Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/JabFHvzQm-qt7gx2HOMHvEWUW2Y.roa
File: JabFHvzQm-qt7gx2HOMHvEWUW2Y.roa (raw, json)
Hash identifier: gkodwnjyjjmdZvVy6Fc6R9ymp1qFBrugWU2a0yfxNfE=
Subject key identifier: 25:A6:C5:1E:FC:D0:9B:EA:AD:EE:0C:76:1C:E3:07:BC:45:94:5B:66
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 019302D741FDD4F27BEBD4888B0050AB1F96
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/JabFHvzQm-qt7gx2HOMHvEWUW2Y.roa
Signing time: Wed 06 Nov 2024 18:58:01 +0000
ROA not before: Wed 06 Nov 2024 18:58:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209372
IP address blocks: 46.3.10.0/24 maxlen: 24
46.3.11.0/24 maxlen: 24
46.3.12.0/22 maxlen: 24
46.3.20.0/22 maxlen: 24
46.3.31.0/24 maxlen: 24
46.3.48.0/20 maxlen: 24
46.3.76.0/24 maxlen: 24
46.3.77.0/24 maxlen: 24
46.3.78.0/24 maxlen: 24
46.3.79.0/24 maxlen: 24
46.3.84.0/22 maxlen: 24
46.3.84.0/24 maxlen: 24
46.3.86.0/24 maxlen: 24
46.3.87.0/24 maxlen: 24
46.3.88.0/24 maxlen: 24
46.3.128.0/17 maxlen: 24
46.3.135.0/24 maxlen: 24
46.3.136.0/22 maxlen: 22
46.3.144.0/22 maxlen: 22
46.3.148.0/22 maxlen: 22
46.3.152.0/24 maxlen: 24
46.3.153.0/24 maxlen: 24
46.3.154.0/24 maxlen: 24
46.3.155.0/24 maxlen: 24
46.3.156.0/24 maxlen: 24
46.3.157.0/24 maxlen: 24
46.3.158.0/24 maxlen: 24
46.3.159.0/24 maxlen: 24
46.3.164.0/23 maxlen: 23
46.3.166.0/23 maxlen: 23
46.3.205.0/24 maxlen: 24
46.3.232.0/22 maxlen: 22
46.3.238.0/24 maxlen: 24
46.3.239.0/24 maxlen: 24
46.232.0.0/17 maxlen: 24
46.232.21.0/24 maxlen: 24
46.232.22.0/24 maxlen: 24
46.232.23.0/24 maxlen: 24
46.232.112.0/23 maxlen: 23
46.232.114.0/23 maxlen: 23
80.243.128.0/20 maxlen: 24
149.126.192.0/18 maxlen: 24
149.126.213.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:02:d7:41:fd:d4:f2:7b:eb:d4:88:8b:00:50:ab:1f:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: Nov 6 18:58:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=25a6c51efcd09beaadee0c761ce307bc45945b66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c7:61:9c:57:fa:ee:e8:9e:c0:9e:e0:a4:cb:
88:62:fe:3b:cf:bc:54:8d:d9:11:45:f1:d0:68:60:
d2:29:94:59:ed:18:93:21:00:cd:0a:55:88:a6:08:
cb:98:ab:fd:a5:46:4d:c2:4f:c9:2b:b3:f2:81:0d:
42:b7:b3:5f:95:fd:b7:9a:95:4c:15:34:d8:98:bf:
ca:9b:77:ed:6f:af:58:98:8d:9a:a5:bd:8e:d8:d3:
c4:49:67:89:e2:c3:b1:40:4b:fc:a7:ee:27:bd:30:
ca:4a:40:0b:6c:cb:02:00:06:3d:aa:db:18:fb:aa:
95:f0:aa:51:1c:cc:ed:ba:29:a6:7a:42:7f:bf:77:
8d:74:92:63:bc:3f:33:fb:57:e8:e8:d3:45:57:9c:
08:df:ff:af:65:8e:7f:f1:4f:ce:ad:85:55:8b:9c:
dc:f6:76:93:3d:70:1a:62:2f:ba:6c:49:55:da:4c:
91:88:19:0c:51:eb:de:7c:42:8a:df:73:a2:0e:fc:
f4:81:01:8c:75:af:39:98:0a:8f:90:13:a7:7a:e6:
e1:18:50:18:ad:b9:56:2c:03:96:e6:2d:c5:eb:f7:
7a:dd:45:4e:88:39:21:c2:75:41:11:2f:31:9a:58:
2d:2b:09:ba:07:ac:fd:74:20:12:ce:3a:6f:96:ce:
46:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:A6:C5:1E:FC:D0:9B:EA:AD:EE:0C:76:1C:E3:07:BC:45:94:5B:66
