Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/qfLtpL022R2vNSfmfA6qR_jq_6k.roa
File: qfLtpL022R2vNSfmfA6qR_jq_6k.roa (raw, json)
Hash identifier: 99hvsDHWBX451/OxAu/FvLR5vG5KLyjpmEGTCKGnQ6c=
Subject key identifier: A9:F2:ED:A4:BD:36:D9:1D:AF:35:27:E6:7C:0E:AA:47:F8:EA:FF:A9
Certificate issuer: /CN=6dfecfa0e6692595cfbea5266076e8e53efd9461
Certificate serial: 0194258FCE9EE0FF60C5DAF7175E1F0BF62F
Authority key identifier: 6D:FE:CF:A0:E6:69:25:95:CF:BE:A5:26:60:76:E8:E5:3E:FD:94:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bf7PoOZpJZXPvqUmYHbo5T79lGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/qfLtpL022R2vNSfmfA6qR_jq_6k.roa
Signing time: Thu 02 Jan 2025 05:49:28 +0000
ROA not before: Thu 02 Jan 2025 05:49:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211882
IP address blocks: 46.231.240.0/23 maxlen: 24
2a0c:e300:12::/48 maxlen: 48
2a0c:e303::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:ce:9e:e0:ff:60:c5:da:f7:17:5e:1f:0b:f6:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dfecfa0e6692595cfbea5266076e8e53efd9461
Validity
Not Before: Jan 2 05:49:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a9f2eda4bd36d91daf3527e67c0eaa47f8eaffa9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:2f:15:f3:69:e1:7b:a5:b5:85:f6:3c:0c:f6:
7e:78:25:01:d1:c1:93:a5:9a:7e:84:a4:2c:ad:97:
5c:64:11:6e:73:a2:90:a3:7d:50:d0:b9:55:19:f9:
13:77:96:14:96:f7:17:ce:33:5d:72:ae:88:5e:22:
6c:64:fd:57:1d:ad:5e:56:9d:b0:db:a2:fc:bc:c6:
0f:50:b9:04:d8:f3:b2:09:2e:68:23:e3:9d:ce:96:
8e:66:c4:cc:c1:c6:8d:5a:95:bd:3e:38:c9:78:e4:
a9:31:d5:dd:b9:c4:6f:b8:55:36:03:73:26:06:82:
95:0f:7c:ce:6e:a6:75:02:8f:b8:c1:9b:26:a2:ed:
3e:96:3c:50:e0:b9:9f:c3:3d:33:12:28:62:a3:9f:
10:19:12:8a:4e:72:b4:66:b2:01:05:39:73:e8:3c:
69:7c:1d:6a:fc:95:2c:ee:18:9e:ae:8f:0b:2f:dc:
aa:9c:7e:c9:71:83:cb:98:65:17:90:79:c3:6d:42:
ea:01:f0:3f:ff:fb:fb:12:36:c9:cf:8f:01:81:01:
d9:67:d2:2a:75:d1:49:bf:82:a4:14:56:de:fe:33:
c5:eb:8e:8f:2e:94:06:3b:39:18:58:5d:73:44:50:
1c:3e:d8:2f:6c:63:fa:1a:34:59:62:e0:26:a0:e0:
d9:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:F2:ED:A4:BD:36:D9:1D:AF:35:27:E6:7C:0E:AA:47:F8:EA:FF:A9
X509v3 Authority Key Identifier:
keyid:6D:FE:CF:A0:E6:69:25:95:CF:BE:A5:26:60:76:E8:E5:3E:FD:94:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf7PoOZpJZXPvqUmYHbo5T79lGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/qfLtpL022R2vNSfmfA6qR_jq_6k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/bf7PoOZpJZXPvqUmYHbo5T79lGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.231.240.0/23
IPv6:
2a0c:e300:12::/48
2a0c:e303::/32
Signature Algorithm: sha256WithRSAEncryption
05:a9:79:9f:4f:0e:bd:7e:79:9e:a5:a7:56:ad:97:ae:ba:5d:
44:20:2e:1e:53:a2:4a:64:f0:5c:39:45:ff:94:13:f4:2d:0f:
b9:d9:a1:3b:24:66:56:a5:4a:4f:ae:cf:af:17:4c:9d:fd:94:
76:2d:cc:60:b4:7d:8c:5d:51:8a:e8:54:8f:ed:b7:3d:89:d6:
d9:9d:19:7c:55:85:49:30:6d:4f:a4:fa:fe:5c:9c:cb:ed:ad:
2c:1c:bd:cb:f5:c2:15:88:7f:b8:ac:d0:61:bb:3c:18:c5:fb:
58:fb:0a:9c:b4:4a:84:66:12:91:45:99:70:c4:9e:af:d8:25:
b9:7a:15:8f:a0:67:32:45:90:08:97:51:e7:50:8e:71:0d:5c:
cf:1f:f0:45:3e:e0:ef:e5:7c:a0:ab:1f:08:10:e5:67:87:81:
7b:cc:62:18:2c:9e:02:b9:12:70:2d:f4:33:6b:ba:fc:5a:e5:
95:43:08:a4:14:82:4d:1a:3c:c9:58:51:57:e3:df:e3:d5:68:
a9:21:12:44:61:d9:94:85:97:7b:cd:b5:08:96:5f:5b:1f:cd:
d6:f9:6c:d8:01:51:83:f7:9c:40:fc:53:65:a4:26:b4:07:66:
7a:d2:78:6c:5b:81:84:07:5e:3f:5e:45:98:82:02:9f:fd:8b:
06:94:98:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:42:34 2025 by rpki-client