Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/a092dd-590b-4fbe-89b7-e48c933c16ce/1/MDL2tKhVYWTmRDikZLKriMqsxu0.roa
File: MDL2tKhVYWTmRDikZLKriMqsxu0.roa (raw, json)
Hash identifier: bsfJK0Moy0TupEwND5TQugCndtMKywV6rY0bevGNky0=
Subject key identifier: 30:32:F6:B4:A8:55:61:64:E6:44:38:A4:64:B2:AB:88:CA:AC:C6:ED
Certificate issuer: /CN=1c6208ce6d91d6b8dade58e5291bb1929d5e3933
Certificate serial: 01905F518D108E6A54847B731ACE1FC600CE
Authority key identifier: 1C:62:08:CE:6D:91:D6:B8:DA:DE:58:E5:29:1B:B1:92:9D:5E:39:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HGIIzm2R1rja3ljlKRuxkp1eOTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/a092dd-590b-4fbe-89b7-e48c933c16ce/1/MDL2tKhVYWTmRDikZLKriMqsxu0.roa
Signing time: Fri 28 Jun 2024 14:48:18 +0000
ROA not before: Fri 28 Jun 2024 14:48:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197722
IP address blocks: 46.234.128.0/19 maxlen: 19
46.234.144.0/23 maxlen: 23
46.234.146.0/24 maxlen: 24
46.234.147.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:5f:51:8d:10:8e:6a:54:84:7b:73:1a:ce:1f:c6:00:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c6208ce6d91d6b8dade58e5291bb1929d5e3933
Validity
Not Before: Jun 28 14:48:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3032f6b4a8556164e64438a464b2ab88caacc6ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:aa:55:ff:71:6c:29:df:d1:aa:e6:c4:af:c0:
d4:68:a4:c2:a7:59:4f:dd:a7:0b:f9:f4:88:71:65:
81:3a:88:9d:fa:32:18:07:f3:e1:11:bd:8c:c9:62:
91:3b:8b:28:4f:d9:9b:61:ce:69:51:fb:fe:09:88:
8a:59:1b:ba:cf:bd:54:36:d8:58:c8:ca:f2:02:0c:
8e:e9:5a:cb:42:0b:23:6a:03:af:15:01:e0:4b:ef:
2f:e9:98:2f:af:b1:62:ba:d3:61:16:fd:98:11:fa:
34:57:55:bf:14:fa:39:ad:b2:c6:e3:fa:c5:65:af:
e5:5a:96:fe:6b:0f:f0:8e:b2:06:63:ee:fe:a8:67:
3c:79:ff:d2:5e:d6:9c:46:14:7c:57:19:bb:fc:34:
9a:04:a3:a4:73:d7:35:61:21:34:2f:b9:a7:70:60:
5d:a3:08:06:9d:30:f1:18:29:ce:4c:80:a0:40:18:
52:27:dd:3d:56:67:56:92:2c:7a:b6:24:84:c7:43:
64:83:93:22:7c:52:0e:f0:ff:cc:3a:48:91:b1:48:
7f:18:06:35:49:6e:69:78:cc:cf:33:2f:18:11:16:
0d:f4:19:16:5a:a4:fe:59:8b:7b:50:35:f8:d9:7f:
c3:3b:c9:29:44:cd:c7:7c:97:a7:92:24:e7:21:03:
7a:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:32:F6:B4:A8:55:61:64:E6:44:38:A4:64:B2:AB:88:CA:AC:C6:ED
X509v3 Authority Key Identifier:
keyid:1C:62:08:CE:6D:91:D6:B8:DA:DE:58:E5:29:1B:B1:92:9D:5E:39:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HGIIzm2R1rja3ljlKRuxkp1eOTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/a092dd-590b-4fbe-89b7-e48c933c16ce/1/MDL2tKhVYWTmRDikZLKriMqsxu0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/a092dd-590b-4fbe-89b7-e48c933c16ce/1/HGIIzm2R1rja3ljlKRuxkp1eOTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.234.128.0/19
Signature Algorithm: sha256WithRSAEncryption
c8:f6:28:07:0b:55:8c:f8:93:d8:e2:f1:d5:cb:d2:22:65:90:
b0:c1:f2:f3:c7:5d:a6:99:43:23:f8:0f:87:93:b0:81:40:e2:
83:4c:06:0b:4e:c7:50:75:38:e0:c5:e5:30:ba:d1:ee:70:0f:
30:bf:91:fd:aa:04:50:8e:cd:41:3f:85:d9:ea:0c:19:f2:35:
0e:a4:8a:06:01:3a:f2:50:22:f9:bd:46:c8:cd:08:48:45:e9:
df:c0:0b:06:94:87:a2:ad:02:ac:6b:6f:6c:4f:08:d9:74:e7:
cc:5a:58:21:b7:31:71:f2:23:12:7f:b0:55:c3:a9:57:70:f9:
b7:20:cb:07:9b:da:da:c9:d5:d0:d6:3b:06:b7:f3:21:6b:02:
e8:7e:da:93:9e:10:1c:3d:41:32:50:09:1e:03:b5:40:3e:5d:
29:d9:b8:20:d1:f0:29:65:64:9c:94:c4:11:e8:9a:0c:d4:54:
33:37:09:15:32:cf:20:15:0d:f6:33:d9:ef:93:58:7a:5d:ab:
8f:a3:24:7e:c8:6c:7e:7f:78:7f:03:1a:1b:4b:ea:4e:92:61:
95:52:dc:e8:d1:ea:c1:5b:3a:f8:0b:00:93:ef:96:5c:9c:8c:
84:25:c9:c0:c3:38:33:b7:0d:1c:26:b4:6a:86:4b:9a:dc:12:
03:d1:8a:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 05:41:07 2025 by rpki-client