Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/a183ef-ab60-4d59-b5dd-9ae5db28c7e2/1/oicsq9HPO9N5uORO5G0ll-Ngkz8.roa
File: oicsq9HPO9N5uORO5G0ll-Ngkz8.roa (raw, json)
Hash identifier: NSF4G8XJyB9sWXIFtBmVhfuE5M49sdph8Zy0pbsHtwU=
Subject key identifier: A2:27:2C:AB:D1:CF:3B:D3:79:B8:E4:4E:E4:6D:25:97:E3:60:93:3F
Certificate issuer: /CN=9fe8f68fd828704e8d70796c783327dcde9b0c8e
Certificate serial: 0184A10341BBFE61050F0738289F6EF7169B
Authority key identifier: 9F:E8:F6:8F:D8:28:70:4E:8D:70:79:6C:78:33:27:DC:DE:9B:0C:8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n-j2j9gocE6NcHlseDMn3N6bDI4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/a183ef-ab60-4d59-b5dd-9ae5db28c7e2/1/oicsq9HPO9N5uORO5G0ll-Ngkz8.roa
Signing time: Tue 22 Nov 2022 20:24:15 +0000
ROA not before: Tue 22 Nov 2022 20:24:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 56681
IP address blocks: 46.229.240.0/24 maxlen: 24
46.229.246.0/24 maxlen: 24
46.229.245.0/24 maxlen: 24
46.229.243.0/24 maxlen: 24
46.229.244.0/24 maxlen: 24
46.229.241.0/24 maxlen: 24
46.229.242.0/24 maxlen: 24
46.229.253.0/24 maxlen: 24
46.229.247.0/24 maxlen: 24
46.229.252.0/24 maxlen: 24
46.229.250.0/24 maxlen: 24
46.229.251.0/24 maxlen: 24
46.229.248.0/24 maxlen: 24
46.229.249.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:a1:03:41:bb:fe:61:05:0f:07:38:28:9f:6e:f7:16:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fe8f68fd828704e8d70796c783327dcde9b0c8e
Validity
Not Before: Nov 22 20:24:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a2272cabd1cf3bd379b8e44ee46d2597e360933f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:14:c3:0c:8e:38:48:04:dc:c9:3e:f4:25:cd:
3d:36:e6:86:c3:0c:c0:f1:28:de:e9:79:bf:2e:7b:
2a:ca:73:da:b0:69:d6:4a:cd:9b:2d:d6:0c:ba:b4:
8f:2b:dd:65:b4:f5:16:76:18:f9:c1:2f:3d:e7:7c:
ef:92:73:53:42:e8:cf:b0:52:0d:ab:4e:bf:7b:61:
e0:3c:9b:0f:03:65:bc:0d:f1:5a:6d:c6:34:75:76:
a5:33:9d:34:b3:1a:ec:af:8b:8a:da:9a:fa:af:36:
65:e1:ab:90:a1:2e:53:72:93:96:53:8c:10:5d:93:
82:8b:67:10:aa:d4:6d:d4:7e:74:c6:9d:63:a5:9e:
ca:02:73:08:0b:9f:d2:e5:da:f2:21:9b:17:ca:f0:
d3:0b:0a:f8:9a:6c:36:63:c3:f1:08:9d:fc:bc:f8:
bb:b1:a4:13:0c:d6:db:14:a1:d8:d3:6d:4e:d5:07:
8d:45:47:0a:4b:24:ad:03:d2:08:e3:bd:22:39:25:
88:61:40:c8:74:92:d4:bb:fa:58:44:34:23:d2:7b:
bb:1e:02:53:f1:f2:cc:e4:3a:34:31:e8:25:43:5f:
44:7f:6e:13:e2:24:30:8c:23:71:d9:62:d3:74:82:
c3:96:b0:cc:e9:4d:d2:c3:67:71:ab:9f:02:58:b3:
6a:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:27:2C:AB:D1:CF:3B:D3:79:B8:E4:4E:E4:6D:25:97:E3:60:93:3F
X509v3 Authority Key Identifier:
keyid:9F:E8:F6:8F:D8:28:70:4E:8D:70:79:6C:78:33:27:DC:DE:9B:0C:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n-j2j9gocE6NcHlseDMn3N6bDI4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/a183ef-ab60-4d59-b5dd-9ae5db28c7e2/1/oicsq9HPO9N5uORO5G0ll-Ngkz8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/a183ef-ab60-4d59-b5dd-9ae5db28c7e2/1/n-j2j9gocE6NcHlseDMn3N6bDI4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.229.240.0-46.229.253.255
