Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/53e496-0097-462a-a989-d67a61d5416d/1/pnlRPUhZWx-18cN9NyZhKYkt_80.roa
File: pnlRPUhZWx-18cN9NyZhKYkt_80.roa (raw, json)
Hash identifier: 4GEIDeArajdM/SlgOWHtHJwQGutC5XfeEODamrmD5BE=
Subject key identifier: A6:79:51:3D:48:59:5B:1F:B5:F1:C3:7D:37:26:61:29:89:2D:FF:CD
Certificate issuer: /CN=f416539e74934d23a0572f6625dbfdb54e820873
Certificate serial: 0194266B16EB9C94F93D485042B709E2F476
Authority key identifier: F4:16:53:9E:74:93:4D:23:A0:57:2F:66:25:DB:FD:B5:4E:82:08:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9BZTnnSTTSOgVy9mJdv9tU6CCHM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/53e496-0097-462a-a989-d67a61d5416d/1/pnlRPUhZWx-18cN9NyZhKYkt_80.roa
Signing time: Thu 02 Jan 2025 09:48:59 +0000
ROA not before: Thu 02 Jan 2025 09:48:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56671
IP address blocks: 46.255.149.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:16:eb:9c:94:f9:3d:48:50:42:b7:09:e2:f4:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f416539e74934d23a0572f6625dbfdb54e820873
Validity
Not Before: Jan 2 09:48:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a679513d48595b1fb5f1c37d37266129892dffcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:4c:25:16:48:c7:1e:45:aa:33:47:a6:d3:b2:
db:95:25:10:fd:fe:bc:19:98:e0:87:bd:0a:0d:c1:
2e:67:67:93:fa:81:10:49:24:40:59:92:ce:5e:27:
d4:fb:d6:df:d1:b5:e9:eb:3d:28:99:66:97:46:f5:
50:f6:3d:95:27:6e:50:bd:8b:36:00:49:b6:64:e6:
8d:4b:2a:58:be:36:7d:b7:17:e5:70:7b:61:c2:d5:
04:42:ec:8e:b5:22:c5:21:09:b8:b8:bb:02:f2:ae:
28:62:1e:a9:07:0d:38:6f:63:da:a2:6e:6b:19:7e:
46:13:10:b7:3e:18:1f:85:72:4d:db:22:d5:a7:92:
cd:ac:59:27:4d:a5:3a:bc:d0:87:0e:c9:ae:65:14:
84:82:ee:f3:d4:3f:da:14:89:74:06:a3:e0:e3:9f:
ea:0a:9e:6c:e0:de:21:d8:42:92:7c:a6:cf:75:5d:
61:a8:ee:1d:8c:87:f4:c9:43:5f:52:ec:d5:d3:f9:
57:87:01:32:69:f3:73:c8:6a:3f:4e:bd:c0:90:e8:
fc:db:8f:a3:2a:d6:3b:df:d7:cb:fe:86:97:54:e6:
e4:54:40:91:d2:f1:80:b0:ad:0c:9f:46:b8:61:30:
af:b1:c7:5e:4e:ba:74:e2:33:0a:02:e2:2e:22:55:
44:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:79:51:3D:48:59:5B:1F:B5:F1:C3:7D:37:26:61:29:89:2D:FF:CD
X509v3 Authority Key Identifier:
keyid:F4:16:53:9E:74:93:4D:23:A0:57:2F:66:25:DB:FD:B5:4E:82:08:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9BZTnnSTTSOgVy9mJdv9tU6CCHM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/53e496-0097-462a-a989-d67a61d5416d/1/pnlRPUhZWx-18cN9NyZhKYkt_80.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/53e496-0097-462a-a989-d67a61d5416d/1/9BZTnnSTTSOgVy9mJdv9tU6CCHM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.255.149.0/24
Signature Algorithm: sha256WithRSAEncryption
87:a1:29:57:14:c4:85:1b:be:15:e0:58:8d:d1:4f:b7:7a:05:
29:47:d3:48:ce:56:2f:e6:4a:15:fd:0b:35:5d:94:dd:ab:78:
7d:02:89:d0:8e:de:de:5b:33:ef:d5:2c:6c:7e:64:68:ba:14:
3f:60:37:ed:29:cb:4a:11:77:e4:53:d0:44:a1:2b:d7:39:f0:
39:1f:37:76:99:43:0a:aa:70:f4:c3:95:92:a9:4d:de:27:c0:
ba:ed:0f:9f:3b:c4:3b:92:04:fd:30:ea:51:c3:62:e7:04:19:
1b:20:29:96:95:cc:27:22:31:d7:45:21:2b:f5:c0:b7:7a:f4:
af:fc:f1:da:21:22:e2:59:e8:6f:90:0d:d2:d5:aa:10:bf:c5:
7f:36:5d:be:83:23:76:ae:70:1e:a5:ac:e9:24:ab:92:5c:7c:
60:1f:72:e9:33:e0:13:83:19:5f:93:0b:22:5e:b4:9c:a4:a6:
73:d9:5e:c9:0b:f2:7d:06:76:b9:44:98:a8:f4:ff:05:f7:ab:
0b:75:fa:48:73:7e:88:a2:6f:37:37:39:fd:82:61:ee:cb:e6:
10:19:a8:5e:54:49:91:45:9a:57:89:58:f1:97:30:03:e8:1d:
f1:e9:c1:a7:e7:c6:9b:77:f4:6d:2a:d5:93:b4:1a:86:64:e8:
22:68:a0:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 21:37:44 2025 by rpki-client