Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/qltzl_twRyQduWA_Z9b6CHzg6-E.roa
File: qltzl_twRyQduWA_Z9b6CHzg6-E.roa (raw, json)
Hash identifier: bklkW5Sgk8x13hv5wfwpemC+HWDB7IwQvx4sqMOAjnU=
Subject key identifier: AA:5B:73:97:FB:70:47:24:1D:B9:60:3F:67:D6:FA:08:7C:E0:EB:E1
Certificate issuer: /CN=b72945f57103153a07854e74e227f2aec1c5f430
Certificate serial: 01942220074670E9C75A20046BC93668C0FE
Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/qltzl_twRyQduWA_Z9b6CHzg6-E.roa
Signing time: Wed 01 Jan 2025 13:48:31 +0000
ROA not before: Wed 01 Jan 2025 13:48:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213382
IP address blocks: 46.38.156.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:07:46:70:e9:c7:5a:20:04:6b:c9:36:68:c0:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430
Validity
Not Before: Jan 1 13:48:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=aa5b7397fb7047241db9603f67d6fa087ce0ebe1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:28:06:10:17:f1:6e:fa:a9:1f:04:d8:8d:59:
fe:f4:0c:79:b1:08:90:c5:88:2c:19:29:bd:2c:44:
3f:ea:95:b0:de:fe:bc:c8:fe:b9:10:f8:78:3b:0e:
ac:e5:ee:97:9b:14:a6:5d:bd:72:f7:03:8a:cf:e8:
b8:34:c0:d4:a6:20:bf:0d:a6:54:24:d6:28:71:63:
6b:ca:b2:71:78:d9:18:a2:dc:bd:41:63:ff:f3:f3:
83:dc:9d:65:90:ce:c7:ba:79:3c:5c:88:74:a9:e1:
40:47:0b:f3:c5:d2:6b:a9:8a:45:f2:57:f6:af:e7:
b1:f8:f4:7e:37:9e:0c:c4:76:04:af:86:0b:31:b2:
84:08:6a:d7:0d:56:3d:51:6a:ef:f0:80:ab:10:9e:
50:9d:23:a3:eb:9f:a7:73:91:98:e2:68:cc:20:11:
93:c2:9c:e0:91:cb:18:0b:db:56:a0:a5:8f:eb:ff:
9d:ea:28:1f:6a:87:b8:98:e7:cc:1d:ab:15:11:84:
08:43:d1:c5:a2:48:1b:fb:99:ee:38:c8:26:6c:e1:
03:d9:78:31:ff:c4:11:a6:81:ce:15:74:af:0e:11:
b0:8d:14:49:b5:97:5e:ec:e0:32:53:9c:f9:90:f0:
17:c6:f9:78:c7:76:e2:1b:29:62:35:a3:63:bc:72:
7b:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:5B:73:97:FB:70:47:24:1D:B9:60:3F:67:D6:FA:08:7C:E0:EB:E1
X509v3 Authority Key Identifier:
keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/qltzl_twRyQduWA_Z9b6CHzg6-E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.38.156.0/24
Signature Algorithm: sha256WithRSAEncryption
12:b8:d7:20:4e:56:8d:b2:6d:b6:d7:4b:69:28:7b:ab:29:e6:
58:a4:34:00:19:4b:a4:dc:ef:ab:8f:2e:eb:15:7c:f7:27:c6:
db:73:db:a9:0c:a6:6c:7c:ea:05:0a:a1:02:7a:25:83:aa:04:
