Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/e32a9a-83e0-4fb9-ac71-4d4b16144d68/1/7Dxx4GUfZshom9FbPHAxp-Z60ho.roa
File: 7Dxx4GUfZshom9FbPHAxp-Z60ho.roa (raw, json)
Hash identifier: LXHxUD8d853bp48Kp4bHizsdXxzmRHG+cP9w4z3LY9k=
Subject key identifier: EC:3C:71:E0:65:1F:66:C8:68:9B:D1:5B:3C:70:31:A7:E6:7A:D2:1A
Certificate issuer: /CN=dd97c7ca05bcc3d6a2ad1ba235bed8feab694550
Certificate serial: 0194228DA02F1BD42140DD1F8B3DD03E90A3
Authority key identifier: DD:97:C7:CA:05:BC:C3:D6:A2:AD:1B:A2:35:BE:D8:FE:AB:69:45:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ZfHygW8w9airRuiNb7Y_qtpRVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/e32a9a-83e0-4fb9-ac71-4d4b16144d68/1/7Dxx4GUfZshom9FbPHAxp-Z60ho.roa
Signing time: Wed 01 Jan 2025 15:48:14 +0000
ROA not before: Wed 01 Jan 2025 15:48:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2914
IP address blocks: 46.253.80.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:a0:2f:1b:d4:21:40:dd:1f:8b:3d:d0:3e:90:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd97c7ca05bcc3d6a2ad1ba235bed8feab694550
Validity
Not Before: Jan 1 15:48:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ec3c71e0651f66c8689bd15b3c7031a7e67ad21a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:5e:c8:26:29:b8:c6:89:2f:9d:83:f9:76:20:
73:c5:72:75:94:26:9c:45:98:ca:03:93:d9:90:0d:
bb:95:67:f9:a9:3c:97:23:d3:98:a1:ef:5b:d6:0c:
d3:9b:34:b5:df:e0:cf:7d:58:2b:b8:88:b3:28:5e:
8a:28:29:e7:53:9e:cc:7b:dc:9c:df:4e:18:71:e7:
73:42:a8:5d:cf:de:bc:90:17:5c:4b:63:f0:d7:00:
b0:32:96:03:ab:0f:b7:9d:57:63:b5:af:d9:63:79:
ff:78:b7:60:3a:f6:56:38:fd:f8:aa:08:29:c4:dd:
3f:f1:eb:eb:2e:32:4e:50:45:94:15:20:7d:4c:4b:
7a:a0:ee:1e:7a:01:51:98:cf:20:d7:54:d2:25:92:
3d:ad:66:46:e0:23:8c:bf:12:ba:0b:1e:65:f8:86:
a9:13:5b:d6:17:d4:29:2d:e8:04:14:27:33:80:f6:
c6:0a:20:3f:fa:c5:be:e1:1e:56:e8:02:88:66:ff:
c1:11:f6:b2:93:30:91:fc:23:a8:cb:62:f4:35:78:
a2:8f:64:db:0b:ff:c4:d0:08:95:c0:51:15:90:e8:
f1:f3:25:ad:fb:6f:59:5e:04:3e:9a:65:c9:77:00:
94:de:c4:b6:7e:21:76:da:1a:98:7f:1c:99:c1:01:
90:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:3C:71:E0:65:1F:66:C8:68:9B:D1:5B:3C:70:31:A7:E6:7A:D2:1A
X509v3 Authority Key Identifier:
keyid:DD:97:C7:CA:05:BC:C3:D6:A2:AD:1B:A2:35:BE:D8:FE:AB:69:45:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ZfHygW8w9airRuiNb7Y_qtpRVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/e32a9a-83e0-4fb9-ac71-4d4b16144d68/1/7Dxx4GUfZshom9FbPHAxp-Z60ho.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/e32a9a-83e0-4fb9-ac71-4d4b16144d68/1/3ZfHygW8w9airRuiNb7Y_qtpRVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.253.80.0/21
