Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/785090-f864-4dbe-9a4b-80faeca9c2ee/1/0Da4pxnMXdvI5dEEH3JmAZoTYhA.roa
File: 0Da4pxnMXdvI5dEEH3JmAZoTYhA.roa (raw, json)
Hash identifier: Hj5Q/2Hh05YJsbHPFQES6qthisRibSra+MQ4aeEku0g=
Subject key identifier: D0:36:B8:A7:19:CC:5D:DB:C8:E5:D1:04:1F:72:66:01:9A:13:62:10
Certificate issuer: /CN=ce9d0647dc17141d842b32f5115d99aa9c9f33dd
Certificate serial: 0194282337DDB78C2933A85F03DD4E7950CC
Authority key identifier: CE:9D:06:47:DC:17:14:1D:84:2B:32:F5:11:5D:99:AA:9C:9F:33:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zp0GR9wXFB2EKzL1EV2ZqpyfM90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/785090-f864-4dbe-9a4b-80faeca9c2ee/1/0Da4pxnMXdvI5dEEH3JmAZoTYhA.roa
Signing time: Thu 02 Jan 2025 17:49:44 +0000
ROA not before: Thu 02 Jan 2025 17:49:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57866
IP address blocks: 46.226.126.0/24 maxlen: 24
2a11:7b80::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:37:dd:b7:8c:29:33:a8:5f:03:dd:4e:79:50:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce9d0647dc17141d842b32f5115d99aa9c9f33dd
Validity
Not Before: Jan 2 17:49:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d036b8a719cc5ddbc8e5d1041f7266019a136210
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:d8:20:ac:2b:6c:ce:45:f4:0b:3d:70:99:99:
18:67:d1:88:a8:65:1e:12:33:62:23:82:ae:f3:79:
68:64:c8:86:b2:f6:cc:15:fc:ee:34:c2:44:b1:8a:
ed:17:4a:35:6d:f3:ec:2e:b2:9d:3a:23:87:7c:08:
dc:ec:ef:5a:7c:dd:8a:a5:37:39:8f:74:51:0e:b9:
56:83:af:20:30:3c:87:c9:b7:c8:08:86:b2:88:1e:
9b:23:9b:ac:64:ea:f4:23:99:86:3f:86:4e:7b:cc:
47:6c:3b:9c:94:6c:e0:6b:a4:7a:d9:5e:45:16:97:
f2:0d:06:92:2a:d7:9a:7a:cc:b6:37:66:3d:b9:f1:
ad:52:77:5c:29:ab:35:68:b5:34:02:ac:45:d7:00:
6f:86:8f:ad:42:69:66:67:b7:88:72:38:a3:10:6c:
70:59:61:1d:c4:81:2c:03:bd:9a:2c:a3:a4:e7:94:
8f:b8:17:c1:e8:c0:45:82:16:b3:dc:03:05:12:66:
c1:86:6e:56:da:19:f6:7e:eb:36:b4:5d:a9:68:d6:
10:59:09:ef:ec:c8:2d:d5:39:66:3f:0a:ae:cc:e0:
59:a2:86:d7:65:0a:0d:5b:42:8c:d2:99:c7:8f:51:
a9:4d:ed:9c:1b:0c:e9:7e:78:79:06:14:e9:1b:d0:
45:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:36:B8:A7:19:CC:5D:DB:C8:E5:D1:04:1F:72:66:01:9A:13:62:10
X509v3 Authority Key Identifier:
keyid:CE:9D:06:47:DC:17:14:1D:84:2B:32:F5:11:5D:99:AA:9C:9F:33:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zp0GR9wXFB2EKzL1EV2ZqpyfM90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/785090-f864-4dbe-9a4b-80faeca9c2ee/1/0Da4pxnMXdvI5dEEH3JmAZoTYhA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/785090-f864-4dbe-9a4b-80faeca9c2ee/1/zp0GR9wXFB2EKzL1EV2ZqpyfM90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.226.126.0/24
IPv6:
2a11:7b80::/29
Signature Algorithm: sha256WithRSAEncryption
94:31:eb:98:f2:07:14:0b:92:94:73:70:25:c1:83:61:8e:5d:
b0:fb:a7:2a:61:2f:d0:70:c5:dd:f6:04:86:41:51:d7:5e:23:
54:e6:d0:39:e7:4f:83:19:63:44:64:54:f7:b2:7b:d8:f2:98:
02:c8:b2:b1:2f:f9:88:b0:24:50:89:c2:4c:c7:38:85:8a:e9:
90:15:14:91:87:88:af:87:d0:74:a8:ee:36:4b:77:85:27:a1:
d3:9e:94:72:7d:e7:07:39:50:0e:f1:c1:c7:49:a2:b6:8f:f4:
a1:7c:7e:cf:72:de:89:b8:f6:73:98:c6:53:04:03:ee:22:f0:
f8:65:4d:3c:23:89:5c:f2:ec:5f:aa:8f:37:1f:57:02:f4:97:
36:f1:bf:9a:0f:3c:54:4a:b6:f0:1b:88:14:ab:18:01:9b:ea:
79:89:4b:32:9e:c0:39:a2:d1:46:6e:0e:37:fd:e1:55:50:71:
cc:b3:de:9d:a7:a1:a5:67:b4:8b:38:a6:e2:5f:e3:cd:0d:7c:
d3:ec:63:b7:91:24:f6:ba:1f:fa:e4:34:89:7d:89:c4:6f:05:
21:1a:34:2d:ce:b9:ff:37:16:19:da:f5:55:c7:0a:e2:a0:cb:
48:94:32:9a:ce:be:a3:91:fc:44:1e:4a:18:9f:04:88:f0:12:
71:b6:51:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:41:26 2025 by rpki-client