Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/828652-addf-4fe8-9fe6-4b1f61653f3d/1/ILIqRbOHVwxkFJKFfUD52n880mI.roa
File: ILIqRbOHVwxkFJKFfUD52n880mI.roa (raw, json)
Hash identifier: cti4+XaqWa64ZvOhVwfuqQKsUk/NB8Q0npKWhfOyakI=
Subject key identifier: 20:B2:2A:45:B3:87:57:0C:64:14:92:85:7D:40:F9:DA:7F:3C:D2:62
Certificate issuer: /CN=13932782ee7758990404fa1ccfb09ec23a86123f
Certificate serial: 01941F8C1D0069078687C3952D2662296A33
Authority key identifier: 13:93:27:82:EE:77:58:99:04:04:FA:1C:CF:B0:9E:C2:3A:86:12:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E5Mngu53WJkEBPocz7CewjqGEj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/828652-addf-4fe8-9fe6-4b1f61653f3d/1/ILIqRbOHVwxkFJKFfUD52n880mI.roa
Signing time: Wed 01 Jan 2025 01:47:43 +0000
ROA not before: Wed 01 Jan 2025 01:47:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9153
IP address blocks: 46.248.96.0/19 maxlen: 19
82.136.0.0/18 maxlen: 18
82.136.4.0/23 maxlen: 23
82.136.8.0/22 maxlen: 22
82.136.48.0/22 maxlen: 22
195.22.128.0/23 maxlen: 23
195.68.206.0/24 maxlen: 24
2001:4088::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:1d:00:69:07:86:87:c3:95:2d:26:62:29:6a:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13932782ee7758990404fa1ccfb09ec23a86123f
Validity
Not Before: Jan 1 01:47:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=20b22a45b387570c641492857d40f9da7f3cd262
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:63:07:32:7b:a6:e0:57:3c:6f:03:ef:42:d7:
89:2a:cb:d5:f3:dd:06:17:2f:c5:91:5b:b8:02:6c:
8b:d5:60:08:f4:af:d1:0f:40:f6:ed:12:83:b0:54:
cf:2f:f3:bc:4d:2b:14:b3:b7:7a:f1:77:4e:44:1f:
75:67:6e:a3:b8:24:6f:ee:5c:ee:27:01:98:a2:c7:
a2:91:5b:2e:58:3b:9e:9d:18:0c:09:08:d6:7e:f6:
98:81:51:8a:1d:83:24:a4:1d:64:46:02:fa:33:f4:
76:72:83:ff:e3:52:40:16:8c:e6:d8:25:82:87:2e:
ce:2c:8f:b6:94:1d:75:4a:2e:04:d4:e9:80:74:92:
cd:02:8d:57:dd:ef:36:c4:0d:52:40:2d:1d:56:8c:
d0:0f:45:9d:47:8a:30:c4:00:5a:f7:ff:b7:a4:c3:
1f:e4:8c:ba:f3:14:56:3d:8a:37:14:fc:07:8a:52:
f5:9b:c4:02:bf:08:03:77:83:eb:98:e2:2d:4a:dd:
bc:a9:f0:a6:9b:25:46:38:28:79:a4:36:d1:05:86:
f6:06:f7:4f:ab:c9:6b:24:e9:7e:ac:99:5f:8d:8c:
00:82:0a:04:a3:c9:ab:47:5a:67:74:33:53:c5:07:
e2:9b:e5:ad:af:02:0e:59:85:6c:c7:cd:39:5b:80:
44:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:B2:2A:45:B3:87:57:0C:64:14:92:85:7D:40:F9:DA:7F:3C:D2:62
X509v3 Authority Key Identifier:
keyid:13:93:27:82:EE:77:58:99:04:04:FA:1C:CF:B0:9E:C2:3A:86:12:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E5Mngu53WJkEBPocz7CewjqGEj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/828652-addf-4fe8-9fe6-4b1f61653f3d/1/ILIqRbOHVwxkFJKFfUD52n880mI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/828652-addf-4fe8-9fe6-4b1f61653f3d/1/E5Mngu53WJkEBPocz7CewjqGEj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.248.96.0/19
