Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/jSygaXqFFNrBYFxRzxSy0qrvobM.roa
File: jSygaXqFFNrBYFxRzxSy0qrvobM.roa (raw, json)
Hash identifier: FbCPeqHcmRzQtx76jMSmoDDEQa4d6PAH5He1GPKct98=
Subject key identifier: 8D:2C:A0:69:7A:85:14:DA:C1:60:5C:51:CF:14:B2:D2:AA:EF:A1:B3
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 018E4AF837DE2E41D66868E2DCE7BD739C91
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/jSygaXqFFNrBYFxRzxSy0qrvobM.roa
Signing time: Sun 17 Mar 2024 05:52:44 +0000
ROA not before: Sun 17 Mar 2024 05:52:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209372
IP address blocks: 46.3.12.0/22 maxlen: 24
46.3.20.0/22 maxlen: 24
46.3.31.0/24 maxlen: 24
46.3.40.0/21 maxlen: 24
46.3.48.0/20 maxlen: 24
46.3.77.0/24 maxlen: 24
46.3.78.0/24 maxlen: 24
46.3.79.0/24 maxlen: 24
46.3.84.0/22 maxlen: 24
46.3.84.0/24 maxlen: 24
46.3.86.0/24 maxlen: 24
46.3.87.0/24 maxlen: 24
46.3.88.0/24 maxlen: 24
46.3.128.0/17 maxlen: 24
46.3.135.0/24 maxlen: 24
46.3.136.0/22 maxlen: 22
46.3.144.0/22 maxlen: 22
46.3.148.0/22 maxlen: 22
46.3.152.0/24 maxlen: 24
46.3.153.0/24 maxlen: 24
46.3.154.0/24 maxlen: 24
46.3.155.0/24 maxlen: 24
46.3.156.0/24 maxlen: 24
46.3.157.0/24 maxlen: 24
46.3.158.0/24 maxlen: 24
46.3.159.0/24 maxlen: 24
46.3.164.0/23 maxlen: 23
46.3.166.0/23 maxlen: 23
46.3.205.0/24 maxlen: 24
46.3.208.0/22 maxlen: 22
46.3.212.0/22 maxlen: 22
46.3.232.0/22 maxlen: 22
46.3.238.0/24 maxlen: 24
46.3.239.0/24 maxlen: 24
46.232.0.0/17 maxlen: 24
46.232.16.0/23 maxlen: 23
46.232.18.0/23 maxlen: 23
46.232.21.0/24 maxlen: 24
46.232.22.0/24 maxlen: 24
46.232.23.0/24 maxlen: 24
46.232.112.0/23 maxlen: 23
46.232.114.0/23 maxlen: 23
46.232.116.0/23 maxlen: 23
46.232.118.0/23 maxlen: 23
46.232.124.0/23 maxlen: 23
46.232.126.0/23 maxlen: 23
80.243.128.0/20 maxlen: 24
149.126.192.0/18 maxlen: 24
149.126.213.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:4a:f8:37:de:2e:41:d6:68:68:e2:dc:e7:bd:73:9c:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: Mar 17 05:52:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8d2ca0697a8514dac1605c51cf14b2d2aaefa1b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:c0:82:29:d8:e2:a8:6a:51:b4:d9:b1:6e:b4:
b0:8c:2f:bb:85:b5:c0:c4:35:85:72:3e:97:55:e0:
d7:dc:8b:ba:a8:3f:a0:dc:c7:96:e7:f5:7c:76:c1:
b0:49:67:a2:55:ea:2a:65:e4:9f:3f:27:fb:bc:77:
0d:57:4d:99:ac:10:36:33:ac:f1:da:aa:26:9b:98:
0e:72:74:ae:31:ad:b5:8a:68:c0:b8:e3:fe:7e:e4:
f8:90:54:64:e4:fa:7e:ec:3a:0d:80:84:75:01:81:
a1:f3:e3:a9:43:9a:48:2c:dd:95:1f:82:79:09:4c:
1c:06:fa:c0:fc:b2:39:2c:1b:f3:4d:b1:7e:7b:27:
e2:4c:38:85:f9:e4:c5:66:b0:ce:42:b7:4a:72:a7:
35:6c:e7:5d:e8:2b:ac:2c:11:88:77:84:65:8f:bc:
d7:82:ce:10:1d:df:1c:86:c4:03:7b:1e:65:d5:ba:
0f:00:a2:03:e3:aa:d2:10:9d:07:05:91:06:e5:53:
da:b2:be:74:30:b0:40:79:a3:7a:8b:e0:77:ab:61:
df:75:0e:86:c8:e9:e4:f7:37:17:a8:c3:ec:e4:9d:
4c:1d:e3:29:4e:f2:ba:c1:eb:17:d1:5d:c3:bb:74:
4a:ba:81:02:a7:02:8e:79:df:2f:97:63:1e:21:8b:
a7:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:2C:A0:69:7A:85:14:DA:C1:60:5C:51:CF:14:B2:D2:AA:EF:A1:B3