Signature Algorithm: sha256WithRSAEncryption
24:56:e1:f7:f3:4d:35:18:15:e3:a2:36:9e:fa:34:8d:c1:4f:
2c:63:0d:6f:e1:b0:29:12:7d:b6:48:d4:0c:7b:40:62:32:dd:
16:ef:83:26:0b:4e:86:06:6b:b3:db:c3:57:aa:ab:6b:3e:88:
85:07:99:ac:c7:77:ef:b4:6e:a6:37:a0:1b:f5:4c:79:26:f2:
fe:c0:2b:b2:6a:7f:54:cd:81:d7:00:05:93:cc:0d:77:cb:ae:
52:41:6c:1c:26:6a:08:8d:4c:04:6f:59:fa:f8:51:77:8f:af:
2e:dd:27:70:4c:65:cc:9c:3d:f0:ea:6e:7b:dc:65:60:62:e1:
aa:88:f9:a8:20:15:3c:3b:c4:3d:89:62:36:36:37:bf:37:9f:
3d:87:c9:97:10:a9:98:43:c8:ed:6c:c2:96:7a:e3:82:35:05:
ab:3f:01:63:08:76:c3:20:8e:c8:eb:79:fb:94:25:aa:8b:d1:
fa:6c:f9:95:30:93:7a:ca:a6:cc:57:f5:e7:8d:4e:04:19:46:
7e:44:b6:90:f7:52:37:da:10:a2:75:80:03:38:23:90:46:bc:
9e:66:ed:dc:e9:38:4b:76:2a:cb:5c:7e:7d:ef:84:08:4b:12:
b4:11:40:19:b0:a8:61:16:57:ec:c0:93:bc:43:a6:e0:21:fa:
5c:dd:33:26
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAYShA0G7/mEFDwc4KJ9u9xabMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmZThmNjhmZDgyODcwNGU4ZDcwNzk2Yzc4MzMyN2RjZGU5
YjBjOGUwHhcNMjIxMTIyMjAyNDE1WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMjI3MmNhYmQxY2YzYmQzNzliOGU0NGVlNDZkMjU5N2UzNjA5MzNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqhTDDI44SATcyT70Jc09NuaGwwzA
8Sje6Xm/LnsqynPasGnWSs2bLdYMurSPK91ltPUWdhj5wS8953zvknNTQujPsFIN
q06/e2HgPJsPA2W8DfFabcY0dXalM500sxrsr4uK2pr6rzZl4auQoS5TcpOWU4wQ
XZOCi2cQqtRt1H50xp1jpZ7KAnMIC5/S5dryIZsXyvDTCwr4mmw2Y8PxCJ38vPi7
saQTDNbbFKHY021O1QeNRUcKSyStA9II470iOSWIYUDIdJLUu/pYRDQj0nu7HgJT
8fLM5Do0MeglQ19Ef24T4iQwjCNx2WLTdILDlrDM6U3Sw2dxq58CWLNq8wIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFKInLKvRzzvTebjkTuRtJZfjYJM/MB8GA1UdIwQY
MBaAFJ/o9o/YKHBOjXB5bHgzJ9zemwyOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbi1qMmo5Z29jRTZOY0hsc2VETW4zTjZiREk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9hMTgzZWYtYWI2MC00ZDU5LWI1ZGQt
OWFlNWRiMjhjN2UyLzEvb2ljc3E5SFBPOU41dU9STzVHMGxsLU5na3o4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy9hMTgzZWYtYWI2MC00ZDU5LWI1ZGQtOWFlNWRiMjhjN2Uy
LzEvbi1qMmo5Z29jRTZOY0hsc2VETW4zTjZiREk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAQu5fAD
BAEu5fwwDQYJKoZIhvcNAQELBQADggEBACRW4ffzTTUYFeOiNp76NI3BTyxjDW/h
sCkSfbZI1Ax7QGIy3RbvgyYLToYGa7Pbw1eqq2s+iIUHmazHd++0bqY3oBv1THkm
8v7AK7Jqf1TNgdcABZPMDXfLrlJBbBwmagiNTARvWfr4UXePry7dJ3BMZcycPfDq
bnvcZWBi4aqI+aggFTw7xD2JYjY2N783nz2HyZcQqZhDyO1swpZ644I1Bas/AWMI
dsMgjsjrefuUJaqL0fps+ZUwk3rKpsxX9eeNTgQZRn5EtpD3UjfaEKJ1gAM4I5BG
vJ5m7dzpOEt2Kstcfn3vhAhLErQRQBmwqGEWV+zAk7xDpuAh+lzdMyY=
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:24:08 2025 by rpki-client