Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/f72562-45f5-4019-83a1-74f0c3e663cb/1/y4GLfgEHHvh7-yMgUWBtC7KLuEc.roa
File: y4GLfgEHHvh7-yMgUWBtC7KLuEc.roa (raw, json)
Hash identifier: dQpKnxbZerxvWzLT4LUfokJhZeXYIR/y034iOg9NMks=
Subject key identifier: CB:81:8B:7E:01:07:1E:F8:7B:FB:23:20:51:60:6D:0B:B2:8B:B8:47
Certificate issuer: /CN=2be53d340a8bf47c1bf34d3255e102efb181ad19
Certificate serial: 019421B1E23B3AEDC99E6ED0EB61AD905A23
Authority key identifier: 2B:E5:3D:34:0A:8B:F4:7C:1B:F3:4D:32:55:E1:02:EF:B1:81:AD:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K-U9NAqL9Hwb800yVeEC77GBrRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/f72562-45f5-4019-83a1-74f0c3e663cb/1/y4GLfgEHHvh7-yMgUWBtC7KLuEc.roa
Signing time: Wed 01 Jan 2025 11:48:13 +0000
ROA not before: Wed 01 Jan 2025 11:48:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 38963
IP address blocks: 46.236.63.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:e2:3b:3a:ed:c9:9e:6e:d0:eb:61:ad:90:5a:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2be53d340a8bf47c1bf34d3255e102efb181ad19
Validity
Not Before: Jan 1 11:48:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cb818b7e01071ef87bfb232051606d0bb28bb847
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:6f:1b:52:5b:7c:15:7b:a0:08:77:c9:67:57:
03:04:0d:e7:26:73:0b:0f:87:a7:dd:6a:c5:14:26:
fd:66:a6:47:8c:3a:9c:74:12:98:b7:d3:44:12:6d:
e5:23:0f:3c:41:b5:1d:94:62:88:fb:dd:70:d2:91:
b7:3c:23:ff:8e:36:8c:74:11:fd:9d:6f:fd:63:2c:
26:80:98:fe:8e:90:0b:c8:13:01:ca:5c:6f:4a:7e:
ce:a5:41:e7:19:07:f7:ac:33:eb:bb:c4:df:15:0f:
13:27:c7:0a:f7:d0:b4:40:8a:c5:47:89:24:6f:34:
2f:77:19:22:f5:59:48:c6:e6:18:94:29:e1:bb:72:
2d:ce:af:f8:09:81:86:cd:f0:a7:25:61:9c:a1:eb:
07:cd:86:3f:d7:f5:ec:f4:8d:ff:ec:d3:6f:15:ce:
d2:71:e9:2d:63:89:20:3e:47:f4:c4:b1:88:7d:16:
9d:16:b8:0c:f0:a0:4c:0c:b0:cf:76:8b:57:45:26:
40:a3:20:3c:26:3b:93:da:8f:af:33:91:65:eb:70:
b7:3c:4a:f6:24:7d:28:9e:f2:e5:da:1b:04:75:19:
f3:17:1f:52:62:21:72:78:a9:32:ca:5a:d8:98:86:
16:b3:23:7e:46:d5:33:21:9d:d0:65:80:47:32:e1:
d2:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:81:8B:7E:01:07:1E:F8:7B:FB:23:20:51:60:6D:0B:B2:8B:B8:47
X509v3 Authority Key Identifier:
keyid:2B:E5:3D:34:0A:8B:F4:7C:1B:F3:4D:32:55:E1:02:EF:B1:81:AD:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K-U9NAqL9Hwb800yVeEC77GBrRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/f72562-45f5-4019-83a1-74f0c3e663cb/1/y4GLfgEHHvh7-yMgUWBtC7KLuEc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/f72562-45f5-4019-83a1-74f0c3e663cb/1/K-U9NAqL9Hwb800yVeEC77GBrRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.236.63.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:77:a9:25:7b:db:bd:1a:3c:4b:29:b0:01:f3:b3:bb:59:47:
a3:db:66:a9:1e:30:ed:e5:0d:82:97:32:34:20:81:7f:e2:47:
d9:17:1a:38:d7:08:a5:c9:22:ef:77:91:ec:64:20:14:be:e2:
8c:09:13:71:19:b0:63:48:44:5f:d5:51:93:de:39:bf:a7:d5:
be:37:5d:ef:db:50:5d:b6:d6:0d:0a:a7:a1:15:55:97:53:75:
2f:8b:1f:16:04:b8:56:02:8f:61:b3:0e:15:0e:14:d8:11:83:
ea:5b:57:c0:03:d4:1d:70:84:19:bd:d5:60:0d:5c:14:d1:4c:
78:97:3b:3c:ef:07:47:4c:7c:c8:71:35:34:85:1d:7f:a3:fa:
ca:a2:4c:dd:d3:b8:46:9b:b1:22:48:47:b4:25:14:f0:b5:dd:
2e:a6:60:de:ee:f1:ca:8e:e7:31:76:ca:52:9f:8e:e4:88:93:
54:2d:53:d2:87:52:45:8b:29:16:3f:fa:84:f1:5b:3c:74:8f:
e5:1e:0d:3e:8b:79:f4:86:d6:5c:90:f3:b2:27:08:2c:fb:82:
ed:6a:58:65:f3:90:bf:b2:ce:b6:3f:73:36:db:d9:82:6c:aa:
a9:b0:e4:43:0b:d5:ba:5e:54:e9:55:a6:60:bc:64:ac:72:27:
67:a2:b2:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:16:57 2025 by rpki-client