Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/679e15-e1a3-42b5-9b7b-3f1c023ada05/1/2MK0dwhy4wSxUaV2V3N7GQurcg8.roa
File: 2MK0dwhy4wSxUaV2V3N7GQurcg8.roa (raw, json)
Hash identifier: geQflwSdFidvg3XM61p+uMbY/AlTUqtgFMbNorF/vjk=
Subject key identifier: D8:C2:B4:77:08:72:E3:04:B1:51:A5:76:57:73:7B:19:0B:AB:72:0F
Certificate issuer: /CN=fb1ff4df2efc69ecc192ea5aefd7b3b97f580901
Certificate serial: 0194228E08AD8DA586C9C9DC3A01E557C3C3
Authority key identifier: FB:1F:F4:DF:2E:FC:69:EC:C1:92:EA:5A:EF:D7:B3:B9:7F:58:09:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-x_03y78aezBkupa79ezuX9YCQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/679e15-e1a3-42b5-9b7b-3f1c023ada05/1/2MK0dwhy4wSxUaV2V3N7GQurcg8.roa
Signing time: Wed 01 Jan 2025 15:48:41 +0000
ROA not before: Wed 01 Jan 2025 15:48:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197437
IP address blocks: 46.151.136.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:08:ad:8d:a5:86:c9:c9:dc:3a:01:e5:57:c3:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb1ff4df2efc69ecc192ea5aefd7b3b97f580901
Validity
Not Before: Jan 1 15:48:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d8c2b4770872e304b151a57657737b190bab720f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:03:10:f8:ed:6d:94:2a:46:86:a9:d2:51:7c:
7a:39:6b:f6:b9:c6:7c:aa:2b:cc:80:c8:08:6f:7c:
c3:f2:31:43:ca:47:9d:54:54:e7:50:6b:9c:65:2a:
c0:41:a0:d8:86:34:f3:93:4d:eb:f3:ed:27:6d:84:
c1:de:e8:97:5b:1b:ba:34:39:03:2e:a3:ca:72:9f:
a4:52:5e:5b:ae:b7:44:69:02:56:29:f5:f7:8f:b8:
a9:f4:7f:16:cb:d9:2f:2a:61:2f:e9:a0:02:16:db:
95:04:c7:37:ff:76:c6:08:2f:15:80:ad:12:5b:da:
06:b2:f3:eb:7b:27:92:06:be:c2:ce:f3:93:69:cc:
45:6e:36:be:9f:4d:88:61:2f:11:f1:fc:73:25:09:
e4:fd:2d:e6:04:e0:c9:db:e6:00:e0:a7:5a:36:20:
43:f7:a5:33:ac:d8:86:01:3b:da:db:e1:ed:2a:f6:
c9:ef:3a:77:bb:75:79:40:6e:53:0a:c5:0c:4e:d3:
d5:0a:ca:1c:b8:8c:0b:73:19:f6:96:f4:71:f0:d6:
cd:e7:66:f6:88:d9:97:15:bf:28:ff:ee:06:46:f3:
6e:24:bf:b8:c2:7c:f8:48:18:e1:84:a1:d7:b2:a5:
b6:90:87:42:b9:76:d4:73:46:c9:82:b8:ff:34:c8:
c5:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:C2:B4:77:08:72:E3:04:B1:51:A5:76:57:73:7B:19:0B:AB:72:0F
X509v3 Authority Key Identifier:
keyid:FB:1F:F4:DF:2E:FC:69:EC:C1:92:EA:5A:EF:D7:B3:B9:7F:58:09:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-x_03y78aezBkupa79ezuX9YCQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/679e15-e1a3-42b5-9b7b-3f1c023ada05/1/2MK0dwhy4wSxUaV2V3N7GQurcg8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/679e15-e1a3-42b5-9b7b-3f1c023ada05/1/1-x_03y78aezBkupa79ezuX9YCQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.151.136.0/21
Signature Algorithm: sha256WithRSAEncryption
14:b7:3e:15:b4:2e:5c:4c:d5:90:17:73:16:26:44:8d:bf:1c:
9a:cb:81:ca:05:39:d4:09:f8:be:fd:26:c3:cd:59:da:54:fb:
b4:9a:72:1f:7a:8d:93:a1:a5:b1:69:66:cc:34:05:af:d2:6e:
2f:ee:06:13:4a:23:39:18:da:13:05:11:d6:55:27:5c:af:db:
ba:44:95:89:1c:fa:13:70:f2:63:99:c3:5f:81:76:f0:a0:f3:
98:e1:f0:e3:1a:85:ae:26:d5:34:d7:87:79:9d:18:9b:46:d8:
c2:66:6c:7e:9d:3f:92:66:97:4a:74:44:6c:42:27:9b:e2:6d:
83:c1:11:b7:87:27:6e:44:53:e7:e6:9f:7b:d9:dc:4e:d0:df:
95:7e:85:65:1a:c2:3f:27:16:65:39:dc:72:82:7a:ed:22:4f:
30:76:87:f4:a4:a8:39:f7:04:50:c1:0b:45:6b:0f:7e:94:fa:
5d:91:c6:6a:cf:31:51:ef:cb:e5:e5:b0:21:8c:e6:4e:8a:20:
c2:2d:97:8f:e4:56:c6:df:89:9d:f6:8b:52:e1:75:77:c6:14:
0f:80:a6:36:26:26:c1:f3:b6:4b:8a:0c:bc:fd:8b:38:e3:01:
9c:b5:ce:5e:70:2d:96:19:94:2b:1f:a0:64:c2:61:05:8c:fe:
09:8a:73:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:50:25 2025 by rpki-client