Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/X9nzYcXU9EgIVl_7ZZWxlGNl4g4.roa
File: X9nzYcXU9EgIVl_7ZZWxlGNl4g4.roa (raw, json)
Hash identifier: wL/WH3TZ58EyBKIgJ0ej+sAXqdnuotdQ0gWq1xiVtwU=
Subject key identifier: 5F:D9:F3:61:C5:D4:F4:48:08:56:5F:FB:65:95:B1:94:63:65:E2:0E
Certificate issuer: /CN=67499595a65aab0b53768def08091e31061e9e65
Certificate serial: 019427B548C3B21033152E45007F155E8551
Authority key identifier: 67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/X9nzYcXU9EgIVl_7ZZWxlGNl4g4.roa
Signing time: Thu 02 Jan 2025 15:49:39 +0000
ROA not before: Thu 02 Jan 2025 15:49:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51847
IP address blocks: 46.20.109.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:48:c3:b2:10:33:15:2e:45:00:7f:15:5e:85:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67499595a65aab0b53768def08091e31061e9e65
Validity
Not Before: Jan 2 15:49:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5fd9f361c5d4f44808565ffb6595b1946365e20e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:35:a7:f7:e7:04:30:2c:c2:3e:60:c7:cf:fe:
1f:45:2d:7f:64:13:28:9e:f2:d2:3a:66:1a:9d:c8:
a2:e0:30:59:7b:80:9d:9f:14:7d:59:e0:e5:2a:1e:
82:6d:97:7a:79:de:47:25:54:6f:7c:54:aa:64:06:
2f:21:62:ab:d5:09:23:61:06:e9:89:72:cb:6e:08:
fc:f3:81:b4:b4:e4:59:98:55:0f:f2:e5:4e:ed:c9:
b0:3e:fa:01:f2:52:aa:c7:1a:65:7e:6b:70:f4:a2:
5e:3b:2e:61:97:7e:ea:ad:de:26:3c:2c:dd:b9:8c:
97:73:ce:c7:9b:2f:b9:82:89:48:cf:2a:65:25:3b:
31:a8:fb:c0:66:ac:6d:80:3f:45:f1:b2:f0:24:2b:
10:bb:af:78:fb:23:41:f3:a8:f4:69:c1:21:80:df:
9d:eb:83:2e:65:4a:a7:b4:6e:7c:5a:ca:70:db:6c:
be:06:f9:ba:05:0e:10:ae:fc:b1:e7:6c:d8:02:19:
13:f5:d7:87:45:8f:36:28:f8:5a:3f:51:ec:e8:9c:
76:e7:c7:31:fd:0b:b1:36:ec:af:0c:07:87:13:4a:
72:84:b3:0e:1e:fb:c8:22:bb:bc:02:c7:13:fc:25:
00:a3:9a:a5:72:cd:09:e4:44:28:a4:8f:38:58:35:
c8:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:D9:F3:61:C5:D4:F4:48:08:56:5F:FB:65:95:B1:94:63:65:E2:0E
X509v3 Authority Key Identifier:
keyid:67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/X9nzYcXU9EgIVl_7ZZWxlGNl4g4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.20.109.0/24
Signature Algorithm: sha256WithRSAEncryption
58:26:d9:2d:f0:f8:16:ce:46:82:c8:a7:7f:b2:33:3c:7f:ee:
16:e4:62:76:6d:a8:99:08:e3:e0:a1:ea:05:49:cd:9c:6f:94:
8c:fd:e6:c8:ec:08:85:0c:3e:3c:c9:ad:f4:e1:b6:43:64:09:
