:09:3d:54:8b:22:de:3b:7f:41:02:fd:52:
de:f7:44:e5:15:86:46:d1:66:9f:b1:c2:25:4d:62:
b9:8c:62:c8:f3:36:f6:5c:aa:1c:f0:16:33:09:06:
d3:24:92:c5:3f:17:e8:7c:03:9e:d9:71:77:59:10:
76:23:0d:1a:be:2d:fe:2f:d1:67:d4:5c:59:c1:97:
da:75:7d:fa:07:97:85:32:55:30:ad:6d:5a:1f:26:
00:bb:24:a3:5d:f8:6f:c7:5f:46:67:43:2f:70:c6:
a0:fe:07:a6:07:5d:1a:b6:14:aa:ff:79:26:76:ad:
be:f1:cf:d6:dc:8e:4c:9a:ee:3e:de:f6:58:0e:48:
db:2b:38:82:61:30:65:1f:56:87:72:d1:09:b8:5e:
f7:77:d1:3e:ef:52:79:4d:3c:77:f3:37:44:32:e9:
74:a2:b3:50:99:31:31:ba:22:86:97:be:3a:78:74:
55:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:2E:D1:E3:E8:8F:99:D8:1D:7E:0D:9E:95:EA:35:0B:2F:65:5C:9D
X509v3 Authority Key Identifier:
keyid:27:32:10:78:F3:59:D7:99:02:76:DA:BB:0F:8C:30:07:0E:68:59:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JzIQePNZ15kCdtq7D4wwBw5oWWM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/eb27f2-e369-4b07-8d1d-c3431d320406/1/hi7R4-iPmdgdfg2eleo1Cy9lXJ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/eb27f2-e369-4b07-8d1d-c3431d320406/1/JzIQePNZ15kCdtq7D4wwBw5oWWM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.231.230.0/24
Signature Algorithm: sha256WithRSAEncryption
c9:b4:51:23:e8:0d:05:dd:c8:d2:cc:75:b5:ba:66:b8:72:28:
74:97:76:b6:1c:a9:15:ac:f1:d8:bc:33:f1:04:b1:f5:a4:03:
43:f1:22:09:70:92:eb:69:51:fb:c0:da:a8:29:81:86:33:63:
85:41:2a:a5:6a:e7:cb:b8:f6:58:0c:12:24:0d:7a:40:f6:15:
a6:60:47:2d:b5:4a:6e:82:ed:5a:fc:04:3e:d0:f0:a4:b8:aa:
63:fb:36:21:6b:0f:08:3a:79:7c:b6:a1:dd:5c:4a:53:57:6c:
4e:04:3a:81:37:75:3a:aa:b7:8c:b6:29:b1:31:e7:b0:9c:52:
88:d3:7e:f0:13:69:21:6a:17:e3:c8:ce:d9:93:f6:ca:ff:a3:
42:11:16:aa:d7:06:cf:4d:5b:31:80:a8:83:dd:dd:39:9a:b9:
71:b8:d8:a2:3d:f7:70:e4:d4:6a:28:ff:d4:91:d8:56:1d:4c:
d4:f3:22:6b:55:ac:86:b5:68:25:46:c0:43:74:4b:de:ae:14:
76:26:6b:c5:23:8e:6c:5e:ec:1c:fa:e2:9f:4c:2d:14:43:12:
d7:14:da:0a:f1:26:f6:67:65:9e:b9:a1:ab:f5:eb:3b:40:a2:
b2:47:14:50:0e:fa:c0:79:84:bf:77:c9:c1:72:4a:27:8b:30:
af:31:34:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:32:37 2025 by rpki-client