Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/8432ed-2c97-41d3-926a-6a4d04ba5898/1/AG6ksP0tzcHHRqcuNe-hk9nPNdc.roa
File: AG6ksP0tzcHHRqcuNe-hk9nPNdc.roa (raw, json)
Hash identifier: 4Pxy9edWR16JJVWSm9ebgWIqidAnxsMd1sHHOAlque0=
Subject key identifier: 00:6E:A4:B0:FD:2D:CD:C1:C7:46:A7:2E:35:EF:A1:93:D9:CF:35:D7
Certificate issuer: /CN=e17b10fd607ad927006c62ce35691ebaa8f018b5
Certificate serial: 019425218E4BB21D83C8D7E79173BE71DB01
Authority key identifier: E1:7B:10:FD:60:7A:D9:27:00:6C:62:CE:35:69:1E:BA:A8:F0:18:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4XsQ_WB62ScAbGLONWkeuqjwGLU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/8432ed-2c97-41d3-926a-6a4d04ba5898/1/AG6ksP0tzcHHRqcuNe-hk9nPNdc.roa
Signing time: Thu 02 Jan 2025 03:49:03 +0000
ROA not before: Thu 02 Jan 2025 03:49:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51968
IP address blocks: 46.23.128.0/20 maxlen: 20
46.23.136.0/24 maxlen: 24
2a10:2880::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:8e:4b:b2:1d:83:c8:d7:e7:91:73:be:71:db:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e17b10fd607ad927006c62ce35691ebaa8f018b5
Validity
Not Before: Jan 2 03:49:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=006ea4b0fd2dcdc1c746a72e35efa193d9cf35d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:37:61:71:14:cf:45:5c:24:10:24:8b:43:fb:
26:14:66:e7:15:25:29:b0:5e:d9:ba:6c:06:85:be:
80:81:2f:5e:68:11:1e:f0:78:15:56:27:66:9c:65:
d9:20:3c:b3:26:6b:8e:f1:2f:e4:40:6d:c8:22:94:
b0:70:99:91:fb:8e:4d:aa:08:02:81:d6:0d:27:f6:
f4:51:01:cb:79:77:e7:1c:3c:d4:19:51:a8:66:ba:
c6:bd:36:c8:a4:58:d3:86:49:9f:34:07:d9:c2:a4:
dc:e3:b5:59:35:5d:f2:01:b2:1e:86:44:ab:b5:0b:
ee:6a:af:09:33:59:f8:b7:29:7c:d7:ad:ce:f3:46:
dd:00:52:33:7a:28:c1:8e:d0:56:40:71:04:a1:d0:
18:55:7b:d4:c3:93:a6:8a:b1:91:8d:da:c3:38:89:
74:d3:82:ac:a8:d3:84:71:ec:ca:14:15:dc:19:91:
71:1f:c2:ea:2d:62:ea:0f:be:b5:c7:83:4f:6c:25:
b1:4c:7f:8e:6f:6b:c1:07:e2:cf:4b:b8:14:e3:27:
f5:ac:bb:eb:06:18:a2:00:67:59:ec:f7:1e:4e:85:
bf:56:7e:18:4b:01:ee:e5:e9:7f:70:48:f8:61:0f:
93:c4:08:b4:e5:68:20:65:83:94:25:7a:49:f3:7b:
f2:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:6E:A4:B0:FD:2D:CD:C1:C7:46:A7:2E:35:EF:A1:93:D9:CF:35:D7
X509v3 Authority Key Identifier:
keyid:E1:7B:10:FD:60:7A:D9:27:00:6C:62:CE:35:69:1E:BA:A8:F0:18:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4XsQ_WB62ScAbGLONWkeuqjwGLU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/8432ed-2c97-41d3-926a-6a4d04ba5898/1/AG6ksP0tzcHHRqcuNe-hk9nPNdc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/8432ed-2c97-41d3-926a-6a4d04ba5898/1/4XsQ_WB62ScAbGLONWkeuqjwGLU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.23.128.0/20
IPv6:
2a10:2880::/32
Signature Algorithm: sha256WithRSAEncryption
62:5a:15:4e:8b:21:4a:b4:63:6d:2c:31:23:3f:ca:0f:4b:e6:
db:b8:12:e7:05:ef:6f:15:38:69:ab:70:36:0a:23:66:48:eb:
30:82:08:bf:d1:87:f6:a0:71:9c:b4:88:f1:da:01:28:ae:35:
3e:42:0e:53:25:6d:7f:35:6d:5a:47:03:b3:03:0b:0f:75:9e:
da:38:8f:25:7f:c9:9b:ef:28:5c:ed:d6:31:40:67:a3:87:31:
8f:65:49:7a:a1:9c:67:3b:1a:98:ca:b3:e9:49:81:66:8b:c5:
5a:1d:f3:a3:d9:55:d4:8a:2e:43:5c:ef:d2:d8:47:33:c1:b0:
5a:91:85:20:a3:6a:55:d4:2d:93:35:88:d2:fd:4d:d1:cb:3f:
91:e5:b2:03:7e:c8:c3:5b:2d:37:1d:2c:ad:fd:28:a7:62:1f:
9d:21:b4:10:a7:76:55:26:45:15:01:a3:ca:f9:87:41:ef:5f:
fa:e2:c6:39:5a:f6:0a:d7:69:11:4d:3c:a2:43:cc:09:11:40:
0f:f1:76:e5:a9:3b:85:e7:af:68:4b:43:ad:3e:20:10:62:f7:
b3:d1:f2:43:f4:0b:a5:47:a5:7f:e6:14:10:b4:c4:87:dd:9c:
67:9d:fa:02:f6:1c:2d:51:c2:96:e8:74:bd:c7:fa:7b:e3:e3:
8b:8b:f2:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:35:48 2025 by rpki-client