Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/a7068a-92ba-42ea-9966-2054d4e903bc/1/2DxKgawRIdwPHYKPKO80oLEjXnQ.roa
File: 2DxKgawRIdwPHYKPKO80oLEjXnQ.roa (raw, json)
Hash identifier: GkiqXgjmsGCVt8nP5qXPMp6hqSSrH1HiN32NDxCXRyM=
Subject key identifier: D8:3C:4A:81:AC:11:21:DC:0F:1D:82:8F:28:EF:34:A0:B1:23:5E:74
Certificate issuer: /CN=b2e448b4a08f0e4c58a283d80735a8a803e10d4e
Certificate serial: 01961A37472D28F15FBAEDEF46B5EFA85CAF
Authority key identifier: B2:E4:48:B4:A0:8F:0E:4C:58:A2:83:D8:07:35:A8:A8:03:E1:0D:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/suRItKCPDkxYooPYBzWoqAPhDU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/a7068a-92ba-42ea-9966-2054d4e903bc/1/2DxKgawRIdwPHYKPKO80oLEjXnQ.roa
Signing time: Wed 09 Apr 2025 11:02:32 +0000
ROA not before: Wed 09 Apr 2025 11:02:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48674
IP address blocks: 46.33.23.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:1a:37:47:2d:28:f1:5f:ba:ed:ef:46:b5:ef:a8:5c:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2e448b4a08f0e4c58a283d80735a8a803e10d4e
Validity
Not Before: Apr 9 11:02:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d83c4a81ac1121dc0f1d828f28ef34a0b1235e74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:94:e6:3a:ab:11:27:0f:4e:9c:bf:79:e9:e3:
0f:a1:8b:cc:28:42:1d:f7:5b:de:45:7c:8e:93:26:
1e:6e:2d:ac:bc:55:27:d2:4c:d7:ab:8c:60:d4:7b:
be:22:a4:84:a0:95:7a:3b:05:4d:a3:15:8b:aa:3d:
cd:32:d8:42:63:0b:62:e6:4a:f7:e7:a6:bb:fc:3d:
1e:9c:39:06:0f:3a:d8:dc:ba:34:ef:1a:6a:38:4c:
2e:be:69:83:a1:d4:39:da:f2:bd:3d:90:6a:75:7c:
6a:e4:b9:82:40:d7:17:29:ab:5f:f7:ff:a8:e8:49:
dc:0c:f5:cc:a0:d0:c0:13:0f:68:4d:9d:a3:e3:a6:
50:71:e2:8c:13:ca:bc:62:47:8a:ff:f0:d7:47:20:
67:e3:e8:a9:b9:48:0b:16:a9:1d:f7:49:e9:b5:be:
19:83:1d:4b:76:9d:c7:e5:cf:b8:34:94:35:94:71:
f0:cb:85:07:9b:23:37:9b:8c:c8:ef:f9:75:38:28:
7d:b3:3c:46:54:f8:10:28:62:61:77:ba:b1:bc:46:
59:d0:fb:11:14:9e:b7:ad:84:7d:2a:46:b1:d9:cd:
73:8c:44:f7:c0:0c:95:2b:92:2e:c0:16:36:53:4f:
fe:a9:4a:17:98:28:47:63:bc:6f:e7:66:c1:56:ae:
5e:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:3C:4A:81:AC:11:21:DC:0F:1D:82:8F:28:EF:34:A0:B1:23:5E:74
X509v3 Authority Key Identifier:
keyid:B2:E4:48:B4:A0:8F:0E:4C:58:A2:83:D8:07:35:A8:A8:03:E1:0D:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/suRItKCPDkxYooPYBzWoqAPhDU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/a7068a-92ba-42ea-9966-2054d4e903bc/1/2DxKgawRIdwPHYKPKO80oLEjXnQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/a7068a-92ba-42ea-9966-2054d4e903bc/1/suRItKCPDkxYooPYBzWoqAPhDU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.33.23.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:96:72:62:2e:f7:0f:f5:20:4f:4d:31:7d:79:52:0f:28:88:
1b:70:96:3a:36:86:70:71:38:83:97:82:27:4a:dc:92:af:72:
ff:03:d9:8e:d2:94:b1:84:75:9f:47:b9:58:78:e0:82:e0:40:
e8:71:2d:39:3e:1e:7c:f5:2f:b7:d1:57:7f:44:89:d0:2d:b6:
ef:af:da:6b:5a:f2:c1:c2:22:aa:07:25:4c:bc:5c:b6:ff:6c:
39:a3:b4:58:17:6b:a5:cf:8a:8a:58:f4:80:b3:47:bd:e7:81:
1d:6e:5a:0d:af:4b:b7:a3:7d:06:99:68:2e:6f:b3:b9:1f:ce:
90:92:d7:83:51:88:98:e2:f6:ec:0b:08:48:45:43:3d:9a:e3:
75:59:0b:8b:5e:d9:28:47:8e:04:2a:cd:f7:ac:2a:9b:f5:35:
db:45:35:4c:9c:f2:17:ea:09:02:76:93:dd:50:e8:c1:7d:97:
10:8f:cd:69:8c:b6:ba:b1:88:6e:a3:8f:08:30:2d:2d:4d:b5:
b8:3d:8e:67:86:a0:55:c9:59:d2:bb:f7:d3:53:b8:6e:15:b2:
97:e7:42:d7:e5:db:fb:73:6d:a3:f8:91:5d:23:de:78:13:f8:
61:59:ed:70:d4:67:35:51:82:42:33:df:bb:6b:44:1d:11:bb:
c4:b7:88:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:29 2025 by rpki-client on console.sobornost.net