Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/2fc167-b357-4394-b4e8-c825be2813bc/1/Cu4Ly9bDY9N0jlfu6mUC0GHTghk.roa
File: Cu4Ly9bDY9N0jlfu6mUC0GHTghk.roa (raw, json)
Hash identifier: FhOMbyxySWflBQXbTf7Tp7c9eFTezC+2S3TDnGL1Jnk=
Subject key identifier: 0A:EE:0B:CB:D6:C3:63:D3:74:8E:57:EE:EA:65:02:D0:61:D3:82:19
Certificate issuer: /CN=0b84ea549f88211058b34bfcab0640c3030393c3
Certificate serial: 0194228E341A2B3B39B6A5F988A80537C13F
Authority key identifier: 0B:84:EA:54:9F:88:21:10:58:B3:4B:FC:AB:06:40:C3:03:03:93:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C4TqVJ-IIRBYs0v8qwZAwwMDk8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/2fc167-b357-4394-b4e8-c825be2813bc/1/Cu4Ly9bDY9N0jlfu6mUC0GHTghk.roa
Signing time: Wed 01 Jan 2025 15:48:52 +0000
ROA not before: Wed 01 Jan 2025 15:48:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 52195
IP address blocks: 46.149.208.0/20 maxlen: 23
185.12.20.0/22 maxlen: 23
2a02:ea80::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:34:1a:2b:3b:39:b6:a5:f9:88:a8:05:37:c1:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b84ea549f88211058b34bfcab0640c3030393c3
Validity
Not Before: Jan 1 15:48:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0aee0bcbd6c363d3748e57eeea6502d061d38219
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:0a:c5:21:a3:c7:3e:e9:14:85:de:be:c0:31:
77:65:87:8a:10:96:6f:e7:90:3f:05:53:b4:b1:19:
ba:a6:95:6f:3d:ed:85:8c:e6:59:61:31:9b:34:6d:
c7:45:ea:0d:01:a6:0c:fb:d5:20:31:ff:8c:39:6a:
9b:af:66:8a:28:b4:b3:4d:68:c7:a5:6a:45:0c:84:
4b:85:c1:40:1b:67:6d:e7:68:de:6d:32:c3:b9:0a:
93:32:55:f4:cb:1d:22:a5:61:35:3c:80:14:d9:75:
b7:7b:ae:71:bd:60:b9:90:db:3b:ea:b6:07:62:26:
dd:2b:14:a0:6b:79:5c:0f:f3:ae:95:f3:dd:ad:23:
3f:2e:70:19:a4:8b:a3:2f:ef:79:40:2c:07:28:43:
88:2f:55:75:0a:7a:dd:2f:a3:18:65:c4:80:d2:44:
8f:f8:79:f7:9e:c6:aa:76:c7:9e:30:a6:db:33:42:
cb:f9:f7:1f:d2:0c:a6:51:94:01:76:00:88:c3:c2:
51:82:57:91:f4:01:1f:e9:5b:be:5f:34:36:42:86:
85:f5:2a:a9:c2:f1:49:c3:26:0c:23:24:b4:3f:08:
9d:f8:d7:63:de:fe:b6:0f:a6:e9:5c:c9:6b:43:d5:
f8:39:d6:9d:14:e1:ca:86:eb:73:d3:e4:b0:42:e3:
40:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:EE:0B:CB:D6:C3:63:D3:74:8E:57:EE:EA:65:02:D0:61:D3:82:19
X509v3 Authority Key Identifier:
keyid:0B:84:EA:54:9F:88:21:10:58:B3:4B:FC:AB:06:40:C3:03:03:93:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C4TqVJ-IIRBYs0v8qwZAwwMDk8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/2fc167-b357-4394-b4e8-c825be2813bc/1/Cu4Ly9bDY9N0jlfu6mUC0GHTghk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/2fc167-b357-4394-b4e8-c825be2813bc/1/C4TqVJ-IIRBYs0v8qwZAwwMDk8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.149.208.0/20
185.12.20.0/22
IPv6:
2a02:ea80::/32
Signature Algorithm: sha256WithRSAEncryption
af:14:4c:15:97:8c:f5:4f:00:b9:93:c2:5a:7e:02:82:b2:b2:
13:c4:03:83:71:ad:28:1d:e5:d6:ae:29:eb:6a:43:5a:ea:3d:
14:12:7c:1b:82:c1:d3:d6:cb:35:e3:0c:44:7b:af:70:25:04:
4c:fd:ea:39:58:34:27:b9:64:fe:a9:a5:f0:6d:66:4c:69:24:
a8:bb:a1:f7:2e:3e:71:d9:84:f7:ca:8d:e9:7d:1d:b8:98:c7:
b0:b5:a7:2c:9c:16:4b:5b:38:9a:0f:9d:f5:5e:5a:f3:c5:50:
23:ef:c2:97:a9:8c:f3:f8:74:3b:b6:f0:56:05:24:21:dc:04:
b9:c9:47:77:3c:12:95:ed:3e:16:5f:74:fe:a3:a9:52:ae:a9:
86:31:b7:9f:67:d3:13:ee:d1:c2:18:3b:1e:42:d4:0c:74:b5:
f4:96:f0:3a:7b:e5:47:3c:87:1d:d8:8a:61:5a:07:5b:14:9c:
15:5b:cd:5c:7b:6f:6e:c6:a7:49:07:b1:8f:22:83:c4:5b:ed:
a7:b3:e7:a1:68:28:f9:f8:ae:df:f6:23:04:10:56:9e:8f:b3:
94:ae:6d:43:ff:a6:19:27:1e:53:e1:b5:3a:35:97:af:16:1c:
f3:8c:f8:ad:0a:13:c0:43:53:b2:c1:3e:9e:2c:d9:63:12:84:
6c:f6:68:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:03:04 2025 by rpki-client