82.136.0.0/18
195.22.128.0/23
195.68.206.0/24
IPv6:
2001:4088::/32
Signature Algorithm: sha256WithRSAEncryption
54:13:c4:a8:a9:d5:cc:42:28:33:ef:b4:c9:3b:92:eb:26:a5:
86:05:8c:1f:04:a0:86:83:16:03:e7:3d:bc:0b:4e:87:3f:9d:
25:76:fc:6d:c5:39:26:5e:4b:74:68:3e:ac:95:f3:41:4f:2e:
50:d9:9e:07:8f:11:ff:76:02:a3:7c:0d:31:2e:07:d0:61:68:
21:2e:49:c6:de:24:fc:3f:87:21:df:44:fd:14:a0:2c:9b:19:
fc:45:b1:35:ac:90:5d:1d:74:13:b4:0e:3d:da:ae:55:ef:ea:
27:15:1f:d7:d0:9e:84:2b:b6:6e:3e:7a:47:44:a4:e2:9a:2f:
68:98:bd:e7:10:80:d7:a7:07:22:ea:4c:a7:7d:90:7a:45:5c:
04:85:4d:b1:93:f1:ff:58:02:b9:df:45:32:34:bd:e1:ec:bb:
63:72:5c:05:1f:60:d9:93:13:d6:f0:38:d7:0b:8f:5f:69:b3:
cd:f2:1c:45:aa:b6:32:db:88:88:07:18:4d:b1:41:31:6d:45:
5b:e2:52:39:c1:af:d1:76:16:a5:53:21:0d:fc:83:66:98:5a:
5a:78:24:cd:43:8b:3b:d3:77:01:94:ee:10:b4:c1:70:96:3c:
96:14:19:4a:83:15:00:52:d5:1e:94:70:8a:31:fb:44:c9:3c:
c6:d0:43:fc
-----BEGIN CERTIFICATE-----
MIIFHjCCBAagAwIBAgISAZQfjB0AaQeGh8OVLSZiKWozMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzOTMyNzgyZWU3NzU4OTkwNDA0ZmExY2NmYjA5ZWMyM2E4
NjEyM2YwHhcNMjUwMTAxMDE0NzQzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMGIyMmE0NWIzODc1NzBjNjQxNDkyODU3ZDQwZjlkYTdmM2NkMjYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgmMHMnum4Fc8bwPvQteJKsvV890G
Fy/FkVu4AmyL1WAI9K/RD0D27RKDsFTPL/O8TSsUs7d68XdORB91Z26juCRv7lzu
JwGYoseikVsuWDuenRgMCQjWfvaYgVGKHYMkpB1kRgL6M/R2coP/41JAFozm2CWC
hy7OLI+2lB11Si4E1OmAdJLNAo1X3e82xA1SQC0dVozQD0WdR4owxABa9/+3pMMf
5Iy68xRWPYo3FPwHilL1m8QCvwgDd4PrmOItSt28qfCmmyVGOCh5pDbRBYb2BvdP
q8lrJOl+rJlfjYwAggoEo8mrR1pndDNTxQfim+WtrwIOWYVsx805W4BE2QIDAQAB
o4ICKjCCAiYwHQYDVR0OBBYEFCCyKkWzh1cMZBSShX1A+dp/PNJiMB8GA1UdIwQY
MBaAFBOTJ4Lud1iZBAT6HM+wnsI6hhI/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRTVNbmd1NTNXSmtFQlBvY3o3Q2V3anFHRWo4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS84Mjg2NTItYWRkZi00ZmU4LTlmZTYt
NGIxZjYxNjUzZjNkLzEvSUxJcVJiT0hWd3hrRkpLRmZVRDUybjg4MG1JLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS84Mjg2NTItYWRkZi00ZmU4LTlmZTYtNGIxZjYxNjUzZjNk
LzEvRTVNbmd1NTNXSmtFQlBvY3o3Q2V3anFHRWo4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQFLvhgAwQG
UogAAwQBwxaAAwQAw0TOMA0EAgACMAcDBQAgAUCIMA0GCSqGSIb3DQEBCwUAA4IB
AQBUE8SoqdXMQigz77TJO5LrJqWGBYwfBKCGgxYD5z28C06HP50ldvxtxTkmXkt0
aD6slfNBTy5Q2Z4HjxH/dgKjfA0xLgfQYWghLknG3iT8P4ch30T9FKAsmxn8RbE1
rJBdHXQTtA492q5V7+onFR/X0J6EK7ZuPnpHRKTimi9omL3nEIDXpwci6kynfZB6
RVwEhU2xk/H/WAK530UyNL3h7LtjclwFH2DZkxPW8DjXC49fabPN8hxFqrYy24iI
BxhNsUExbUVb4lI5wa/RdhalUyEN/INmmFpaeCTNQ4s703cBlO4QtMFwljyWFBlK
gxUAUtUelHCKMftEyTzG0EP8
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:44:02 2025 by rpki-client