Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/zlw4k3fz3hvPbvONN6narEdJwuk.roa
File: zlw4k3fz3hvPbvONN6narEdJwuk.roa (raw, json)
Hash identifier: whzFcKoxbF16kVv3V3GLTBI55imHzoHABjw7ZRaAHxs=
Subject key identifier: CE:5C:38:93:77:F3:DE:1B:CF:6E:F3:8D:37:A9:DA:AC:47:49:C2:E9
Certificate issuer: /CN=b72945f57103153a07854e74e227f2aec1c5f430
Certificate serial: 0194222009294106F875E99521CDF71CA2CD
Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/zlw4k3fz3hvPbvONN6narEdJwuk.roa
Signing time: Wed 01 Jan 2025 13:48:32 +0000
ROA not before: Wed 01 Jan 2025 13:48:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215535
IP address blocks: 46.38.132.0/24 maxlen: 24
46.38.133.0/24 maxlen: 24
46.38.134.0/24 maxlen: 24
46.38.135.0/24 maxlen: 24
46.38.158.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:09:29:41:06:f8:75:e9:95:21:cd:f7:1c:a2:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430
Validity
Not Before: Jan 1 13:48:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ce5c389377f3de1bcf6ef38d37a9daac4749c2e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:ae:b7:1c:3a:5b:bf:5e:39:13:c5:ee:2e:eb:
64:ac:b1:3c:fa:5e:c5:ce:0a:7b:02:04:48:3f:65:
5e:d5:d8:8f:86:b4:f4:34:0f:58:30:a8:02:99:a4:
9b:e5:86:81:d2:5c:d7:00:04:87:d9:cf:2b:80:b1:
cb:ca:6e:e5:d3:70:61:1f:81:ee:7f:0a:6f:aa:f2:
ad:86:bd:c3:91:13:45:4c:0b:05:a0:98:ad:1d:62:
06:f9:90:68:62:5d:e3:91:78:5e:38:5f:72:e6:f5:
60:bb:79:49:89:d7:83:67:b1:6d:9e:03:06:60:a9:
61:08:29:fa:73:42:f0:e4:0d:43:9f:96:0f:bb:ea:
6b:09:08:1a:60:18:f9:8c:1b:a2:3c:8d:fa:55:a1:
8c:da:39:0e:c5:9f:d2:78:38:58:12:e3:57:c7:ba:
e1:06:a8:e0:5a:f9:04:da:50:44:a9:f9:35:99:91:
86:7b:d7:c8:95:97:98:34:ce:c7:64:7e:a1:cc:d6:
00:65:d8:e3:a9:86:b2:12:49:49:40:d9:42:8b:f4:
3a:d6:b2:33:81:a2:cb:d4:3e:17:54:da:0b:a0:66:
73:2b:88:27:26:37:ec:17:6c:49:83:3f:dd:4c:25:
8f:d6:e5:c1:3c:aa:09:e1:85:bf:91:ed:28:03:c9:
1d:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:5C:38:93:77:F3:DE:1B:CF:6E:F3:8D:37:A9:DA:AC:47:49:C2:E9
X509v3 Authority Key Identifier:
keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/zlw4k3fz3hvPbvONN6narEdJwuk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.38.132.0/22
46.38.158.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:bb:e5:a6:cd:4e:e9:ce:65:f4:ba:4e:9b:a2:5e:43:21:7e:
9b:c7:85:fd:33:63:78:f9:41:83:e4:3b:a4:df:bd:e2:8f:c7:
