Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/88fff5-dfd9-4008-95b7-785e5883644d/1/5MWhCrFg7tp7QEtPCfotFLjWla0.roa
File: 5MWhCrFg7tp7QEtPCfotFLjWla0.roa (raw, json)
Hash identifier: 8Wz+CTnBd2ucThhfXsI27tlZBapFqnRUfC26tlVJX6s=
Subject key identifier: E4:C5:A1:0A:B1:60:EE:DA:7B:40:4B:4F:09:FA:2D:14:B8:D6:95:AD
Certificate issuer: /CN=d8d662dcc6fe3b81ef3de2fca3cfcedc11ebaa43
Certificate serial: 01946940A5313867B707D291F2652D0E0DC9
Authority key identifier: D8:D6:62:DC:C6:FE:3B:81:EF:3D:E2:FC:A3:CF:CE:DC:11:EB:AA:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2NZi3Mb-O4HvPeL8o8_O3BHrqkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/88fff5-dfd9-4008-95b7-785e5883644d/1/5MWhCrFg7tp7QEtPCfotFLjWla0.roa
Signing time: Wed 15 Jan 2025 09:17:11 +0000
ROA not before: Wed 15 Jan 2025 09:17:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204079
IP address blocks: 46.36.98.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:69:40:a5:31:38:67:b7:07:d2:91:f2:65:2d:0e:0d:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8d662dcc6fe3b81ef3de2fca3cfcedc11ebaa43
Validity
Not Before: Jan 15 09:17:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e4c5a10ab160eeda7b404b4f09fa2d14b8d695ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:8d:9f:0c:f9:09:c7:bc:75:20:a7:b9:50:17:
bf:1b:25:4a:2a:65:7e:45:cf:29:44:22:f5:d7:6f:
c7:d5:e7:10:5f:4b:f2:c5:7d:5d:7a:17:d1:7a:b6:
d1:cc:fe:7e:42:a4:db:06:3a:bd:32:90:0d:e8:d0:
a0:e1:86:72:49:3d:9b:9b:e3:36:2e:2d:8d:82:8c:
11:c0:32:10:f9:ee:69:6a:31:f1:fb:20:a4:26:28:
2a:a1:2e:83:37:67:87:05:27:a5:f1:a9:c0:9f:3e:
b7:2d:34:57:95:bd:f6:7c:04:55:de:31:67:aa:2a:
20:d5:84:5b:f5:c0:0c:2d:09:39:fd:e0:ae:89:63:
f9:9b:84:35:bd:90:02:0f:81:3c:b2:01:b0:0f:41:
8a:b4:c3:e5:e1:1f:93:af:80:cf:b3:a2:71:78:5c:
3f:f3:f3:39:3c:0f:62:ef:ed:f8:7e:b5:ce:1f:2f:
05:4d:63:2a:3d:7f:54:c2:7e:1a:1b:d6:21:6f:8c:
3a:29:60:15:79:86:d2:5c:c5:23:5f:57:f0:f0:6b:
f7:66:51:28:a2:21:6a:fa:9d:da:c8:1e:e8:25:4b:
26:d1:8f:6d:c5:bc:d1:4a:21:34:bd:6c:bb:ef:32:
bf:75:98:80:10:07:f1:89:f6:73:17:1b:a5:f0:77:
19:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:C5:A1:0A:B1:60:EE:DA:7B:40:4B:4F:09:FA:2D:14:B8:D6:95:AD
X509v3 Authority Key Identifier:
keyid:D8:D6:62:DC:C6:FE:3B:81:EF:3D:E2:FC:A3:CF:CE:DC:11:EB:AA:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2NZi3Mb-O4HvPeL8o8_O3BHrqkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/88fff5-dfd9-4008-95b7-785e5883644d/1/5MWhCrFg7tp7QEtPCfotFLjWla0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/88fff5-dfd9-4008-95b7-785e5883644d/1/2NZi3Mb-O4HvPeL8o8_O3BHrqkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.36.98.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:4e:30:bd:0d:b2:46:1d:29:aa:9f:be:bd:5a:1b:87:34:6f:
b4:32:fd:57:78:a3:42:01:96:c0:d3:09:74:3a:3a:2e:c1:d3:
d0:57:7a:ce:16:a9:f0:30:7c:6f:c2:ea:65:a9:a0:60:03:2a:
86:13:07:68:d8:6c:52:3d:8f:80:03:dc:7b:d4:af:4f:6f:3b:
b4:96:ca:34:1d:d3:4d:8d:f7:70:3e:1c:e1:a4:c6:d9:52:0d:
0a:1f:a8:96:1a:a7:a1:ed:11:b1:16:b7:24:9c:47:3d:f7:7f:
0c:d7:ec:40:76:d2:f4:8d:74:57:17:16:d4:e3:03:bd:67:d5:
5a:59:aa:35:cb:a5:28:8b:4d:b8:1e:8f:92:d3:4a:b5:fb:68:
b8:fc:e9:9f:3e:f5:e2:78:d0:90:74:8b:75:af:b1:ad:00:9a:
33:7e:92:d3:31:6d:ea:3f:f7:3b:87:2f:3a:f8:d9:7e:75:21:
09:23:f5:c4:b4:fb:30:08:c8:18:dd:33:3f:db:af:a9:a8:5d:
91:d5:e6:72:7c:75:c9:13:dd:bb:08:27:de:95:ae:5e:80:ae:
97:1b:8b:b0:0e:4e:88:49:24:c7:a2:34:f0:ad:f4:35:70:f7:
b3:be:6a:f2:b7:3f:5f:02:df:0a:6d:34:3c:99:fc:9e:57:6b:
6d:69:c9:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 8 04:47:39 2025 by rpki-client on console.sobornost.net