Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/5e0994-94d2-46e1-8066-cec22ea79513/1/xO6LE8_q3PK-EbV6Eeaj1MNpS5g.roa
File: xO6LE8_q3PK-EbV6Eeaj1MNpS5g.roa (raw, json)
Hash identifier: fd8tHh3AiS9bFzCxVNDYTejvw2lI8UvtB+kXLLVRR6A=
Subject key identifier: C4:EE:8B:13:CF:EA:DC:F2:BE:11:B5:7A:11:E6:A3:D4:C3:69:4B:98
Certificate issuer: /CN=79b5134b11f940911f0ff315c948daa53f732ee0
Certificate serial: 01942522075DD6186E33030C1ABAF285D253
Authority key identifier: 79:B5:13:4B:11:F9:40:91:1F:0F:F3:15:C9:48:DA:A5:3F:73:2E:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ebUTSxH5QJEfD_MVyUjapT9zLuA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/5e0994-94d2-46e1-8066-cec22ea79513/1/xO6LE8_q3PK-EbV6Eeaj1MNpS5g.roa
Signing time: Thu 02 Jan 2025 03:49:34 +0000
ROA not before: Thu 02 Jan 2025 03:49:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 52033
IP address blocks: 46.254.48.0/24 maxlen: 24
46.254.49.0/24 maxlen: 24
46.254.50.0/24 maxlen: 24
46.254.51.0/24 maxlen: 24
46.254.52.0/24 maxlen: 24
46.254.53.0/24 maxlen: 24
46.254.54.0/24 maxlen: 24
46.254.55.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:07:5d:d6:18:6e:33:03:0c:1a:ba:f2:85:d2:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79b5134b11f940911f0ff315c948daa53f732ee0
Validity
Not Before: Jan 2 03:49:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c4ee8b13cfeadcf2be11b57a11e6a3d4c3694b98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:e4:dd:ff:3d:7d:4a:b1:9c:25:f1:ea:b7:8e:
95:7f:56:3d:ca:e4:96:96:47:eb:34:5b:f1:3a:53:
28:de:5c:3d:91:28:ee:ae:15:ce:7b:77:ba:bb:46:
02:f8:b0:e6:5d:d9:bd:64:44:67:3b:07:e9:ac:37:
10:1c:cc:c3:04:68:92:5a:21:72:6c:28:fb:d8:b7:
2f:e2:06:8f:c4:e3:db:8f:27:50:07:a7:a0:3e:bd:
ff:cd:11:dc:ba:0a:2a:26:59:20:34:6d:49:5a:ce:
da:76:d2:61:4e:1e:36:19:69:d0:89:54:f4:3d:4f:
4e:f8:1a:44:d2:b2:8f:73:6c:f4:29:c5:e0:b6:70:
e0:d0:11:3c:da:72:5b:b3:59:77:60:1b:8b:03:bb:
c3:03:55:e6:b2:be:dc:3b:5a:67:40:43:4a:b4:0e:
07:fb:9e:49:01:61:84:f9:7a:0b:24:d4:05:09:1b:
10:82:e5:1f:8b:1f:89:3c:d8:8a:8c:7f:81:ed:da:
b0:6d:a1:21:fa:47:c9:b5:01:63:3d:da:7e:d8:33:
2a:7c:45:5f:02:3a:16:74:30:80:ec:c4:c2:fe:c2:
60:42:e5:34:8a:c0:ab:ad:de:b3:75:03:a5:e6:42:
2b:cc:d8:95:24:a7:2c:c6:76:7a:c8:22:d4:26:94:
4d:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:EE:8B:13:CF:EA:DC:F2:BE:11:B5:7A:11:E6:A3:D4:C3:69:4B:98
X509v3 Authority Key Identifier:
keyid:79:B5:13:4B:11:F9:40:91:1F:0F:F3:15:C9:48:DA:A5:3F:73:2E:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ebUTSxH5QJEfD_MVyUjapT9zLuA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/5e0994-94d2-46e1-8066-cec22ea79513/1/xO6LE8_q3PK-EbV6Eeaj1MNpS5g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/5e0994-94d2-46e1-8066-cec22ea79513/1/ebUTSxH5QJEfD_MVyUjapT9zLuA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.254.48.0/21
Signature Algorithm: sha256WithRSAEncryption
19:71:e5:da:67:16:ba:f6:3b:dd:66:01:b9:03:ec:10:0b:b4:
a5:ba:48:c6:8f:08:5f:a6:e2:80:a1:aa:62:01:7c:bf:a6:12:
02:b3:1a:73:ac:a7:b3:5a:e7:6d:90:c0:66:b4:43:81:bd:28:
58:5d:d4:26:e2:c4:fd:e5:84:da:79:50:c9:35:57:ff:25:dd:
b2:0b:92:e6:fa:2c:56:b1:9d:2e:8c:86:81:62:c8:64:f2:62:
7d:0f:fb:83:fa:dc:ac:64:b5:51:4e:80:68:61:b7:eb:6e:d6:
65:c4:0f:a4:5a:ae:8f:c8:2e:47:e0:a2:df:19:65:73:10:bd:
bc:70:aa:bf:96:c2:05:41:47:c0:77:91:db:dd:8d:98:6c:aa:
8a:8f:d2:c4:ef:04:5e:99:f1:f6:55:0b:e2:52:33:52:89:2f:
e1:20:d9:8c:8d:77:b8:eb:cc:c9:ac:7b:e9:4d:f4:67:51:0f:
40:27:a8:b5:1d:85:03:65:a2:2f:85:29:3e:7b:e7:fb:37:9e:
6a:59:cd:46:33:bf:f3:f3:4c:f2:a2:7a:45:55:66:79:c2:73:
0e:cd:0c:84:10:b4:bb:90:7d:58:01:1e:3d:5a:d3:1b:a5:32:
d7:96:47:cb:4e:cb:d7:bb:29:e9:9f:98:74:c7:3a:e0:5c:e2:
29:33:32:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:36:08 2025 by rpki-client