Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/YaWraI8rZ3g7qo7uwVIGgMNHmoY.roa
File: YaWraI8rZ3g7qo7uwVIGgMNHmoY.roa (raw, json)
Hash identifier: fh8nT5vZdM5ZHaPxQ043knM/D5f5HwhE2yBZCYzTFqQ=
Subject key identifier: 61:A5:AB:68:8F:2B:67:78:3B:AA:8E:EE:C1:52:06:80:C3:47:9A:86
Certificate issuer: /CN=ee4381ce03baa625019980f378fe41bb2b6621b9
Certificate serial: 019425FDCA430F44E9BC7AAE5C4618985A47
Authority key identifier: EE:43:81:CE:03:BA:A6:25:01:99:80:F3:78:FE:41:BB:2B:66:21:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7kOBzgO6piUBmYDzeP5BuytmIbk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/YaWraI8rZ3g7qo7uwVIGgMNHmoY.roa
Signing time: Thu 02 Jan 2025 07:49:36 +0000
ROA not before: Thu 02 Jan 2025 07:49:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61418
IP address blocks: 46.221.18.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:ca:43:0f:44:e9:bc:7a:ae:5c:46:18:98:5a:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee4381ce03baa625019980f378fe41bb2b6621b9
Validity
Not Before: Jan 2 07:49:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=61a5ab688f2b67783baa8eeec1520680c3479a86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:25:de:15:a9:87:81:c5:fd:a5:53:bf:6f:65:
eb:fe:db:dd:0a:cc:fd:07:51:c7:55:c2:92:e1:c7:
71:9b:23:4b:9a:59:8d:e1:73:f5:b5:c1:61:76:80:
b5:1e:16:8b:b0:bc:17:c8:df:85:0b:0b:ce:15:d7:
98:74:cd:dc:54:a7:9f:68:4c:54:2a:04:cd:3a:34:
e8:7b:99:07:e1:26:60:c6:c4:11:4f:17:09:62:e0:
a2:f6:dc:88:6f:d0:43:b0:a9:fb:d5:a7:96:96:a8:
c0:38:c1:72:38:2c:79:25:a0:48:80:c4:85:cc:77:
c4:c3:5c:dc:93:88:47:9f:cc:2f:6f:88:d8:a0:97:
dd:42:15:da:18:9b:de:d0:75:02:16:c8:bb:96:c2:
14:cf:88:40:1f:a5:f9:1a:8c:c0:9b:9b:7c:95:a8:
73:df:e8:c5:f1:09:bd:29:c4:05:11:07:4d:c5:e1:
6e:b7:3c:64:0f:b8:2d:f9:35:75:41:af:0f:b3:07:
a7:89:f3:ea:60:a8:ef:9f:c6:5d:b8:a6:66:48:25:
30:15:68:08:a9:48:f7:90:b7:e9:0e:6d:ea:84:e5:
64:77:f9:d9:64:ff:56:32:3a:1d:0c:08:68:42:f8:
91:f7:52:62:68:f7:e2:5e:c7:d0:ae:58:28:c1:d4:
5e:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:A5:AB:68:8F:2B:67:78:3B:AA:8E:EE:C1:52:06:80:C3:47:9A:86
X509v3 Authority Key Identifier:
keyid:EE:43:81:CE:03:BA:A6:25:01:99:80:F3:78:FE:41:BB:2B:66:21:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7kOBzgO6piUBmYDzeP5BuytmIbk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/YaWraI8rZ3g7qo7uwVIGgMNHmoY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/7kOBzgO6piUBmYDzeP5BuytmIbk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.221.18.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:e4:e6:a4:0f:68:08:b1:5f:31:1e:f1:24:66:78:da:b1:db:
