Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/45d7d9-3927-4b27-8fac-180fe61d18e4/1/2N61Ap4M14nYH8ky9L2tzVFgL-A.roa
File: 2N61Ap4M14nYH8ky9L2tzVFgL-A.roa (raw, json)
Hash identifier: UaN5pz1OK339+z2wIN/K5lqCBCfDvJ9frIU0LWMI0t8=
Subject key identifier: D8:DE:B5:02:9E:0C:D7:89:D8:1F:C9:32:F4:BD:AD:CD:51:60:2F:E0
Certificate issuer: /CN=1314ce416c5ca85313c90eb4eb629663394fe866
Certificate serial: 01856BCA2EDE3C6986A30B83F5040CCC4577
Authority key identifier: 13:14:CE:41:6C:5C:A8:53:13:C9:0E:B4:EB:62:96:63:39:4F:E8:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ExTOQWxcqFMTyQ6062KWYzlP6GY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/45d7d9-3927-4b27-8fac-180fe61d18e4/1/2N61Ap4M14nYH8ky9L2tzVFgL-A.roa
Signing time: Sun 01 Jan 2023 05:24:50 +0000
ROA not before: Sun 01 Jan 2023 05:24:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203020
IP address blocks: 46.254.105.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:ca:2e:de:3c:69:86:a3:0b:83:f5:04:0c:cc:45:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1314ce416c5ca85313c90eb4eb629663394fe866
Validity
Not Before: Jan 1 05:24:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d8deb5029e0cd789d81fc932f4bdadcd51602fe0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:59:28:28:8c:cd:15:83:eb:b8:72:19:0d:98:
43:14:ce:07:c5:f1:24:8b:c1:8c:ba:34:e4:41:92:
9c:db:8b:14:e4:31:17:1f:40:83:72:17:b0:13:13:
42:15:b7:d2:9c:a4:f5:7a:3f:f9:6b:95:f4:35:e3:
e1:d6:6f:1d:6b:51:ee:99:c9:73:b5:d2:30:85:14:
06:2b:bf:f1:a9:89:0d:aa:b9:7f:75:71:a0:90:c4:
80:fe:a6:c9:04:ad:b1:8d:a1:ce:4f:84:aa:08:5b:
a7:51:40:1d:0a:57:b0:62:74:f3:05:f3:0b:db:40:
ff:bb:6a:b5:7f:cc:44:cb:22:ce:6e:f8:f0:90:6f:
68:10:b0:01:7c:87:8c:b3:08:39:3a:ff:02:8d:b2:
bf:78:6c:1b:a4:45:8f:d0:38:4f:dd:14:e2:32:b3:
ae:72:be:97:04:fb:e6:6d:20:21:c5:4d:75:a4:ea:
6d:ea:46:d8:a3:1a:a8:2b:dd:21:d2:25:cf:cb:11:
7d:81:ff:7f:55:b1:47:54:e2:a8:4b:46:a4:02:5b:
65:99:83:0a:c8:55:39:69:3d:46:ce:fc:b8:d1:cb:
a8:af:d9:da:46:33:a3:04:cb:6b:6f:ad:1d:40:a4:
f7:58:0b:56:27:06:89:a6:77:b4:f4:80:76:67:01:
55:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:DE:B5:02:9E:0C:D7:89:D8:1F:C9:32:F4:BD:AD:CD:51:60:2F:E0
X509v3 Authority Key Identifier:
keyid:13:14:CE:41:6C:5C:A8:53:13:C9:0E:B4:EB:62:96:63:39:4F:E8:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ExTOQWxcqFMTyQ6062KWYzlP6GY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/45d7d9-3927-4b27-8fac-180fe61d18e4/1/2N61Ap4M14nYH8ky9L2tzVFgL-A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/45d7d9-3927-4b27-8fac-180fe61d18e4/1/ExTOQWxcqFMTyQ6062KWYzlP6GY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.254.105.0/24
