Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/066dbd-b447-4b59-8936-c3bc5c521bc5/1/0Ox66VfhpkksOxsQKvgplGDbF6A.roa
File: 0Ox66VfhpkksOxsQKvgplGDbF6A.roa (raw, json)
Hash identifier: 2hQepAwHuEvKh7LX4V/wopW78ujoteaNGMyduaqzBZo=
Subject key identifier: D0:EC:7A:E9:57:E1:A6:49:2C:3B:1B:10:2A:F8:29:94:60:DB:17:A0
Certificate issuer: /CN=1d83fa89a4920ebab6a8196fa7d330744140ae75
Certificate serial: 019420D5D878398D7A158738DA60279AA18D
Authority key identifier: 1D:83:FA:89:A4:92:0E:BA:B6:A8:19:6F:A7:D3:30:74:41:40:AE:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HYP6iaSSDrq2qBlvp9MwdEFArnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/066dbd-b447-4b59-8936-c3bc5c521bc5/1/0Ox66VfhpkksOxsQKvgplGDbF6A.roa
Signing time: Wed 01 Jan 2025 07:47:53 +0000
ROA not before: Wed 01 Jan 2025 07:47:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51784
IP address blocks: 46.63.0.0/18 maxlen: 23
46.63.64.0/18 maxlen: 18
46.63.64.0/19 maxlen: 24
46.63.96.0/20 maxlen: 24
46.63.112.0/21 maxlen: 24
46.63.120.0/21 maxlen: 21
185.177.188.0/22 maxlen: 24
2a03:69e0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:d8:78:39:8d:7a:15:87:38:da:60:27:9a:a1:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d83fa89a4920ebab6a8196fa7d330744140ae75
Validity
Not Before: Jan 1 07:47:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d0ec7ae957e1a6492c3b1b102af8299460db17a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:52:74:93:a9:84:a6:08:ad:fb:74:19:3a:59:
06:7c:c2:ed:0f:00:c4:e5:a6:84:7e:66:df:92:bf:
5e:3e:6b:10:14:76:ae:b5:98:42:4d:1d:d6:da:4b:
4e:85:65:5d:32:78:ba:86:3d:6e:17:99:59:3a:ff:
cf:fa:38:ab:40:0a:03:74:0e:c4:e6:07:d7:23:e0:
21:2f:0d:37:93:69:a4:a6:9d:d3:9b:c7:d3:54:01:
76:1d:a3:59:e1:25:55:12:96:46:b2:2b:f2:1b:3b:
eb:c8:99:42:51:bf:b0:e1:2d:92:10:41:fa:e4:a0:
f7:1e:fb:68:02:e6:fe:88:82:dc:4a:a4:4f:72:01:
af:8d:3c:fd:1e:60:45:fc:ad:89:d6:d8:9d:22:c4:
26:66:97:31:10:1d:07:49:26:4f:37:c3:40:42:6b:
e2:fb:a0:de:47:73:a7:d2:46:c1:2a:c8:3f:19:39:
3b:b6:95:80:08:da:17:7a:1f:b0:e0:03:0a:b1:39:
44:43:c7:e3:35:73:3d:8f:b5:db:f6:91:a0:fe:c6:
97:99:15:ef:57:94:8c:66:87:12:ad:58:ee:8b:fc:
78:49:71:37:54:63:28:d9:db:9d:18:d4:e7:3e:79:
85:9b:a4:b1:f6:dc:6a:3f:5a:fd:55:15:1b:4c:9c:
68:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:EC:7A:E9:57:E1:A6:49:2C:3B:1B:10:2A:F8:29:94:60:DB:17:A0
X509v3 Authority Key Identifier:
keyid:1D:83:FA:89:A4:92:0E:BA:B6:A8:19:6F:A7:D3:30:74:41:40:AE:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HYP6iaSSDrq2qBlvp9MwdEFArnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/066dbd-b447-4b59-8936-c3bc5c521bc5/1/0Ox66VfhpkksOxsQKvgplGDbF6A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/066dbd-b447-4b59-8936-c3bc5c521bc5/1/HYP6iaSSDrq2qBlvp9MwdEFArnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.63.0.0/17
185.177.188.0/22
IPv6:
2a03:69e0::/32
Signature Algorithm: sha256WithRSAEncryption
29:e1:b1:ca:65:10:3b:9b:8c:5d:38:e1:47:2d:c0:cf:d7:73:
20:7d:a6:83:3e:a2:7e:5f:0b:7a:17:92:1c:8d:c5:5a:65:76:
88:22:9b:fd:b7:06:0f:12:f3:00:fa:da:62:78:f2:b8:af:4a:
bb:d7:82:43:4d:b3:ab:53:fb:42:1d:c1:fa:7a:55:ab:2e:c8:
4d:19:3d:cf:c9:ad:3d:8e:d7:3f:88:d6:24:aa:2d:78:26:93:
68:65:7c:1b:ae:2a:2c:da:75:32:16:7d:41:69:3c:15:17:e5:
44:62:76:37:3c:6b:9b:8c:2e:a2:96:a5:e9:23:a2:bb:43:d9:
9d:18:46:f4:15:8c:dc:a2:14:90:5d:63:a6:aa:c9:34:f3:fa:
74:98:ae:25:12:e4:14:e6:62:47:fc:ae:3d:1b:33:e2:69:37:
8f:b7:72:6a:8d:d8:5f:df:b4:ce:75:a5:bc:b2:2f:bb:7a:33:
e4:d3:66:20:2b:db:87:65:3f:0f:81:62:ff:ee:cd:54:47:4f:
8d:28:82:d3:1d:3b:a9:3c:64:42:0f:27:c4:e2:36:d9:2e:f7:
30:6b:bb:98:72:dc:3c:31:1a:43:b1:a9:0c:a5:54:c4:fe:4a:
0e:05:13:bd:3c:00:d9:40:28:d5:42:e9:88:1a:eb:c5:b4:32:
a5:ba:b1:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:18:53 2025 by rpki-client