Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/eb27f2-e369-4b07-8d1d-c3431d320406/1/Olwo8ZVsBdMHCSMB4gynrDzeSjw.roa
File: Olwo8ZVsBdMHCSMB4gynrDzeSjw.roa (raw, json)
Hash identifier: 3WVw5b3GeVMM/Clq7GzIOE+Xd7o8Wp/hw/81KuwNgjU=
Subject key identifier: 3A:5C:28:F1:95:6C:05:D3:07:09:23:01:E2:0C:A7:AC:3C:DE:4A:3C
Certificate issuer: /CN=27321078f359d7990276dabb0f8c30070e685963
Certificate serial: 0193F43EA084E186A95B9A29912A17AE08DA
Authority key identifier: 27:32:10:78:F3:59:D7:99:02:76:DA:BB:0F:8C:30:07:0E:68:59:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JzIQePNZ15kCdtq7D4wwBw5oWWM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/eb27f2-e369-4b07-8d1d-c3431d320406/1/Olwo8ZVsBdMHCSMB4gynrDzeSjw.roa
Signing time: Mon 23 Dec 2024 15:59:25 +0000
ROA not before: Mon 23 Dec 2024 15:59:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213752
IP address blocks: 46.231.231.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:f4:3e:a0:84:e1:86:a9:5b:9a:29:91:2a:17:ae:08:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27321078f359d7990276dabb0f8c30070e685963
Validity
Not Before: Dec 23 15:59:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3a5c28f1956c05d307092301e20ca7ac3cde4a3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:2c:43:ff:bb:0e:db:d2:ed:50:8e:29:76:48:
4f:d9:31:53:07:be:23:eb:22:3a:08:55:c5:9f:e9:
ef:00:1b:85:f7:e9:14:40:5e:a3:4b:1f:3a:c8:fb:
f3:98:ef:1b:69:25:b4:1c:0b:38:e4:5e:c7:89:42:
8c:5a:e1:7f:ea:05:a3:c9:02:7c:11:11:50:d8:d0:
58:16:68:05:cd:8f:7a:16:87:27:d4:85:23:0c:ef:
0d:ba:8d:08:ae:c2:aa:00:aa:95:ff:f7:8a:03:12:
50:f6:68:f8:26:c0:46:52:42:f6:9f:64:30:1f:75:
d0:8e:93:29:ac:27:d5:95:30:08:83:26:66:f7:6e:
2a:32:81:78:90:64:84:52:85:9a:d0:c9:c4:1f:ed:
bf:4a:ba:8d:08:55:4c:ad:67:47:5e:fd:8f:fa:1a:
76:0a:bf:10:3a:66:69:66:44:e8:bb:33:26:94:ce:
b7:c9:0e:00:d6:52:69:97:cc:f4:e6:df:d5:2f:19:
fd:ae:4d:27:c5:ed:e5:0f:8a:96:5b:7e:23:f3:45:
73:f5:0c:b5:50:76:7a:f1:15:23:28:02:f5:97:d4:
a8:4b:0f:07:ed:0c:6a:00:8d:ea:23:9a:16:da:ab:
79:9c:f0:3a:24:d0:f7:8a:81:a1:12:a8:af:39:b0:
38:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:5C:28:F1:95:6C:05:D3:07:09:23:01:E2:0C:A7:AC:3C:DE:4A:3C
X509v3 Authority Key Identifier:
keyid:27:32:10:78:F3:59:D7:99:02:76:DA:BB:0F:8C:30:07:0E:68:59:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JzIQePNZ15kCdtq7D4wwBw5oWWM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/eb27f2-e369-4b07-8d1d-c3431d320406/1/Olwo8ZVsBdMHCSMB4gynrDzeSjw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/eb27f2-e369-4b07-8d1d-c3431d320406/1/JzIQePNZ15kCdtq7D4wwBw5oWWM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.231.231.0/24
Signature Algorithm: sha256WithRSAEncryption
00:fe:15:2d:23:43:08:48:bb:f5:5e:2e:99:4b:be:01:e4:b9:
8e:17:75:78:c7:f8:ff:db:eb:8c:c8:29:c6:08:fc:f4:c5:21:
52:ac:48:cd:46:20:7a:c4:0b:63:cf:bc:f1:cf:e8:73:78:1d:
ad:fe:cf:18:d4:93:43:1f:80:57:bd:18:6d:df:75:af:09:55:
4a:76:8f:10:35:ea:72:68:91:30:db:24:b1:bd:a1:47:32:4f:
15:ee:8e:89:f1:59:1a:58:9f:7c:51:87:e1:20:18:ca:14:d7:
f4:9b:af:f9:9d:a8:f6:13:24:fc:a2:61:be:c8:c7:54:a7:47:
1a:9f:4c:cb:f6:69:48:ae:34:6d:fc:01:90:d6:42:68:1a:74:
50:8c:bc:ef:a2:db:80:ec:d0:1b:4b:fc:2f:09:7f:58:1a:70:
20:66:29:43:6f:e0:4e:05:4a:fd:62:b1:53:aa:bb:17:cf:cf:
82:93:90:f3:44:58:f1:46:13:19:0a:0a:af:11:45:07:0d:0d:
ad:ff:24:16:b5:df:28:46:c7:df:df:fd:97:e2:97:a3:86:8d:
8e:a5:27:19:dc:3f:15:28:99:8a:23:59:f1:f8:d5:25:3a:69:
97:33:c2:19:2f:62:9d:62:b1:8b:d7:06:5c:5f:a8:06:dd:2d:
6e:92:a3:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 02:45:00 2025 by rpki-client