Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/VFBedq1I_YG5NP5YD9No0ItCqAI.roa
File: VFBedq1I_YG5NP5YD9No0ItCqAI.roa (raw, json)
Hash identifier: Cca2YTmO6sfJdE+XLr3wI40Aj8jX93VIto7rInwpMCo=
Subject key identifier: 54:50:5E:76:AD:48:FD:81:B9:34:FE:58:0F:D3:68:D0:8B:42:A8:02
Certificate issuer: /CN=359f0f5ff620e0db5311f64736909973ac60f6f3
Certificate serial: 0194266B5F87ED107F3DC3C6FB0778D155B3
Authority key identifier: 35:9F:0F:5F:F6:20:E0:DB:53:11:F6:47:36:90:99:73:AC:60:F6:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/VFBedq1I_YG5NP5YD9No0ItCqAI.roa
Signing time: Thu 02 Jan 2025 09:49:18 +0000
ROA not before: Thu 02 Jan 2025 09:49:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 52084
IP address blocks: 46.255.8.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:5f:87:ed:10:7f:3d:c3:c6:fb:07:78:d1:55:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=359f0f5ff620e0db5311f64736909973ac60f6f3
Validity
Not Before: Jan 2 09:49:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=54505e76ad48fd81b934fe580fd368d08b42a802
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:5e:4f:c9:71:0c:16:b8:94:dd:79:5c:66:9b:
e6:4f:8c:52:20:49:26:49:19:21:e9:d3:1e:d3:1a:
aa:0f:ac:4f:2e:96:4f:ca:77:5f:3f:25:d5:c0:57:
8d:eb:7d:fa:aa:97:0a:fd:df:48:48:a8:6a:5f:1c:
d4:b9:ec:ac:66:57:f7:fa:83:1a:60:32:27:94:b7:
36:62:9e:44:f6:90:3c:a0:2f:99:90:f3:4b:53:1c:
5a:e2:a3:cc:f3:bd:41:3e:a1:2f:65:0d:1d:a2:db:
e6:f4:42:0b:ed:d3:13:e3:f7:d9:8a:c8:f1:fe:26:
d3:a1:d0:68:a6:d1:37:bd:8b:95:d2:ee:9c:e2:b8:
eb:5f:59:e6:a1:34:eb:5b:97:b9:8c:ce:4b:7e:1e:
56:ea:f9:a5:ef:23:8c:dd:09:d0:96:fb:b5:76:45:
28:7d:3a:9b:ef:e5:ba:b3:a5:64:7c:b5:77:27:f8:
2d:68:2b:bc:6e:70:c3:4b:53:60:25:60:14:0a:7b:
53:3b:15:a1:27:f2:e1:7b:de:78:3f:62:59:b6:8a:
23:9b:71:4b:cd:5b:d2:0e:f9:cf:59:72:d9:10:86:
f5:8e:ab:d4:cc:51:ea:84:d0:ba:e7:a1:7d:7c:11:
8c:5d:d1:66:ca:d3:7a:8b:0e:32:35:35:2f:da:6e:
54:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:50:5E:76:AD:48:FD:81:B9:34:FE:58:0F:D3:68:D0:8B:42:A8:02
X509v3 Authority Key Identifier:
keyid:35:9F:0F:5F:F6:20:E0:DB:53:11:F6:47:36:90:99:73:AC:60:F6:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/VFBedq1I_YG5NP5YD9No0ItCqAI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.255.8.0/21
Signature Algorithm: sha256WithRSAEncryption
a0:8f:ae:b9:f8:ea:b1:87:73:99:e5:2e:05:3d:4b:0d:77:b4:
21:ba:db:f9:3f:87:6e:2f:7e:06:70:d6:7e:2e:e3:af:c7:e2:
31:36:c1:86:4f:f6:d0:57:4d:f4:03:75:1e:3b:05:e2:ad:b9:
e6:9e:9c:f8:55:c4:83:c6:67:28:a3:ea:be:c9:6b:e3:e2:c2:
54:ca:40:f7:35:8b:21:78:bb:51:8c:d2:8a:81:2a:46:c2:d0:
5c:a4:ba:9f:11:c5:cb:9c:e3:32:20:05:ae:75:04:71:b3:67:
2d:3a:f3:9f:ae:46:ea:64:66:15:63:c3:f2:5b:6b:f0:fd:20:
7f:a5:8a:41:28:b1:ca:e4:92:28:f1:15:22:1c:d2:ef:c4:ff:
e9:75:72:57:19:e7:2b:29:f0:75:e9:57:aa:53:6d:48:98:19:
1f:67:81:c2:d5:26:d5:e1:17:ae:7e:1d:be:d6:9d:44:4c:c1:
38:c4:e5:bb:22:c5:da:c3:04:9f:b5:44:8a:33:a0:78:2a:b6:
d6:cd:88:b7:f6:c9:d0:a6:92:76:b4:0b:79:a8:50:e2:20:61:
bb:0a:7e:63:67:e3:2c:c2:34:63:b9:c0:9e:cf:46:e3:e6:13:
ee:ab:15:81:cc:b3:0a:a2:42:1a:a2:c3:62:65:f8:48:53:fe:
68:0a:a2:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:42:01 2025 by rpki-client