f3:0a:22:86:83:ce:5f:86:67:3e:75:7b:5f:95:b3:d5:d5:bd:
d1:c8:c4:3a:72:39:16:9e:9c:45:7f:83:ad:62:f9:3e:58:f0:
86:c2:84:4c:e4:24:c2:5f:47:de:38:46:29:72:6b:42:92:db:
7f:b2:fa:a4:7b:0e:58:dc:0c:ad:19:e9:4b:87:c2:71:b4:34:
c3:3e:05:ed:73:12:bd:e6:95:43:20:b9:e3:49:78:0d:83:e3:
07:d4:77:b7:23:55:47:ee:af:41:86:c3:d6:9e:76:99:04:6a:
fe:57:12:4c:95:de:11:40:c2:ca:55:df:85:31:e9:a3:f9:c2:
75:d6:64:1c:bb:66:f6:fb:6d:13:84:6c:13:d4:67:f0:8a:14:
ac:1a:68:89:90:4e:31:2a:3d:66:a6:fd:e7:75:56:bb:14:05:
c5:b5:f8:ac:71:38:85:49:19:73:59:ed:b1:e9:84:e8:7d:9c:
de:3b:3b:47:b4:7c:b6:34:07:22:3a:bf:67:b9:42:34:d6:0b:
77:91:a3:ef:15:ed:03:18:26:76:ce:df:be:8e:c3:39:2e:94:
52:17:38:d2:a0:ea:e6:d5:9f:81:25:e9:b2:8e:94:57:51:98:
a8:a7:fd:2e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQl/cpDD0TpvHquXEYYmFpHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlNDM4MWNlMDNiYWE2MjUwMTk5ODBmMzc4ZmU0MWJiMmI2
NjIxYjkwHhcNMjUwMTAyMDc0OTM2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MWE1YWI2ODhmMmI2Nzc4M2JhYThlZWVjMTUyMDY4MGMzNDc5YTg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqCXeFamHgcX9pVO/b2Xr/tvdCsz9
B1HHVcKS4cdxmyNLmlmN4XP1tcFhdoC1HhaLsLwXyN+FCwvOFdeYdM3cVKefaExU
KgTNOjToe5kH4SZgxsQRTxcJYuCi9tyIb9BDsKn71aeWlqjAOMFyOCx5JaBIgMSF
zHfEw1zck4hHn8wvb4jYoJfdQhXaGJve0HUCFsi7lsIUz4hAH6X5GozAm5t8lahz
3+jF8Qm9KcQFEQdNxeFutzxkD7gt+TV1Qa8PswenifPqYKjvn8ZduKZmSCUwFWgI
qUj3kLfpDm3qhOVkd/nZZP9WMjodDAhoQviR91JiaPfiXsfQrlgowdReIQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGGlq2iPK2d4O6qO7sFSBoDDR5qGMB8GA1UdIwQY
MBaAFO5Dgc4DuqYlAZmA83j+QbsrZiG5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2tPQnpnTzZwaVVCbVlEemVQNUJ1eXRtSWJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS81ZWExMmItNTFjNi00MTk1LWFlYjYt
YzFhZGRkN2RlYmFhLzEvWWFXcmFJOHJaM2c3cW83dXdWSUdnTU5IbW9ZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS81ZWExMmItNTFjNi00MTk1LWFlYjYtYzFhZGRkN2RlYmFh
LzEvN2tPQnpnTzZwaVVCbVlEemVQNUJ1eXRtSWJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALt0SMA0G
CSqGSIb3DQEBCwUAA4IBAQBs5OakD2gIsV8xHvEkZnjasdvzCiKGg85fhmc+dXtf
lbPV1b3RyMQ6cjkWnpxFf4OtYvk+WPCGwoRM5CTCX0feOEYpcmtCktt/svqkew5Y
3AytGelLh8JxtDTDPgXtcxK95pVDILnjSXgNg+MH1He3I1VH7q9BhsPWnnaZBGr+
VxJMld4RQMLKVd+FMemj+cJ11mQcu2b2+20ThGwT1GfwihSsGmiJkE4xKj1mpv3n
dVa7FAXFtfiscTiFSRlzWe2x6YTofZzeOztHtHy2NAciOr9nuUI01gt3kaPvFe0D
GCZ2zt++jsM5LpRSFzjSoOrm1Z+BJemyjpRXUZiop/0u
-----END CERTIFICATE-----
Generated at Tue Apr 8 03:45:47 2025 by rpki-client