Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/kW066m9DXa5QVOUSyinFWrQGR_k.roa
File: kW066m9DXa5QVOUSyinFWrQGR_k.roa (raw, json)
Hash identifier: qDkdXP2dueHR9dJeUVzMjqaWnTwJkS158Rm7QFLdZvQ=
Subject key identifier: 91:6D:3A:EA:6F:43:5D:AE:50:54:E5:12:CA:29:C5:5A:B4:06:47:F9
Certificate issuer: /CN=3aba1172472ea80265d12982967de0a8b0bc5901
Certificate serial: 019424B27618854C7D4A1B93D972D80D5917
Authority key identifier: 3A:BA:11:72:47:2E:A8:02:65:D1:29:82:96:7D:E0:A8:B0:BC:59:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OroRckcuqAJl0SmCln3gqLC8WQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/kW066m9DXa5QVOUSyinFWrQGR_k.roa
Signing time: Thu 02 Jan 2025 01:47:42 +0000
ROA not before: Thu 02 Jan 2025 01:47:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210876
IP address blocks: 46.226.151.0/24 maxlen: 24
185.204.102.0/24 maxlen: 24
193.57.164.0/23 maxlen: 23
193.57.164.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b2:76:18:85:4c:7d:4a:1b:93:d9:72:d8:0d:59:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3aba1172472ea80265d12982967de0a8b0bc5901
Validity
Not Before: Jan 2 01:47:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=916d3aea6f435dae5054e512ca29c55ab40647f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:28:ae:8a:89:e8:b0:61:7f:91:5d:dd:ae:1e:
1a:6c:bf:99:f8:09:fa:42:f0:4e:bb:50:e9:62:fa:
d1:b4:c6:73:ec:8d:ba:9d:0f:56:19:43:58:1d:8d:
49:1a:f4:e0:e9:3a:d5:78:36:7f:1a:e6:08:d0:3a:
ea:67:0c:3b:39:93:50:00:dc:13:4c:14:42:2f:50:
fe:b7:49:9b:74:b2:77:bf:69:ce:e4:d0:31:04:28:
be:e3:8e:6d:3b:2e:d4:f3:8d:ea:a0:9b:e9:ca:fd:
f6:dc:45:45:a8:70:db:f8:13:3e:f3:f4:6a:56:fb:
6f:7e:ff:50:0b:cd:bd:b6:3a:c6:14:e4:2f:9b:ab:
99:0f:b3:e1:5c:57:82:e2:89:be:98:1c:3a:ae:2f:
a7:81:91:bb:ce:00:e0:ce:61:64:18:a0:e9:b2:b3:
ae:2b:ad:9c:fe:27:2e:1e:15:03:6f:76:01:57:a3:
46:b5:02:b9:3c:88:9d:18:80:fb:09:aa:07:93:07:
20:15:0a:28:f3:2d:aa:47:b1:f1:96:ce:96:45:c8:
32:4e:d0:ad:c3:db:4a:4f:fd:fb:5e:8a:fd:fe:5c:
e6:e7:a0:3c:1e:a1:e2:44:58:6b:68:2d:75:ed:bd:
55:8d:6f:73:74:fd:ef:41:64:6d:0e:36:f4:c3:42:
5f:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:6D:3A:EA:6F:43:5D:AE:50:54:E5:12:CA:29:C5:5A:B4:06:47:F9
X509v3 Authority Key Identifier:
keyid:3A:BA:11:72:47:2E:A8:02:65:D1:29:82:96:7D:E0:A8:B0:BC:59:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OroRckcuqAJl0SmCln3gqLC8WQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/kW066m9DXa5QVOUSyinFWrQGR_k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.226.151.0/24
185.204.102.0/24
193.57.164.0/23