d6:67:88:87:bb:ed:4e:d3:ba:91:bb:a5:ae:0c:4e:b6:b1:5c:
e3:fa:35:c8:33:fd:6f:25:1d:ef:a3:3a:23:55:4c:7f:f6:23:
c3:85:4a:cc:e3:ca:5c:1a:5d:75:3f:65:83:ab:9d:b0:2f:75:
40:24:9a:e9:bd:d0:28:16:f3:6e:63:63:16:dd:05:d2:22:82:
69:71:37:0d:5d:5b:0f:54:49:39:97:db:01:96:1d:d4:29:53:
53:d6:48:5b:d8:03:86:37:ee:ff:ea:54:f3:cc:c8:97:46:73:
03:9a:a6:e9:1f:02:1e:dc:37:69:89:3b:3e:26:e7:55:34:a2:
a0:84:db:72:e0:15:0f:eb:6d:8f:c0:8b:7d:94:8a:fd:4b:db:
63:80:08:6b:78:75:70:73:e7:37:6b:38:56:60:25:3e:d1:20:
52:37:86:62:de:9e:2d:72:d2:85:be:ce:15:9c:01:78:72:e5:
b9:0e:a1:2d:93:df:19:7f:15:20:6f:1d:ac:2e:68:01:73:cc:
39:42:cb:b9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQiIAdGcOnHWiAEa8k2aMD+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3Mjk0NWY1NzEwMzE1M2EwNzg1NGU3NGUyMjdmMmFlYzFj
NWY0MzAwHhcNMjUwMTAxMTM0ODMxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYTViNzM5N2ZiNzA0NzI0MWRiOTYwM2Y2N2Q2ZmEwODdjZTBlYmUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7SgGEBfxbvqpHwTYjVn+9Ax5sQiQ
xYgsGSm9LEQ/6pWw3v68yP65EPh4Ow6s5e6XmxSmXb1y9wOKz+i4NMDUpiC/DaZU
JNYocWNryrJxeNkYoty9QWP/8/OD3J1lkM7Hunk8XIh0qeFARwvzxdJrqYpF8lf2
r+ex+PR+N54MxHYEr4YLMbKECGrXDVY9UWrv8ICrEJ5QnSOj65+nc5GY4mjMIBGT
wpzgkcsYC9tWoKWP6/+d6igfaoe4mOfMHasVEYQIQ9HFokgb+5nuOMgmbOED2Xgx
/8QRpoHOFXSvDhGwjRRJtZde7OAyU5z5kPAXxvl4x3biGyliNaNjvHJ7RQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKpbc5f7cEckHblgP2fW+gh84OvhMB8GA1UdIwQY
MBaAFLcpRfVxAxU6B4VOdOIn8q7BxfQwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdHlsRjlYRURGVG9IaFU1MDRpZnlyc0hGOURBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS81ZjY5MDYtM2ZiMC00ZGZmLThkMDEt
MmEwOWNjNTNhODA1LzEvcWx0emxfdHdSeVFkdVdBX1o5YjZDSHpnNi1FLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS81ZjY5MDYtM2ZiMC00ZGZmLThkMDEtMmEwOWNjNTNhODA1
LzEvdHlsRjlYRURGVG9IaFU1MDRpZnlyc0hGOURBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALiacMA0G
CSqGSIb3DQEBCwUAA4IBAQASuNcgTlaNsm2210tpKHurKeZYpDQAGUuk3O+rjy7r
FXz3J8bbc9upDKZsfOoFCqECeiWDqgTWZ4iHu+1O07qRu6WuDE62sVzj+jXIM/1v
JR3vozojVUx/9iPDhUrM48pcGl11P2WDq52wL3VAJJrpvdAoFvNuY2MW3QXSIoJp
cTcNXVsPVEk5l9sBlh3UKVNT1khb2AOGN+7/6lTzzMiXRnMDmqbpHwIe3DdpiTs+
JudVNKKghNty4BUP622PwIt9lIr9S9tjgAhreHVwc+c3azhWYCU+0SBSN4Zi3p4t
ctKFvs4VnAF4cuW5DqEtk98ZfxUgbx2sLmgBc8w5Qsu5
-----END CERTIFICATE-----
Generated at Sun Apr 6 16:27:21 2025 by rpki-client