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/JabFHvzQm-qt7gx2HOMHvEWUW2Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.3.10.0-46.3.15.255
46.3.20.0/22
46.3.31.0/24
46.3.48.0/20
46.3.76.0/22
46.3.84.0-46.3.88.255
46.3.128.0/17
46.232.0.0/17
80.243.128.0/20
149.126.192.0/18
Signature Algorithm: sha256WithRSAEncryption
8d:9c:6f:67:87:a9:de:e9:91:d1:48:d3:60:1f:71:a3:4d:b1:
22:bf:88:25:2b:e5:eb:af:ec:4e:e1:92:ab:04:2e:eb:f1:00:
c7:57:27:9c:c5:10:2d:7f:2b:e0:6e:c1:c2:f1:41:8b:88:82:
82:8b:47:04:fa:67:95:ad:72:e2:7d:8f:94:83:ba:04:50:8f:
29:ca:80:e0:90:89:b5:87:bd:ac:c7:95:88:e6:63:60:52:7c:
86:1e:dd:cb:9f:a2:11:05:18:20:47:1f:15:0d:b1:c9:ea:ef:
d9:c6:9e:41:f4:cf:86:51:ff:62:0c:6f:61:ce:5b:04:20:f0:
ce:3e:f6:87:b2:30:f3:42:e3:3b:6b:cd:9b:86:fd:67:b7:65:
ee:0b:a4:c3:ab:6b:1c:de:a5:bc:a5:c6:fc:20:ae:20:b5:53:
37:94:73:b5:a3:07:b7:35:c0:59:67:66:9e:17:00:a2:84:35:
16:68:9f:ec:24:73:bb:2e:c7:42:0c:91:c1:35:ad:13:b7:62:
9f:84:ed:d3:45:9f:8e:36:5c:55:57:a6:f9:bc:2e:49:01:31:
93:bf:b8:f1:e9:e1:a4:f9:13:98:23:54:e7:3a:48:86:f4:c6:
00:21:fd:4b:81:c2:c6:7e:04:2a:98:4d:58:02:15:15:f4:20:
99:3c:7e:d0
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgISAZMC10H91PJ769SIiwBQqx+WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1ODhmMTk3Zjk3ZTg5MDA3NTU1NDRlODEwY2RkZWY5ZDkw
ZmJjNDEwHhcNMjQxMTA2MTg1ODAxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNWE2YzUxZWZjZDA5YmVhYWRlZTBjNzYxY2UzMDdiYzQ1OTQ1YjY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsMdhnFf67uiewJ7gpMuIYv47z7xU
jdkRRfHQaGDSKZRZ7RiTIQDNClWIpgjLmKv9pUZNwk/JK7PygQ1Ct7Nflf23mpVM
FTTYmL/Km3ftb69YmI2apb2O2NPESWeJ4sOxQEv8p+4nvTDKSkALbMsCAAY9qtsY
+6qV8KpRHMztuimmekJ/v3eNdJJjvD8z+1fo6NNFV5wI3/+vZY5/8U/OrYVVi5zc
9naTPXAaYi+6bElV2kyRiBkMUevefEKK33OiDvz0gQGMda85mAqPkBOneubhGFAY
rblWLAOW5i3F6/d63UVOiDkhwnVBES8xmlgtKwm6B6z9dCASzjpvls5GxwIDAQAB
o4ICTzCCAkswHQYDVR0OBBYEFCWmxR780Jvqre4MdhzjB7xFlFtmMB8GA1UdIwQY
MBaAFFWI8Zf5fokAdVVE6BDN3vnZD7xBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVllqeGxfbC1pUUIxVlVUb0VNM2UtZGtQdkVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi82MjI5ODEtOTY1MC00MjcxLTkyY2Et
N2NmZWY0Mjc2YTBmLzEvSmFiRkh2elFtLXF0N2d4MkhPTUh2RVdVVzJZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi82MjI5ODEtOTY1MC00MjcxLTkyY2EtN2NmZWY0Mjc2YTBm
LzEvVllqeGxfbC1pUUIxVlVUb0VNM2UtZGtQdkVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGUGCCsGAQUFBwEHAQH/BFYwVDBSBAIAATBMMAwDBAEuAwoD
BAQuAwADBAIuAxQDBAAuAx8DBAQuAzADBAIuA0wwDAMEAi4DVAMEAC4DWAMEBy4D
gAMEBy7oAAMEBFDzgAMEBpV+wDANBgkqhkiG9w0BAQsFAAOCAQEAjZxvZ4ep3umR
0UjTYB9xo02xIr+IJSvl66/sTuGSqwQu6/EAx1cnnMUQLX8r4G7BwvFBi4iCgotH
BPpnla1y4n2PlIO6BFCPKcqA4JCJtYe9rMeViOZjYFJ8hh7dy5+iEQUYIEcfFQ2x
yerv2caeQfTPhlH/YgxvYc5bBCDwzj72h7Iw80LjO2vNm4b9Z7dl7gukw6trHN6l
vKXG/CCuILVTN5RztaMHtzXAWWdmnhcAooQ1Fmif7CRzuy7HQgyRwTWtE7din4Tt
00WfjjZcVVem+bwuSQExk7+48enhpPkTmCNU5zpIhvTGACH9S4HCxn4EKphNWAIV
FfQgmTx+0A==
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:04:42 2025 by rpki-client