Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/66650a-598a-4389-941f-534b8cd652e9/1/CK5OwOiGaEqVwo-YKnguP745KMY.roa
File: CK5OwOiGaEqVwo-YKnguP745KMY.roa (raw, json)
Hash identifier: A/BEklrCD+whYVqSqE4ctRcYYnzQ35ctbU126Ujt5AA=
Subject key identifier: 08:AE:4E:C0:E8:86:68:4A:95:C2:8F:98:2A:78:2E:3F:BE:39:28:C6
Certificate issuer: /CN=1bf268175c5a09a7afd0d87851824e1db73f7e7b
Certificate serial: 019421B1FEF7E66E3F4B2215DC8A836A814B
Authority key identifier: 1B:F2:68:17:5C:5A:09:A7:AF:D0:D8:78:51:82:4E:1D:B7:3F:7E:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G_JoF1xaCaev0Nh4UYJOHbc_fns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/66650a-598a-4389-941f-534b8cd652e9/1/CK5OwOiGaEqVwo-YKnguP745KMY.roa
Signing time: Wed 01 Jan 2025 11:48:20 +0000
ROA not before: Wed 01 Jan 2025 11:48:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43581
IP address blocks: 46.253.143.0/24 maxlen: 24
91.211.115.0/24 maxlen: 24
193.17.92.0/24 maxlen: 24
2a11:1940::/29 maxlen: 29
2a13:a500::/32 maxlen: 32
2a13:a502::/32 maxlen: 32
2a13:a503::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:fe:f7:e6:6e:3f:4b:22:15:dc:8a:83:6a:81:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bf268175c5a09a7afd0d87851824e1db73f7e7b
Validity
Not Before: Jan 1 11:48:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=08ae4ec0e886684a95c28f982a782e3fbe3928c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:a0:3f:11:cb:b9:54:17:7b:f2:3c:83:a6:f6:
8a:61:ec:3d:3b:4f:1a:7a:54:5e:33:c3:54:f5:bc:
82:3b:f4:85:db:f8:fa:60:82:63:3c:5a:16:77:6f:
c0:fb:a6:09:93:fb:f6:0a:bb:c6:93:fa:d2:ed:b4:
56:04:2e:a5:1d:2f:51:60:70:9e:7e:31:68:f3:a2:
94:f0:97:a0:8e:50:17:fb:1b:90:b4:11:d8:21:3a:
82:89:b1:d0:50:d2:fc:76:91:24:1d:4f:0c:4b:f5:
78:12:32:4c:98:6e:9a:6f:10:e5:81:d1:b3:9f:70:
6e:71:eb:a7:d5:21:e5:e8:84:b3:ec:34:1a:97:c0:
24:27:18:16:5c:7b:ad:6c:96:27:74:ce:18:77:26:
5f:59:50:de:76:35:e6:e2:bd:44:d9:a3:9d:83:5e:
0c:14:65:a9:40:eb:38:de:8f:4e:7a:f8:7d:59:c0:
63:0e:be:ef:c0:23:fc:cd:f7:6c:7c:c7:c0:9d:05:
87:cf:ca:26:32:ef:af:a0:dc:54:ec:0d:b8:3e:83:
17:35:36:49:9a:4d:f6:9f:2a:55:32:79:ac:85:94:
fb:79:57:42:ca:28:26:35:5a:38:c7:2e:13:d3:71:
e2:68:43:72:20:b9:9a:bd:c8:7b:14:de:7b:0b:2b:
8a:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:AE:4E:C0:E8:86:68:4A:95:C2:8F:98:2A:78:2E:3F:BE:39:28:C6
X509v3 Authority Key Identifier:
keyid:1B:F2:68:17:5C:5A:09:A7:AF:D0:D8:78:51:82:4E:1D:B7:3F:7E:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G_JoF1xaCaev0Nh4UYJOHbc_fns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/66650a-598a-4389-941f-534b8cd652e9/1/CK5OwOiGaEqVwo-YKnguP745KMY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/66650a-598a-4389-941f-534b8cd652e9/1/G_JoF1xaCaev0Nh4UYJOHbc_fns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.253.143.0/24
