Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/blV1UHlomABExz9vpgYGJyYYjMc.roa
File: blV1UHlomABExz9vpgYGJyYYjMc.roa (raw, json)
Hash identifier: BVZi3IJveVvFQ/Atg8Fd2XJ5cDV9rC+buJ9stcrg5X0=
Subject key identifier: 6E:55:75:50:79:68:98:00:44:C7:3F:6F:A6:06:06:27:26:18:8C:C7
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 01942369F27F9D572AFBAFB173C2620AC3CC
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/blV1UHlomABExz9vpgYGJyYYjMc.roa
Signing time: Wed 01 Jan 2025 19:48:53 +0000
ROA not before: Wed 01 Jan 2025 19:48:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60808
IP address blocks: 46.3.228.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:f2:7f:9d:57:2a:fb:af:b1:73:c2:62:0a:c3:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: Jan 1 19:48:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6e5575507968980044c73f6fa606062726188cc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:bd:0d:a5:c1:48:8b:1e:90:fb:4d:12:64:99:
1c:0f:cd:e7:4e:0d:95:d2:a1:17:8a:19:48:3d:92:
12:8e:b1:22:2b:75:35:2c:83:e1:3d:5d:9f:99:a8:
db:3c:7a:ea:fb:62:19:47:68:02:c8:85:2a:fb:10:
00:c4:ac:0a:b5:27:ca:ef:c3:f5:d3:48:65:12:df:
3f:fb:6a:a0:d0:9d:2d:65:29:ef:4f:be:f4:c1:18:
a1:ab:d1:bb:99:f7:ee:79:89:32:72:d0:33:4b:30:
d2:00:5b:10:9b:fd:47:5c:3f:b6:d3:eb:c2:3b:1a:
6f:6b:8b:73:a6:64:3e:b2:b3:ee:dc:c3:83:67:90:
4c:46:30:1e:2f:e0:44:4f:ea:fe:19:be:ef:e3:31:
55:4b:0a:24:b7:4d:dc:fb:5f:b4:69:40:f8:11:e7:
3c:b9:24:8e:9b:38:e5:bb:52:a3:3f:4f:af:c9:51:
3f:9b:dd:2d:43:1b:c9:9a:56:03:e1:55:43:f9:25:
33:13:b3:7b:cd:37:50:39:88:35:b1:d6:75:f3:bb:
31:16:40:e5:ec:85:7b:29:50:ee:ad:1d:23:c1:02:
b5:0a:d8:9f:ee:71:4f:73:b6:a7:2c:ad:e6:ef:ec:
51:26:56:f3:6e:f2:31:66:40:3b:ae:8a:ec:3c:51:
5d:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:55:75:50:79:68:98:00:44:C7:3F:6F:A6:06:06:27:26:18:8C:C7
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/blV1UHlomABExz9vpgYGJyYYjMc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.3.228.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:c2:d4:83:d2:d5:bc:0b:1f:87:f4:70:8f:d5:01:34:a0:de:
bf:62:9f:76:7d:41:d4:8d:f8:62:48:6f:e5:8f:62:39:43:97:
80:8b:b5:a6:f2:ce:8a:7b:9c:44:34:53:04:fc:f4:f1:aa:29:
09:7f:b5:5d:77:d4:21:78:22:58:d8:6c:bd:28:e2:f8:52:2a:
88:ec:56:80:cd:cd:00:7f:e8:51:19:cd:79:71:e3:bc:3e:ca:
07:71:58:4a:88:9a:a3:ed:31:30:3a:93:e0:ee:31:cd:e0:29:
64:78:5c:c6:f1:f0:f5:2d:35:33:f5:88:67:29:ed:43:84:c5:
3f:7b:d4:52:3d:33:29:6c:70:f0:1c:72:55:ee:2f:56:13:e4:
23:3b:d9:01:56:6e:e7:b8:7f:23:e7:29:01:c2:34:f6:bb:a5:
b0:23:1d:d7:f6:73:cc:28:8b:9d:e6:55:a0:67:01:af:b8:3a:
89:92:cc:f7:02:8d:c1:f4:3f:74:87:6e:e2:4f:79:b9:6f:16:
49:3d:06:ec:df:46:d7:32:26:b6:d2:8b:2a:d4:80:43:d6:6d:
3b:a2:14:85:d8:50:9e:d3:78:23:a9:66:74:b8:e3:c6:87:0c:
c2:5e:45:8d:05:4e:ca:16:15:fb:cf:bb:b4:73:de:c7:5c:c4:
2f:71:3b:df
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQjafJ/nVcq+6+xc8JiCsPMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1ODhmMTk3Zjk3ZTg5MDA3NTU1NDRlODEwY2RkZWY5ZDkw
ZmJjNDEwHhcNMjUwMTAxMTk0ODUzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZTU1NzU1MDc5Njg5ODAwNDRjNzNmNmZhNjA2MDYyNzI2MTg4Y2M3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAur0NpcFIix6Q+00SZJkcD83nTg2V
0qEXihlIPZISjrEiK3U1LIPhPV2fmajbPHrq+2IZR2gCyIUq+xAAxKwKtSfK78P1
00hlEt8/+2qg0J0tZSnvT770wRihq9G7mffueYkyctAzSzDSAFsQm/1HXD+20+vC
Oxpva4tzpmQ+srPu3MODZ5BMRjAeL+BET+r+Gb7v4zFVSwokt03c+1+0aUD4Eec8
uSSOmzjlu1KjP0+vyVE/m90tQxvJmlYD4VVD+SUzE7N7zTdQOYg1sdZ187sxFkDl
7IV7KVDurR0jwQK1Ctif7nFPc7anLK3m7+xRJlbzbvIxZkA7rorsPFFdtwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFG5VdVB5aJgARMc/b6YGBicmGIzHMB8GA1UdIwQY
MBaAFFWI8Zf5fokAdVVE6BDN3vnZD7xBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVllqeGxfbC1pUUIxVlVUb0VNM2UtZGtQdkVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi82MjI5ODEtOTY1MC00MjcxLTkyY2Et
N2NmZWY0Mjc2YTBmLzEvYmxWMVVIbG9tQUJFeHo5dnBnWUdKeVlZak1jLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi82MjI5ODEtOTY1MC00MjcxLTkyY2EtN2NmZWY0Mjc2YTBm
LzEvVllqeGxfbC1pUUIxVlVUb0VNM2UtZGtQdkVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALgPkMA0G
CSqGSIb3DQEBCwUAA4IBAQBdwtSD0tW8Cx+H9HCP1QE0oN6/Yp92fUHUjfhiSG/l
j2I5Q5eAi7Wm8s6Ke5xENFME/PTxqikJf7Vdd9QheCJY2Gy9KOL4UiqI7FaAzc0A
f+hRGc15ceO8PsoHcVhKiJqj7TEwOpPg7jHN4ClkeFzG8fD1LTUz9YhnKe1DhMU/
e9RSPTMpbHDwHHJV7i9WE+QjO9kBVm7nuH8j5ykBwjT2u6WwIx3X9nPMKIud5lWg
ZwGvuDqJksz3Ao3B9D90h27iT3m5bxZJPQbs30bXMia20osq1IBD1m07ohSF2FCe
03gjqWZ0uOPGhwzCXkWNBU7KFhX7z7u0c97HXMQvcTvf
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:01:21 2025 by rpki-client