Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/P-eQpP0VJWEmOBIoAzO8wStnps0.roa
File: P-eQpP0VJWEmOBIoAzO8wStnps0.roa (raw, json)
Hash identifier: w+XwEpQe64GzkNtJkYCG3hJ4iMhqYb/VIP280W9p76I=
Subject key identifier: 3F:E7:90:A4:FD:15:25:61:26:38:12:28:03:33:BC:C1:2B:67:A6:CD
Certificate issuer: /CN=b72945f57103153a07854e74e227f2aec1c5f430
Certificate serial: 01954318065CA20127531E05694929A63859
Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/P-eQpP0VJWEmOBIoAzO8wStnps0.roa
Signing time: Wed 26 Feb 2025 16:30:02 +0000
ROA not before: Wed 26 Feb 2025 16:30:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200239
IP address blocks: 46.38.153.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:43:18:06:5c:a2:01:27:53:1e:05:69:49:29:a6:38:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430
Validity
Not Before: Feb 26 16:30:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3fe790a4fd152561263812280333bcc12b67a6cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:67:85:f8:c7:0c:5e:d2:87:e2:d2:78:41:e4:
14:bd:b5:ce:c7:b5:27:79:3b:21:8c:96:84:61:1f:
f5:0e:ec:52:e8:84:47:f9:93:9b:16:58:74:d0:93:
51:0c:7d:51:98:89:a7:6e:ce:5a:1d:d4:65:1b:5b:
dc:20:42:70:49:25:91:8f:cc:30:bf:39:e4:85:56:
d4:83:c0:a1:e9:de:12:2f:e0:0e:39:d9:60:2c:55:
63:77:b0:82:1f:c8:d5:8a:42:ff:6c:53:66:c3:56:
2e:ea:8c:36:08:23:ee:6f:e1:80:97:64:74:63:28:
3d:ea:37:0f:b8:dc:03:9a:d6:ef:d8:7d:da:df:2b:
00:da:8a:66:ee:0f:dd:c1:c7:04:ac:ad:f9:36:96:
6f:84:42:f2:68:d4:55:1d:8c:c0:04:f0:ef:c0:4a:
b5:7d:fa:63:b1:ed:f8:56:8f:34:64:00:a1:5f:c7:
7b:a7:16:17:44:72:f4:0e:f3:53:f8:15:01:8f:d4:
7f:cc:47:8b:3c:23:90:ae:62:77:bb:4b:31:ed:a3:
90:60:29:f9:1e:98:f7:82:c1:1c:b7:85:9c:34:5e:
91:37:78:7e:1b:07:d1:a1:f0:83:1f:f0:3a:ca:f5:
44:2c:2d:a7:42:da:17:d3:61:2d:97:c4:ab:d9:b1:
76:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:E7:90:A4:FD:15:25:61:26:38:12:28:03:33:BC:C1:2B:67:A6:CD
X509v3 Authority Key Identifier:
keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/P-eQpP0VJWEmOBIoAzO8wStnps0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.38.153.0/24
Signature Algorithm: sha256WithRSAEncryption
01:b9:6b:9f:c1:1e:1b:9d:7c:dc:06:52:13:29:a9:7d:7b:a9:
4b:1b:57:22:f1:f0:86:ba:82:6e:6b:9a:7e:61:df:68:30:f7:
8a:3e:41:c4:c6:fd:d0:54:3d:4d:4d:75:dc:42:99:08:a6:49:
c7:f4:1e:70:75:1a:fb:48:c8:48:a5:26:16:2b:0e:29:d7:f2:
97:4d:2c:bb:da:66:11:e8:48:c9:18:9b:a7:f7:0b:fd:13:01:
20:dc:3b:75:42:9c:70:9d:04:c3:ba:4a:0e:b4:c0:96:42:09:
cd:ee:eb:62:0d:38:cc:38:7f:d0:46:5e:a8:76:a6:77:ac:a0:
f5:8e:d5:b5:16:01:6f:e0:64:41:e0:f4:b0:44:b1:e2:3d:6f:
22:b9:08:ee:f8:95:e3:72:54:f8:2c:4f:5d:4c:71:01:5b:94:
a4:ab:af:ac:85:2f:f4:f4:c1:5e:5d:83:48:af:23:0d:1d:ec:
67:ef:18:62:7f:70:fa:25:ac:c6:cb:8e:70:d9:47:ed:56:3e:
66:0e:32:f7:45:f9:23:3f:a6:da:9a:a6:43:32:86:fc:cb:d4:
d3:81:f1:71:90:99:74:c0:93:d5:4e:26:09:46:2a:ad:19:a7:
6c:4a:b6:96:19:f1:0c:45:a9:0f:bb:b7:6c:5e:91:80:8b:73:
99:f8:8d:7f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZVDGAZcogEnUx4FaUkppjhZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3Mjk0NWY1NzEwMzE1M2EwNzg1NGU3NGUyMjdmMmFlYzFj
NWY0MzAwHhcNMjUwMjI2MTYzMDAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZmU3OTBhNGZkMTUyNTYxMjYzODEyMjgwMzMzYmNjMTJiNjdhNmNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyGeF+McMXtKH4tJ4QeQUvbXOx7Un
eTshjJaEYR/1DuxS6IRH+ZObFlh00JNRDH1RmImnbs5aHdRlG1vcIEJwSSWRj8ww
vznkhVbUg8Ch6d4SL+AOOdlgLFVjd7CCH8jVikL/bFNmw1Yu6ow2CCPub+GAl2R0
Yyg96jcPuNwDmtbv2H3a3ysA2opm7g/dwccErK35NpZvhELyaNRVHYzABPDvwEq1
ffpjse34Vo80ZAChX8d7pxYXRHL0DvNT+BUBj9R/zEeLPCOQrmJ3u0sx7aOQYCn5
Hpj3gsEct4WcNF6RN3h+GwfRofCDH/A6yvVELC2nQtoX02Etl8Sr2bF2nwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFD/nkKT9FSVhJjgSKAMzvMErZ6bNMB8GA1UdIwQY
MBaAFLcpRfVxAxU6B4VOdOIn8q7BxfQwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdHlsRjlYRURGVG9IaFU1MDRpZnlyc0hGOURBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS81ZjY5MDYtM2ZiMC00ZGZmLThkMDEt
MmEwOWNjNTNhODA1LzEvUC1lUXBQMFZKV0VtT0JJb0F6Tzh3U3RucHMwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS81ZjY5MDYtM2ZiMC00ZGZmLThkMDEtMmEwOWNjNTNhODA1
LzEvdHlsRjlYRURGVG9IaFU1MDRpZnlyc0hGOURBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALiaZMA0G
CSqGSIb3DQEBCwUAA4IBAQABuWufwR4bnXzcBlITKal9e6lLG1ci8fCGuoJua5p+
Yd9oMPeKPkHExv3QVD1NTXXcQpkIpknH9B5wdRr7SMhIpSYWKw4p1/KXTSy72mYR
6EjJGJun9wv9EwEg3Dt1QpxwnQTDukoOtMCWQgnN7utiDTjMOH/QRl6odqZ3rKD1
jtW1FgFv4GRB4PSwRLHiPW8iuQju+JXjclT4LE9dTHEBW5Skq6+shS/09MFeXYNI
ryMNHexn7xhif3D6JazGy45w2UftVj5mDjL3RfkjP6bamqZDMob8y9TTgfFxkJl0
wJPVTiYJRiqtGadsSraWGfEMRakPu7dsXpGAi3OZ+I1/
-----END CERTIFICATE-----
Generated at Sun Apr 6 19:32:21 2025 by rpki-client