Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/cf5fe4-be5d-40c6-83f4-0cd8186e729e/1/1tx64x0RNBM3kGHptMbc7c8PUAE.roa
File: 1tx64x0RNBM3kGHptMbc7c8PUAE.roa (raw, json)
Hash identifier: J7iUMgVacvWls4pL85+YLSTPtdcV470vauCVr+dDJqU=
Subject key identifier: D6:DC:7A:E3:1D:11:34:13:37:90:61:E9:B4:C6:DC:ED:CF:0F:50:01
Certificate issuer: /CN=5e431e9b25e889c036d3c3e503848f77f1cec99b
Certificate serial: 01856DC1A5439EC69F8378A35CEA73BAB448
Authority key identifier: 5E:43:1E:9B:25:E8:89:C0:36:D3:C3:E5:03:84:8F:77:F1:CE:C9:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XkMemyXoicA208PlA4SPd_HOyZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/cf5fe4-be5d-40c6-83f4-0cd8186e729e/1/1tx64x0RNBM3kGHptMbc7c8PUAE.roa
Signing time: Sun 01 Jan 2023 14:34:45 +0000
ROA not before: Sun 01 Jan 2023 14:34:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 52084
IP address blocks: 46.255.8.0/21 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:c1:a5:43:9e:c6:9f:83:78:a3:5c:ea:73:ba:b4:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e431e9b25e889c036d3c3e503848f77f1cec99b
Validity
Not Before: Jan 1 14:34:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d6dc7ae31d113413379061e9b4c6dcedcf0f5001
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:87:64:2f:63:12:bd:af:a7:99:a0:3b:79:e7:
71:19:b0:df:b5:50:7e:10:06:ed:5d:97:83:52:25:
ec:80:43:c9:1d:3a:4e:50:21:3e:f7:ae:e4:44:0c:
60:cd:c9:f7:ec:bd:85:1d:e6:29:a1:92:6f:86:ef:
db:67:4b:b1:48:88:68:7e:70:54:d8:91:8f:5c:f2:
18:99:67:60:2e:9d:a7:40:f7:3e:1b:62:2f:78:c9:
ee:73:aa:c0:0f:17:7a:d4:0c:3e:1e:41:c2:cb:61:
5b:75:19:c9:60:6f:98:d6:54:0c:0a:62:ae:d2:af:
88:da:7a:75:e4:30:c4:0d:13:b3:a5:3d:ab:ce:db:
4c:76:48:8b:7e:2e:ad:3b:da:8f:70:bd:2e:db:08:
27:f6:7d:77:ff:90:db:33:ef:b1:12:ff:43:e7:1b:
69:52:39:6b:7c:86:d0:ac:07:82:8b:06:dd:72:d8:
31:87:d2:42:01:74:57:e4:9d:f2:94:c8:c5:1c:4b:
ba:f6:2b:d8:4b:fb:48:14:5a:1e:96:45:bf:c8:9a:
4b:ab:e8:53:c0:f0:3c:af:90:f4:43:82:a9:ad:1c:
19:7f:11:e0:40:8f:0c:5f:48:6e:5b:e9:4e:a7:17:
4e:e5:49:00:89:35:74:65:6b:40:1a:c7:ac:59:b3:
2a:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:DC:7A:E3:1D:11:34:13:37:90:61:E9:B4:C6:DC:ED:CF:0F:50:01
X509v3 Authority Key Identifier:
keyid:5E:43:1E:9B:25:E8:89:C0:36:D3:C3:E5:03:84:8F:77:F1:CE:C9:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XkMemyXoicA208PlA4SPd_HOyZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/cf5fe4-be5d-40c6-83f4-0cd8186e729e/1/1tx64x0RNBM3kGHptMbc7c8PUAE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/cf5fe4-be5d-40c6-83f4-0cd8186e729e/1/XkMemyXoicA208PlA4SPd_HOyZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.255.8.0/21
