Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1rmzP2m4GvsY3WNKlgSMwwYmKT0.roa
File: 1rmzP2m4GvsY3WNKlgSMwwYmKT0.roa (raw, json)
Hash identifier: BlMf0yAxSL2OWz/7kgikhe1gFHlbD6ELA8x9kPFborE=
Subject key identifier: D6:B9:B3:3F:69:B8:1A:FB:18:DD:63:4A:96:04:8C:C3:06:26:29:3D
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 019423698EC8664C4500D601DBC9F0409481
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1rmzP2m4GvsY3WNKlgSMwwYmKT0.roa
Signing time: Wed 01 Jan 2025 19:48:27 +0000
ROA not before: Wed 01 Jan 2025 19:48:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35664
IP address blocks: 46.102.108.0/24 maxlen: 24
94.176.5.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:8e:c8:66:4c:45:00:d6:01:db:c9:f0:40:94:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Jan 1 19:48:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d6b9b33f69b81afb18dd634a96048cc30626293d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ee:a4:8a:05:da:d2:8a:27:8a:73:a6:1e:b3:
fb:a2:d4:0e:b4:00:75:24:ca:f9:55:1f:4f:f9:2d:
64:b1:de:97:d9:fa:83:c1:9d:3d:a9:ac:80:9b:e0:
90:f2:b2:1a:77:cc:7a:f9:ba:c2:b5:42:42:f9:cb:
5c:66:0b:0f:34:92:de:33:6e:91:ca:cf:40:c7:1a:
a2:26:39:31:e9:cf:6b:5c:3e:78:43:e4:fb:69:e1:
f7:96:5a:87:1f:df:ff:03:d6:9f:86:45:db:08:31:
0c:c4:0c:52:de:31:7d:0a:1e:52:66:cd:b1:38:7d:
9b:22:cb:d8:29:2f:fc:a5:64:3e:81:ba:2d:e5:1c:
6b:da:88:94:79:d7:f6:39:aa:2c:f1:b2:0a:dc:53:
07:f6:d2:2d:13:99:bd:8d:1c:9f:87:96:7d:77:7a:
9d:45:02:7a:ec:0e:9f:4b:b4:ae:01:ba:a8:ce:c9:
fc:ea:4e:e3:83:6d:a9:b5:16:be:2b:0d:0e:2f:42:
76:f1:71:38:cf:77:47:a2:62:ed:83:92:59:26:8b:
e7:14:e0:69:80:02:60:3f:5f:d8:8f:9a:8b:25:30:
74:3e:e2:f4:18:ad:13:66:6f:2a:8e:88:7c:03:6d:
ac:a0:d3:2d:59:e0:12:19:04:e9:22:96:07:08:e2:
48:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:B9:B3:3F:69:B8:1A:FB:18:DD:63:4A:96:04:8C:C3:06:26:29:3D
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1rmzP2m4GvsY3WNKlgSMwwYmKT0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.102.108.0/24
94.176.5.0/24
Signature Algorithm: sha256WithRSAEncryption
be:a6:fa:0d:9b:f9:19:c7:5f:0f:d6:e4:32:51:58:88:e3:0f:
39:ff:01:46:cc:86:66:c4:01:62:67:25:46:cf:34:a3:6b:b2:
26:5d:bf:a9:85:6e:42:ec:b5:23:91:a4:eb:31:e9:4a:3a:25:
5d:bd:66:0f:ff:a0:a9:19:b0:b0:e6:62:7d:8b:fb:be:a2:ad:
bf:5d:da:26:b7:a2:3f:55:45:27:e7:58:0a:cc:b1:65:b5:31:
85:86:37:8b:21:2e:ba:ab:9e:f4:f0:10:8a:95:3e:b3:99:09:
d1:2d:50:04:39:b6:17:f6:d4:24:c1:b2:98:32:e6:b6:b6:17:
6a:33:74:99:eb:82:d7:35:0f:c7:dc:b2:ab:53:5f:60:88:60:
e9:f4:05:39:89:6f:03:cc:df:48:d2:67:3f:b4:a5:bd:4b:b9:
78:91:4c:3f:f5:49:20:a2:c2:39:3e:07:07:e4:61:ee:32:6f:
9e:b0:92:51:07:27:a5:fb:4d:96:49:40:7b:7f:e4:fc:6c:12:
82:25:ce:0c:ef:ab:29:36:4f:0e:fb:1c:86:df:7c:68:cc:4d:
65:fa:04:c1:43:7f:88:8b:85:9e:86:c1:84:ce:89:86:ad:0e:
38:38:eb:f3:79:dc:a1:8c:6c:57:86:ff:c1:c9:bd:f3:62:ff:
04:6c:bb:04
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZQjaY7IZkxFANYB28nwQJSBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4ZTYyNjM0ZTFiZDUxMzNhOWRlNDUxMmFlOThjYWQxYjIy
MTliNTkwHhcNMjUwMTAxMTk0ODI3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNmI5YjMzZjY5YjgxYWZiMThkZDYzNGE5NjA0OGNjMzA2MjYyOTNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnO6kigXa0ooninOmHrP7otQOtAB1
JMr5VR9P+S1ksd6X2fqDwZ09qayAm+CQ8rIad8x6+brCtUJC+ctcZgsPNJLeM26R
ys9AxxqiJjkx6c9rXD54Q+T7aeH3llqHH9//A9afhkXbCDEMxAxS3jF9Ch5SZs2x
OH2bIsvYKS/8pWQ+gbot5Rxr2oiUedf2Oaos8bIK3FMH9tItE5m9jRyfh5Z9d3qd
RQJ67A6fS7SuAbqozsn86k7jg22ptRa+Kw0OL0J28XE4z3dHomLtg5JZJovnFOBp
gAJgP1/Yj5qLJTB0PuL0GK0TZm8qjoh8A22soNMtWeASGQTpIpYHCOJIJwIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFNa5sz9puBr7GN1jSpYEjMMGJik9MB8GA1UdIwQY
MBaAFPjmJjThvVEzqd5FEq6YytGyIZtZMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1PWW1OT0c5VVRPcDNrVVNycGpLMGJJaG0xay5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzgvZGEzMzk4LTY2OTgtNDVmMi1iYWFl
LTkyZTI1ZmUxNjMzMS8xLzFybXpQMm00R3ZzWTNXTktsZ1NNd3dZbUtUMC5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNzgvZGEzMzk4LTY2OTgtNDVmMi1iYWFlLTkyZTI1ZmUxNjMz
MS8xLzEtT1ltTk9HOVVUT3Aza1VTcnBqSzBiSWhtMWsuY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwDBAAuZmwD
BABesAUwDQYJKoZIhvcNAQELBQADggEBAL6m+g2b+RnHXw/W5DJRWIjjDzn/AUbM
hmbEAWJnJUbPNKNrsiZdv6mFbkLstSORpOsx6Uo6JV29Zg//oKkZsLDmYn2L+76i
rb9d2ia3oj9VRSfnWArMsWW1MYWGN4shLrqrnvTwEIqVPrOZCdEtUAQ5thf21CTB
spgy5ra2F2ozdJnrgtc1D8fcsqtTX2CIYOn0BTmJbwPM30jSZz+0pb1LuXiRTD/1
SSCiwjk+BwfkYe4yb56wklEHJ6X7TZZJQHt/5PxsEoIlzgzvqyk2Tw77HIbffGjM
TWX6BMFDf4iLhZ6GwYTOiYatDjg46/N53KGMbFeG/8HJvfNi/wRsuwQ=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:45:34 2025 by rpki-client