Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/36f378-a4d2-4758-93e2-6782e2daef74/1/8uZf_YXrnrFcX5OGm1hy0aMncrA.roa
File: 8uZf_YXrnrFcX5OGm1hy0aMncrA.roa (raw, json)
Hash identifier: FJ+rC+vSFCLpeii+a3s75dE3+VofCsTHLoOQv8k1S8Q=
Subject key identifier: F2:E6:5F:FD:85:EB:9E:B1:5C:5F:93:86:9B:58:72:D1:A3:27:72:B0
Certificate issuer: /CN=139e83616f51f00b1e55c0c617b3a5f04ab741a3
Certificate serial: 019425217BA117CB68104B51E4FC63F07CB4
Authority key identifier: 13:9E:83:61:6F:51:F0:0B:1E:55:C0:C6:17:B3:A5:F0:4A:B7:41:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E56DYW9R8AseVcDGF7Ol8Eq3QaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/36f378-a4d2-4758-93e2-6782e2daef74/1/8uZf_YXrnrFcX5OGm1hy0aMncrA.roa
Signing time: Thu 02 Jan 2025 03:48:58 +0000
ROA not before: Thu 02 Jan 2025 03:48:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 52110
IP address blocks: 46.174.24.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:7b:a1:17:cb:68:10:4b:51:e4:fc:63:f0:7c:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=139e83616f51f00b1e55c0c617b3a5f04ab741a3
Validity
Not Before: Jan 2 03:48:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f2e65ffd85eb9eb15c5f93869b5872d1a32772b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:9b:c3:5e:ee:cc:5f:31:31:89:86:83:95:16:
fd:94:3a:71:49:50:62:94:27:b0:5e:ec:68:18:60:
d2:35:5e:46:5f:7c:c5:38:4c:2f:47:20:31:04:07:
8d:2a:68:9e:19:d7:a5:e6:56:15:f9:ce:7d:07:98:
58:d5:db:d0:33:1b:33:0c:f4:b7:78:d9:69:65:ce:
6e:03:4f:da:36:55:52:a4:cd:75:77:d5:da:3f:e0:
15:99:ea:b8:83:41:69:f6:0d:7d:88:c9:0d:9e:b8:
61:6d:5c:22:b2:da:b3:30:3d:1a:f7:2f:6e:75:18:
c5:9f:19:f7:35:0b:f7:b8:07:e9:bb:bd:6c:4b:e1:
90:ca:f1:72:ec:6a:a5:58:fd:c0:54:63:ae:3f:a0:
c7:62:96:66:d0:75:63:6a:24:4e:b9:45:3e:be:3d:
60:73:c3:da:fc:90:ad:17:f2:d4:fa:34:e4:84:97:
60:4e:41:4d:b9:50:ec:4c:86:ab:ba:a5:b5:94:66:
5f:af:c8:c7:21:54:85:34:af:01:31:b3:13:31:4b:
14:79:13:1e:71:aa:c7:d7:29:dd:96:ba:b2:c9:1a:
a1:35:08:6f:90:63:d9:d2:79:4e:e7:6b:f3:85:63:
9d:28:b5:49:b9:03:05:ab:5c:5c:01:92:40:70:07:
17:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:E6:5F:FD:85:EB:9E:B1:5C:5F:93:86:9B:58:72:D1:A3:27:72:B0
X509v3 Authority Key Identifier:
keyid:13:9E:83:61:6F:51:F0:0B:1E:55:C0:C6:17:B3:A5:F0:4A:B7:41:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E56DYW9R8AseVcDGF7Ol8Eq3QaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/36f378-a4d2-4758-93e2-6782e2daef74/1/8uZf_YXrnrFcX5OGm1hy0aMncrA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/36f378-a4d2-4758-93e2-6782e2daef74/1/E56DYW9R8AseVcDGF7Ol8Eq3QaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.174.24.0/21
Signature Algorithm: sha256WithRSAEncryption
a8:79:39:1f:39:90:e6:4f:7e:40:78:8e:df:94:63:cf:63:72:
a9:72:27:a4:8b:d3:6d:4c:ab:ad:2f:08:ee:b1:a3:48:4e:b2:
dc:40:b8:50:db:02:1c:90:4e:c2:7c:98:ec:59:79:e9:ff:82:
15:34:49:6d:3a:e9:bf:f0:93:24:75:df:57:3d:da:38:b3:90:
ae:86:d6:12:5c:0f:6f:33:c5:f4:1b:1d:bd:f2:5b:35:7a:5f:
24:24:02:17:57:45:7b:cb:be:75:0d:49:09:e3:92:fc:d3:14:
00:a6:9b:83:2d:8b:eb:b9:44:8d:db:52:71:c3:fe:e6:2c:5d:
22:a8:4d:f9:e5:d1:d8:58:0b:7a:77:cc:8a:c4:78:82:e1:3b:
d7:b8:cd:74:79:dd:7e:2c:35:e8:68:13:cc:58:02:3a:f4:7e:
8b:98:49:ea:30:2b:1e:a3:08:13:45:12:99:62:25:34:07:9f:
9c:80:b6:1e:45:d9:ad:59:ff:aa:1f:3a:e8:93:a4:07:7e:d2:
96:8d:ee:ce:0d:20:fd:63:98:6a:21:5f:5a:71:d5:2a:18:73:
44:a7:ec:ba:57:9c:89:6e:c1:d8:0c:9a:17:80:52:33:4e:ed:
19:75:73:75:f2:47:63:f3:89:0e:45:ca:ba:ee:30:b0:72:bd:
49:dd:35:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:33:04 2025 by rpki-client on console.sobornost.net