Signature Algorithm: sha256WithRSAEncryption
50:1b:5d:3b:12:8d:33:14:65:b3:8d:e8:f0:47:36:b7:9e:95:
f3:11:bf:f8:3e:bc:15:d7:3a:9b:0b:1a:f7:98:bb:07:af:42:
6f:b1:fe:ef:e9:f0:c8:02:59:75:2d:a7:2e:9a:79:ce:ee:e3:
3c:6a:e5:83:11:5e:39:5e:a4:4d:bd:3f:ec:6b:a6:66:21:d6:
06:73:0e:e2:c8:d4:74:35:6d:3b:8c:5c:fa:85:cc:2b:4b:26:
ad:4d:5e:34:31:e6:e0:66:3c:7e:81:25:e9:c6:0d:63:1d:8d:
2e:d3:4f:52:99:f0:9e:c1:6d:e1:90:3f:88:5f:6a:f6:db:b5:
c3:78:91:02:96:db:f3:4e:63:81:27:4b:a1:14:83:71:54:cd:
a7:54:f2:b1:b5:ac:7b:02:16:d4:36:c5:4a:9b:5c:4d:e5:1c:
73:a8:f8:51:18:a6:26:81:47:02:ef:50:d8:79:b5:1a:e0:9c:
e0:e8:b7:84:4a:55:aa:7b:eb:4c:60:49:e5:4e:54:24:13:a1:
9b:1c:a4:3b:c4:5b:5e:8a:87:9e:ef:53:20:b7:95:00:01:6f:
af:cc:56:38:eb:b1:1c:32:d4:d1:ba:4e:c1:5b:2a:12:85:51:
31:d3:f1:aa:fb:68:38:03:74:3e:b2:ba:49:25:2a:a2:02:24:
8b:e1:d0:07
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVtwaVDnsafg3ijXOpzurRIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlNDMxZTliMjVlODg5YzAzNmQzYzNlNTAzODQ4Zjc3ZjFj
ZWM5OWIwHhcNMjMwMTAxMTQzNDQ1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNmRjN2FlMzFkMTEzNDEzMzc5MDYxZTliNGM2ZGNlZGNmMGY1MDAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsIdkL2MSva+nmaA7eedxGbDftVB+
EAbtXZeDUiXsgEPJHTpOUCE+967kRAxgzcn37L2FHeYpoZJvhu/bZ0uxSIhofnBU
2JGPXPIYmWdgLp2nQPc+G2IveMnuc6rADxd61Aw+HkHCy2FbdRnJYG+Y1lQMCmKu
0q+I2np15DDEDROzpT2rzttMdkiLfi6tO9qPcL0u2wgn9n13/5DbM++xEv9D5xtp
UjlrfIbQrAeCiwbdctgxh9JCAXRX5J3ylMjFHEu69ivYS/tIFFoelkW/yJpLq+hT
wPA8r5D0Q4KprRwZfxHgQI8MX0huW+lOpxdO5UkAiTV0ZWtAGsesWbMqGwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNbceuMdETQTN5Bh6bTG3O3PD1ABMB8GA1UdIwQY
MBaAFF5DHpsl6InANtPD5QOEj3fxzsmbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGtNZW15WG9pY0EyMDhQbEE0U1BkX0hPeVpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS9jZjVmZTQtYmU1ZC00MGM2LTgzZjQt
MGNkODE4NmU3MjllLzEvMXR4NjR4MFJOQk0za0dIcHRNYmM3YzhQVUFFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS9jZjVmZTQtYmU1ZC00MGM2LTgzZjQtMGNkODE4NmU3Mjll
LzEvWGtNZW15WG9pY0EyMDhQbEE0U1BkX0hPeVpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDLv8IMA0G
CSqGSIb3DQEBCwUAA4IBAQBQG107Eo0zFGWzjejwRza3npXzEb/4PrwV1zqbCxr3
mLsHr0Jvsf7v6fDIAll1LacumnnO7uM8auWDEV45XqRNvT/sa6ZmIdYGcw7iyNR0
NW07jFz6hcwrSyatTV40MebgZjx+gSXpxg1jHY0u009SmfCewW3hkD+IX2r227XD
eJECltvzTmOBJ0uhFINxVM2nVPKxtax7AhbUNsVKm1xN5RxzqPhRGKYmgUcC71DY
ebUa4Jzg6LeESlWqe+tMYEnlTlQkE6GbHKQ7xFteioee71Mgt5UAAW+vzFY467Ec
MtTRuk7BWyoShVEx0/Gq+2g4A3Q+srpJJSqiAiSL4dAH
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:30:13 2025 by rpki-client