Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/QoGzU-1RmyJIUAh56y-MytUoYGM.roa
File: QoGzU-1RmyJIUAh56y-MytUoYGM.roa (raw, json)
Hash identifier: hqE5J9cDIQt8JoRxbrqTaU04BDnjNCQhOVWex3fAPlY=
Subject key identifier: 42:81:B3:53:ED:51:9B:22:48:50:08:79:EB:2F:8C:CA:D5:28:60:63
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 01857195602C2854C961A1D6C79135799CAB
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/QoGzU-1RmyJIUAh56y-MytUoYGM.roa
Signing time: Mon 02 Jan 2023 08:24:52 +0000
ROA not before: Mon 02 Jan 2023 08:24:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206817
IP address blocks: 46.232.1.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:95:60:2c:28:54:c9:61:a1:d6:c7:91:35:79:9c:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: Jan 2 08:24:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4281b353ed519b2248500879eb2f8ccad5286063
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:a6:88:b5:6b:2b:4d:bd:10:52:d4:d0:ea:bd:
bf:c3:25:26:ca:1f:3e:b9:c6:71:5d:c7:b5:8e:de:
75:44:de:d1:d5:8f:22:06:8b:e9:d6:ff:c7:33:6d:
db:3f:88:1f:c8:95:c0:4a:b9:43:a0:52:21:3e:fa:
3c:59:e1:26:38:8d:db:d5:63:37:e7:cd:98:f9:73:
19:91:14:04:9a:93:31:34:f1:23:42:50:68:ed:16:
90:e4:ed:d7:43:07:5a:00:46:86:00:d8:3f:68:48:
ad:02:c8:85:c0:64:c3:e7:46:1a:b9:dd:03:05:dc:
4b:91:58:7a:7a:a2:3e:5a:36:9a:d9:ff:c7:a4:b6:
8b:cd:cb:55:73:f4:38:d2:19:c7:44:6e:c4:62:01:
0c:91:49:ab:1d:94:1c:39:69:eb:a9:86:60:76:82:
6c:a5:93:6e:70:cd:5a:3a:e4:79:95:8f:75:b0:60:
6f:a1:d2:51:76:f6:b1:77:b6:92:52:f7:98:14:78:
01:5f:3c:d5:de:34:cd:2e:76:be:9e:f2:5b:20:7d:
47:71:77:92:0a:62:1b:b1:42:82:c3:8c:aa:0a:67:
2a:b1:98:7b:07:72:0e:01:b2:bd:fd:7f:05:e7:61:
7a:78:7f:c8:67:8e:be:26:d5:d6:41:71:ef:bd:72:
e3:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:81:B3:53:ED:51:9B:22:48:50:08:79:EB:2F:8C:CA:D5:28:60:63
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/QoGzU-1RmyJIUAh56y-MytUoYGM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.232.1.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:9a:98:66:a4:a4:ed:02:6e:b1:a0:fd:cf:cb:ea:cf:04:5c:
e4:7c:d5:24:fd:e8:41:3d:5c:e5:d3:3f:be:c6:3b:7a:8f:84:
3b:08:e2:14:c7:2b:3b:91:74:40:f2:37:34:7c:fc:9b:43:fd:
07:79:bf:cc:68:8b:b1:ae:f3:68:7b:17:b8:85:a2:34:6a:8b:
17:d3:f6:0b:e7:35:05:4a:b8:c2:d2:33:29:9c:2b:76:a5:20:
fd:32:06:fa:1d:18:77:52:87:8b:a7:f0:28:91:ce:c4:d3:75:
51:1c:3f:d4:f8:0e:7f:45:70:61:8d:00:e2:69:ed:f7:12:4a:
f5:fe:7d:f8:fa:22:52:73:7b:35:f4:9c:1d:11:e9:f2:33:e3:
b0:91:16:d5:67:e7:b8:cb:e5:4f:eb:8e:43:e0:01:fb:77:f8:
d4:b0:c2:f1:93:8d:4a:5b:0e:f0:85:96:0a:73:ee:c5:d2:73:
5a:ff:ce:ad:09:e0:f8:4c:57:46:66:ad:d4:ba:46:b7:f3:d6:
59:bf:cc:30:17:31:b3:6b:cc:e1:c3:a3:09:56:4d:da:33:75:
68:3b:7c:d8:6a:81:0f:6e:b7:74:9b:67:a1:6a:ab:6b:94:8f:
06:7a:6f:28:ef:c2:12:fa:8b:fa:0b:a4:93:9c:04:ef:c3:ad:
3d:90:b3:f7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVxlWAsKFTJYaHWx5E1eZyrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1ODhmMTk3Zjk3ZTg5MDA3NTU1NDRlODEwY2RkZWY5ZDkw
ZmJjNDEwHhcNMjMwMTAyMDgyNDUyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MjgxYjM1M2VkNTE5YjIyNDg1MDA4NzllYjJmOGNjYWQ1Mjg2MDYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiaaItWsrTb0QUtTQ6r2/wyUmyh8+
ucZxXce1jt51RN7R1Y8iBovp1v/HM23bP4gfyJXASrlDoFIhPvo8WeEmOI3b1WM3
582Y+XMZkRQEmpMxNPEjQlBo7RaQ5O3XQwdaAEaGANg/aEitAsiFwGTD50Yaud0D
BdxLkVh6eqI+Wjaa2f/HpLaLzctVc/Q40hnHRG7EYgEMkUmrHZQcOWnrqYZgdoJs
pZNucM1aOuR5lY91sGBvodJRdvaxd7aSUveYFHgBXzzV3jTNLna+nvJbIH1HcXeS
CmIbsUKCw4yqCmcqsZh7B3IOAbK9/X8F52F6eH/IZ46+JtXWQXHvvXLjOQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEKBs1PtUZsiSFAIeesvjMrVKGBjMB8GA1UdIwQY
MBaAFFWI8Zf5fokAdVVE6BDN3vnZD7xBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVllqeGxfbC1pUUIxVlVUb0VNM2UtZGtQdkVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi82MjI5ODEtOTY1MC00MjcxLTkyY2Et
N2NmZWY0Mjc2YTBmLzEvUW9HelUtMVJteUpJVUFoNTZ5LU15dFVvWUdNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi82MjI5ODEtOTY1MC00MjcxLTkyY2EtN2NmZWY0Mjc2YTBm
LzEvVllqeGxfbC1pUUIxVlVUb0VNM2UtZGtQdkVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALugBMA0G
CSqGSIb3DQEBCwUAA4IBAQBMmphmpKTtAm6xoP3Py+rPBFzkfNUk/ehBPVzl0z++
xjt6j4Q7COIUxys7kXRA8jc0fPybQ/0Heb/MaIuxrvNoexe4haI0aosX0/YL5zUF
SrjC0jMpnCt2pSD9Mgb6HRh3UoeLp/Aokc7E03VRHD/U+A5/RXBhjQDiae33Ekr1
/n34+iJSc3s19JwdEenyM+OwkRbVZ+e4y+VP645D4AH7d/jUsMLxk41KWw7whZYK
c+7F0nNa/86tCeD4TFdGZq3Uuka389ZZv8wwFzGza8zhw6MJVk3aM3VoO3zYaoEP
brd0m2ehaqtrlI8Gem8o78IS+ov6C6STnATvw609kLP3
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:11:06 2025 by rpki-client