Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/Fk4ZgHL24AtgFUECu2JzpYFy794.roa
File: Fk4ZgHL24AtgFUECu2JzpYFy794.roa (raw, json)
Hash identifier: DKL9owiqqoKfxYKkjIP0rIPm09dRGMOQuqjiV+9Vyss=
Subject key identifier: 16:4E:19:80:72:F6:E0:0B:60:15:41:02:BB:62:73:A5:81:72:EF:DE
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 018CC94E65894F0B0CE31CC0E233D5B5845D
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/Fk4ZgHL24AtgFUECu2JzpYFy794.roa
Signing time: Tue 02 Jan 2024 08:33:27 +0000
ROA not before: Tue 02 Jan 2024 08:33:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 1001
IP address blocks: 46.3.96.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:65:89:4f:0b:0c:e3:1c:c0:e2:33:d5:b5:84:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: Jan 2 08:33:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=164e198072f6e00b60154102bb6273a58172efde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:85:8d:60:72:36:24:3d:5c:40:fa:8b:3f:80:
d7:10:e2:01:fb:71:3a:74:f7:c0:21:fe:e1:c2:20:
fe:6b:ff:c3:e5:bb:72:f5:0a:16:ac:14:c3:45:75:
4a:c3:02:82:b7:d4:cf:f5:29:c0:62:05:5d:1c:56:
bf:eb:78:a2:b8:57:94:e8:1d:58:91:20:fc:43:75:
e0:fa:dd:07:60:ba:d3:b9:a3:8a:0d:22:d5:43:b4:
49:35:c3:ba:3c:93:4c:9e:cd:64:0c:57:e1:72:08:
5a:66:6d:4d:17:a6:65:35:a8:d7:a3:e1:00:35:7d:
e7:8a:45:dc:1e:bd:91:e8:fc:9a:86:c1:cd:26:89:
2b:d0:d8:0f:43:84:37:d4:4a:37:2d:3f:01:42:78:
b2:ea:ce:28:65:36:da:16:0f:2e:a9:02:44:1e:9c:
ff:45:95:d4:00:41:5c:b1:7e:fa:17:3e:ff:9e:23:
d8:9b:cd:fe:61:52:02:82:85:6e:08:1f:0f:0e:c8:
03:06:4a:e7:e7:69:78:8f:e1:8c:b1:72:3c:9a:ed:
b0:93:39:ca:50:61:28:24:a8:19:7e:92:b9:24:c7:
ff:bf:3a:22:7c:52:26:ae:91:84:bf:67:13:8e:e1:
0a:7e:87:c9:40:e4:86:42:30:dc:b2:de:e0:d7:59:
a2:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:4E:19:80:72:F6:E0:0B:60:15:41:02:BB:62:73:A5:81:72:EF:DE
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/Fk4ZgHL24AtgFUECu2JzpYFy794.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.3.96.0/20
Signature Algorithm: sha256WithRSAEncryption
0e:34:bf:8a:dd:1e:d7:a9:d5:40:c1:bb:70:71:01:52:c4:43:
88:03:71:5f:9b:2d:44:3b:45:ec:28:47:6c:62:67:d6:7d:b8:
0d:b2:47:02:50:d9:61:3b:31:16:58:f6:39:fb:df:a1:15:56:
67:ac:a4:1b:f5:9b:32:d1:67:28:c2:9d:20:31:25:e5:51:1e:
3e:23:b6:b2:b4:24:7d:39:b6:47:be:5e:16:5a:fb:81:c7:70:
75:08:d4:a9:99:94:0f:5d:2a:71:fc:c5:16:61:93:72:97:a3:
29:78:6f:91:d4:08:ab:1f:fe:de:2d:e4:dc:df:ca:85:99:20:
1e:5d:b5:eb:59:e4:6d:fb:c0:fa:a4:63:43:1f:23:98:5c:2b:
a0:49:00:bd:1d:8a:eb:b8:14:60:aa:f5:0b:7b:03:aa:72:7f:
ca:e2:d9:6d:14:c3:44:24:ac:4d:f4:ea:ce:f7:95:e9:91:14:
43:78:23:a2:1d:ee:62:ee:17:90:d9:f9:7a:eb:d7:65:93:15:
23:f5:f2:37:45:08:85:20:2c:b6:e4:2d:97:61:4d:69:c6:68:
31:60:ba:52:83:f4:17:45:5a:4d:83:34:dd:a9:d3:fa:a6:7e:
0c:c7:5a:9b:47:dd:6e:c3:e1:d8:a4:3c:29:15:b0:51:87:43:
3d:a7:2e:80
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzJTmWJTwsM4xzA4jPVtYRdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1ODhmMTk3Zjk3ZTg5MDA3NTU1NDRlODEwY2RkZWY5ZDkw
ZmJjNDEwHhcNMjQwMTAyMDgzMzI3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNjRlMTk4MDcyZjZlMDBiNjAxNTQxMDJiYjYyNzNhNTgxNzJlZmRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxYWNYHI2JD1cQPqLP4DXEOIB+3E6
dPfAIf7hwiD+a//D5bty9QoWrBTDRXVKwwKCt9TP9SnAYgVdHFa/63iiuFeU6B1Y
kSD8Q3Xg+t0HYLrTuaOKDSLVQ7RJNcO6PJNMns1kDFfhcghaZm1NF6ZlNajXo+EA
NX3nikXcHr2R6PyahsHNJokr0NgPQ4Q31Eo3LT8BQniy6s4oZTbaFg8uqQJEHpz/
RZXUAEFcsX76Fz7/niPYm83+YVICgoVuCB8PDsgDBkrn52l4j+GMsXI8mu2wkznK
UGEoJKgZfpK5JMf/vzoifFImrpGEv2cTjuEKfofJQOSGQjDcst7g11miTQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBZOGYBy9uALYBVBArtic6WBcu/eMB8GA1UdIwQY
MBaAFFWI8Zf5fokAdVVE6BDN3vnZD7xBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVllqeGxfbC1pUUIxVlVUb0VNM2UtZGtQdkVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi82MjI5ODEtOTY1MC00MjcxLTkyY2Et
N2NmZWY0Mjc2YTBmLzEvRms0WmdITDI0QXRnRlVFQ3UySnpwWUZ5Nzk0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi82MjI5ODEtOTY1MC00MjcxLTkyY2EtN2NmZWY0Mjc2YTBm
LzEvVllqeGxfbC1pUUIxVlVUb0VNM2UtZGtQdkVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQELgNgMA0G
CSqGSIb3DQEBCwUAA4IBAQAONL+K3R7XqdVAwbtwcQFSxEOIA3Ffmy1EO0XsKEds
YmfWfbgNskcCUNlhOzEWWPY5+9+hFVZnrKQb9Zsy0Wcowp0gMSXlUR4+I7aytCR9
ObZHvl4WWvuBx3B1CNSpmZQPXSpx/MUWYZNyl6MpeG+R1AirH/7eLeTc38qFmSAe
XbXrWeRt+8D6pGNDHyOYXCugSQC9HYrruBRgqvULewOqcn/K4tltFMNEJKxN9OrO
95XpkRRDeCOiHe5i7heQ2fl669dlkxUj9fI3RQiFICy25C2XYU1pxmgxYLpSg/QX
RVpNgzTdqdP6pn4Mx1qbR91uw+HYpDwpFbBRh0M9py6A
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:08:01 2025 by rpki-client