Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/yycI-Oov9uVe3ZmmQfTn7lxjqs8.roa
File: yycI-Oov9uVe3ZmmQfTn7lxjqs8.roa (raw, json)
Hash identifier: eDyRBftJ9B+Q0rzQyamv7DRd1C4oC8x60s3UaMECiVo=
Subject key identifier: CB:27:08:F8:EA:2F:F6:E5:5E:DD:99:A6:41:F4:E7:EE:5C:63:AA:CF
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 019421440CF3779C009D36C29B746FDF31FA
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/yycI-Oov9uVe3ZmmQfTn7lxjqs8.roa
Signing time: Wed 01 Jan 2025 09:48:15 +0000
ROA not before: Wed 01 Jan 2025 09:48:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61276
IP address blocks: 46.149.172.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:0c:f3:77:9c:00:9d:36:c2:9b:74:6f:df:31:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Jan 1 09:48:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cb2708f8ea2ff6e55edd99a641f4e7ee5c63aacf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b4:4e:e1:57:69:ee:c8:8f:ec:43:c1:12:a4:
3c:f0:af:a7:7e:41:cf:99:63:72:c2:4b:1b:fa:ac:
8e:c2:13:d6:4a:22:9f:5c:fa:c0:5b:60:ce:7a:a7:
00:be:e2:cc:ba:a1:84:e7:93:8b:b4:92:4c:d1:8b:
18:48:ce:68:20:12:c2:73:41:72:fc:f0:e4:4f:6c:
d2:a6:0e:3f:8d:41:36:98:cf:43:a7:8c:59:e1:46:
f9:94:10:89:b2:62:a9:2a:44:d2:2c:c9:93:ad:f8:
4f:96:ac:80:5e:16:20:68:2d:0e:0e:a2:28:15:2b:
5a:36:72:3f:67:84:5a:ca:44:b2:be:59:0e:c0:3a:
73:b2:1a:d9:65:34:e9:1a:2a:81:92:55:c2:70:cc:
67:dc:39:17:23:ae:b6:93:de:bf:0b:fa:ae:54:81:
27:77:90:df:e8:a9:f7:bd:c6:53:9c:05:c1:26:08:
b0:e4:f2:cd:1b:e2:39:e7:0d:a4:46:9d:f9:8b:88:
e9:b9:75:c7:12:63:81:e6:9e:c1:a4:51:c7:a1:68:
b0:65:40:eb:3f:1e:64:ec:f5:73:70:10:cf:6a:f3:
c3:ee:97:cc:0d:2c:ae:0b:ba:84:91:a8:03:c5:72:
0d:97:b2:01:b1:1a:e4:21:df:bb:31:1c:2e:18:df:
0c:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:27:08:F8:EA:2F:F6:E5:5E:DD:99:A6:41:F4:E7:EE:5C:63:AA:CF
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/yycI-Oov9uVe3ZmmQfTn7lxjqs8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.149.172.0/24
Signature Algorithm: sha256WithRSAEncryption
37:eb:5c:15:17:da:29:70:05:a8:d6:3e:7a:87:30:99:69:ef:
ef:b0:c4:40:24:c4:61:8e:67:9b:72:1b:e6:22:5c:d2:c5:68:
f7:39:35:17:88:4f:e3:bc:1e:c0:8c:07:34:46:5a:f4:84:34:
cc:c1:a9:ab:e1:26:8a:1f:ce:73:f1:5f:4e:82:d4:30:a1:06:
3d:bc:da:28:8f:a6:4f:af:9d:29:4b:2b:25:85:d3:7b:73:7e:
65:7e:b1:9c:85:6c:8d:32:a8:eb:16:76:9e:77:ae:69:d6:c4:
3d:60:2b:74:e9:9a:cb:61:49:d5:49:bb:84:91:45:29:49:d3:
c7:35:d3:09:c3:1f:4c:d8:fe:69:8a:44:25:6c:4d:8c:06:5b:
2d:8d:41:35:44:05:8c:d4:dd:55:89:ff:86:82:c5:fd:19:26:
ec:5f:44:da:6e:5a:23:19:f9:14:f0:84:04:95:9a:48:e0:83:
55:ba:ec:9b:c5:c9:78:2b:ce:25:1f:fd:c8:3a:07:c0:54:05:
c0:dd:6a:b6:6f:75:82:51:f3:c0:fb:be:23:9d:8f:ce:a4:d6:
2e:8b:86:41:43:49:4f:2d:bc:97:d9:e3:19:bd:5e:6a:0a:30:
69:cb:e1:b3:ec:b8:27:a8:7d:cc:51:66:bf:a2:6f:84:02:c4:
82:c1:a9:45
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQhRAzzd5wAnTbCm3Rv3zH6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5MzM1M2MxZmFiZTg5NmFmOGI4NWZlNzYwMGU0NjM0OTY4
ZmNjNGMwHhcNMjUwMTAxMDk0ODE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYjI3MDhmOGVhMmZmNmU1NWVkZDk5YTY0MWY0ZTdlZTVjNjNhYWNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAobRO4Vdp7siP7EPBEqQ88K+nfkHP
mWNywksb+qyOwhPWSiKfXPrAW2DOeqcAvuLMuqGE55OLtJJM0YsYSM5oIBLCc0Fy
/PDkT2zSpg4/jUE2mM9Dp4xZ4Ub5lBCJsmKpKkTSLMmTrfhPlqyAXhYgaC0ODqIo
FStaNnI/Z4RaykSyvlkOwDpzshrZZTTpGiqBklXCcMxn3DkXI662k96/C/quVIEn
d5Df6Kn3vcZTnAXBJgiw5PLNG+I55w2kRp35i4jpuXXHEmOB5p7BpFHHoWiwZUDr
Px5k7PVzcBDPavPD7pfMDSyuC7qEkagDxXINl7IBsRrkId+7MRwuGN8M4wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMsnCPjqL/blXt2ZpkH05+5cY6rPMB8GA1UdIwQY
MBaAFAkzU8H6volq+Lhf52AORjSWj8xMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGIt
MjM5ZDJmZTM5OGIxLzEveXljSS1Pb3Y5dVZlM1ptbVFmVG43bHhqcXM4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGItMjM5ZDJmZTM5OGIx
LzEvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALpWsMA0G
CSqGSIb3DQEBCwUAA4IBAQA361wVF9opcAWo1j56hzCZae/vsMRAJMRhjmebchvm
IlzSxWj3OTUXiE/jvB7AjAc0Rlr0hDTMwamr4SaKH85z8V9OgtQwoQY9vNooj6ZP
r50pSyslhdN7c35lfrGchWyNMqjrFnaed65p1sQ9YCt06ZrLYUnVSbuEkUUpSdPH
NdMJwx9M2P5pikQlbE2MBlstjUE1RAWM1N1Vif+GgsX9GSbsX0TablojGfkU8IQE
lZpI4INVuuybxcl4K84lH/3IOgfAVAXA3Wq2b3WCUfPA+74jnY/OpNYui4ZBQ0lP
LbyX2eMZvV5qCjBpy+Gz7LgnqH3MUWa/om+EAsSCwalF
-----END CERTIFICATE-----
Generated at Sun Apr 6 14:14:49 2025 by rpki-client