Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/3202ad-7b46-422d-a4d2-eca53a7f7762/1/T8KLOt6NPvQjdduRK2LFDHFk-Ow.roa
File: T8KLOt6NPvQjdduRK2LFDHFk-Ow.roa (raw, json)
Hash identifier: dmD7G0wa7KStRC2oIGcFu5FuaJHoaquq+ceiOTM5mGE=
Subject key identifier: 4F:C2:8B:3A:DE:8D:3E:F4:23:75:DB:91:2B:62:C5:0C:71:64:F8:EC
Certificate issuer: /CN=a0afe1fed1f2b7db24a0c2d1f61010684e93cbd5
Certificate serial: 01942823ACF3590963FBC447053DAFCFD684
Authority key identifier: A0:AF:E1:FE:D1:F2:B7:DB:24:A0:C2:D1:F6:10:10:68:4E:93:CB:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oK_h_tHyt9skoMLR9hAQaE6Ty9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/3202ad-7b46-422d-a4d2-eca53a7f7762/1/T8KLOt6NPvQjdduRK2LFDHFk-Ow.roa
Signing time: Thu 02 Jan 2025 17:50:14 +0000
ROA not before: Thu 02 Jan 2025 17:50:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43142
IP address blocks: 46.227.16.0/21 maxlen: 21
46.227.16.0/23 maxlen: 23
46.227.16.0/24 maxlen: 24
46.227.17.0/24 maxlen: 24
46.227.18.0/23 maxlen: 23
46.227.18.0/24 maxlen: 24
46.227.19.0/24 maxlen: 24
46.227.20.0/22 maxlen: 22
46.227.20.0/24 maxlen: 24
46.227.21.0/24 maxlen: 24
46.227.22.0/24 maxlen: 24
46.227.23.0/24 maxlen: 24
91.194.96.0/22 maxlen: 22
91.194.96.0/23 maxlen: 23
91.194.96.0/24 maxlen: 24
91.194.97.0/24 maxlen: 24
91.194.98.0/23 maxlen: 23
91.194.98.0/24 maxlen: 24
91.194.100.0/23 maxlen: 23
91.194.100.0/24 maxlen: 24
91.194.101.0/24 maxlen: 24
185.8.64.0/22 maxlen: 22
185.8.64.0/23 maxlen: 23
185.8.64.0/24 maxlen: 24
185.8.65.0/24 maxlen: 24
185.8.66.0/24 maxlen: 24
185.8.67.0/24 maxlen: 24
188.214.102.0/23 maxlen: 24
188.214.102.0/24 maxlen: 24
188.214.103.0/24 maxlen: 24
2a01:6e00::/32 maxlen: 32
2a01:6e00::/33 maxlen: 33
2a01:6e00::/48 maxlen: 48
2a01:6e00:1::/48 maxlen: 48
2a01:6e00:2::/48 maxlen: 48
2a01:6e00:3::/48 maxlen: 48
2a01:6e00:4::/48 maxlen: 48
2a01:6e00:5::/48 maxlen: 48
2a01:6e00:6::/48 maxlen: 48
2a01:6e00:7::/48 maxlen: 48
2a01:6e00:8::/48 maxlen: 48
2a01:6e00:9::/48 maxlen: 48
2a01:6e00:10::/48 maxlen: 48
2a01:6e00:8000::/33 maxlen: 33
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:ac:f3:59:09:63:fb:c4:47:05:3d:af:cf:d6:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0afe1fed1f2b7db24a0c2d1f61010684e93cbd5
Validity
Not Before: Jan 2 17:50:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4fc28b3ade8d3ef42375db912b62c50c7164f8ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:5c:c2:e1:3b:8c:fe:bd:ce:8c:14:1a:ce:5a:
