Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/ySGM40xeAZyu32ERIMnkJoio4hw.roa
File: ySGM40xeAZyu32ERIMnkJoio4hw.roa (raw, json)
Hash identifier: w5mMTd2fQSF1PurNOaDTdU1aGhD+Vitko+NZO/EWYYQ=
Subject key identifier: C9:21:8C:E3:4C:5E:01:9C:AE:DF:61:11:20:C9:E4:26:88:A8:E2:1C
Certificate issuer: /CN=8e626c909eb4951154bcee8221e43951b4257624
Certificate serial: 0194282587B16C174F6E251417FAA1F5299A
Authority key identifier: 8E:62:6C:90:9E:B4:95:11:54:BC:EE:82:21:E4:39:51:B4:25:76:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jmJskJ60lRFUvO6CIeQ5UbQldiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/ySGM40xeAZyu32ERIMnkJoio4hw.roa
Signing time: Thu 02 Jan 2025 17:52:15 +0000
ROA not before: Thu 02 Jan 2025 17:52:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8038
IP address blocks: 46.244.20.0/24 maxlen: 24
178.249.157.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:25:87:b1:6c:17:4f:6e:25:14:17:fa:a1:f5:29:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e626c909eb4951154bcee8221e43951b4257624
Validity
Not Before: Jan 2 17:52:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c9218ce34c5e019caedf611120c9e42688a8e21c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ad:93:e1:78:c4:a5:5c:32:4f:22:08:bb:1a:
48:1b:fc:3a:dd:d9:88:f0:ce:06:1b:b4:0a:41:31:
68:2d:2d:c7:eb:21:c0:73:8a:74:e9:e4:5c:2b:e3:
e2:75:94:a8:a0:5e:91:38:88:77:22:73:64:60:be:
dd:98:45:99:11:cb:3d:9e:07:81:f7:6c:c3:89:41:
ae:08:f0:e1:c1:6e:5a:5c:80:6f:84:03:12:21:b6:
53:bc:af:eb:f4:95:54:53:00:d7:df:db:61:8c:74:
9c:fc:58:5f:6e:5e:31:2e:29:6c:b5:2d:55:61:43:
8c:99:a8:a4:f1:1e:64:13:f0:51:01:95:59:a1:ff:
35:d7:f4:37:4e:76:e3:b2:10:08:09:f7:e1:33:e9:
60:22:16:9b:24:2e:4b:f1:e2:c3:0c:f4:fc:bb:7e:
36:86:be:58:c5:04:74:d9:c8:9b:c1:2f:c6:84:19:
8c:b9:7e:43:26:2e:d7:54:52:6a:ac:4e:2e:6b:92:
dd:ca:f7:da:5f:90:0d:d1:03:5d:7f:81:8b:06:8c:
64:8f:1d:a2:4e:7a:8b:1d:b9:a2:6e:90:df:a2:a6:
89:12:23:4c:6a:2f:6e:96:70:c6:3f:7b:4b:41:32:
e0:cd:5c:56:40:62:d4:60:4b:a4:74:81:00:52:62:
af:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:21:8C:E3:4C:5E:01:9C:AE:DF:61:11:20:C9:E4:26:88:A8:E2:1C
X509v3 Authority Key Identifier:
keyid:8E:62:6C:90:9E:B4:95:11:54:BC:EE:82:21:E4:39:51:B4:25:76:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jmJskJ60lRFUvO6CIeQ5UbQldiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/ySGM40xeAZyu32ERIMnkJoio4hw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/jmJskJ60lRFUvO6CIeQ5UbQldiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.244.20.0/24