Signature Algorithm: sha256WithRSAEncryption
87:d6:a5:e1:05:29:47:01:bf:09:7e:ac:6b:37:0d:ba:47:6a:
78:44:64:bf:30:13:45:7d:e1:ca:48:5e:67:04:31:d6:77:02:
5b:2e:8d:21:c2:85:13:b9:78:2b:e9:a6:79:1e:79:b1:ab:83:
99:b2:f7:53:05:a3:6d:cc:cf:99:6d:bd:23:37:81:86:a3:91:
a8:37:06:8f:d2:01:34:34:65:84:af:71:b2:0c:12:93:66:7d:
e5:cf:46:b2:b1:60:62:80:2e:90:37:dd:43:1b:4a:00:d5:8c:
08:b3:7f:22:f4:e3:95:7b:a5:5c:a0:7f:9f:33:36:46:6c:c1:
89:7a:2b:b3:69:9e:13:03:64:e7:a2:dc:2e:b8:c0:20:e5:96:
72:db:ce:73:8e:a9:31:07:eb:fa:df:98:e4:b2:db:d5:26:cb:
bc:ae:71:be:39:6b:23:e1:44:e0:a5:8d:8d:af:fa:34:14:6d:
90:b5:63:5e:57:42:76:96:78:5d:ab:74:40:2e:e5:7c:e0:7f:
d2:7d:5d:f7:68:b0:d8:1a:96:dc:a8:cf:12:90:d9:e7:98:58:
7d:ab:27:09:4b:ec:86:29:70:f6:92:fc:32:04:f6:63:26:28:
b1:f9:67:1f:e1:38:d7:a4:9d:fc:30:87:91:35:b7:95:44:3d:
ce:24:27:57
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQijaAvG9QhQN0fiz3QPpCjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkOTdjN2NhMDViY2MzZDZhMmFkMWJhMjM1YmVkOGZlYWI2
OTQ1NTAwHhcNMjUwMTAxMTU0ODE0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYzNjNzFlMDY1MWY2NmM4Njg5YmQxNWIzYzcwMzFhN2U2N2FkMjFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArV7IJim4xokvnYP5diBzxXJ1lCac
RZjKA5PZkA27lWf5qTyXI9OYoe9b1gzTmzS13+DPfVgruIizKF6KKCnnU57Me9yc
304YcedzQqhdz968kBdcS2Pw1wCwMpYDqw+3nVdjta/ZY3n/eLdgOvZWOP34qggp
xN0/8evrLjJOUEWUFSB9TEt6oO4eegFRmM8g11TSJZI9rWZG4COMvxK6Cx5l+Iap
E1vWF9QpLegEFCczgPbGCiA/+sW+4R5W6AKIZv/BEfaykzCR/COoy2L0NXiij2Tb
C//E0AiVwFEVkOjx8yWt+29ZXgQ+mmXJdwCU3sS2fiF22hqYfxyZwQGQwQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOw8ceBlH2bIaJvRWzxwMafmetIaMB8GA1UdIwQY
MBaAFN2Xx8oFvMPWoq0bojW+2P6raUVQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM1pmSHlnVzh3OWFpclJ1aU5iN1lfcXRwUlZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS9lMzJhOWEtODNlMC00ZmI5LWFjNzEt
NGQ0YjE2MTQ0ZDY4LzEvN0R4eDRHVWZac2hvbTlGYlBIQXhwLVo2MGhvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS9lMzJhOWEtODNlMC00ZmI5LWFjNzEtNGQ0YjE2MTQ0ZDY4
LzEvM1pmSHlnVzh3OWFpclJ1aU5iN1lfcXRwUlZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDLv1QMA0G
CSqGSIb3DQEBCwUAA4IBAQCH1qXhBSlHAb8JfqxrNw26R2p4RGS/MBNFfeHKSF5n
BDHWdwJbLo0hwoUTuXgr6aZ5Hnmxq4OZsvdTBaNtzM+Zbb0jN4GGo5GoNwaP0gE0
NGWEr3GyDBKTZn3lz0aysWBigC6QN91DG0oA1YwIs38i9OOVe6VcoH+fMzZGbMGJ
eiuzaZ4TA2TnotwuuMAg5ZZy285zjqkxB+v635jkstvVJsu8rnG+OWsj4UTgpY2N
r/o0FG2QtWNeV0J2lnhdq3RALuV84H/SfV33aLDYGpbcqM8SkNnnmFh9qycJS+yG
KXD2kvwyBPZjJiix+Wcf4TjXpJ38MIeRNbeVRD3OJCdX
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:06:42 2025 by rpki-client