bd:70:3c:19:a0:32:06:14:c7:af:ca:c6:c0:d1:bc:dd:27:10:
7f:4e:4c:e8:b0:fa:67:f1:d3:13:38:ff:03:90:0c:fb:e6:78:
b3:a7:35:0a:58:f6:57:f8:34:7b:a7:d2:f3:1f:3e:7d:6d:cd:
0a:78:4b:99:6a:09:1a:35:72:d6:17:0a:14:0b:5a:d0:c9:e2:
91:58:4b:54:ac:3e:82:3a:ef:0b:bb:54:8a:9d:a1:44:67:17:
10:6e:a2:4b:92:5f:4c:4d:ff:35:ea:5f:25:28:63:67:d3:e1:
2e:cd:64:63:9d:1c:5e:6b:b3:ca:56:d3:52:74:94:b5:72:ee:
b4:c7:ac:f4:fc:83:91:db:5b:fd:56:3f:63:35:11:55:83:85:
b7:f9:05:00:90:d2:d5:4e:f3:b8:b7:2c:fd:b9:0d:56:d5:18:
1b:cc:f9:29:da:ea:e7:a9:56:d3:25:d0:f4:17:b9:71:72:52:
3d:8f:10:58:ae:81:92:f3:21:b0:66:f1:66:c1:d3:c7:55:a4:
25:54:20:c8
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQntUjDshAzFS5FAH8VXoVRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3NDk5NTk1YTY1YWFiMGI1Mzc2OGRlZjA4MDkxZTMxMDYx
ZTllNjUwHhcNMjUwMTAyMTU0OTM5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZmQ5ZjM2MWM1ZDRmNDQ4MDg1NjVmZmI2NTk1YjE5NDYzNjVlMjBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApzWn9+cEMCzCPmDHz/4fRS1/ZBMo
nvLSOmYancii4DBZe4CdnxR9WeDlKh6CbZd6ed5HJVRvfFSqZAYvIWKr1QkjYQbp
iXLLbgj884G0tORZmFUP8uVO7cmwPvoB8lKqxxplfmtw9KJeOy5hl37qrd4mPCzd
uYyXc87Hmy+5golIzyplJTsxqPvAZqxtgD9F8bLwJCsQu694+yNB86j0acEhgN+d
64MuZUqntG58Wspw22y+Bvm6BQ4Qrvyx52zYAhkT9deHRY82KPhaP1Hs6Jx258cx
/QuxNuyvDAeHE0pyhLMOHvvIIru8AscT/CUAo5qlcs0J5EQopI84WDXI5QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFF/Z82HF1PRICFZf+2WVsZRjZeIOMB8GA1UdIwQY
MBaAFGdJlZWmWqsLU3aN7wgJHjEGHp5lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjBtVmxhWmFxd3RUZG8zdkNBa2VNUVllbm1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9iNzQ0YjgtZjM5ZC00OTViLWIyMTct
MzU1MDgwNDE2NTJkLzEvWDluelljWFU5RWdJVmxfN1paV3hsR05sNGc0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi9iNzQ0YjgtZjM5ZC00OTViLWIyMTctMzU1MDgwNDE2NTJk
LzEvWjBtVmxhWmFxd3RUZG8zdkNBa2VNUVllbm1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALhRtMA0G
CSqGSIb3DQEBCwUAA4IBAQBYJtkt8PgWzkaCyKd/sjM8f+4W5GJ2baiZCOPgoeoF
Sc2cb5SM/ebI7AiFDD48ya304bZDZAm9cDwZoDIGFMevysbA0bzdJxB/TkzosPpn
8dMTOP8DkAz75nizpzUKWPZX+DR7p9LzHz59bc0KeEuZagkaNXLWFwoUC1rQyeKR
WEtUrD6COu8Lu1SKnaFEZxcQbqJLkl9MTf816l8lKGNn0+EuzWRjnRxea7PKVtNS
dJS1cu60x6z0/IOR21v9Vj9jNRFVg4W3+QUAkNLVTvO4tyz9uQ1W1RgbzPkp2urn
qVbTJdD0F7lxclI9jxBYroGS8yGwZvFmwdPHVaQlVCDI
-----END CERTIFICATE-----
Generated at Wed Feb 19 20:46:02 2025 by rpki-client