Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/75BsKLdYiHNgTB8qOKr4PE_74-A.roa
File: 75BsKLdYiHNgTB8qOKr4PE_74-A.roa (raw, json)
Hash identifier: Bf8OklBKCM34OqtkCh+9E6n1QZs6U+Ufw9215Frc1Qk=
Subject key identifier: EF:90:6C:28:B7:58:88:73:60:4C:1F:2A:38:AA:F8:3C:4F:FB:E3:E0
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 09C6AA4B
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/75BsKLdYiHNgTB8qOKr4PE_74-A.roa
Signing time: Fri 13 May 2022 16:23:27 +0000
ROA not before: Fri 13 May 2022 16:23:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 398465
IP address blocks: 46.3.116.0/22 maxlen: 22
46.3.220.0/23 maxlen: 23
46.3.230.0/23 maxlen: 23
46.3.120.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 164014667 (0x9c6aa4b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: May 13 16:23:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ef906c28b7588873604c1f2a38aaf83c4ffbe3e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f2:3a:62:1d:96:d1:49:e9:6c:24:28:3f:13:
ca:54:16:54:30:dd:20:6a:d7:57:48:5d:20:e1:33:
05:19:4a:a8:5e:df:8c:2b:4e:20:14:d3:64:67:52:
36:e6:bd:d3:c8:87:80:28:70:79:11:3c:09:82:2c:
6c:ab:98:1c:74:2c:73:2a:75:82:c7:68:dd:41:3f:
75:47:45:67:40:df:24:d6:0a:f5:1f:73:d6:49:03:
a7:cb:0e:f6:78:b7:fe:32:ca:0b:80:3b:3d:f9:f1:
ff:d8:ed:61:f5:43:c4:1c:14:8e:3a:be:b8:8f:9b:
b6:ee:c9:bf:7f:a0:06:fc:10:33:cc:70:1c:2e:db:
78:0f:65:46:21:00:2e:d9:d8:3d:16:a8:99:05:44:
33:b1:0a:1c:9b:42:f7:60:e9:62:e3:c7:a2:d4:31:
df:4c:ee:dd:45:66:c3:0f:f4:4e:89:da:67:ff:ba:
6e:b2:b7:7b:b7:1b:d3:de:66:ba:a8:73:f6:86:70:
d1:76:e5:ab:7d:2c:ec:54:e1:d7:fe:49:0d:61:7c:
ad:c1:dc:73:64:f3:c8:f3:0b:9a:a6:ee:86:fe:02:
c6:11:b6:cf:36:de:12:97:35:64:c7:ba:bb:79:0a:
ad:b9:04:86:67:41:e0:52:46:03:bc:30:2e:8f:af:
97:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:90:6C:28:B7:58:88:73:60:4C:1F:2A:38:AA:F8:3C:4F:FB:E3:E0
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/75BsKLdYiHNgTB8qOKr4PE_74-A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.3.116.0-46.3.127.255
46.3.220.0/23
46.3.230.0/23
Signature Algorithm: sha256WithRSAEncryption
84:cd:b2:7b:b2:c1:a6:84:2a:d7:cf:89:07:ee:87:16:a2:96:
87:37:01:8a:0b:01:65:a6:37:2d:a3:f6:06:98:4b:34:f0:b9:
93:93:c3:44:ea:e2:c5:26:21:9e:8a:b2:eb:4a:d0:42:05:8b:
96:9a:98:f6:ab:f2:3a:76:c5:0e:0c:61:c2:0d:2c:11:ab:b9:
