Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/cAWQAMp-hHI-kkhHADJyNgvrx0Y.roa
File: cAWQAMp-hHI-kkhHADJyNgvrx0Y.roa (raw, json)
Hash identifier: VjD7u0s1+5+4PRy4aUMeMlTIodEYRMh4n+dcOvZCzkQ=
Subject key identifier: 70:05:90:00:CA:7E:84:72:3E:92:48:47:00:32:72:36:0B:EB:C7:46
Certificate issuer: /CN=9dc28ae9937ff7e49ec4f1234e53d8b9dd694541
Certificate serial: 01939B4C507B20A9321FCD6D3F36B38C3581
Authority key identifier: 9D:C2:8A:E9:93:7F:F7:E4:9E:C4:F1:23:4E:53:D8:B9:DD:69:45:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/cAWQAMp-hHI-kkhHADJyNgvrx0Y.roa
Signing time: Fri 06 Dec 2024 09:28:09 +0000
ROA not before: Fri 06 Dec 2024 09:28:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212477
IP address blocks: 46.226.124.0/24 maxlen: 24
109.234.75.0/24 maxlen: 24
185.138.166.0/24 maxlen: 24
217.119.131.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:9b:4c:50:7b:20:a9:32:1f:cd:6d:3f:36:b3:8c:35:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dc28ae9937ff7e49ec4f1234e53d8b9dd694541
Validity
Not Before: Dec 6 09:28:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=70059000ca7e84723e924847003272360bebc746
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:9e:52:4b:db:9c:b5:8f:c1:d2:67:eb:b9:12:
2a:d1:57:c3:06:03:87:11:d2:f5:ad:dd:bc:2a:0b:
01:a1:c7:f5:ae:44:1d:74:e7:56:54:00:c8:30:0a:
c9:7e:25:a3:d3:d4:46:63:46:77:03:e0:fb:a5:40:
d2:3f:04:46:ff:86:67:f8:32:d8:2f:fa:7f:40:92:
c3:50:29:fd:d9:e2:03:79:a7:10:a0:6e:1d:ff:a9:
a8:3c:28:c9:84:88:cc:8b:d4:94:fc:48:75:90:0d:
f6:ad:2a:55:3b:04:2a:4a:11:c3:34:80:13:e6:f5:
00:ae:75:b6:65:bc:50:37:5f:d1:5d:42:c4:f7:e5:
b5:86:d7:48:61:07:45:cf:30:68:39:d9:b2:a5:f6:
ed:37:f6:61:cc:8b:d0:30:3d:c7:b6:84:bc:25:51:
ad:73:79:53:eb:1f:9d:4c:0c:24:64:38:a4:0f:fc:
ae:58:76:93:e3:00:60:60:d1:28:ce:ac:25:f3:76:
74:b0:0a:d0:f4:cd:04:d2:77:0e:f1:54:02:17:4f:
4c:9b:66:04:39:a7:4f:d0:24:b6:46:64:95:16:72:
59:4f:72:9e:70:f2:da:fc:88:3f:c2:1f:14:ec:c6:
b7:1e:6b:cc:78:03:09:97:32:a6:51:75:75:15:cd:
6a:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:05:90:00:CA:7E:84:72:3E:92:48:47:00:32:72:36:0B:EB:C7:46
X509v3 Authority Key Identifier:
keyid:9D:C2:8A:E9:93:7F:F7:E4:9E:C4:F1:23:4E:53:D8:B9:DD:69:45:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/cAWQAMp-hHI-kkhHADJyNgvrx0Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.226.124.0/24
109.234.75.0/24
185.138.166.0/24
217.119.131.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:f9:7f:3e:0e:20:3b:4d:7f:c2:f2:d3:36:c0:13:10:d9:b8:
