Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/e5f7e9-80f9-4317-b21e-8336fec488f3/1/Ci_f2sjycu7v1-33JsijBAKS6RQ.roa
File: Ci_f2sjycu7v1-33JsijBAKS6RQ.roa (raw, json)
Hash identifier: golQ0VGen8692v2bH0QpRvLMk+3V+E0CQzFLiVdS1o8=
Subject key identifier: 0A:2F:DF:DA:C8:F2:72:EE:EF:D7:ED:F7:26:C8:A3:04:02:92:E9:14
Certificate issuer: /CN=170ef71a422a2f0fe91160579a4050618d8baf10
Certificate serial: 0358283F
Authority key identifier: 17:0E:F7:1A:42:2A:2F:0F:E9:11:60:57:9A:40:50:61:8D:8B:AF:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fw73GkIqLw_pEWBXmkBQYY2LrxA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/e5f7e9-80f9-4317-b21e-8336fec488f3/1/Ci_f2sjycu7v1-33JsijBAKS6RQ.roa
Signing time: Sat 01 Jan 2022 05:54:33 +0000
ROA not before: Sat 01 Jan 2022 05:54:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8038
IP address blocks: 46.244.20.0/24 maxlen: 24
178.249.157.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 56109119 (0x358283f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=170ef71a422a2f0fe91160579a4050618d8baf10
Validity
Not Before: Jan 1 05:54:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0a2fdfdac8f272eeefd7edf726c8a3040292e914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:6f:05:40:45:5c:db:d1:ba:4a:ec:4f:68:b8:
a3:39:fa:85:2e:68:aa:c8:bf:ca:b4:77:bd:c1:b7:
0b:e3:e9:87:ce:82:3b:2e:b0:f8:65:32:7d:28:e9:
69:1a:6e:36:10:eb:a6:a5:17:24:92:54:1e:6c:29:
f8:7c:d2:15:45:72:95:bf:07:4b:76:1c:99:5f:81:
e1:65:ff:ac:25:b9:0a:79:83:f7:77:6f:0b:7e:9d:
c5:c9:46:bc:26:08:8b:41:e0:0c:a9:4b:3b:c0:fe:
4d:c1:6e:e9:a0:a3:be:24:32:2a:4d:c5:bc:2c:c3:
6f:bb:9f:7f:f3:2c:e2:1d:8a:8d:af:56:49:24:82:
67:f2:1b:48:f2:b0:62:f4:65:77:de:f4:b8:df:a8:
71:03:8b:aa:c1:d9:41:92:e4:ce:ac:b0:42:64:8f:
eb:05:16:64:9b:7e:c1:0b:e8:c4:34:ca:bb:25:cf:
9c:93:a8:04:af:c2:04:0a:b6:24:18:b7:ae:b0:91:
60:52:9f:31:4f:51:fe:c1:e2:10:50:fc:15:93:c2:
05:df:03:f3:20:10:b9:9d:32:02:29:63:44:31:53:
02:f3:f9:28:e1:fe:4a:73:ec:3e:e8:50:bb:6b:92:
0b:fe:3b:1b:d9:4f:ed:5b:b1:82:e7:0c:7e:a7:16:
1a:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:2F:DF:DA:C8:F2:72:EE:EF:D7:ED:F7:26:C8:A3:04:02:92:E9:14
X509v3 Authority Key Identifier:
keyid:17:0E:F7:1A:42:2A:2F:0F:E9:11:60:57:9A:40:50:61:8D:8B:AF:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fw73GkIqLw_pEWBXmkBQYY2LrxA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/e5f7e9-80f9-4317-b21e-8336fec488f3/1/Ci_f2sjycu7v1-33JsijBAKS6RQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/e5f7e9-80f9-4317-b21e-8336fec488f3/1/Fw73GkIqLw_pEWBXmkBQYY2LrxA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.244.20.0/24