85:b8:50:0f:e1:03:a3:aa:a8:7b:f6:5a:c7:ec:ba:f2:d5:98:
b3:ff:f8:4d:84:e7:3a:d7:be:b8:b7:24:8e:db:3c:bd:ab:78:
be:3d:3c:b5:84:cf:2c:6d:11:ef:96:e6:3e:9d:6a:5f:33:eb:
a9:09:ae:47:80:14:94:c4:04:a8:a7:d9:e1:77:8c:54:67:d0:
22:7b:ff:3c:b6:1e:90:dd:16:92:4f:37:21:56:39:ce:f9:91:
06:5b:8a:0b:36:81:b6:66:64:43:2a:a7:69:79:cb:bd:e4:53:
58:b4:c0:56:cc:6e:5c:fb:6f:26:64:2a:52:d9:82:8c:01:d8:
a8:d6:a7:1a:57:38:f4:ec:57:ab:2c:57:00:1b:9e:35:41:07:
09:68:89:de:62:f1:27:eb:a8:e3:dd:78:7f:33:e9:90:13:2c:
8b:7d:63:8f:d4:70:a9:2d:5b:36:a7:96:c9:50:98:53:c9:e3:
e4:6a:ed:43
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgIECcaqSzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
NTg4ZjE5N2Y5N2U4OTAwNzU1NTQ0ZTgxMGNkZGVmOWQ5MGZiYzQxMB4XDTIyMDUx
MzE2MjMyN1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZWY5MDZjMjhiNzU4
ODg3MzYwNGMxZjJhMzhhYWY4M2M0ZmZiZTNlMDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKvyOmIdltFJ6WwkKD8TylQWVDDdIGrXV0hdIOEzBRlKqF7f
jCtOIBTTZGdSNua908iHgChweRE8CYIsbKuYHHQscyp1gsdo3UE/dUdFZ0DfJNYK
9R9z1kkDp8sO9ni3/jLKC4A7Pfnx/9jtYfVDxBwUjjq+uI+btu7Jv3+gBvwQM8xw
HC7beA9lRiEALtnYPRaomQVEM7EKHJtC92DpYuPHotQx30zu3UVmww/0TonaZ/+6
brK3e7cb095muqhz9oZw0Xblq30s7FTh1/5JDWF8rcHcc2TzyPMLmqbuhv4CxhG2
zzbeEpc1ZMe6u3kKrbkEhmdB4FJGA7wwLo+vl+MCAwEAAaOCAh0wggIZMB0GA1Ud
DgQWBBTvkGwot1iIc2BMHyo4qvg8T/vj4DAfBgNVHSMEGDAWgBRViPGX+X6JAHVV
ROgQzd752Q+8QTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1ZZanhsX2wtaVFCMVZVVG9FTTNlLWRrUHZFRS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZTYvNjIyOTgxLTk2NTAtNDI3MS05MmNhLTdjZmVmNDI3NmEwZi8x
Lzc1QnNLTGRZaUhOZ1RCOHFPS3I0UEVfNzQtQS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTYv
NjIyOTgxLTk2NTAtNDI3MS05MmNhLTdjZmVmNDI3NmEwZi8xL1ZZanhsX2wtaVFC
MVZVVG9FTTNlLWRrUHZFRS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAz
BggrBgEFBQcBBwEB/wQkMCIwIAQCAAEwGjAMAwQCLgN0AwQHLgMAAwQBLgPcAwQB
LgPmMA0GCSqGSIb3DQEBCwUAA4IBAQCEzbJ7ssGmhCrXz4kH7ocWopaHNwGKCwFl
pjcto/YGmEs08LmTk8NE6uLFJiGeirLrStBCBYuWmpj2q/I6dsUODGHCDSwRq7mF
uFAP4QOjqqh79lrH7Lry1Ziz//hNhOc61764tySO2zy9q3i+PTy1hM8sbRHvluY+
nWpfM+upCa5HgBSUxASop9nhd4xUZ9Aie/88th6Q3RaSTzchVjnO+ZEGW4oLNoG2
ZmRDKqdpecu95FNYtMBWzG5c+28mZCpS2YKMAdio1qcaVzj07FerLFcAG541QQcJ
aIneYvEn66jj3Xh/M+mQEyyLfWOP1HCpLVs2p5bJUJhTyePkau1D
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:03:40 2025 by rpki-client