Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/2f0dc3-0fde-4cd2-9803-d1ef4c4d5157/1/qzy4eSxB3llwIqzNAxG26PAkOLU.roa
File: qzy4eSxB3llwIqzNAxG26PAkOLU.roa (raw, json)
Hash identifier: XfkqXxNisqlxnd653iB20bEx4cLoo6F+pPJgI5RNwQw=
Subject key identifier: AB:3C:B8:79:2C:41:DE:59:70:22:AC:CD:03:11:B6:E8:F0:24:38:B5
Certificate issuer: /CN=a8b1b96a6e9e5e3a273708df5ce643dd503c913b
Certificate serial: 018CC6B90B300BB78CDFD95FE99C31E6383A
Authority key identifier: A8:B1:B9:6A:6E:9E:5E:3A:27:37:08:DF:5C:E6:43:DD:50:3C:91:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qLG5am6eXjonNwjfXOZD3VA8kTs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/2f0dc3-0fde-4cd2-9803-d1ef4c4d5157/1/qzy4eSxB3llwIqzNAxG26PAkOLU.roa
Signing time: Mon 01 Jan 2024 20:31:04 +0000
ROA not before: Mon 01 Jan 2024 20:31:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47125
IP address blocks: 212.46.32.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b9:0b:30:0b:b7:8c:df:d9:5f:e9:9c:31:e6:38:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8b1b96a6e9e5e3a273708df5ce643dd503c913b
Validity
Not Before: Jan 1 20:31:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ab3cb8792c41de597022accd0311b6e8f02438b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:d6:44:d6:23:28:12:9a:1b:5b:77:19:da:05:
12:a4:19:b9:f0:ee:49:12:dc:fb:83:ac:63:d0:69:
81:75:0a:f6:96:f2:a0:bb:41:16:97:9b:76:a8:24:
16:5c:8a:e8:61:6d:39:30:09:8e:23:0f:98:70:25:
f0:1c:38:4f:e1:9a:68:57:b0:42:e9:ba:aa:01:df:
56:17:53:00:d4:66:be:96:fb:75:27:1e:56:70:c3:
20:e6:b0:7b:60:63:25:13:fa:ec:61:10:2c:28:d8:
29:4d:ca:a1:dc:0f:9c:b5:48:94:a4:5b:10:8f:59:
64:d4:b6:05:e5:54:98:ac:7b:81:4d:01:07:02:41:
05:15:b9:ee:2e:c5:ea:fa:b0:d8:6f:93:51:fd:08:
4c:0e:af:23:34:bb:e3:22:a9:96:2a:34:2e:49:35:
3b:8b:89:ca:31:c7:49:73:e2:2a:f5:bc:74:94:e3:
97:91:3e:f7:63:d2:4e:37:b2:a0:3e:c0:69:45:f8:
9d:b2:c0:12:68:95:8e:ce:3e:40:09:bb:66:f9:ff:
b3:76:c2:21:ad:ee:b1:77:75:2d:08:8e:66:fa:93:
39:00:76:02:a3:08:83:a3:2f:e9:60:d0:84:02:35:
f5:41:19:5b:38:01:6f:aa:be:4d:18:cc:aa:f3:7f:
99:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:3C:B8:79:2C:41:DE:59:70:22:AC:CD:03:11:B6:E8:F0:24:38:B5
X509v3 Authority Key Identifier:
keyid:A8:B1:B9:6A:6E:9E:5E:3A:27:37:08:DF:5C:E6:43:DD:50:3C:91:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qLG5am6eXjonNwjfXOZD3VA8kTs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/2f0dc3-0fde-4cd2-9803-d1ef4c4d5157/1/qzy4eSxB3llwIqzNAxG26PAkOLU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/2f0dc3-0fde-4cd2-9803-d1ef4c4d5157/1/qLG5am6eXjonNwjfXOZD3VA8kTs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.46.32.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:8e:21:88:00:6a:e0:ea:28:7c:a5:05:58:8f:8e:27:11:40:
7c:62:d0:eb:19:f7:80:eb:81:3b:7b:55:1d:67:fb:a3:3f:17:
57:37:aa:6a:e0:9c:96:0f:33:d1:72:52:6b:6c:3a:56:4d:3a:
3c:79:09:92:55:e3:b1:db:b8:73:67:b5:0a:be:eb:14:e2:81:
ae:67:a0:29:f5:9c:ad:59:85:22:d1:51:9e:00:74:87:17:0b:
79:d9:27:bd:37:c4:fe:a7:95:13:b3:fc:9e:fa:f4:8b:9f:47:
fb:c1:94:10:84:62:5a:ec:25:d9:f5:a0:c8:99:bf:0d:8d:56:
b5:70:03:d8:d7:16:ad:b2:a4:66:66:b1:f2:83:24:5d:35:97:
d6:e5:e9:4c:d4:68:21:2b:0c:5a:bf:9d:ac:7b:14:d4:b4:32:
34:2c:06:c5:f5:8d:14:c5:12:a4:bb:2d:2b:77:d7:b7:12:6b:
6f:3b:8d:27:4d:23:56:c9:b9:ee:bc:80:94:52:3c:06:20:09:
09:cc:3e:2b:81:8e:d5:6d:73:25:69:3d:7e:ab:c3:5b:6e:ea:
9a:e8:68:c3:15:96:7c:1d:f7:44:7b:00:7e:91:23:e6:00:62:
55:4a:4f:6f:52:83:dc:02:15:4b:9a:bf:71:4b:02:a0:b3:b7:
30:2a:49:ed
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzGuQswC7eM39lf6Zwx5jg6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4YjFiOTZhNmU5ZTVlM2EyNzM3MDhkZjVjZTY0M2RkNTAz
YzkxM2IwHhcNMjQwMTAxMjAzMTA0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYjNjYjg3OTJjNDFkZTU5NzAyMmFjY2QwMzExYjZlOGYwMjQzOGI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgNZE1iMoEpobW3cZ2gUSpBm58O5J
Etz7g6xj0GmBdQr2lvKgu0EWl5t2qCQWXIroYW05MAmOIw+YcCXwHDhP4ZpoV7BC
6bqqAd9WF1MA1Ga+lvt1Jx5WcMMg5rB7YGMlE/rsYRAsKNgpTcqh3A+ctUiUpFsQ
j1lk1LYF5VSYrHuBTQEHAkEFFbnuLsXq+rDYb5NR/QhMDq8jNLvjIqmWKjQuSTU7
i4nKMcdJc+Iq9bx0lOOXkT73Y9JON7KgPsBpRfidssASaJWOzj5ACbtm+f+zdsIh
re6xd3UtCI5m+pM5AHYCowiDoy/pYNCEAjX1QRlbOAFvqr5NGMyq83+ZuwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKs8uHksQd5ZcCKszQMRtujwJDi1MB8GA1UdIwQY
MBaAFKixuWpunl46JzcI31zmQ91QPJE7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcUxHNWFtNmVYam9uTndqZlhPWkQzVkE4a1RzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS8yZjBkYzMtMGZkZS00Y2QyLTk4MDMt
ZDFlZjRjNGQ1MTU3LzEvcXp5NGVTeEIzbGx3SXF6TkF4RzI2UEFrT0xVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS8yZjBkYzMtMGZkZS00Y2QyLTk4MDMtZDFlZjRjNGQ1MTU3
LzEvcUxHNWFtNmVYam9uTndqZlhPWkQzVkE4a1RzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1C4gMA0G
CSqGSIb3DQEBCwUAA4IBAQCxjiGIAGrg6ih8pQVYj44nEUB8YtDrGfeA64E7e1Ud
Z/ujPxdXN6pq4JyWDzPRclJrbDpWTTo8eQmSVeOx27hzZ7UKvusU4oGuZ6Ap9Zyt
WYUi0VGeAHSHFwt52Se9N8T+p5UTs/ye+vSLn0f7wZQQhGJa7CXZ9aDImb8NjVa1
cAPY1xatsqRmZrHygyRdNZfW5elM1GghKwxav52sexTUtDI0LAbF9Y0UxRKkuy0r
d9e3EmtvO40nTSNWybnuvICUUjwGIAkJzD4rgY7VbXMlaT1+q8Nbbuqa6GjDFZZ8
HfdEewB+kSPmAGJVSk9vUoPcAhVLmr9xSwKgs7cwKknt
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:54:48 2025 by rpki-client