Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/QDeglJ-kf-CPwjwijAyu-xuaRJQ.roa
File: QDeglJ-kf-CPwjwijAyu-xuaRJQ.roa (raw, json)
Hash identifier: F1qjIGAjhb4CCD6+mprPcFrHYg12/ZjUkVJtYzNpI98=
Subject key identifier: 40:37:A0:94:9F:A4:7F:E0:8F:C2:3C:22:8C:0C:AE:FB:1B:9A:44:94
Certificate issuer: /CN=5336a106cecdeba92e0b80e5e9a5c789ba74c62b
Certificate serial: 019425FDA6EDB8DB18674B20CC8400CF7F42
Authority key identifier: 53:36:A1:06:CE:CD:EB:A9:2E:0B:80:E5:E9:A5:C7:89:BA:74:C6:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UzahBs7N66kuC4Dl6aXHibp0xis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/QDeglJ-kf-CPwjwijAyu-xuaRJQ.roa
Signing time: Thu 02 Jan 2025 07:49:27 +0000
ROA not before: Thu 02 Jan 2025 07:49:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202864
IP address blocks: 46.16.197.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:a6:ed:b8:db:18:67:4b:20:cc:84:00:cf:7f:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5336a106cecdeba92e0b80e5e9a5c789ba74c62b
Validity
Not Before: Jan 2 07:49:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4037a0949fa47fe08fc23c228c0caefb1b9a4494
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:25:7e:97:12:53:4f:40:56:2f:16:99:ce:c7:
f7:a0:8c:1e:8b:48:54:84:e0:95:bc:94:81:cf:1f:
a5:3c:a6:c1:ca:55:e5:7d:bb:6b:e0:dc:2f:86:f8:
8d:09:e1:16:0a:4d:d9:cb:66:a3:43:6b:7d:34:aa:
40:33:f4:d3:1c:3a:ab:b3:08:6d:2b:17:f9:4e:6f:
67:df:6c:df:d6:38:fd:ef:c6:c0:59:a8:ec:6e:4f:
f9:e5:83:59:26:3b:d5:0b:55:cd:86:ff:e0:3e:dd:
b6:27:24:fa:d2:6a:14:fe:95:80:17:f3:df:97:79:
0e:ab:4e:24:9a:ed:d9:a9:59:8c:13:f9:6e:7d:a8:
b7:d3:5f:95:e6:68:64:f0:43:6b:4e:32:b5:0e:e7:
72:db:d5:33:cf:88:fe:5a:51:af:07:a1:2a:2f:74:
fa:3d:53:5d:84:36:b2:6e:d1:fe:36:44:a3:c6:42:
ec:0a:df:23:b8:f4:7f:01:1a:03:7f:b9:6e:63:98:
49:6f:88:96:c4:6b:20:fc:e0:0a:c9:6b:15:6d:0d:
60:a8:12:02:76:f6:e9:29:e4:f7:b2:56:44:58:45:
c6:fa:de:fe:56:97:7d:51:13:a0:eb:b7:22:37:ce:
f2:74:da:c4:db:d2:c5:e0:c2:9d:b1:47:39:c4:4f:
46:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:37:A0:94:9F:A4:7F:E0:8F:C2:3C:22:8C:0C:AE:FB:1B:9A:44:94
X509v3 Authority Key Identifier:
keyid:53:36:A1:06:CE:CD:EB:A9:2E:0B:80:E5:E9:A5:C7:89:BA:74:C6:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UzahBs7N66kuC4Dl6aXHibp0xis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/QDeglJ-kf-CPwjwijAyu-xuaRJQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/UzahBs7N66kuC4Dl6aXHibp0xis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.16.197.0/24
Signature Algorithm: sha256WithRSAEncryption
