Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/71e09c-28f3-4825-806f-a0dc354f4ca3/1/m3gXujpVCrLpKlGaZZVKGdX7bVs.roa
File: m3gXujpVCrLpKlGaZZVKGdX7bVs.roa (raw, json)
Hash identifier: uZ4Pf6R3TRRDYB1bD3rWYxiLeW6EkMyazvCn4ZXP57Q=
Subject key identifier: 9B:78:17:BA:3A:55:0A:B2:E9:2A:51:9A:65:95:4A:19:D5:FB:6D:5B
Certificate issuer: /CN=e9aab1446100a8fce03df19d755e06329ee24713
Certificate serial: 019420D6521787A233DB19B2767C08C1F330
Authority key identifier: E9:AA:B1:44:61:00:A8:FC:E0:3D:F1:9D:75:5E:06:32:9E:E2:47:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6aqxRGEAqPzgPfGddV4GMp7iRxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/71e09c-28f3-4825-806f-a0dc354f4ca3/1/m3gXujpVCrLpKlGaZZVKGdX7bVs.roa
Signing time: Wed 01 Jan 2025 07:48:24 +0000
ROA not before: Wed 01 Jan 2025 07:48:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48618
IP address blocks: 46.246.10.0/23 maxlen: 24
46.246.32.0/23 maxlen: 24
2a00:1a28:100::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:52:17:87:a2:33:db:19:b2:76:7c:08:c1:f3:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9aab1446100a8fce03df19d755e06329ee24713
Validity
Not Before: Jan 1 07:48:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9b7817ba3a550ab2e92a519a65954a19d5fb6d5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:67:29:b7:ae:b7:27:7b:8f:57:f2:46:93:c8:
3e:6f:67:ca:29:b3:d2:c9:0e:f9:11:25:73:42:b9:
96:85:fc:00:b3:b7:65:40:db:75:7e:9c:56:13:0a:
72:44:32:8e:cf:ad:ed:23:d9:60:f3:48:13:38:00:
31:3d:1e:e5:86:ad:6f:16:36:ea:75:19:98:6c:f8:
09:e5:23:8a:79:08:87:37:26:c5:f1:ca:2c:19:a4:
a5:a8:ab:73:80:d2:0a:36:42:76:78:48:45:8d:9b:
5d:62:93:d3:11:76:fb:59:8b:70:73:f4:f1:01:6e:
2e:0c:af:a6:d8:e4:af:30:d7:37:f2:bc:0e:e6:c7:
82:fb:0b:cf:40:0c:5e:38:15:fa:e2:ba:54:4d:3d:
d6:19:16:87:f1:1d:ee:1c:94:3e:29:e1:c3:7f:09:
5d:5a:bd:a8:4c:5b:c7:21:31:05:78:fa:3c:5a:97:
4e:58:2e:9e:02:9f:47:aa:19:17:9c:6d:88:53:03:
17:c2:53:5c:c7:a5:d5:41:f5:0a:32:d2:d5:43:84:
3b:0f:11:e2:de:ee:f5:e0:2d:63:97:c1:be:f4:00:
b4:99:48:3f:67:b1:eb:a7:27:3b:41:4f:cb:88:e8:
92:6a:35:6b:7b:31:b2:73:6e:a4:18:e4:25:f8:2d:
cc:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:78:17:BA:3A:55:0A:B2:E9:2A:51:9A:65:95:4A:19:D5:FB:6D:5B
X509v3 Authority Key Identifier:
keyid:E9:AA:B1:44:61:00:A8:FC:E0:3D:F1:9D:75:5E:06:32:9E:E2:47:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6aqxRGEAqPzgPfGddV4GMp7iRxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/71e09c-28f3-4825-806f-a0dc354f4ca3/1/m3gXujpVCrLpKlGaZZVKGdX7bVs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/71e09c-28f3-4825-806f-a0dc354f4ca3/1/6aqxRGEAqPzgPfGddV4GMp7iRxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.246.10.0/23
