Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/eb27f2-e369-4b07-8d1d-c3431d320406/1/w8ICPzcqZOl1Imq_1e1QUuBlqZU.roa
File: w8ICPzcqZOl1Imq_1e1QUuBlqZU.roa (raw, json)
Hash identifier: ta7C4t5JpC+eNjSvB0jHs2aEoX0bhkx8jvkGGZXoyPI=
Subject key identifier: C3:C2:02:3F:37:2A:64:E9:75:22:6A:BF:D5:ED:50:52:E0:65:A9:95
Certificate issuer: /CN=27321078f359d7990276dabb0f8c30070e685963
Certificate serial: 01941FFA0097D7C5C212F0CD4817BE623AF7
Authority key identifier: 27:32:10:78:F3:59:D7:99:02:76:DA:BB:0F:8C:30:07:0E:68:59:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JzIQePNZ15kCdtq7D4wwBw5oWWM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/eb27f2-e369-4b07-8d1d-c3431d320406/1/w8ICPzcqZOl1Imq_1e1QUuBlqZU.roa
Signing time: Wed 01 Jan 2025 03:47:45 +0000
ROA not before: Wed 01 Jan 2025 03:47:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199986
IP address blocks: 46.231.231.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:00:97:d7:c5:c2:12:f0:cd:48:17:be:62:3a:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27321078f359d7990276dabb0f8c30070e685963
Validity
Not Before: Jan 1 03:47:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c3c2023f372a64e975226abfd5ed5052e065a995
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:25:1d:60:b4:e8:8e:1e:7f:c1:3c:38:98:ff:
f0:c5:b3:55:57:20:ac:7e:07:86:1b:9e:e3:91:94:
0c:9f:3f:c0:19:f4:a6:71:04:3e:53:61:0f:0d:c3:
c9:c4:c4:0f:50:43:84:fa:a1:cd:ab:75:d3:89:95:
69:68:69:18:55:20:39:af:c5:c6:f2:63:be:6e:20:
dd:eb:c9:7a:ee:8f:4e:6f:d1:b0:0f:49:c1:6b:ed:
af:9a:8d:dc:3d:dc:b2:c6:90:12:b4:91:f7:c2:f9:
3d:05:47:22:8c:c6:c3:7e:f1:03:7b:0b:d0:4d:40:
3e:1e:ae:1c:05:74:06:46:1c:2a:d7:43:09:f7:5e:
7b:17:f1:6a:99:24:63:b0:80:1e:a8:b2:93:ff:8d:
44:e5:f5:c1:34:76:59:84:f4:3a:70:0d:44:57:a7:
94:67:63:26:52:84:3b:04:95:bd:86:54:74:1e:11:
85:c6:54:69:7e:90:16:7d:9d:a1:6c:be:17:49:c6:
b9:99:73:b9:56:6a:82:21:9d:03:c6:da:7a:f2:6e:
c6:3b:37:4d:0a:af:be:d5:7e:00:22:8f:06:3a:a0:
30:28:86:82:03:1d:dd:20:b2:b7:07:81:57:7e:ee:
16:ac:63:c8:cf:79:d5:b3:a3:b9:f4:44:b0:d1:5f:
54:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:C2:02:3F:37:2A:64:E9:75:22:6A:BF:D5:ED:50:52:E0:65:A9:95
X509v3 Authority Key Identifier:
keyid:27:32:10:78:F3:59:D7:99:02:76:DA:BB:0F:8C:30:07:0E:68:59:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JzIQePNZ15kCdtq7D4wwBw5oWWM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/eb27f2-e369-4b07-8d1d-c3431d320406/1/w8ICPzcqZOl1Imq_1e1QUuBlqZU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/eb27f2-e369-4b07-8d1d-c3431d320406/1/JzIQePNZ15kCdtq7D4wwBw5oWWM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.231.231.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:e1:36:e0:73:95:a4:e1:6d:8c:32:ab:01:d1:a4:e5:74:f4:
f5:95:d8:db:a3:f2:7a:59:77:0c:69:99:77:73:ad:52:76:c1:
32:db:ae:23:c6:c9:60:fe:2f:d4:68:d5:75:8a:d1:72:61:8a:
2b:7f:18:d9:69:b1:b9:9d:5c:8f:11:8d:e2:f8:bd:f5:a9:c7:
81:c4:26:38:7f:23:65:d6:42:79:6f:f0:96:ef:15:3c:d9:13:
0d:fb:08:00:f3:82:e7:f5:ac:e0:98:a3:21:4c:13:e4:17:12:
03:83:aa:2c:e7:de:48:86:27:d9:ee:c4:95:4c:82:08:a6:c4:
7d:14:a8:b5:64:84:f8:9f:7b:39:d7:96:a0:12:9e:75:69:c1:
74:44:19:88:c1:1f:10:23:79:b4:8c:65:eb:64:8c:6f:37:85:
40:48:f1:36:3c:68:65:e6:51:2b:43:a1:db:7c:fa:9b:45:38:
47:6d:19:63:4e:80:65:e9:c6:65:01:5d:bd:a7:40:fc:ee:47:
e9:74:5e:18:67:24:0d:1c:97:62:ed:ad:c8:00:9e:e1:57:a7:
dd:f3:ab:a4:55:30:f0:e4:a8:87:5d:2a:bb:4e:e7:90:d5:50:
8b:6f:af:0f:23:7f:c3:a6:24:36:33:e9:37:e8:cf:e5:7f:fc:
67:6a:e8:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:26:27 2025 by rpki-client