Signature Algorithm: sha256WithRSAEncryption
0f:32:f2:33:b4:64:b5:0e:55:3f:f0:bf:19:e4:f6:ca:3c:0a:
11:5f:3a:42:80:c7:0b:8a:fa:d5:be:fc:c0:99:35:93:58:5a:
e6:e8:d3:20:c1:19:33:77:99:8a:12:a5:34:27:63:c8:bd:66:
29:c5:59:26:e5:9e:f0:94:24:32:37:85:cc:83:4b:8f:9f:c6:
ce:4f:cb:40:30:b8:1e:fc:62:70:12:7f:0c:50:70:80:6c:af:
d9:0b:7c:62:de:c7:f2:3e:fc:b8:2b:c5:49:a9:78:71:a6:d3:
09:22:7d:31:5b:ba:63:f5:9a:a2:76:9b:f3:bc:8b:07:a6:ce:
7b:5c:e0:7d:9c:cf:99:40:42:d8:c3:68:d5:5d:c5:88:3a:14:
1a:c2:37:fb:25:45:3d:3e:c9:dc:e2:45:ab:d3:84:82:2f:19:
f2:69:d9:84:31:ca:60:ca:4d:c5:af:50:57:c4:80:2e:a7:2b:
30:61:eb:5b:3b:99:04:4e:71:d2:98:5a:b2:e8:77:9c:86:9d:
6d:47:3a:36:63:95:6f:97:60:1b:95:b3:9e:8a:c2:33:e8:7f:
a2:d0:e7:e0:48:a5:c7:0d:97:9b:ec:3e:df:d8:24:7e:be:5d:
da:86:87:37:d8:65:73:21:b9:f9:6b:fe:3b:9a:d4:4a:84:e5:
41:de:91:36
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZQksnYYhUx9ShuT2XLYDVkXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhYmExMTcyNDcyZWE4MDI2NWQxMjk4Mjk2N2RlMGE4YjBi
YzU5MDEwHhcNMjUwMTAyMDE0NzQyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MTZkM2FlYTZmNDM1ZGFlNTA1NGU1MTJjYTI5YzU1YWI0MDY0N2Y5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqiiuionosGF/kV3drh4abL+Z+An6
QvBOu1DpYvrRtMZz7I26nQ9WGUNYHY1JGvTg6TrVeDZ/GuYI0DrqZww7OZNQANwT
TBRCL1D+t0mbdLJ3v2nO5NAxBCi+445tOy7U843qoJvpyv323EVFqHDb+BM+8/Rq
Vvtvfv9QC829tjrGFOQvm6uZD7PhXFeC4om+mBw6ri+ngZG7zgDgzmFkGKDpsrOu
K62c/icuHhUDb3YBV6NGtQK5PIidGID7CaoHkwcgFQoo8y2qR7Hxls6WRcgyTtCt
w9tKT/37Xor9/lzm56A8HqHiRFhraC117b1VjW9zdP3vQWRtDjb0w0JfywIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFJFtOupvQ12uUFTlEsopxVq0Bkf5MB8GA1UdIwQY
MBaAFDq6EXJHLqgCZdEpgpZ94KiwvFkBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3JvUmNrY3VxQUpsMFNtQ2xuM2dxTEM4V1FFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My83YjFjNTUtZGRkMC00MjgxLTgzNzgt
NGRkMDQzNDZhYmMzLzEva1cwNjZtOURYYTVRVk9VU3lpbkZXclFHUl9rLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My83YjFjNTUtZGRkMC00MjgxLTgzNzgtNGRkMDQzNDZhYmMz
LzEvT3JvUmNrY3VxQUpsMFNtQ2xuM2dxTEM4V1FFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQALuKXAwQA
ucxmAwQBwTmkMA0GCSqGSIb3DQEBCwUAA4IBAQAPMvIztGS1DlU/8L8Z5PbKPAoR
XzpCgMcLivrVvvzAmTWTWFrm6NMgwRkzd5mKEqU0J2PIvWYpxVkm5Z7wlCQyN4XM
g0uPn8bOT8tAMLge/GJwEn8MUHCAbK/ZC3xi3sfyPvy4K8VJqXhxptMJIn0xW7pj
9ZqidpvzvIsHps57XOB9nM+ZQELYw2jVXcWIOhQawjf7JUU9Psnc4kWr04SCLxny
admEMcpgyk3Fr1BXxIAupyswYetbO5kETnHSmFqy6Hechp1tRzo2Y5Vvl2AblbOe
isIz6H+i0OfgSKXHDZeb7D7f2CR+vl3ahoc32GVzIbn5a/47mtRKhOVB3pE2
-----END CERTIFICATE-----
Generated at Sun Apr 6 21:05:13 2025 by rpki-client