46.246.32.0/23
IPv6:
2a00:1a28:100::/48
Signature Algorithm: sha256WithRSAEncryption
1f:08:68:5f:27:01:5b:59:92:65:50:28:9c:26:60:40:77:9f:
6c:22:60:7a:ea:7d:b2:bf:5e:5a:06:90:b2:0a:ba:df:36:53:
e0:00:20:24:10:4d:c0:ec:30:4b:08:09:0a:95:8e:c1:de:c7:
08:d1:f3:b0:13:06:97:3e:e2:53:80:e2:65:1c:3c:4b:6b:0e:
84:d0:4b:6b:92:b4:a2:cf:9f:fe:de:50:74:c9:9a:33:31:67:
0c:e8:d1:6a:f8:0a:16:2d:17:f4:e2:27:c6:15:1e:57:22:c5:
22:58:67:7e:c3:4d:74:88:48:b9:d7:fc:46:27:e7:9d:72:c9:
fc:d7:50:48:04:6d:af:41:29:d5:8f:9e:10:91:d3:1f:e5:e9:
2b:87:68:a1:e1:35:f3:5a:36:12:61:4d:a9:85:92:ea:04:cc:
4c:d8:1f:e4:5a:e4:10:be:29:d4:31:b3:2c:9d:88:10:84:78:
22:11:0b:0a:93:da:86:53:c4:42:eb:f1:65:50:7e:2f:6f:43:
50:46:d7:3f:d7:8d:22:e0:f2:b4:e1:f7:8d:c8:aa:79:f4:e7:
28:c1:9f:e5:ed:60:d5:6e:16:a7:48:49:55:62:ea:a2:85:01:
96:8f:10:1a:4c:5f:96:82:2c:a1:82:70:fc:7a:44:b6:cb:bf:
ba:eb:83:40
-----BEGIN CERTIFICATE-----
MIIFFDCCA/ygAwIBAgISAZQg1lIXh6Iz2xmydnwIwfMwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5YWFiMTQ0NjEwMGE4ZmNlMDNkZjE5ZDc1NWUwNjMyOWVl
MjQ3MTMwHhcNMjUwMTAxMDc0ODI0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5Yjc4MTdiYTNhNTUwYWIyZTkyYTUxOWE2NTk1NGExOWQ1ZmI2ZDViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzGcpt663J3uPV/JGk8g+b2fKKbPS
yQ75ESVzQrmWhfwAs7dlQNt1fpxWEwpyRDKOz63tI9lg80gTOAAxPR7lhq1vFjbq
dRmYbPgJ5SOKeQiHNybF8cosGaSlqKtzgNIKNkJ2eEhFjZtdYpPTEXb7WYtwc/Tx
AW4uDK+m2OSvMNc38rwO5seC+wvPQAxeOBX64rpUTT3WGRaH8R3uHJQ+KeHDfwld
Wr2oTFvHITEFePo8WpdOWC6eAp9HqhkXnG2IUwMXwlNcx6XVQfUKMtLVQ4Q7DxHi
3u714C1jl8G+9AC0mUg/Z7Hrpyc7QU/LiOiSajVrezGyc26kGOQl+C3MGwIDAQAB
o4ICIDCCAhwwHQYDVR0OBBYEFJt4F7o6VQqy6SpRmmWVShnV+21bMB8GA1UdIwQY
MBaAFOmqsURhAKj84D3xnXVeBjKe4kcTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNmFxeFJHRUFxUHpnUGZHZGRWNEdNcDdpUnhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS83MWUwOWMtMjhmMy00ODI1LTgwNmYt
YTBkYzM1NGY0Y2EzLzEvbTNnWHVqcFZDckxwS2xHYVpaVktHZFg3YlZzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS83MWUwOWMtMjhmMy00ODI1LTgwNmYtYTBkYzM1NGY0Y2Ez
LzEvNmFxeFJHRUFxUHpnUGZHZGRWNEdNcDdpUnhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQBLvYKAwQB
LvYgMA8EAgACMAkDBwAqABooAQAwDQYJKoZIhvcNAQELBQADggEBAB8IaF8nAVtZ
kmVQKJwmYEB3n2wiYHrqfbK/XloGkLIKut82U+AAICQQTcDsMEsICQqVjsHexwjR
87ATBpc+4lOA4mUcPEtrDoTQS2uStKLPn/7eUHTJmjMxZwzo0Wr4ChYtF/TiJ8YV
HlcixSJYZ37DTXSISLnX/EYn551yyfzXUEgEba9BKdWPnhCR0x/l6SuHaKHhNfNa
NhJhTamFkuoEzEzYH+Ra5BC+KdQxsyydiBCEeCIRCwqT2oZTxELr8WVQfi9vQ1BG
1z/XjSLg8rTh943Iqnn05yjBn+XtYNVuFqdISVVi6qKFAZaPEBpMX5aCLKGCcPx6
RLbLv7rrg0A=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:44:26 2025 by rpki-client