Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/9b8d3b-0c03-4591-bd0f-87750d6f77a8/1/fv0GFD_AZHwLWR5yvJcFyEMzZds.roa
File: fv0GFD_AZHwLWR5yvJcFyEMzZds.roa (raw, json)
Hash identifier: +P74mB+NlndUj38u1gR6So/MVR2zQW1aNy+V6Ba/PBg=
Subject key identifier: 7E:FD:06:14:3F:C0:64:7C:0B:59:1E:72:BC:97:05:C8:43:33:65:DB
Certificate issuer: /CN=88775003f7d9e8e6e1ef48db06728e668ed187bc
Certificate serial: 01941F8C7D62FE480A283AB3776B8466F70B
Authority key identifier: 88:77:50:03:F7:D9:E8:E6:E1:EF:48:DB:06:72:8E:66:8E:D1:87:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/9b8d3b-0c03-4591-bd0f-87750d6f77a8/1/fv0GFD_AZHwLWR5yvJcFyEMzZds.roa
Signing time: Wed 01 Jan 2025 01:48:08 +0000
ROA not before: Wed 01 Jan 2025 01:48:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57000
IP address blocks: 46.149.96.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:7d:62:fe:48:0a:28:3a:b3:77:6b:84:66:f7:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88775003f7d9e8e6e1ef48db06728e668ed187bc
Validity
Not Before: Jan 1 01:48:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7efd06143fc0647c0b591e72bc9705c8433365db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:66:df:6f:b3:64:7d:c3:0f:f6:17:51:78:33:
7b:fb:1c:cc:74:5b:a9:78:55:47:dd:d2:e8:20:0e:
34:ed:2b:b9:11:ad:ab:e6:8d:d0:aa:fe:a1:83:b6:
ae:25:0c:dc:9d:88:b4:8b:b7:b6:e9:ab:ef:d6:b5:
6c:98:16:f1:fd:1a:87:98:b4:0d:28:cb:cf:7a:2d:
25:b5:64:64:68:12:66:1f:7b:29:50:3c:17:a4:88:
17:78:c7:74:2f:96:fb:ff:8e:33:6f:67:d4:f6:e2:
b5:4d:12:b5:70:4c:e9:f6:a4:3b:50:18:e7:d3:d7:
90:dc:15:69:37:d3:21:65:36:fe:75:19:25:2d:a0:
7a:b3:79:2f:7a:0b:31:0b:65:5a:7c:68:47:16:7e:
b8:97:ba:be:a9:32:3a:7a:94:04:9f:66:b8:5a:f1:
4d:b7:e2:5f:44:59:1f:29:2f:31:1f:aa:25:15:27:
d5:b2:d7:e8:5b:fb:bb:c8:50:13:0a:be:7a:65:2c:
0b:d6:29:aa:49:8d:cb:ac:52:90:f0:7d:ff:0c:82:
0c:bc:ab:91:90:d5:09:1b:ef:24:11:96:44:ae:bb:
2f:9e:7f:1d:f0:6b:25:cd:92:7c:33:88:11:86:82:
df:54:6c:38:09:69:39:c8:27:87:9e:21:a5:07:d6:
ec:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:FD:06:14:3F:C0:64:7C:0B:59:1E:72:BC:97:05:C8:43:33:65:DB
X509v3 Authority Key Identifier:
keyid:88:77:50:03:F7:D9:E8:E6:E1:EF:48:DB:06:72:8E:66:8E:D1:87:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/9b8d3b-0c03-4591-bd0f-87750d6f77a8/1/fv0GFD_AZHwLWR5yvJcFyEMzZds.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/9b8d3b-0c03-4591-bd0f-87750d6f77a8/1/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.149.96.0/24
Signature Algorithm: sha256WithRSAEncryption
90:19:b2:71:15:f5:d4:b4:23:af:60:cb:02:aa:5f:6f:55:47:
09:c7:0c:89:e7:12:f1:84:b4:10:46:69:3d:6f:34:d2:03:bc:
19:ea:54:d0:1d:5e:93:e5:ce:b4:0f:87:ac:e6:65:43:ec:2d:
96:23:09:0f:d4:dd:fb:30:2b:0c:64:52:a1:ca:46:fa:5a:47:
03:85:00:14:d0:ba:e8:8b:e3:09:77:1c:fd:d8:7d:e2:25:7d:
05:46:2c:79:d0:68:dc:13:3f:d8:3c:fa:b6:1e:a8:cf:1b:89:
c9:3a:1f:d7:a9:ca:21:cb:11:b7:65:76:b1:14:1c:ba:c6:a4:
80:a5:ad:21:be:ae:f5:ff:38:f2:c7:a0:ac:6c:47:1c:ef:3b:
c1:3f:e1:50:02:94:55:23:b7:c2:da:9b:3a:2f:08:70:b1:ed:
00:e3:58:4c:a1:e3:27:b3:06:71:25:d8:99:c8:73:a7:f2:cb:
88:ec:ea:c3:30:91:da:d5:c1:d6:32:1d:16:82:83:b3:4a:90:
44:86:88:e3:8f:4b:67:17:8d:89:ba:e9:4d:c8:6b:77:cc:28:
c6:82:6b:5d:47:85:85:7a:28:39:8c:13:9d:de:e6:23:cf:c1:
fe:d5:c6:86:08:b6:ae:53:e6:d4:d8:b5:a3:12:46:5a:a5:11:
28:b0:c4:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:26 2025 by rpki-client on console.sobornost.net