Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/974c70-e13c-4699-b31b-7ac9e2ce4e33/1/TKaIIghuBjovehstBf-4yPQzWzs.roa
File: TKaIIghuBjovehstBf-4yPQzWzs.roa (raw, json)
Hash identifier: Y5l+50EAAN4J3BZwHmdWVnVvSIYr6cNnr7nr74LFy0Q=
Subject key identifier: 4C:A6:88:22:08:6E:06:3A:2F:7A:1B:2D:05:FF:B8:C8:F4:33:5B:3B
Certificate issuer: /CN=d7c475403fdd90381891e5a0c3266b478dd8ca35
Certificate serial: 0194282783AB39C14B358280E77737029D0A
Authority key identifier: D7:C4:75:40:3F:DD:90:38:18:91:E5:A0:C3:26:6B:47:8D:D8:CA:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/18R1QD_dkDgYkeWgwyZrR43YyjU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/974c70-e13c-4699-b31b-7ac9e2ce4e33/1/TKaIIghuBjovehstBf-4yPQzWzs.roa
Signing time: Thu 02 Jan 2025 17:54:25 +0000
ROA not before: Thu 02 Jan 2025 17:54:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50590
IP address blocks: 46.175.168.0/21 maxlen: 23
46.175.172.0/23 maxlen: 23
46.175.174.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:27:83:ab:39:c1:4b:35:82:80:e7:77:37:02:9d:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7c475403fdd90381891e5a0c3266b478dd8ca35
Validity
Not Before: Jan 2 17:54:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4ca68822086e063a2f7a1b2d05ffb8c8f4335b3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:8c:94:df:a7:bc:62:5a:22:79:c3:b1:88:dd:
e5:9e:3a:81:ee:01:96:14:f1:7e:a3:3a:77:60:c1:
d6:0a:e4:35:2e:c3:ea:ea:be:09:24:50:c3:d5:da:
8f:fc:e6:77:f5:93:fe:e3:09:96:a4:5f:ab:f5:df:
22:04:f2:d7:da:27:88:30:8d:50:7a:8a:cd:35:98:
b8:75:c4:08:9c:4a:32:df:d8:2d:70:b0:57:77:04:
21:cb:f3:c4:6c:2b:4c:04:d5:8b:8c:b4:ec:42:1e:
a4:1d:e7:04:8b:9e:ff:ad:6e:88:61:34:71:a2:be:
dd:e7:b5:d1:3d:09:ee:2d:98:0c:63:77:28:6c:ba:
38:46:f7:73:81:42:90:10:f3:17:c8:21:ae:19:5b:
f8:c0:dc:b0:ec:52:f1:ff:13:6b:24:0c:fd:62:8a:
d2:5f:8f:b7:5c:42:ba:ae:ee:c1:32:34:9b:0e:48:
2f:51:61:88:a1:16:04:d2:9c:98:bb:2a:d0:e5:a4:
51:4e:3c:ee:a9:6d:60:40:28:93:46:f7:9c:75:8c:
ec:cf:9c:23:ea:18:00:19:86:ac:d6:b2:ce:b7:02:
d9:2b:05:14:fd:c5:d8:0b:2b:9e:6b:56:08:d3:31:
78:96:af:7c:c3:23:8a:49:18:11:82:fc:49:b7:19:
0f:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:A6:88:22:08:6E:06:3A:2F:7A:1B:2D:05:FF:B8:C8:F4:33:5B:3B
X509v3 Authority Key Identifier:
keyid:D7:C4:75:40:3F:DD:90:38:18:91:E5:A0:C3:26:6B:47:8D:D8:CA:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/18R1QD_dkDgYkeWgwyZrR43YyjU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/974c70-e13c-4699-b31b-7ac9e2ce4e33/1/TKaIIghuBjovehstBf-4yPQzWzs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/974c70-e13c-4699-b31b-7ac9e2ce4e33/1/18R1QD_dkDgYkeWgwyZrR43YyjU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.175.168.0/21