178.249.157.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:11:5b:30:ba:ce:c7:9c:f2:73:ee:e3:09:b8:d0:aa:c4:5d:
19:5c:bf:ef:ae:e1:6a:81:dd:9f:d3:1f:1f:fb:31:94:08:c0:
39:b7:a3:14:51:14:2a:cb:53:d1:cf:62:b4:4d:2d:7d:e3:62:
7c:eb:ab:41:81:a9:64:fb:a9:cf:f4:f7:5b:5d:26:50:98:7d:
f5:55:65:73:07:8c:56:b0:8d:f5:10:6b:fc:24:45:41:fe:bd:
79:7b:ea:df:df:d7:79:b5:dc:15:36:02:c1:1e:bd:15:18:18:
a5:e5:68:71:fa:3a:b4:b0:47:35:e0:75:58:39:a7:1d:8a:d8:
ba:d3:59:bb:72:5e:de:7a:13:32:6e:1e:3b:7c:00:6b:44:34:
7d:1b:02:e8:1a:8c:ae:65:1b:38:43:fb:3b:12:f8:e5:ae:13:
55:87:0e:d9:62:b1:19:8e:a4:85:cb:92:52:e9:86:3d:89:6f:
c8:ce:21:09:d5:75:92:d1:eb:aa:41:ed:a8:57:e1:cf:b2:5a:
88:dd:da:e7:58:2f:ef:e4:61:94:a3:03:e4:87:21:0c:a6:56:
fd:fc:1c:6a:bc:c4:bf:f6:29:a6:8c:16:8e:60:9e:7a:c6:6a:
b8:1f:d7:ba:44:d4:28:38:6f:5f:5b:4c:e5:4e:69:1f:4d:00:
53:64:1c:32
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEA1goPzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygx
NzBlZjcxYTQyMmEyZjBmZTkxMTYwNTc5YTQwNTA2MThkOGJhZjEwMB4XDTIyMDEw
MTA1NTQzM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMGEyZmRmZGFjOGYy
NzJlZWVmZDdlZGY3MjZjOGEzMDQwMjkyZTkxNDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJ9vBUBFXNvRukrsT2i4ozn6hS5oqsi/yrR3vcG3C+Pph86C
Oy6w+GUyfSjpaRpuNhDrpqUXJJJUHmwp+HzSFUVylb8HS3YcmV+B4WX/rCW5CnmD
93dvC36dxclGvCYIi0HgDKlLO8D+TcFu6aCjviQyKk3FvCzDb7uff/Ms4h2Kja9W
SSSCZ/IbSPKwYvRld970uN+ocQOLqsHZQZLkzqywQmSP6wUWZJt+wQvoxDTKuyXP
nJOoBK/CBAq2JBi3rrCRYFKfMU9R/sHiEFD8FZPCBd8D8yAQuZ0yAiljRDFTAvP5
KOH+SnPsPuhQu2uSC/47G9lP7VuxgucMfqcWGokCAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBQKL9/ayPJy7u/X7fcmyKMEApLpFDAfBgNVHSMEGDAWgBQXDvcaQiovD+kR
YFeaQFBhjYuvEDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0Z3NzNHa0lxTHdfcEVXQlhta0JRWVkyTHJ4QS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNTUvZTVmN2U5LTgwZjktNDMxNy1iMjFlLTgzMzZmZWM0ODhmMy8x
L0NpX2Yyc2p5Y3U3djEtMzNKc2lqQkFLUzZSUS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTUv
ZTVmN2U5LTgwZjktNDMxNy1iMjFlLTgzMzZmZWM0ODhmMy8xL0Z3NzNHa0lxTHdf
cEVXQlhta0JRWVkyTHJ4QS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAC70FAMEALL5nTANBgkqhkiG9w0B
AQsFAAOCAQEASxFbMLrOx5zyc+7jCbjQqsRdGVy/767haoHdn9MfH/sxlAjAObej
FFEUKstT0c9itE0tfeNifOurQYGpZPupz/T3W10mUJh99VVlcweMVrCN9RBr/CRF
Qf69eXvq39/XebXcFTYCwR69FRgYpeVocfo6tLBHNeB1WDmnHYrYutNZu3Je3noT
Mm4eO3wAa0Q0fRsC6BqMrmUbOEP7OxL45a4TVYcO2WKxGY6khcuSUumGPYlvyM4h
CdV1ktHrqkHtqFfhz7JaiN3a51gv7+RhlKMD5IchDKZW/fwcarzEv/YppowWjmCe
esZquB/XukTUKDhvX1tM5U5pH00AU2QcMg==
-----END CERTIFICATE-----
Generated at Fri Apr 18 06:51:21 2025 by rpki-client