8d:19:14:26:84:dc:03:58:a6:7a:f9:59:e9:d8:b4:86:dc:3e:
a1:ad:4b:b4:0b:04:4c:b0:38:ab:1c:06:9e:1e:ac:9c:4b:e5:
cb:80:9d:4e:b7:46:d5:d9:d6:73:bd:bd:e4:d3:4d:d7:6e:ae:
89:59:85:62:72:38:7a:56:6d:3d:f9:fb:15:7d:65:10:75:18:
af:20:7a:ce:22:e8:6f:bd:c8:96:7b:cd:d1:5f:f9:cb:13:fa:
8e:86:85:5c:a5:69:45:47:4a:69:8f:21:39:8f:62:24:f0:49:
7b:35:60:50:a6:78:83:6c:a2:5a:fd:1f:68:fb:6c:a7:52:26:
92:df:a7:75:99:e7:99:ad:20:04:2e:6c:81:03:81:ab:5a:e6:
ae:93:46:66:ba:c5:2e:2c:f9:ab:0a:0b:16:05:b9:73:c0:09:
cb:c3:fb:92:2e:5d:1d:ee:ae:44:d3:e9:5c:22:5c:2a:26:29:
b3:cb:b1:73:40:0f:a6:44:80:87:d4:54:c3:fb:e9:57:f4:a0:
96:75:5d:df:e2:08:ba:b0:5e:8c:e0:8a:5d:7d:6e:5d:12:f3:
d2:69:82:1d
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQiIAkpQQb4demVIc33HKLNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3Mjk0NWY1NzEwMzE1M2EwNzg1NGU3NGUyMjdmMmFlYzFj
NWY0MzAwHhcNMjUwMTAxMTM0ODMyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZTVjMzg5Mzc3ZjNkZTFiY2Y2ZWYzOGQzN2E5ZGFhYzQ3NDljMmU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkK63HDpbv145E8XuLutkrLE8+l7F
zgp7AgRIP2Ve1diPhrT0NA9YMKgCmaSb5YaB0lzXAASH2c8rgLHLym7l03BhH4Hu
fwpvqvKthr3DkRNFTAsFoJitHWIG+ZBoYl3jkXheOF9y5vVgu3lJideDZ7FtngMG
YKlhCCn6c0Lw5A1Dn5YPu+prCQgaYBj5jBuiPI36VaGM2jkOxZ/SeDhYEuNXx7rh
BqjgWvkE2lBEqfk1mZGGe9fIlZeYNM7HZH6hzNYAZdjjqYayEklJQNlCi/Q61rIz
gaLL1D4XVNoLoGZzK4gnJjfsF2xJgz/dTCWP1uXBPKoJ4YW/ke0oA8kdgwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFM5cOJN3894bz27zjTep2qxHScLpMB8GA1UdIwQY
MBaAFLcpRfVxAxU6B4VOdOIn8q7BxfQwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdHlsRjlYRURGVG9IaFU1MDRpZnlyc0hGOURBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS81ZjY5MDYtM2ZiMC00ZGZmLThkMDEt
MmEwOWNjNTNhODA1LzEvemx3NGszZnozaHZQYnZPTk42bmFyRWRKd3VrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS81ZjY5MDYtM2ZiMC00ZGZmLThkMDEtMmEwOWNjNTNhODA1
LzEvdHlsRjlYRURGVG9IaFU1MDRpZnlyc0hGOURBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCLiaEAwQA
LiaeMA0GCSqGSIb3DQEBCwUAA4IBAQC2u+WmzU7pzmX0uk6bol5DIX6bx4X9M2N4
+UGD5Duk373ij8eNGRQmhNwDWKZ6+Vnp2LSG3D6hrUu0CwRMsDirHAaeHqycS+XL
gJ1Ot0bV2dZzvb3k003Xbq6JWYVicjh6Vm09+fsVfWUQdRivIHrOIuhvvciWe83R
X/nLE/qOhoVcpWlFR0ppjyE5j2Ik8El7NWBQpniDbKJa/R9o+2ynUiaS36d1meeZ
rSAELmyBA4GrWuauk0ZmusUuLPmrCgsWBblzwAnLw/uSLl0d7q5E0+lcIlwqJimz
y7FzQA+mRICH1FTD++lX9KCWdV3f4gi6sF6M4IpdfW5dEvPSaYId
-----END CERTIFICATE-----
Generated at Tue Apr 8 21:18:24 2025 by rpki-client