Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/246d61-ab75-4b19-aec2-a75abc2ab7e7/1/nEgckzyT85xONYnrRjI8dseOnj4.roa
File: nEgckzyT85xONYnrRjI8dseOnj4.roa (raw, json)
Hash identifier: rxzkg/cfqdGA1he14MZ9tkgjuqF3gmpfK+SBDKv+LvE=
Subject key identifier: 9C:48:1C:93:3C:93:F3:9C:4E:35:89:EB:46:32:3C:76:C7:8E:9E:3E
Certificate issuer: /CN=733bda0008dfb5a2eb4e2a56902448fed940d59f
Certificate serial: 0184810D6080BA8D148C055951A567B4C0D4
Authority key identifier: 73:3B:DA:00:08:DF:B5:A2:EB:4E:2A:56:90:24:48:FE:D9:40:D5:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/czvaAAjftaLrTipWkCRI_tlA1Z8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/246d61-ab75-4b19-aec2-a75abc2ab7e7/1/nEgckzyT85xONYnrRjI8dseOnj4.roa
Signing time: Wed 16 Nov 2022 15:27:28 +0000
ROA not before: Wed 16 Nov 2022 15:27:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 396356
IP address blocks: 212.46.33.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:81:0d:60:80:ba:8d:14:8c:05:59:51:a5:67:b4:c0:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=733bda0008dfb5a2eb4e2a56902448fed940d59f
Validity
Not Before: Nov 16 15:27:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9c481c933c93f39c4e3589eb46323c76c78e9e3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:51:64:0b:f0:72:80:68:09:84:77:b7:0d:02:
81:77:f3:a6:13:8c:b5:cd:36:4b:45:ea:73:88:a1:
fd:f7:ca:46:c6:60:37:79:17:3c:36:4e:ec:37:85:
55:56:21:c0:9d:f4:44:bc:5d:89:d0:cf:23:77:ab:
b4:43:0a:39:7e:ad:0c:ee:91:7b:e1:94:aa:f3:0a:
bb:1c:e2:f1:d7:67:e6:0c:61:73:53:c6:18:b4:53:
31:6f:94:60:0a:33:fa:d2:47:3b:68:6b:f0:fa:83:
c9:2f:e4:f1:a5:89:10:9c:e8:b7:63:5e:4b:31:ca:
71:6c:10:f5:77:90:c3:7e:73:02:a9:71:af:bd:75:
0f:30:8f:99:95:93:8b:27:93:d7:cf:a1:00:51:49:
c7:3b:d0:e2:51:8b:66:21:97:b9:9f:95:ce:87:b6:
64:98:64:50:49:ae:79:99:1f:e7:fe:44:39:de:8f:
6a:97:d4:b8:11:f4:44:49:c6:49:02:21:20:fb:f2:
34:b8:09:81:96:c7:b7:1b:12:1c:1d:c4:28:49:1e:
66:9e:cc:f3:93:42:62:8e:57:a3:44:99:40:cf:8b:
1b:dd:f1:eb:06:de:b6:11:24:72:bf:00:03:a9:87:
2a:79:df:6e:90:33:0f:35:02:a6:d2:45:82:02:dd:
2c:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:48:1C:93:3C:93:F3:9C:4E:35:89:EB:46:32:3C:76:C7:8E:9E:3E
X509v3 Authority Key Identifier:
keyid:73:3B:DA:00:08:DF:B5:A2:EB:4E:2A:56:90:24:48:FE:D9:40:D5:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/czvaAAjftaLrTipWkCRI_tlA1Z8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/246d61-ab75-4b19-aec2-a75abc2ab7e7/1/nEgckzyT85xONYnrRjI8dseOnj4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/246d61-ab75-4b19-aec2-a75abc2ab7e7/1/czvaAAjftaLrTipWkCRI_tlA1Z8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.46.33.0/24
