Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/962b3f-fc26-4549-ae02-4d049a1eaf2f/1/qDSvupNvi7XpnOr0ygHu8NcBhCQ.roa
File: qDSvupNvi7XpnOr0ygHu8NcBhCQ.roa (raw, json)
Hash identifier: OxOTgS6oyFab2hs22rHLXwwiyKXLOcnTFclx4LxK7Lo=
Subject key identifier: A8:34:AF:BA:93:6F:8B:B5:E9:9C:EA:F4:CA:01:EE:F0:D7:01:84:24
Certificate issuer: /CN=d9a988916d51406f9a269f30a02d0086b57f4d5a
Certificate serial: 01942067E5CC8BD4C8D14A875E2CECF00957
Authority key identifier: D9:A9:88:91:6D:51:40:6F:9A:26:9F:30:A0:2D:00:86:B5:7F:4D:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2amIkW1RQG-aJp8woC0AhrV_TVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/962b3f-fc26-4549-ae02-4d049a1eaf2f/1/qDSvupNvi7XpnOr0ygHu8NcBhCQ.roa
Signing time: Wed 01 Jan 2025 05:47:47 +0000
ROA not before: Wed 01 Jan 2025 05:47:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51155
IP address blocks: 46.227.36.0/23 maxlen: 23
46.227.38.0/23 maxlen: 23
178.19.176.0/20 maxlen: 20
2a02:26e8::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:e5:cc:8b:d4:c8:d1:4a:87:5e:2c:ec:f0:09:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9a988916d51406f9a269f30a02d0086b57f4d5a
Validity
Not Before: Jan 1 05:47:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a834afba936f8bb5e99ceaf4ca01eef0d7018424
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f1:ad:e4:6d:f0:0c:da:1c:3d:2e:7e:4e:ea:
ff:56:99:9a:91:67:7b:4d:34:1d:80:7d:36:c5:e6:
45:e3:7a:86:16:56:d2:b7:d8:9f:38:ca:25:3a:d6:
7d:3b:41:cd:45:9f:81:4b:3c:86:4a:63:af:2c:fb:
63:b5:6e:13:a2:77:ff:bc:4a:53:1b:1b:cd:82:3d:
76:1b:bf:37:f2:50:33:cf:3b:11:dc:86:16:d0:53:
2e:d5:ea:21:54:3f:07:66:43:ab:13:74:0c:42:6c:
b7:80:f8:fe:36:88:ef:24:ef:d2:4e:3a:a3:6e:02:
59:65:ab:7e:12:74:26:b5:a1:16:a2:2e:93:dc:26:
88:56:31:e2:2f:04:cc:f8:94:ff:92:4b:33:c8:55:
3e:66:5d:33:a4:c9:7c:b4:a4:07:cf:55:08:a6:e7:
d1:09:1a:83:b0:27:16:ce:c3:d5:82:78:f7:12:07:
a9:1e:77:e4:e4:50:02:b6:95:45:bd:d8:f1:ac:ce:
92:b4:7e:74:fc:f6:48:9f:4f:ed:58:02:20:21:35:
1b:8b:ec:b1:e2:47:87:3f:6e:58:39:d4:ac:02:7c:
24:97:ab:eb:f1:5f:ed:e1:c8:92:c1:cf:80:c3:ed:
f1:a2:01:85:d4:49:31:99:c7:a1:4f:c9:52:e0:4f:
f3:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:34:AF:BA:93:6F:8B:B5:E9:9C:EA:F4:CA:01:EE:F0:D7:01:84:24
X509v3 Authority Key Identifier:
keyid:D9:A9:88:91:6D:51:40:6F:9A:26:9F:30:A0:2D:00:86:B5:7F:4D:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2amIkW1RQG-aJp8woC0AhrV_TVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/962b3f-fc26-4549-ae02-4d049a1eaf2f/1/qDSvupNvi7XpnOr0ygHu8NcBhCQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/962b3f-fc26-4549-ae02-4d049a1eaf2f/1/2amIkW1RQG-aJp8woC0AhrV_TVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.227.36.0/22
178.19.176.0/20
IPv6:
2a02:26e8::/32
Signature Algorithm: sha256WithRSAEncryption
a1:7e:c1:48:6a:a3:da:be:8d:fa:a9:ea:63:fa:ca:74:a8:34:
17:0c:e2:31:31:2e:8a:d9:9f:14:8c:2e:f4:2a:e2:73:b1:75:
4f:23:80:8f:33:dd:48:27:5b:64:11:db:88:58:ab:48:d4:32:
ff:78:f2:85:1a:84:c2:4b:cc:fa:7d:df:9e:5a:9f:3f:1f:4c:
7f:68:2f:e8:83:c3:f7:78:5c:af:d0:b4:ec:4d:d2:3d:65:60:
65:87:3a:9d:1b:5a:3e:70:2c:5c:55:73:26:91:a8:be:ae:61:
bd:f4:60:3d:0d:3b:c9:12:9f:c8:f0:ad:cc:10:a2:e5:2b:5c:
c4:c3:20:d4:b4:36:7e:e9:0a:f3:98:44:49:e5:09:e8:a4:6a:
e7:0a:0d:88:5e:17:e7:9e:5c:c6:83:a1:b6:be:c9:92:ac:9a:
d4:7b:9c:58:52:c6:0d:59:3c:71:27:df:73:f3:55:96:e0:26:
da:29:0a:03:59:16:f2:37:c1:13:bf:c8:65:5e:b7:1f:33:a8:
c8:11:87:91:76:fe:15:2f:44:09:6f:1f:c2:3a:fe:b3:05:41:
b8:3b:4a:e2:75:5a:a8:4d:be:d5:7d:39:01:e3:10:4c:ae:e2:
5d:76:29:30:c0:03:e7:a3:98:90:c4:ea:20:59:21:9f:8e:7d:
27:3e:be:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:20:06 2025 by rpki-client