Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/kWYpowFMqhQhNrDMwIMgRgfqAMM.roa
File: kWYpowFMqhQhNrDMwIMgRgfqAMM.roa (raw, json)
Hash identifier: eqDYT4jGyAM/v/VcZlkXyVnNtk8IUxyrR1cgUnby70U=
Subject key identifier: 91:66:29:A3:01:4C:AA:14:21:36:B0:CC:C0:83:20:46:07:EA:00:C3
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 01942369F6ADA6073B63E7340018518592CF
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/kWYpowFMqhQhNrDMwIMgRgfqAMM.roa
Signing time: Wed 01 Jan 2025 19:48:54 +0000
ROA not before: Wed 01 Jan 2025 19:48:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209372
IP address blocks: 46.3.10.0/24 maxlen: 24
46.3.11.0/24 maxlen: 24
46.3.12.0/22 maxlen: 24
46.3.20.0/22 maxlen: 24
46.3.31.0/24 maxlen: 24
46.3.48.0/20 maxlen: 24
46.3.76.0/24 maxlen: 24
46.3.77.0/24 maxlen: 24
46.3.78.0/24 maxlen: 24
46.3.79.0/24 maxlen: 24
46.3.84.0/22 maxlen: 24
46.3.84.0/24 maxlen: 24
46.3.86.0/24 maxlen: 24
46.3.87.0/24 maxlen: 24
46.3.88.0/24 maxlen: 24
46.3.116.0/24 maxlen: 24
46.3.128.0/17 maxlen: 24
46.3.135.0/24 maxlen: 24
46.3.136.0/22 maxlen: 22
46.3.144.0/22 maxlen: 22
46.3.148.0/22 maxlen: 22
46.3.152.0/24 maxlen: 24
46.3.153.0/24 maxlen: 24
46.3.154.0/24 maxlen: 24
46.3.155.0/24 maxlen: 24
46.3.156.0/24 maxlen: 24
46.3.157.0/24 maxlen: 24
46.3.158.0/24 maxlen: 24
46.3.159.0/24 maxlen: 24
46.3.164.0/23 maxlen: 23
46.3.166.0/23 maxlen: 23
46.3.168.0/21 maxlen: 24
46.3.205.0/24 maxlen: 24
46.3.232.0/22 maxlen: 22
46.3.238.0/24 maxlen: 24
46.3.239.0/24 maxlen: 24
46.232.0.0/17 maxlen: 24
46.232.21.0/24 maxlen: 24
46.232.22.0/24 maxlen: 24
46.232.23.0/24 maxlen: 24
46.232.112.0/23 maxlen: 23
46.232.114.0/23 maxlen: 23
80.243.128.0/20 maxlen: 24
149.126.192.0/18 maxlen: 24
149.126.213.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:f6:ad:a6:07:3b:63:e7:34:00:18:51:85:92:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: Jan 1 19:48:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=916629a3014caa142136b0ccc083204607ea00c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ba:3d:bf:e8:f2:11:c3:eb:fe:44:f3:09:4e:
c2:a2:c9:27:a2:2a:e1:59:cd:0d:9d:80:43:35:d6:
92:44:50:ec:90:7a:5c:1e:38:21:03:a4:05:04:df:
a8:d8:84:b5:8d:58:0a:bc:43:35:d5:04:bb:91:6d:
af:95:c5:17:14:fd:9b:57:98:01:dd:fb:bf:43:d6:
7a:10:10:10:cd:3a:c1:77:6a:9c:8b:62:db:9c:f9:
49:77:c6:9d:01:b0:bd:44:70:fa:67:f6:9b:39:18:
42:fb:da:b0:ab:74:04:a9:0e:50:2e:d5:82:d1:cf:
63:fa:0f:8b:2c:e7:ff:d7:09:f6:6f:c6:37:5d:b4:
47:40:50:6e:8d:c1:7d:0b:a5:66:e8:85:4d:89:f3:
dd:c5:07:36:9f:7d:98:ce:74:30:d0:f4:c8:ed:80:
66:a9:b1:6e:8b:83:67:1c:e0:43:bd:be:b2:47:ff:
a4:72:76:4b:c9:49:19:7e:9c:45:ed:ec:19:e2:7a:
4e:a3:56:ce:a3:0e:f5:f0:96:19:ae:57:59:ae:5d:
b7:16:dd:a2:67:87:27:da:24:83:d1:86:49:07:66:
f3:d5:10:5b:48:2e:a7:e4:d5:5d:6f:1d:d4:0d:d4:
5b:35:70:33:8f:53:f0:1b:b1:97:a6:40:27:ee:f0:
46:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:66:29:A3:01:4C:AA:14:21:36:B0:CC:C0:83:20:46:07:EA:00:C3
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/kWYpowFMqhQhNrDMwIMgRgfqAMM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.3.10.0-46.3.15.255
46.3.20.0/22
46.3.31.0/24
46.3.48.0/20
46.3.76.0/22
46.3.84.0-46.3.88.255
46.3.116.0/24
46.3.128.0/17
46.232.0.0/17
80.243.128.0/20
149.126.192.0/18
Signature Algorithm: sha256WithRSAEncryption
27:5a:74:3c:d6:7d:f6:01:77:2f:c2:85:1c:ae:c5:e6:f0:d5:
2d:5f:8c:af:d7:a4:f7:10:d9:68:24:a0:a0:98:5e:fd:67:bd:
42:b4:d7:90:89:48:c1:e8:6f:32:95:d3:ae:e5:20:f1:53:77:
be:6b:67:e4:63:15:8d:29:11:e2:d5:91:70:96:99:90:fa:fe:
9c:d2:2c:86:ac:1b:10:ef:f0:0d:39:73:2e:cf:20:0e:1a:e4:
0a:ce:3f:51:8e:c9:c9:5c:cd:e9:c7:88:30:bc:9a:e2:7d:7c:
1b:d4:1e:74:e5:d3:6e:fd:ea:2a:e2:b2:6b:59:53:9f:de:df:
51:a2:c4:42:a7:da:66:cb:dc:3d:3e:8c:9a:46:63:ff:09:fb:
dc:ad:24:fc:18:a8:26:53:52:74:80:12:c5:32:7c:6b:ac:c5:
0f:ee:14:ea:e9:5d:9c:76:4f:87:c9:46:87:e5:dc:bf:a3:76:
06:be:ce:12:c0:78:fb:d6:5d:b7:ab:bb:ac:b1:8b:66:3e:40:
dc:ea:1d:10:67:9d:46:75:3d:f9:e2:68:f5:d5:ec:29:dd:e3:
ef:f8:e7:ee:c3:2d:c5:d7:84:d0:b4:a3:c6:56:0d:4b:b6:c0:
4e:c5:b3:af:eb:14:f8:c7:58:f6:1c:a2:3d:af:fb:f6:7f:18:
ab:2d:78:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:08:49 2025 by rpki-client