Signature Algorithm: sha256WithRSAEncryption
76:2e:69:87:bb:fc:bc:d1:4a:ea:79:01:1e:29:d3:36:b0:61:
7c:a0:32:37:66:5e:1b:ec:3a:13:a8:9a:16:e2:d0:8f:4c:77:
47:92:0b:b2:f0:8c:42:f8:e5:b2:61:42:cc:de:4e:3d:82:71:
d4:38:3b:b7:37:d1:c7:31:b6:a8:d5:63:e9:ad:e1:7b:56:da:
3d:07:e7:cb:77:36:01:88:c1:01:fe:96:19:69:be:86:80:ed:
1f:52:91:c5:bd:74:70:01:1e:34:9e:4d:ae:b1:f1:35:a4:7c:
fe:db:3b:be:7e:fc:9e:23:f9:43:2c:f0:b6:40:d7:a3:e7:30:
32:6c:04:b7:ba:23:30:b8:38:d2:d6:95:3a:31:dc:9a:d2:85:
a5:4f:67:97:08:fa:b7:98:75:aa:3a:6f:f3:f9:b8:59:5d:77:
98:37:d8:39:41:87:90:27:e8:e1:35:4f:4c:09:82:67:ba:70:
a4:6b:bb:64:e9:1f:90:5b:55:53:8f:f6:4e:2b:11:c9:d6:70:
b1:cc:e6:2f:99:bd:71:bc:5e:ae:f5:77:9c:09:c0:a2:89:27:
c8:b0:a6:d4:5f:c3:52:24:b8:72:39:bd:7f:1c:f6:4e:29:08:
a2:59:fb:ef:04:e3:59:36:da:e4:59:ad:03:7e:4b:77:54:77:
df:a6:ba:bc
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQoJ4OrOcFLNYKA53c3Ap0KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3YzQ3NTQwM2ZkZDkwMzgxODkxZTVhMGMzMjY2YjQ3OGRk
OGNhMzUwHhcNMjUwMTAyMTc1NDI1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0Y2E2ODgyMjA4NmUwNjNhMmY3YTFiMmQwNWZmYjhjOGY0MzM1YjNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt4yU36e8YloiecOxiN3lnjqB7gGW
FPF+ozp3YMHWCuQ1LsPq6r4JJFDD1dqP/OZ39ZP+4wmWpF+r9d8iBPLX2ieIMI1Q
eorNNZi4dcQInEoy39gtcLBXdwQhy/PEbCtMBNWLjLTsQh6kHecEi57/rW6IYTRx
or7d57XRPQnuLZgMY3cobLo4RvdzgUKQEPMXyCGuGVv4wNyw7FLx/xNrJAz9YorS
X4+3XEK6ru7BMjSbDkgvUWGIoRYE0pyYuyrQ5aRRTjzuqW1gQCiTRvecdYzsz5wj
6hgAGYas1rLOtwLZKwUU/cXYCyuea1YI0zF4lq98wyOKSRgRgvxJtxkPMwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEymiCIIbgY6L3obLQX/uMj0M1s7MB8GA1UdIwQY
MBaAFNfEdUA/3ZA4GJHloMMma0eN2Mo1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMThSMVFEX2RrRGdZa2VXZ3d5WnJSNDNZeWpVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi85NzRjNzAtZTEzYy00Njk5LWIzMWIt
N2FjOWUyY2U0ZTMzLzEvVEthSUlnaHVCam92ZWhzdEJmLTR5UFF6V3pzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNi85NzRjNzAtZTEzYy00Njk5LWIzMWItN2FjOWUyY2U0ZTMz
LzEvMThSMVFEX2RrRGdZa2VXZ3d5WnJSNDNZeWpVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDLq+oMA0G
CSqGSIb3DQEBCwUAA4IBAQB2LmmHu/y80UrqeQEeKdM2sGF8oDI3Zl4b7DoTqJoW
4tCPTHdHkguy8IxC+OWyYULM3k49gnHUODu3N9HHMbao1WPpreF7Vto9B+fLdzYB
iMEB/pYZab6GgO0fUpHFvXRwAR40nk2usfE1pHz+2zu+fvyeI/lDLPC2QNej5zAy
bAS3uiMwuDjS1pU6Mdya0oWlT2eXCPq3mHWqOm/z+bhZXXeYN9g5QYeQJ+jhNU9M
CYJnunCka7tk6R+QW1VTj/ZOKxHJ1nCxzOYvmb1xvF6u9XecCcCiiSfIsKbUX8NS
JLhyOb1/HPZOKQiiWfvvBONZNtrkWa0Dfkt3VHffprq8
-----END CERTIFICATE-----
Generated at Thu Feb 20 03:14:08 2025 by rpki-client