Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/WZoVc8N-YD-8FMKAITneTMD8_4k.roa
File: WZoVc8N-YD-8FMKAITneTMD8_4k.roa (raw, json)
Hash identifier: d546sm0t0rb46HppUnfY7MCyS/rnnp2kV23n3HY9/us=
Subject key identifier: 59:9A:15:73:C3:7E:60:3F:BC:14:C2:80:21:39:DE:4C:C0:FC:FF:89
Certificate issuer: /CN=731d9ad404ecdafa70ea9a4c9d10b9801829ea1f
Certificate serial: 019421439ADED08464F9EAF26D2E1E349D12
Authority key identifier: 73:1D:9A:D4:04:EC:DA:FA:70:EA:9A:4C:9D:10:B9:80:18:29:EA:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cx2a1ATs2vpw6ppMnRC5gBgp6h8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/WZoVc8N-YD-8FMKAITneTMD8_4k.roa
Signing time: Wed 01 Jan 2025 09:47:46 +0000
ROA not before: Wed 01 Jan 2025 09:47:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 24631
IP address blocks: 46.54.139.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:9a:de:d0:84:64:f9:ea:f2:6d:2e:1e:34:9d:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=731d9ad404ecdafa70ea9a4c9d10b9801829ea1f
Validity
Not Before: Jan 1 09:47:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=599a1573c37e603fbc14c2802139de4cc0fcff89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b0:10:f1:bc:ed:4d:c1:d6:9f:25:d7:86:c3:
ac:07:54:09:c7:cb:86:06:8f:9c:83:81:96:86:30:
db:e1:97:a2:66:be:1e:d2:da:55:be:83:ae:6b:bc:
bf:3e:6a:9d:ed:43:4f:2b:5b:85:65:d9:50:3f:68:
4a:96:0d:a5:93:c9:b1:7a:d4:c0:89:12:d2:aa:a8:
39:dc:3d:0f:19:45:9c:a5:be:ec:a4:8b:9f:14:00:
83:a7:c1:1d:c7:20:98:b3:d8:3f:23:1a:ad:85:86:
a4:1b:10:4c:cd:6a:ce:af:3e:9f:b9:72:8d:76:ef:
bf:49:8e:b9:df:e6:a6:b7:0f:a9:e4:45:3f:a4:1c:
5c:70:f2:ed:1f:d7:62:76:c2:e3:1e:e5:56:62:22:
fc:f2:0d:cf:2c:58:9b:40:e0:0f:29:49:4b:48:56:
81:7c:e5:42:6b:11:4c:5b:25:9c:b3:99:84:be:75:
43:d4:ff:5e:46:e2:6b:72:61:7c:f0:ef:02:58:26:
6d:c8:c9:58:75:40:92:f5:72:63:ba:26:75:29:01:
af:62:18:67:60:bf:9a:53:fb:6d:e1:2d:5c:9a:ea:
63:d8:34:2d:df:d9:7e:94:6e:35:42:f1:df:b5:4d:
85:ca:a1:06:5e:70:65:2a:ea:90:13:34:89:51:00:
1c:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:9A:15:73:C3:7E:60:3F:BC:14:C2:80:21:39:DE:4C:C0:FC:FF:89
X509v3 Authority Key Identifier:
keyid:73:1D:9A:D4:04:EC:DA:FA:70:EA:9A:4C:9D:10:B9:80:18:29:EA:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cx2a1ATs2vpw6ppMnRC5gBgp6h8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/WZoVc8N-YD-8FMKAITneTMD8_4k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/cx2a1ATs2vpw6ppMnRC5gBgp6h8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.54.139.0/24
Signature Algorithm: sha256WithRSAEncryption
73:a4:a0:39:52:fa:46:6f:53:f4:25:4e:e0:af:03:9c:07:f3:
17:a1:c5:46:e1:9f:f0:b1:4e:04:c4:10:79:f7:42:cf:0b:6d:
62:1c:bf:99:39:50:ff:10:9f:f9:8a:0e:9d:c0:77:c1:5a:24:
79:d8:40:ff:af:07:f2:26:56:7a:ec:69:94:0b:d4:fd:20:ef:
e4:ca:a5:68:30:c0:57:56:6f:62:90:ff:f9:e2:d7:18:44:ad:
32:da:2d:44:cf:2a:8e:39:57:5b:48:68:ec:3f:09:0d:74:81:
95:66:fb:87:ff:46:04:d4:dc:1f:54:dc:24:fa:aa:7e:e1:af:
45:6b:46:12:15:0f:d1:5d:43:cd:5d:27:25:72:e9:0a:74:94:
bf:58:21:c7:89:8d:ff:eb:9f:71:7d:81:07:c6:b8:63:b0:b4:
f2:fd:0b:e6:22:04:44:e0:72:be:76:3f:88:c9:1f:10:ef:2c:
dd:72:95:db:03:db:69:8c:1a:aa:9e:6b:09:54:c8:1f:72:64:
dc:99:aa:93:91:93:5c:b3:e0:a9:fe:3f:59:7d:aa:90:91:c5:
df:8d:07:c7:d0:1c:a3:78:67:ab:53:34:54:e2:61:b6:0e:8a:
27:ba:50:27:0b:e6:09:3c:dd:06:1e:ea:e9:1d:8f:ae:10:9c:
f8:c4:89:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:18 2025 by rpki-client on console.sobornost.net