Signature Algorithm: sha256WithRSAEncryption
46:c9:53:30:b7:c2:72:be:c0:3a:b9:a8:fe:4c:5e:9e:d0:18:
b4:5b:09:f9:27:54:21:f8:8f:d1:bf:be:90:5a:85:36:d9:f6:
76:33:98:f0:6f:f1:fc:8f:aa:c5:47:bd:2f:67:66:72:43:b1:
24:a1:e9:f9:56:25:29:3c:94:0f:10:4c:51:09:d8:f0:09:9e:
5c:40:a4:45:2c:e7:e7:48:52:6e:3e:0a:4d:8f:6b:f4:26:14:
8c:a7:10:63:be:06:ca:6e:f2:53:e9:c1:31:e9:e6:d9:26:98:
39:e3:c9:8b:24:ed:fa:b0:d4:52:de:0a:6f:86:04:89:5c:8d:
73:08:52:02:7e:fe:4c:39:d5:80:68:22:15:39:43:34:f9:6d:
8a:89:e1:ac:e0:85:24:f9:e8:b9:42:d5:30:99:b9:e6:27:47:
01:08:0e:4f:f0:10:c0:cc:03:f0:a6:b2:d5:d6:bb:c7:5f:ec:
8f:59:e5:32:80:1d:b8:9b:2a:86:0a:8e:43:01:f7:d4:b2:a7:
34:b4:f1:31:d6:e8:54:38:cb:de:9c:76:cd:fb:d4:01:f7:86:
e4:08:7b:f6:fd:c8:7a:6f:f5:88:d3:81:22:83:2f:c2:bf:fd:
79:8d:3d:f6:c5:1b:06:e7:c7:84:cb:83:ca:d8:59:80:af:a4:
06:22:68:dd
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYSBDWCAuo0UjAVZUaVntMDUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczM2JkYTAwMDhkZmI1YTJlYjRlMmE1NjkwMjQ0OGZlZDk0
MGQ1OWYwHhcNMjIxMTE2MTUyNzI4WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YzQ4MWM5MzNjOTNmMzljNGUzNTg5ZWI0NjMyM2M3NmM3OGU5ZTNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl1FkC/BygGgJhHe3DQKBd/OmE4y1
zTZLRepziKH998pGxmA3eRc8Nk7sN4VVViHAnfREvF2J0M8jd6u0Qwo5fq0M7pF7
4ZSq8wq7HOLx12fmDGFzU8YYtFMxb5RgCjP60kc7aGvw+oPJL+TxpYkQnOi3Y15L
McpxbBD1d5DDfnMCqXGvvXUPMI+ZlZOLJ5PXz6EAUUnHO9DiUYtmIZe5n5XOh7Zk
mGRQSa55mR/n/kQ53o9ql9S4EfREScZJAiEg+/I0uAmBlse3GxIcHcQoSR5mnszz
k0JijlejRJlAz4sb3fHrBt62ESRyvwADqYcqed9ukDMPNQKm0kWCAt0sEwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJxIHJM8k/OcTjWJ60YyPHbHjp4+MB8GA1UdIwQY
MBaAFHM72gAI37Wi604qVpAkSP7ZQNWfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3p2YUFBamZ0YUxyVGlwV2tDUklfdGxBMVo4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS8yNDZkNjEtYWI3NS00YjE5LWFlYzIt
YTc1YWJjMmFiN2U3LzEvbkVnY2t6eVQ4NXhPTlluclJqSThkc2VPbmo0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS8yNDZkNjEtYWI3NS00YjE5LWFlYzItYTc1YWJjMmFiN2U3
LzEvY3p2YUFBamZ0YUxyVGlwV2tDUklfdGxBMVo4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1C4hMA0G
CSqGSIb3DQEBCwUAA4IBAQBGyVMwt8JyvsA6uaj+TF6e0Bi0Wwn5J1Qh+I/Rv76Q
WoU22fZ2M5jwb/H8j6rFR70vZ2ZyQ7Ekoen5ViUpPJQPEExRCdjwCZ5cQKRFLOfn
SFJuPgpNj2v0JhSMpxBjvgbKbvJT6cEx6ebZJpg548mLJO36sNRS3gpvhgSJXI1z
CFICfv5MOdWAaCIVOUM0+W2KieGs4IUk+ei5QtUwmbnmJ0cBCA5P8BDAzAPwprLV
1rvHX+yPWeUygB24myqGCo5DAffUsqc0tPEx1uhUOMvenHbN+9QB94bkCHv2/ch6
b/WI04Eigy/Cv/15jT32xRsG58eEy4PK2FmAr6QGImjd
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:09:38 2025 by rpki-client