56:8d:c5:8f:1f:61:64:d5:b2:6b:6e:ec:3a:db:1f:58:34:8d:
fb:1c:54:54:9f:35:d3:23:7c:4e:b4:f7:1d:0f:67:36:76:64:
82:1d:e0:a1:07:1c:ca:81:c0:74:6f:d7:c2:a0:ce:00:f8:b8:
c4:26:60:39:54:f2:c2:0c:70:87:52:2f:1b:a9:ab:73:9a:05:
47:89:57:8a:c1:f8:72:1c:7c:84:0a:79:20:84:7f:56:db:f8:
84:9f:4d:ed:b6:e2:1f:f1:19:f4:30:88:85:fb:ca:26:52:0a:
68:e0:c5:50:7c:d6:3b:9d:62:aa:a5:30:de:fe:2e:51:dc:10:
1e:34:4e:b9:6e:65:ed:f0:c7:22:68:eb:c3:21:90:cc:36:e4:
73:78:b8:8d:eb:a5:51:c3:1c:8f:e6:9a:d1:99:89:65:ab:55:
16:89:3e:c8:bc:04:24:83:2c:bd:2e:19:93:8c:96:32:70:bd:
f7:21:e3:59:f7:2c:70:fd:56:17:39:20:28:fa:7f:79:cf:5c:
b9:7b:a3:d6:75:01:ff:bf:2d:31:f2:b4:cb:9e:61:22:2f:0d:
9e:f5:22:3b:45:a7:8b:15:d9:4c:0f:89:ea:cd:18:fd:54:33:
4a:1d:54:41
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZObTFB7IKkyH81tPzazjDWBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkYzI4YWU5OTM3ZmY3ZTQ5ZWM0ZjEyMzRlNTNkOGI5ZGQ2
OTQ1NDEwHhcNMjQxMjA2MDkyODA5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MDA1OTAwMGNhN2U4NDcyM2U5MjQ4NDcwMDMyNzIzNjBiZWJjNzQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx55SS9uctY/B0mfruRIq0VfDBgOH
EdL1rd28KgsBocf1rkQddOdWVADIMArJfiWj09RGY0Z3A+D7pUDSPwRG/4Zn+DLY
L/p/QJLDUCn92eIDeacQoG4d/6moPCjJhIjMi9SU/Eh1kA32rSpVOwQqShHDNIAT
5vUArnW2ZbxQN1/RXULE9+W1htdIYQdFzzBoOdmypfbtN/ZhzIvQMD3HtoS8JVGt
c3lT6x+dTAwkZDikD/yuWHaT4wBgYNEozqwl83Z0sArQ9M0E0ncO8VQCF09Mm2YE
OadP0CS2RmSVFnJZT3KecPLa/Ig/wh8U7Ma3HmvMeAMJlzKmUXV1Fc1qBQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFHAFkADKfoRyPpJIRwAycjYL68dGMB8GA1UdIwQY
MBaAFJ3CiumTf/fknsTxI05T2LndaUVBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmNLSzZaTl85LVNleFBFalRsUFl1ZDFwUlVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9jMDMzMGMtOTg3Mi00YWM2LWEyMmMt
MTkyY2JkMDhkYjUxLzEvY0FXUUFNcC1oSEkta2toSEFESnlOZ3ZyeDBZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy9jMDMzMGMtOTg3Mi00YWM2LWEyMmMtMTkyY2JkMDhkYjUx
LzEvbmNLSzZaTl85LVNleFBFalRsUFl1ZDFwUlVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQALuJ8AwQA
bepLAwQAuYqmAwQA2XeDMA0GCSqGSIb3DQEBCwUAA4IBAQCr+X8+DiA7TX/C8tM2
wBMQ2bhWjcWPH2Fk1bJrbuw62x9YNI37HFRUnzXTI3xOtPcdD2c2dmSCHeChBxzK
gcB0b9fCoM4A+LjEJmA5VPLCDHCHUi8bqatzmgVHiVeKwfhyHHyECnkghH9W2/iE
n03ttuIf8Rn0MIiF+8omUgpo4MVQfNY7nWKqpTDe/i5R3BAeNE65bmXt8MciaOvD
IZDMNuRzeLiN66VRwxyP5prRmYllq1UWiT7IvAQkgyy9LhmTjJYycL33IeNZ9yxw
/VYXOSAo+n95z1y5e6PWdQH/vy0x8rTLnmEiLw2e9SI7RaeLFdlMD4nqzRj9VDNK
HVRB
-----END CERTIFICATE-----
Generated at Wed Apr 9 00:55:21 2025 by rpki-client