91.211.115.0/24
193.17.92.0/24
IPv6:
2a11:1940::/29
2a13:a500::/32
2a13:a502::/31
Signature Algorithm: sha256WithRSAEncryption
25:9d:eb:9e:d3:b5:bb:ac:14:72:c7:fa:fb:d4:b6:c2:ef:77:
03:04:bb:0a:e3:d2:cc:4d:a2:c7:fa:fd:70:ce:23:43:35:bf:
f5:a0:1e:3f:8b:f4:01:70:8e:5f:ed:29:0a:f3:b2:08:25:61:
80:a1:53:a6:5a:9f:27:cd:da:2e:83:9a:0e:c4:f3:d6:9c:23:
70:82:13:22:65:5a:08:2e:10:2c:48:66:46:09:64:ad:42:e7:
21:02:79:42:33:21:54:f4:a4:24:09:b3:f8:f3:86:95:5e:b5:
fd:39:03:b3:ed:05:6f:51:21:03:18:0b:91:4a:a9:d4:a9:4d:
3a:99:1f:77:0c:1d:a2:fa:19:f3:d2:ee:f1:18:b3:81:12:4f:
f5:db:65:27:a2:51:0a:f6:6f:9e:32:f1:bc:8a:4a:d5:53:bb:
db:2d:80:a5:e0:31:c5:30:78:f5:cd:61:61:42:2a:54:0d:88:
f4:f9:be:a9:79:b8:fe:e1:5c:d9:fc:ec:09:14:d0:2a:ad:94:
79:06:57:81:31:dd:53:c8:1c:94:56:13:b6:98:63:a9:6e:79:
b9:a1:98:0a:f1:24:5d:47:f5:47:d1:32:37:7c:d5:e1:19:5b:
cb:b1:26:ba:64:b5:b4:ee:cd:0b:d9:e0:98:4e:eb:4d:10:88:
e9:2e:6d:1f
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgISAZQhsf735m4/SyIV3IqDaoFLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiZjI2ODE3NWM1YTA5YTdhZmQwZDg3ODUxODI0ZTFkYjcz
ZjdlN2IwHhcNMjUwMTAxMTE0ODIwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwOGFlNGVjMGU4ODY2ODRhOTVjMjhmOTgyYTc4MmUzZmJlMzkyOGM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA66A/Ecu5VBd78jyDpvaKYew9O08a
elReM8NU9byCO/SF2/j6YIJjPFoWd2/A+6YJk/v2CrvGk/rS7bRWBC6lHS9RYHCe
fjFo86KU8JegjlAX+xuQtBHYITqCibHQUNL8dpEkHU8MS/V4EjJMmG6abxDlgdGz
n3Buceun1SHl6ISz7DQal8AkJxgWXHutbJYndM4YdyZfWVDedjXm4r1E2aOdg14M
FGWpQOs43o9Oevh9WcBjDr7vwCP8zfdsfMfAnQWHz8omMu+voNxU7A24PoMXNTZJ
mk32nypVMnmshZT7eVdCyigmNVo4xy4T03HiaENyILmavch7FN57CyuKfQIDAQAB
o4ICMjCCAi4wHQYDVR0OBBYEFAiuTsDohmhKlcKPmCp4Lj++OSjGMB8GA1UdIwQY
MBaAFBvyaBdcWgmnr9DYeFGCTh23P357MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR19Kb0YxeGFDYWV2ME5oNFVZSk9IYmNfZm5zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni82NjY1MGEtNTk4YS00Mzg5LTk0MWYt
NTM0YjhjZDY1MmU5LzEvQ0s1T3dPaUdhRXFWd28tWUtuZ3VQNzQ1S01ZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni82NjY1MGEtNTk4YS00Mzg5LTk0MWYtNTM0YjhjZDY1MmU5
LzEvR19Kb0YxeGFDYWV2ME5oNFVZSk9IYmNfZm5zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEgGCCsGAQUFBwEHAQH/BDkwNzAYBAIAATASAwQALv2PAwQA
W9NzAwQAwRFcMBsEAgACMBUDBQMqERlAAwUAKhOlAAMFASoTpQIwDQYJKoZIhvcN
AQELBQADggEBACWd657TtbusFHLH+vvUtsLvdwMEuwrj0sxNosf6/XDOI0M1v/Wg
Hj+L9AFwjl/tKQrzsgglYYChU6ZanyfN2i6Dmg7E89acI3CCEyJlWgguECxIZkYJ
ZK1C5yECeUIzIVT0pCQJs/jzhpVetf05A7PtBW9RIQMYC5FKqdSpTTqZH3cMHaL6
GfPS7vEYs4EST/XbZSeiUQr2b54y8byKStVTu9stgKXgMcUwePXNYWFCKlQNiPT5
vql5uP7hXNn87AkU0CqtlHkGV4Ex3VPIHJRWE7aYY6luebmhmArxJF1H9UfRMjd8
1eEZW8uxJrpktbTuzQvZ4JhO600QiOkubR8=
-----END CERTIFICATE-----
Generated at Mon Apr 7 13:39:38 2025 by rpki-client