178.249.157.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:e6:32:e0:46:cd:ed:27:0a:44:10:41:d9:77:05:eb:f0:5a:
61:8e:57:75:1c:11:fc:4a:12:b8:15:37:6c:88:17:19:e3:16:
73:25:a0:6f:aa:59:d0:c0:ae:1d:22:97:bf:b2:04:3b:8b:9d:
11:57:4a:f0:83:99:d4:79:ad:09:dc:dc:f9:cc:be:e3:3d:c7:
e3:ed:b0:72:94:02:df:ea:2d:18:19:db:10:cf:03:31:bd:ff:
c9:8f:0c:58:82:91:d7:80:88:e2:76:ad:4d:2c:1f:c7:f1:ba:
c0:48:f5:14:5e:b3:28:83:5a:82:b8:bc:25:af:b5:42:1b:3f:
9f:ed:f8:79:66:93:3f:01:63:58:37:35:6b:09:cd:83:76:1b:
95:30:a2:03:2c:37:7d:5c:99:c7:5f:97:4c:cc:9a:51:83:f7:
db:3c:ca:41:5f:25:95:01:b6:ad:b9:7a:eb:c3:ba:ee:22:ff:
e6:62:46:46:af:18:c9:e7:56:37:70:d9:c3:53:16:00:86:ba:
54:2f:a9:e5:f2:76:46:06:f9:a3:a7:19:8e:f6:5b:f0:ae:77:
82:51:2e:96:0e:47:a7:86:bf:be:c2:5e:41:6f:1f:9e:e2:83:
a8:08:d7:0e:0b:9c:49:b3:9f:e2:56:36:aa:2b:d8:a8:8f:23:
03:82:4f:f9
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQoJYexbBdPbiUUF/qh9SmaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlNjI2YzkwOWViNDk1MTE1NGJjZWU4MjIxZTQzOTUxYjQy
NTc2MjQwHhcNMjUwMTAyMTc1MjE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjOTIxOGNlMzRjNWUwMTljYWVkZjYxMTEyMGM5ZTQyNjg4YThlMjFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqa2T4XjEpVwyTyIIuxpIG/w63dmI
8M4GG7QKQTFoLS3H6yHAc4p06eRcK+PidZSooF6ROIh3InNkYL7dmEWZEcs9ngeB
92zDiUGuCPDhwW5aXIBvhAMSIbZTvK/r9JVUUwDX39thjHSc/Fhfbl4xLilstS1V
YUOMmaik8R5kE/BRAZVZof811/Q3TnbjshAICffhM+lgIhabJC5L8eLDDPT8u342
hr5YxQR02cibwS/GhBmMuX5DJi7XVFJqrE4ua5LdyvfaX5AN0QNdf4GLBoxkjx2i
TnqLHbmibpDfoqaJEiNMai9ulnDGP3tLQTLgzVxWQGLUYEukdIEAUmKvqwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFMkhjONMXgGcrt9hESDJ5CaIqOIcMB8GA1UdIwQY
MBaAFI5ibJCetJURVLzugiHkOVG0JXYkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvam1Kc2tKNjBsUkZVdk82Q0llUTVVYlFsZGlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9mZTQyNjYtN2Y1NC00ZmIzLWI4MTAt
ZTk3ZDFkMDIyMGFmLzEveVNHTTQweGVBWnl1MzJFUklNbmtKb2lvNGh3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS9mZTQyNjYtN2Y1NC00ZmIzLWI4MTAtZTk3ZDFkMDIyMGFm
LzEvam1Kc2tKNjBsUkZVdk82Q0llUTVVYlFsZGlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALvQUAwQA
svmdMA0GCSqGSIb3DQEBCwUAA4IBAQA+5jLgRs3tJwpEEEHZdwXr8Fphjld1HBH8
ShK4FTdsiBcZ4xZzJaBvqlnQwK4dIpe/sgQ7i50RV0rwg5nUea0J3Nz5zL7jPcfj
7bBylALf6i0YGdsQzwMxvf/JjwxYgpHXgIjidq1NLB/H8brASPUUXrMog1qCuLwl
r7VCGz+f7fh5ZpM/AWNYNzVrCc2DdhuVMKIDLDd9XJnHX5dMzJpRg/fbPMpBXyWV
AbatuXrrw7ruIv/mYkZGrxjJ51Y3cNnDUxYAhrpUL6nl8nZGBvmjpxmO9lvwrneC
US6WDkenhr++wl5Bbx+e4oOoCNcOC5xJs5/iVjaqK9iojyMDgk/5
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:37:52 2025 by rpki-client