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/jSygaXqFFNrBYFxRzxSy0qrvobM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.3.12.0/22
46.3.20.0/22
46.3.31.0/24
46.3.40.0-46.3.63.255
46.3.77.0-46.3.79.255
46.3.84.0-46.3.88.255
46.3.128.0/17
46.232.0.0/17
80.243.128.0/20
149.126.192.0/18
Signature Algorithm: sha256WithRSAEncryption
8f:0c:e7:a9:b1:ad:72:c0:0f:6c:27:d3:23:67:0c:99:8f:c2:
1b:54:5f:7b:e0:14:85:56:8b:ff:ca:82:3a:76:0b:d7:0f:f8:
b3:01:00:98:57:38:77:6d:79:fe:16:57:74:96:c7:0d:db:14:
c6:e6:90:ba:9f:1d:bd:51:ed:73:18:7b:a9:64:65:c4:1b:c6:
86:5b:f9:7e:61:06:9b:5a:9c:71:58:e1:15:b6:9a:5f:9c:57:
aa:08:dd:9d:3f:88:c3:c2:98:32:a9:34:d1:6b:d5:71:d0:ee:
03:f2:22:37:93:e2:ff:02:81:d2:b1:49:9e:f4:b0:4a:f6:42:
c9:b0:91:17:c1:cf:58:d0:4f:b7:7c:2e:7f:14:78:b7:7d:2f:
a9:12:59:34:88:80:c6:e0:12:15:a3:74:00:28:d2:a0:02:ab:
56:db:e2:83:24:ab:80:19:65:df:06:1f:9e:a6:96:ab:da:fb:
1e:78:8f:0b:b9:3f:3d:1f:30:f7:5e:43:e6:91:84:61:1e:07:
6c:0c:a7:69:41:d3:32:ee:e2:f0:e3:73:c5:82:92:1c:01:01:
7f:7b:ac:25:e6:4f:48:ad:d3:3c:43:2b:e4:3e:2b:19:65:fd:
cd:1b:90:99:9a:8e:b8:f1:d0:bf:3e:d0:6c:f5:da:21:ad:a5:
55:86:bf:eb
-----BEGIN CERTIFICATE-----
MIIFSzCCBDOgAwIBAgISAY5K+DfeLkHWaGji3Oe9c5yRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1ODhmMTk3Zjk3ZTg5MDA3NTU1NDRlODEwY2RkZWY5ZDkw
ZmJjNDEwHhcNMjQwMzE3MDU1MjQ0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZDJjYTA2OTdhODUxNGRhYzE2MDVjNTFjZjE0YjJkMmFhZWZhMWIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkcCCKdjiqGpRtNmxbrSwjC+7hbXA
xDWFcj6XVeDX3Iu6qD+g3MeW5/V8dsGwSWeiVeoqZeSfPyf7vHcNV02ZrBA2M6zx
2qomm5gOcnSuMa21imjAuOP+fuT4kFRk5Pp+7DoNgIR1AYGh8+OpQ5pILN2VH4J5
CUwcBvrA/LI5LBvzTbF+eyfiTDiF+eTFZrDOQrdKcqc1bOdd6CusLBGId4Rlj7zX
gs4QHd8chsQDex5l1boPAKID46rSEJ0HBZEG5VPasr50MLBAeaN6i+B3q2HfdQ6G
yOnk9zcXqMPs5J1MHeMpTvK6wesX0V3Du3RKuoECpwKOed8vl2MeIYuncQIDAQAB
o4ICVzCCAlMwHQYDVR0OBBYEFI0soGl6hRTawWBcUc8UstKq76GzMB8GA1UdIwQY
MBaAFFWI8Zf5fokAdVVE6BDN3vnZD7xBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVllqeGxfbC1pUUIxVlVUb0VNM2UtZGtQdkVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi82MjI5ODEtOTY1MC00MjcxLTkyY2Et
N2NmZWY0Mjc2YTBmLzEvalN5Z2FYcUZGTnJCWUZ4Unp4U3kwcXJ2b2JNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi82MjI5ODEtOTY1MC00MjcxLTkyY2EtN2NmZWY0Mjc2YTBm
LzEvVllqeGxfbC1pUUIxVlVUb0VNM2UtZGtQdkVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMG0GCCsGAQUFBwEHAQH/BF4wXDBaBAIAATBUAwQCLgMMAwQC
LgMUAwQALgMfMAwDBAMuAygDBAYuAwAwDAMEAC4DTQMEBC4DQDAMAwQCLgNUAwQA
LgNYAwQHLgOAAwQHLugAAwQEUPOAAwQGlX7AMA0GCSqGSIb3DQEBCwUAA4IBAQCP
DOepsa1ywA9sJ9MjZwyZj8IbVF974BSFVov/yoI6dgvXD/izAQCYVzh3bXn+Fld0
lscN2xTG5pC6nx29Ue1zGHupZGXEG8aGW/l+YQabWpxxWOEVtppfnFeqCN2dP4jD
wpgyqTTRa9Vx0O4D8iI3k+L/AoHSsUme9LBK9kLJsJEXwc9Y0E+3fC5/FHi3fS+p
Elk0iIDG4BIVo3QAKNKgAqtW2+KDJKuAGWXfBh+eppar2vseeI8LuT89HzD3XkPm
kYRhHgdsDKdpQdMy7uLw43PFgpIcAQF/e6wl5k9IrdM8QyvkPisZZf3NG5CZmo64
8dC/PtBs9dohraVVhr/r
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:02:11 2025 by rpki-client