Signature Algorithm: sha256WithRSAEncryption
36:6f:ac:2e:fd:ed:8a:08:90:32:57:b0:34:01:98:20:af:44:
c1:63:33:1c:9e:c2:0b:4d:4e:c8:a5:79:89:dc:ff:d1:d8:25:
3f:9e:76:ee:01:33:84:b0:90:26:e5:a6:75:6f:f4:f5:9c:f7:
2f:d5:1d:32:a7:50:fd:b5:1b:ba:ad:72:59:cd:e0:ba:e3:b6:
24:73:0a:a6:76:7c:ba:ce:08:fe:92:e7:c8:64:31:e1:18:85:
7e:e0:1f:f3:8c:29:bb:09:ca:ac:4d:7a:8d:d8:37:27:9b:bf:
6a:26:08:90:5a:5e:df:85:cd:8e:2b:26:b2:01:b1:27:18:13:
d4:11:94:7a:54:1f:64:11:18:31:c2:48:a6:ff:9d:16:c6:c7:
4d:4b:8e:1a:f8:a0:1a:05:3c:13:13:26:ba:88:37:d0:ff:7b:
4a:81:7d:01:46:db:85:e8:ee:a8:8b:9b:de:19:49:44:7d:af:
de:26:53:65:bb:ba:c9:8d:7a:a9:29:9d:36:d0:d0:c6:6e:b9:
5c:32:6e:7c:7f:6c:d0:ef:58:eb:29:da:83:74:68:30:d7:8d:
2b:54:f0:1d:ea:6b:87:75:ce:20:a7:7d:bd:91:6f:b6:f5:4a:
f5:bd:37:9b:2e:58:f8:18:09:70:40:fb:1d:8f:e3:ec:07:25:
ca:ca:50:dd
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVryi7ePGmGowuD9QQMzEV3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzMTRjZTQxNmM1Y2E4NTMxM2M5MGViNGViNjI5NjYzMzk0
ZmU4NjYwHhcNMjMwMTAxMDUyNDUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkOGRlYjUwMjllMGNkNzg5ZDgxZmM5MzJmNGJkYWRjZDUxNjAyZmUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvlkoKIzNFYPruHIZDZhDFM4HxfEk
i8GMujTkQZKc24sU5DEXH0CDchewExNCFbfSnKT1ej/5a5X0NePh1m8da1Humclz
tdIwhRQGK7/xqYkNqrl/dXGgkMSA/qbJBK2xjaHOT4SqCFunUUAdClewYnTzBfML
20D/u2q1f8xEyyLObvjwkG9oELABfIeMswg5Ov8CjbK/eGwbpEWP0DhP3RTiMrOu
cr6XBPvmbSAhxU11pOpt6kbYoxqoK90h0iXPyxF9gf9/VbFHVOKoS0akAltlmYMK
yFU5aT1Gzvy40cuor9naRjOjBMtrb60dQKT3WAtWJwaJpne09IB2ZwFVzQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNjetQKeDNeJ2B/JMvS9rc1RYC/gMB8GA1UdIwQY
MBaAFBMUzkFsXKhTE8kOtOtilmM5T+hmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRXhUT1FXeGNxRk1UeVE2MDYyS1dZemxQNkdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy80NWQ3ZDktMzkyNy00YjI3LThmYWMt
MTgwZmU2MWQxOGU0LzEvMk42MUFwNE0xNG5ZSDhreTlMMnR6VkZnTC1BLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy80NWQ3ZDktMzkyNy00YjI3LThmYWMtMTgwZmU2MWQxOGU0
LzEvRXhUT1FXeGNxRk1UeVE2MDYyS1dZemxQNkdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALv5pMA0G
CSqGSIb3DQEBCwUAA4IBAQA2b6wu/e2KCJAyV7A0AZggr0TBYzMcnsILTU7IpXmJ
3P/R2CU/nnbuATOEsJAm5aZ1b/T1nPcv1R0yp1D9tRu6rXJZzeC647Ykcwqmdny6
zgj+kufIZDHhGIV+4B/zjCm7CcqsTXqN2Dcnm79qJgiQWl7fhc2OKyayAbEnGBPU
EZR6VB9kERgxwkim/50WxsdNS44a+KAaBTwTEya6iDfQ/3tKgX0BRtuF6O6oi5ve
GUlEfa/eJlNlu7rJjXqpKZ020NDGbrlcMm58f2zQ71jrKdqDdGgw140rVPAd6muH
dc4gp329kW+29Ur1vTebLlj4GAlwQPsdj+PsByXKylDd
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:25:32 2025 by rpki-client