Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/7012d8-afa1-419b-8b60-35c63fa765a2/1/hGNfz54gyRLnZ2HB0VrO-_rGRRI.roa
File: hGNfz54gyRLnZ2HB0VrO-_rGRRI.roa (raw, json)
Hash identifier: 2wA4t/VhJsViZsRF1HYTf4ibOtlo6K3RuVWnrObKB0Q=
Subject key identifier: 84:63:5F:CF:9E:20:C9:12:E7:67:61:C1:D1:5A:CE:FB:FA:C6:45:12
Certificate issuer: /CN=6aa8fa75c5020cd6218cf7f109de420265204bac
Certificate serial: 0194C762290B235E6CC0414D8EB16E72028D
Authority key identifier: 6A:A8:FA:75:C5:02:0C:D6:21:8C:F7:F1:09:DE:42:02:65:20:4B:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aqj6dcUCDNYhjPfxCd5CAmUgS6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/7012d8-afa1-419b-8b60-35c63fa765a2/1/hGNfz54gyRLnZ2HB0VrO-_rGRRI.roa
Signing time: Sun 02 Feb 2025 15:58:06 +0000
ROA not before: Sun 02 Feb 2025 15:58:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 46.29.36.0/24 maxlen: 24
2a13:d040:1::/48 maxlen: 48
2a13:d040:2::/48 maxlen: 48
2a13:d040:3::/48 maxlen: 48
2a13:d040:10::/48 maxlen: 48
2a13:d040:11::/48 maxlen: 48
2a13:d040:12::/48 maxlen: 48
2a13:d040:13::/48 maxlen: 48
2a13:d040:14::/48 maxlen: 48
2a13:d040:15::/48 maxlen: 48
2a13:d040:16::/48 maxlen: 48
2a13:d040:17::/48 maxlen: 48
2a13:d040:18::/48 maxlen: 48
2a13:d040:19::/48 maxlen: 48
2a13:d040:1a::/48 maxlen: 48
2a13:d040:1b::/48 maxlen: 48
2a13:d040:1c::/48 maxlen: 48
2a13:d040:1d::/48 maxlen: 48
2a13:d040:1e::/48 maxlen: 48
2a13:d040:1f::/48 maxlen: 48
2a13:d040:20::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c7:62:29:0b:23:5e:6c:c0:41:4d:8e:b1:6e:72:02:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6aa8fa75c5020cd6218cf7f109de420265204bac
Validity
Not Before: Feb 2 15:58:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=84635fcf9e20c912e76761c1d15acefbfac64512
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d9:41:4a:04:8e:31:ff:0e:7c:c8:51:a3:6f:
02:68:4b:2f:64:f0:28:1c:be:84:aa:ec:ad:88:de:
a3:67:74:15:3a:76:64:fd:99:c6:39:7b:f2:f6:5b:
fc:9a:2e:86:2e:aa:ec:b7:33:5e:13:32:7d:b6:41:
1f:70:f6:ce:fd:72:b4:c1:c9:5a:15:d9:db:a8:1b:
27:fb:c5:fb:2e:5a:cf:9a:89:a5:f0:f4:fe:a5:1a:
3c:73:e4:09:9e:50:0d:3b:70:1b:f0:c9:e4:04:ac:
c5:ec:ca:15:1f:fa:d4:62:95:ed:a0:e3:01:3f:fe:
f3:78:37:45:92:7f:1d:4e:15:95:29:22:26:59:75:
1a:cf:3c:09:a5:4a:11:e6:e5:8c:ea:3d:49:46:1d:
0f:e0:e7:ae:b5:91:a8:e0:43:44:06:3a:ff:96:61:
36:c7:bd:96:d2:cc:a1:c4:79:cb:ce:f6:83:bb:1a:
31:ed:97:8b:1e:f8:ea:12:cd:e0:96:41:38:60:c1:
97:87:48:74:38:b8:70:99:44:e4:ae:7c:f1:82:a5:
d0:3c:e7:ab:63:07:f6:3c:3a:a2:d5:d3:39:58:3b:
85:aa:67:85:19:ef:6f:9c:7f:57:94:84:9e:f0:11:
2b:26:a7:cc:da:cb:a0:12:85:50:87:b0:74:e8:17:
78:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:63:5F:CF:9E:20:C9:12:E7:67:61:C1:D1:5A:CE:FB:FA:C6:45:12
X509v3 Authority Key Identifier:
