Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/o7MjraS3HejfdP_C0YdRMW-3RkM.roa
File: o7MjraS3HejfdP_C0YdRMW-3RkM.roa (raw, json)
Hash identifier: tcslmqgrxXrg0+8U/Xj7mPVLpjbTxVQX20vs2wU6eEg=
Subject key identifier: A3:B3:23:AD:A4:B7:1D:E8:DF:74:FF:C2:D1:87:51:31:6F:B7:46:43
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 01942369F0E048989A3CC69EA96A4C0FFCF1
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/o7MjraS3HejfdP_C0YdRMW-3RkM.roa
Signing time: Wed 01 Jan 2025 19:48:52 +0000
ROA not before: Wed 01 Jan 2025 19:48:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 54197
IP address blocks: 46.3.80.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:f0:e0:48:98:9a:3c:c6:9e:a9:6a:4c:0f:fc:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: Jan 1 19:48:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a3b323ada4b71de8df74ffc2d18751316fb74643
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:62:61:b0:3f:9d:54:72:f2:56:be:fc:26:38:
1a:df:cf:a6:d9:e8:24:1b:fb:7a:36:8e:f3:28:98:
79:04:2d:68:9a:a0:6e:2e:fc:7c:1c:23:e0:10:68:
58:4e:d0:df:90:fd:cb:63:a7:5d:8e:e1:c4:9d:dc:
93:8e:ee:e5:60:37:6d:d7:90:da:74:c6:82:05:74:
2a:9f:1d:85:a4:55:3c:b2:fb:7d:61:b4:ea:56:d3:
5a:2a:25:f0:c6:bf:e4:f8:07:c6:45:88:7b:69:25:
9f:47:33:7f:46:86:b4:6e:c2:f4:53:b7:4d:bc:73:
4c:24:88:f0:b3:aa:54:a5:80:97:ea:14:70:cf:04:
80:b3:90:d7:09:5d:05:bc:b5:f2:a7:af:04:6e:69:
a4:60:df:0f:e9:cd:f0:94:e9:77:3f:d3:96:aa:e1:
e7:b0:4a:78:0b:4a:87:a7:c1:86:98:94:bc:78:c9:
6a:19:38:1a:3c:03:77:6e:cc:d9:9b:41:6f:c4:07:
a8:e2:af:ef:ec:d6:58:41:a5:d4:2c:12:df:51:35:
21:e7:38:1e:3a:ae:74:b0:a5:3b:82:e7:b1:df:0a:
9a:da:36:52:ee:01:5b:4b:e4:93:da:e6:da:75:1b:
58:3a:8b:11:ee:d3:17:05:2d:67:7f:00:e9:b4:69:
4f:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:B3:23:AD:A4:B7:1D:E8:DF:74:FF:C2:D1:87:51:31:6F:B7:46:43
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/o7MjraS3HejfdP_C0YdRMW-3RkM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.3.80.0/22
Signature Algorithm: sha256WithRSAEncryption
4f:f1:a4:ae:2f:5c:13:23:ac:d2:e4:38:18:d3:98:55:0d:cf:
cc:8c:93:29:45:71:ce:bc:d4:d9:db:7e:93:04:b7:69:96:36:
ec:92:88:f4:36:e9:07:6d:28:0b:16:05:8e:d1:05:aa:d3:7b:
03:36:95:b0:09:31:9b:35:23:c0:b9:84:af:e8:f5:d4:e4:45:
69:e1:5a:0a:e1:8a:6b:52:dc:8b:c4:3c:82:8c:b2:2c:4e:b7:
b3:7b:8e:00:db:13:8e:0e:b4:73:89:7b:99:17:c0:b4:44:fc:
79:2f:ed:af:38:00:7e:ca:7b:27:b4:62:41:3d:bc:ea:52:3d:
3e:14:ff:5a:68:ac:ff:c7:2c:3a:c5:46:a9:d2:97:fe:08:9c:
c0:44:8f:ab:80:e9:a8:57:51:72:b5:33:a0:b4:65:3e:ea:b9:
0b:9a:a1:97:e0:2e:33:9b:35:22:25:6a:52:30:d2:28:ef:f6:
93:7f:7a:99:27:13:e7:6a:d5:1a:c1:69:1e:62:86:20:64:06:
99:89:a3:22:2d:24:7a:1f:be:64:b8:f1:2f:40:e5:71:99:11:
a1:d4:a3:82:c4:46:71:d4:c9:9d:0f:ff:82:03:04:3e:cb:d5:
43:70:45:b0:ad:f0:63:db:67:76:cc:dc:f6:e6:99:7f:f1:1e:
8b:99:a1:a5
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQjafDgSJiaPMaeqWpMD/zxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1ODhmMTk3Zjk3ZTg5MDA3NTU1NDRlODEwY2RkZWY5ZDkw
ZmJjNDEwHhcNMjUwMTAxMTk0ODUyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhM2IzMjNhZGE0YjcxZGU4ZGY3NGZmYzJkMTg3NTEzMTZmYjc0NjQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs2JhsD+dVHLyVr78Jjga38+m2egk
G/t6No7zKJh5BC1omqBuLvx8HCPgEGhYTtDfkP3LY6ddjuHEndyTju7lYDdt15Da
dMaCBXQqnx2FpFU8svt9YbTqVtNaKiXwxr/k+AfGRYh7aSWfRzN/Roa0bsL0U7dN
vHNMJIjws6pUpYCX6hRwzwSAs5DXCV0FvLXyp68EbmmkYN8P6c3wlOl3P9OWquHn
sEp4C0qHp8GGmJS8eMlqGTgaPAN3bszZm0FvxAeo4q/v7NZYQaXULBLfUTUh5zge
Oq50sKU7guex3wqa2jZS7gFbS+ST2ubadRtYOosR7tMXBS1nfwDptGlPAwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKOzI62ktx3o33T/wtGHUTFvt0ZDMB8GA1UdIwQY
MBaAFFWI8Zf5fokAdVVE6BDN3vnZD7xBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVllqeGxfbC1pUUIxVlVUb0VNM2UtZGtQdkVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi82MjI5ODEtOTY1MC00MjcxLTkyY2Et
N2NmZWY0Mjc2YTBmLzEvbzdNanJhUzNIZWpmZFBfQzBZZFJNVy0zUmtNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi82MjI5ODEtOTY1MC00MjcxLTkyY2EtN2NmZWY0Mjc2YTBm
LzEvVllqeGxfbC1pUUIxVlVUb0VNM2UtZGtQdkVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLgNQMA0G
CSqGSIb3DQEBCwUAA4IBAQBP8aSuL1wTI6zS5DgY05hVDc/MjJMpRXHOvNTZ236T
BLdpljbskoj0NukHbSgLFgWO0QWq03sDNpWwCTGbNSPAuYSv6PXU5EVp4VoK4Ypr
UtyLxDyCjLIsTreze44A2xOODrRziXuZF8C0RPx5L+2vOAB+ynsntGJBPbzqUj0+
FP9aaKz/xyw6xUap0pf+CJzARI+rgOmoV1FytTOgtGU+6rkLmqGX4C4zmzUiJWpS
MNIo7/aTf3qZJxPnatUawWkeYoYgZAaZiaMiLSR6H75kuPEvQOVxmRGh1KOCxEZx
1MmdD/+CAwQ+y9VDcEWwrfBj22d2zNz25pl/8R6LmaGl
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:00:58 2025 by rpki-client