92:b2:2f:cb:0b:fa:81:2c:de:ff:01:da:92:0b:49:
69:f0:53:cb:32:f7:5f:65:06:e4:bb:b1:96:4a:e8:
5a:4a:e7:1c:6a:1b:32:2d:ba:d5:eb:9c:85:40:83:
76:29:f8:d5:9d:47:ca:a9:ca:8d:8b:51:6f:6e:33:
b8:d4:80:7d:c7:4f:1b:5b:88:19:7c:e4:8c:4d:eb:
fe:74:f9:02:19:c4:34:ed:4d:bc:4b:a3:35:ad:50:
3e:16:15:c9:26:13:6a:ad:ae:48:e4:c4:fb:2f:b4:
28:be:ed:12:6f:97:61:b1:b0:70:18:32:f2:f2:aa:
f6:b1:67:61:06:12:86:b5:16:e3:8f:cd:39:fc:2c:
5d:a3:a1:0d:e9:0f:f0:ad:a4:94:71:a6:44:75:83:
0d:21:93:c4:af:0d:6a:ad:84:c7:2e:4b:ab:ef:ac:
9f:34:66:fe:c7:ad:50:af:3f:38:31:b8:90:af:c0:
c9:23:13:e1:b8:8b:26:65:89:c7:28:29:fd:9b:17:
11:f0:c3:86:ea:a5:b5:fd:34:5e:20:78:bc:c9:d7:
89:fa:43:6e:3e:65:56:a4:87:28:87:ce:89:9f:a7:
6a:da:73:32:7e:9a:a7:e4:02:52:43:e4:10:2a:07:
de:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:C2:8B:3A:DE:8D:3E:F4:23:75:DB:91:2B:62:C5:0C:71:64:F8:EC
X509v3 Authority Key Identifier:
keyid:A0:AF:E1:FE:D1:F2:B7:DB:24:A0:C2:D1:F6:10:10:68:4E:93:CB:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oK_h_tHyt9skoMLR9hAQaE6Ty9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/3202ad-7b46-422d-a4d2-eca53a7f7762/1/T8KLOt6NPvQjdduRK2LFDHFk-Ow.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/3202ad-7b46-422d-a4d2-eca53a7f7762/1/oK_h_tHyt9skoMLR9hAQaE6Ty9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.227.16.0/21
91.194.96.0-91.194.101.255
185.8.64.0/22
188.214.102.0/23
IPv6:
2a01:6e00::/32
Signature Algorithm: sha256WithRSAEncryption
a4:86:af:39:48:b8:72:e1:e9:2b:c4:73:f7:ab:3b:3f:55:9b:
89:8c:f1:25:c7:65:de:cc:e5:b3:52:f0:4c:4c:3b:58:69:96:
7d:fa:ab:90:f0:1e:68:01:49:d7:1b:51:64:79:1e:b3:e5:1a:
bc:cb:e4:08:06:e2:4f:93:3d:a4:e8:ad:07:a2:27:06:52:a6:
bf:29:8d:68:89:4c:51:4f:af:e2:5d:b8:e5:6a:97:42:83:ad:
11:ec:0d:84:06:5f:58:43:13:04:58:1e:85:54:d7:81:9c:ec:
da:46:2f:4d:94:dc:fa:7a:db:63:63:30:b5:90:b6:61:9a:e1:
05:ff:da:4c:d5:bb:04:d3:6b:ce:4b:2a:e2:51:eb:16:5a:dc:
9e:93:ff:6b:57:98:07:09:f7:86:94:f5:c3:36:6c:eb:af:e9:
70:fc:30:92:62:08:2e:c4:3a:73:ee:c6:56:c2:60:23:fc:83:
3f:19:b1:11:95:89:45:aa:48:ba:5d:77:8d:9d:57:44:92:71:
d9:7f:89:da:ba:c5:01:e8:af:22:31:8a:e1:e1:6d:e6:e9:4e:
d7:cd:65:67:f2:aa:06:0f:35:2c:79:68:50:88:fc:ba:26:8d:
a4:03:0d:82:b4:1a:55:3e:07:03:54:86:39:46:a1:28:49:45:
d7:14:49:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:53:50 2025 by rpki-client