keyid:6A:A8:FA:75:C5:02:0C:D6:21:8C:F7:F1:09:DE:42:02:65:20:4B:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aqj6dcUCDNYhjPfxCd5CAmUgS6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/7012d8-afa1-419b-8b60-35c63fa765a2/1/hGNfz54gyRLnZ2HB0VrO-_rGRRI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/7012d8-afa1-419b-8b60-35c63fa765a2/1/aqj6dcUCDNYhjPfxCd5CAmUgS6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.29.36.0/24
IPv6:
2a13:d040:1::-2a13:d040:3:ffff:ffff:ffff:ffff:ffff
2a13:d040:10::-2a13:d040:20:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
75:e6:a6:12:1e:c7:57:9f:e6:db:69:44:bc:ac:3b:57:c2:7d:
81:26:ea:c0:c3:41:32:48:95:18:52:fe:4b:96:9c:86:dd:a1:
c7:29:ec:85:fd:a7:58:da:ba:52:4d:12:0b:f6:80:63:dc:12:
c3:30:2d:05:c3:2a:a3:6f:1b:d7:c7:42:fa:08:11:f6:9e:32:
6d:6a:49:c8:a4:4e:85:a5:6e:91:4d:4c:9b:58:fd:2a:71:f6:
97:ee:0e:78:75:d2:94:6d:cf:8f:64:24:75:5f:c7:cb:a0:f8:
f7:db:32:8c:42:c6:af:54:7e:c1:ea:73:42:c5:9c:de:4f:fa:
02:71:80:55:3b:5a:17:2d:26:96:43:65:66:53:16:65:1e:72:
da:b4:e8:9e:01:8a:6a:c6:55:40:17:ba:e0:13:74:b5:21:1b:
a0:34:68:29:31:e0:64:0c:45:2b:0a:0d:a2:66:d9:10:8f:10:
57:73:22:01:d3:37:2d:97:2f:a6:fe:21:ea:e5:c1:f2:48:a5:
7d:92:dd:e3:f6:8c:7b:2f:41:ef:61:3e:1c:31:3f:01:9e:3e:
eb:81:e9:79:01:09:f7:91:41:40:be:ff:28:b7:c1:85:52:fb:
14:21:00:a9:eb:06:06:09:95:3c:21:03:7f:60:b6:34:8c:fb:
aa:9b:0a:6e
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgISAZTHYikLI15swEFNjrFucgKNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhYThmYTc1YzUwMjBjZDYyMThjZjdmMTA5ZGU0MjAyNjUy
MDRiYWMwHhcNMjUwMjAyMTU1ODA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NDYzNWZjZjllMjBjOTEyZTc2NzYxYzFkMTVhY2VmYmZhYzY0NTEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAstlBSgSOMf8OfMhRo28CaEsvZPAo
HL6EquytiN6jZ3QVOnZk/ZnGOXvy9lv8mi6GLqrstzNeEzJ9tkEfcPbO/XK0wcla
FdnbqBsn+8X7LlrPmoml8PT+pRo8c+QJnlANO3Ab8MnkBKzF7MoVH/rUYpXtoOMB
P/7zeDdFkn8dThWVKSImWXUazzwJpUoR5uWM6j1JRh0P4OeutZGo4ENEBjr/lmE2
x72W0syhxHnLzvaDuxox7ZeLHvjqEs3glkE4YMGXh0h0OLhwmUTkrnzxgqXQPOer
Ywf2PDqi1dM5WDuFqmeFGe9vnH9XlISe8BErJqfM2sugEoVQh7B06Bd4IQIDAQAB
o4ICOTCCAjUwHQYDVR0OBBYEFIRjX8+eIMkS52dhwdFazvv6xkUSMB8GA1UdIwQY
MBaAFGqo+nXFAgzWIYz38QneQgJlIEusMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYXFqNmRjVUNETlloalBmeENkNUNBbVVnUzZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy83MDEyZDgtYWZhMS00MTliLThiNjAt
MzVjNjNmYTc2NWEyLzEvaEdOZno1NGd5UkxuWjJIQjBWck8tX3JHUlJJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy83MDEyZDgtYWZhMS00MTliLThiNjAtMzVjNjNmYTc2NWEy
LzEvYXFqNmRjVUNETlloalBmeENkNUNBbVVnUzZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjAMBAIAATAGAwQALh0kMC4E
AgACMCgwEgMHACoT0EAAAQMHAioT0EAAADASAwcEKhPQQAAQAwcAKhPQQAAgMA0G
CSqGSIb3DQEBCwUAA4IBAQB15qYSHsdXn+bbaUS8rDtXwn2BJurAw0EySJUYUv5L
lpyG3aHHKeyF/adY2rpSTRIL9oBj3BLDMC0FwyqjbxvXx0L6CBH2njJtaknIpE6F
pW6RTUybWP0qcfaX7g54ddKUbc+PZCR1X8fLoPj32zKMQsavVH7B6nNCxZzeT/oC
cYBVO1oXLSaWQ2VmUxZlHnLatOieAYpqxlVAF7rgE3S1IRugNGgpMeBkDEUrCg2i
ZtkQjxBXcyIB0zctly+m/iHq5cHySKV9kt3j9ox7L0HvYT4cMT8Bnj7rgel5AQn3
kUFAvv8ot8GFUvsUIQCp6wYGCZU8IQN/YLY0jPuqmwpu
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:16:47 2025 by rpki-client