Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/4zp7SPx5o0rXsZ1pzCaj6Qmfrmc.roa
File: 4zp7SPx5o0rXsZ1pzCaj6Qmfrmc.roa (raw, json)
Hash identifier: 9eTT2gEMFm+GeiGq9121kcG/KMdIAx2pNlDuh02CKCQ=
Subject key identifier: E3:3A:7B:48:FC:79:A3:4A:D7:B1:9D:69:CC:26:A3:E9:09:9F:AE:67
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 01889663F26E770CEF334CACABD4969FB074
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/4zp7SPx5o0rXsZ1pzCaj6Qmfrmc.roa
Signing time: Wed 07 Jun 2023 15:05:12 +0000
ROA not before: Wed 07 Jun 2023 15:05:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59729
IP address blocks: 46.3.152.0/24 maxlen: 24
46.3.153.0/24 maxlen: 24
46.3.155.0/24 maxlen: 24
46.3.154.0/24 maxlen: 24
46.3.204.0/24 maxlen: 24
149.126.203.0/24 maxlen: 24
46.3.239.0/24 maxlen: 24
46.3.238.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:96:63:f2:6e:77:0c:ef:33:4c:ac:ab:d4:96:9f:b0:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: Jun 7 15:05:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e33a7b48fc79a34ad7b19d69cc26a3e9099fae67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:72:ae:ca:11:96:d4:57:67:8d:ef:c1:ac:54:
4d:37:ae:97:6b:24:23:30:26:28:15:f0:67:3a:0a:
6b:89:49:6a:ca:42:22:78:3a:c4:59:0a:1f:4c:5e:
c1:4c:7d:b1:5b:24:bc:5c:2b:29:00:21:41:48:12:
5d:7f:b3:14:67:d5:11:02:0f:d9:e0:29:08:18:f9:
03:50:5d:de:85:4c:87:60:f7:4c:b3:77:78:26:18:
a9:9c:71:d9:22:7a:bd:ab:0a:06:5b:19:21:35:68:
15:ba:14:c0:34:ed:03:19:84:7a:3f:31:05:dd:63:
c0:db:47:2a:01:05:fe:8e:34:df:f2:11:c3:f8:74:
00:78:db:0f:bf:47:24:fe:5b:b8:94:68:87:ba:5b:
05:c3:7a:1f:4e:96:27:ae:a6:6d:ef:ff:4d:8c:20:
92:7b:13:fb:13:b4:23:13:2e:bb:32:90:00:79:6b:
fd:1c:17:0d:3a:85:7b:a2:7b:f6:f5:53:16:61:ad:
13:7c:87:4e:7d:8d:ba:89:6d:9f:21:b9:a4:90:9c:
27:35:7a:4b:a6:a6:e3:db:42:87:a2:c6:2b:11:96:
82:3d:dd:f2:88:81:fe:62:75:6f:79:d2:12:aa:bd:
33:42:13:67:ec:a9:68:bb:6b:51:19:57:bb:37:4f:
dd:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:3A:7B:48:FC:79:A3:4A:D7:B1:9D:69:CC:26:A3:E9:09:9F:AE:67
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/4zp7SPx5o0rXsZ1pzCaj6Qmfrmc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.3.152.0/22
46.3.204.0/24
46.3.238.0/23
149.126.203.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:d0:32:24:68:e3:15:d9:73:de:27:50:e8:ac:af:0c:eb:e5:
47:7b:89:18:84:91:36:aa:e0:74:89:92:48:73:a2:a3:60:fc:
27:dc:01:05:d2:ba:22:25:71:d5:25:26:da:14:a5:7f:73:61:
2c:71:cf:12:5d:3a:eb:5d:ba:c6:14:4b:51:31:73:1e:d9:15:
44:67:61:99:6b:e1:cf:ce:e3:92:de:61:a9:9e:6f:7b:65:ea:
96:bd:00:c5:ae:eb:8f:8f:5e:d8:8e:e3:2b:1c:27:d2:6e:7e:
47:d1:3c:24:fd:80:30:26:5a:d1:ec:70:c2:d8:27:69:4c:b0:
fe:c3:1a:5c:24:76:54:31:3c:f2:4b:3a:63:3b:10:fa:6c:10:
f7:18:46:7f:07:e9:74:2a:aa:ad:cd:2c:42:c0:42:73:99:bc:
6a:af:16:d0:b3:d6:74:1c:08:35:0c:3c:46:4c:01:60:6d:23:
56:5b:66:6a:61:48:25:d0:5c:12:8f:2e:89:b5:4c:9c:7f:a4:
fe:70:f2:78:c4:1d:28:8f:9d:f9:ca:b5:78:9c:f0:b9:54:d5:
c0:10:03:0b:d3:bb:97:57:06:8b:75:cf:e4:5c:36:97:79:bd:
a6:17:69:63:84:64:2e:91:ad:c4:2d:f7:61:18:fb:5b:92:4a:
3f:6f:f3:72
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYiWY/JudwzvM0ysq9SWn7B0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1ODhmMTk3Zjk3ZTg5MDA3NTU1NDRlODEwY2RkZWY5ZDkw
ZmJjNDEwHhcNMjMwNjA3MTUwNTEyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMzNhN2I0OGZjNzlhMzRhZDdiMTlkNjljYzI2YTNlOTA5OWZhZTY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjnKuyhGW1Fdnje/BrFRNN66XayQj
MCYoFfBnOgpriUlqykIieDrEWQofTF7BTH2xWyS8XCspACFBSBJdf7MUZ9URAg/Z
4CkIGPkDUF3ehUyHYPdMs3d4JhipnHHZInq9qwoGWxkhNWgVuhTANO0DGYR6PzEF
3WPA20cqAQX+jjTf8hHD+HQAeNsPv0ck/lu4lGiHulsFw3ofTpYnrqZt7/9NjCCS
exP7E7QjEy67MpAAeWv9HBcNOoV7onv29VMWYa0TfIdOfY26iW2fIbmkkJwnNXpL
pqbj20KHosYrEZaCPd3yiIH+YnVvedISqr0zQhNn7Klou2tRGVe7N0/d0QIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFOM6e0j8eaNK17Gdacwmo+kJn65nMB8GA1UdIwQY
MBaAFFWI8Zf5fokAdVVE6BDN3vnZD7xBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVllqeGxfbC1pUUIxVlVUb0VNM2UtZGtQdkVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi82MjI5ODEtOTY1MC00MjcxLTkyY2Et
N2NmZWY0Mjc2YTBmLzEvNHpwN1NQeDVvMHJYc1oxcHpDYWo2UW1mcm1jLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi82MjI5ODEtOTY1MC00MjcxLTkyY2EtN2NmZWY0Mjc2YTBm
LzEvVllqeGxfbC1pUUIxVlVUb0VNM2UtZGtQdkVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQCLgOYAwQA
LgPMAwQBLgPuAwQAlX7LMA0GCSqGSIb3DQEBCwUAA4IBAQBc0DIkaOMV2XPeJ1Do
rK8M6+VHe4kYhJE2quB0iZJIc6KjYPwn3AEF0roiJXHVJSbaFKV/c2Escc8SXTrr
XbrGFEtRMXMe2RVEZ2GZa+HPzuOS3mGpnm97ZeqWvQDFruuPj17YjuMrHCfSbn5H
0Twk/YAwJlrR7HDC2CdpTLD+wxpcJHZUMTzySzpjOxD6bBD3GEZ/B+l0KqqtzSxC
wEJzmbxqrxbQs9Z0HAg1DDxGTAFgbSNWW2ZqYUgl0FwSjy6JtUycf6T+cPJ4xB0o
j535yrV4nPC5VNXAEAML07uXVwaLdc/kXDaXeb2mF2ljhGQuka3ELfdhGPtbkko/
b/Ny
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:00:36 2025 by rpki-client