65:be:0f:ff:59:b6:2b:bc:51:e9:f6:ed:1d:72:d4:6f:66:2b:
56:68:be:5d:48:6e:e4:39:07:fa:93:10:2c:ed:bf:92:29:32:
de:a1:e2:5a:e5:80:99:84:b2:59:12:2f:57:f3:f3:b3:4f:83:
6b:a6:ae:59:c1:ea:29:51:c2:9f:22:56:5f:52:a8:a8:0f:30:
de:77:2c:db:5a:9e:72:8e:70:46:18:5a:21:95:39:de:26:2a:
15:c3:1f:43:99:38:38:53:21:9d:50:d9:b0:cf:00:39:cc:9c:
26:6f:05:33:79:e7:3b:17:e2:3e:e3:f3:9f:8f:fc:4b:96:9d:
ba:5d:c3:89:9d:c9:5b:22:74:ff:57:41:33:49:ac:19:1e:2e:
f6:4b:3b:7c:6a:c7:24:cc:51:42:4c:2a:fb:c8:af:ab:fa:42:
5c:ad:0d:16:0a:35:ad:1a:1e:88:57:69:55:d7:c1:84:02:1f:
24:94:9d:1c:37:10:d1:11:b6:6a:b5:aa:41:71:42:db:32:31:
d8:6c:36:24:9d:9b:0f:92:6f:fe:62:46:ad:3a:df:bc:c0:2d:
f5:28:a8:c5:71:e1:33:fd:c2:69:6b:2e:75:61:ef:a1:fc:16:
60:56:11:b2:d6:c6:65:63:bd:9c:6b:5a:94:b6:5e:5a:6a:85:
88:c2:18:6d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQl/abtuNsYZ0sgzIQAz39CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzMzZhMTA2Y2VjZGViYTkyZTBiODBlNWU5YTVjNzg5YmE3
NGM2MmIwHhcNMjUwMTAyMDc0OTI3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MDM3YTA5NDlmYTQ3ZmUwOGZjMjNjMjI4YzBjYWVmYjFiOWE0NDk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqyV+lxJTT0BWLxaZzsf3oIwei0hU
hOCVvJSBzx+lPKbBylXlfbtr4NwvhviNCeEWCk3Zy2ajQ2t9NKpAM/TTHDqrswht
Kxf5Tm9n32zf1jj978bAWajsbk/55YNZJjvVC1XNhv/gPt22JyT60moU/pWAF/Pf
l3kOq04kmu3ZqVmME/lufai301+V5mhk8ENrTjK1Dudy29Uzz4j+WlGvB6EqL3T6
PVNdhDaybtH+NkSjxkLsCt8juPR/ARoDf7luY5hJb4iWxGsg/OAKyWsVbQ1gqBIC
dvbpKeT3slZEWEXG+t7+Vpd9UROg67ciN87ydNrE29LF4MKdsUc5xE9GfwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEA3oJSfpH/gj8I8IowMrvsbmkSUMB8GA1UdIwQY
MBaAFFM2oQbOzeupLguA5emlx4m6dMYrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVXphaEJzN042Nmt1QzREbDZhWEhpYnAweGlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC8yNjY5ZWUtNGJhNy00MTEwLTgzNzAt
ZGQ4MDNjNWI4NWRiLzEvUURlZ2xKLWtmLUNQd2p3aWpBeXUteHVhUkpRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC8yNjY5ZWUtNGJhNy00MTEwLTgzNzAtZGQ4MDNjNWI4NWRi
LzEvVXphaEJzN042Nmt1QzREbDZhWEhpYnAweGlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALhDFMA0G
CSqGSIb3DQEBCwUAA4IBAQBlvg//WbYrvFHp9u0dctRvZitWaL5dSG7kOQf6kxAs
7b+SKTLeoeJa5YCZhLJZEi9X8/OzT4Nrpq5ZweopUcKfIlZfUqioDzDedyzbWp5y
jnBGGFohlTneJioVwx9DmTg4UyGdUNmwzwA5zJwmbwUzeec7F+I+4/Ofj/xLlp26
XcOJnclbInT/V0EzSawZHi72Szt8asckzFFCTCr7yK+r+kJcrQ0WCjWtGh6IV2lV
18GEAh8klJ0cNxDREbZqtapBcULbMjHYbDYknZsPkm/+YkatOt+8wC31KKjFceEz
/cJpay51Ye+h/BZgVhGy1sZlY72ca1qUtl5aaoWIwhht
-----END CERTIFICATE-----
Generated at Mon Apr 7 20:07:46 2025 by rpki-client