Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/c1d940-044d-49c4-a7a1-a0076679be60/1/q0NSZKvbuZKPsTOzfMB4PKlh9Ys.roa
File: q0NSZKvbuZKPsTOzfMB4PKlh9Ys.roa (raw, json)
Hash identifier: jHJ+k8Z1pg8+GnjSpwYDBxeFhhnBTCkhDCcx/6sq1Z4=
Subject key identifier: AB:43:52:64:AB:DB:B9:92:8F:B1:33:B3:7C:C0:78:3C:A9:61:F5:8B
Certificate issuer: /CN=4c261919b55c2c08f72a5ab1d0eb185ee12bdff7
Certificate serial: 01942521D44D56482CC06A42293705F20C54
Authority key identifier: 4C:26:19:19:B5:5C:2C:08:F7:2A:5A:B1:D0:EB:18:5E:E1:2B:DF:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TCYZGbVcLAj3Klqx0OsYXuEr3_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/c1d940-044d-49c4-a7a1-a0076679be60/1/q0NSZKvbuZKPsTOzfMB4PKlh9Ys.roa
Signing time: Thu 02 Jan 2025 03:49:21 +0000
ROA not before: Thu 02 Jan 2025 03:49:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201570
IP address blocks: 46.45.49.0/24 maxlen: 24
46.45.50.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:d4:4d:56:48:2c:c0:6a:42:29:37:05:f2:0c:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c261919b55c2c08f72a5ab1d0eb185ee12bdff7
Validity
Not Before: Jan 2 03:49:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ab435264abdbb9928fb133b37cc0783ca961f58b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:86:bc:aa:a3:fb:07:15:91:b1:c8:80:1a:d1:
a8:22:66:e4:3a:a7:a4:6e:64:a3:b6:ba:50:52:0c:
7f:d8:d0:ff:77:e9:e2:ee:4b:f9:93:1a:9f:df:04:
b6:1c:3e:61:94:0d:cd:01:af:de:f9:d4:6a:6c:13:
71:68:d3:23:2c:19:b2:3b:57:cf:01:2e:66:ca:c0:
29:d8:f7:c5:77:27:67:36:19:f2:fd:c5:e7:67:d9:
6e:08:71:fd:15:66:fa:34:82:c4:0d:63:fc:ca:d5:
40:c8:84:c8:41:bc:f9:2c:ee:ea:24:1c:38:2e:1a:
59:75:f8:aa:06:4f:20:ee:fd:6d:a0:33:cc:ad:25:
48:b9:0c:fd:4d:ea:7d:cc:7d:c5:7f:07:21:44:87:
bf:3e:ec:7e:d9:43:90:95:26:a3:81:84:3a:28:bf:
c1:52:20:e0:a9:13:00:c1:96:a6:1c:75:65:e9:54:
1f:ba:7e:73:27:7c:62:99:56:b1:b0:f2:f1:89:25:
35:aa:72:00:3f:fd:18:d5:d6:16:c8:85:76:a9:3a:
0a:97:14:81:05:05:48:71:1c:60:00:7d:f3:63:9f:
84:e2:05:08:70:06:fb:59:8c:fb:3d:fa:ff:52:37:
70:ba:8c:61:b4:f7:af:48:53:62:5b:b2:b8:df:83:
ab:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:43:52:64:AB:DB:B9:92:8F:B1:33:B3:7C:C0:78:3C:A9:61:F5:8B
X509v3 Authority Key Identifier:
keyid:4C:26:19:19:B5:5C:2C:08:F7:2A:5A:B1:D0:EB:18:5E:E1:2B:DF:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TCYZGbVcLAj3Klqx0OsYXuEr3_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/c1d940-044d-49c4-a7a1-a0076679be60/1/q0NSZKvbuZKPsTOzfMB4PKlh9Ys.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/c1d940-044d-49c4-a7a1-a0076679be60/1/TCYZGbVcLAj3Klqx0OsYXuEr3_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.45.49.0-46.45.50.255
Signature Algorithm: sha256WithRSAEncryption
0a:c1:e2:47:22:6c:9e:6e:3f:3d:03:7b:77:73:cf:bf:52:5f:
89:57:b7:97:fd:c5:21:3f:cb:d1:f9:c9:e1:4d:91:2d:18:76:
ac:22:05:27:5b:d9:ef:7c:30:b7:80:b1:cb:3d:5b:b0:73:99:
c8:82:67:2e:d8:62:f7:7a:e6:13:db:70:37:8f:1b:62:a8:1c:
ad:0a:0f:67:96:07:fb:a9:a2:c4:90:7d:3f:0c:3d:5b:b2:b4:
00:3d:d6:6e:60:36:ee:5b:5c:0c:e9:58:88:ba:0c:dd:d9:a8:
83:33:49:2d:64:ce:4f:01:f3:e8:f5:50:cd:65:09:c0:ed:6b:
7b:ee:93:89:aa:22:e8:ae:5c:64:17:21:fa:84:2e:aa:45:0f:
f3:7a:13:33:4e:92:33:4c:89:d2:b3:e9:f0:b9:0b:7f:cf:a9:
55:87:4d:4b:0c:d8:35:10:e4:14:17:03:e1:30:ff:5a:9a:e1:
6b:bb:dd:78:11:67:8a:0a:c1:4c:aa:61:2a:05:c1:40:04:8f:
bc:05:6d:0b:d1:3a:6f:d3:5f:6b:d6:d9:6a:e3:07:99:89:36:
ca:d2:9e:f8:e4:9d:37:5e:26:6c:88:f5:ca:dc:d1:7a:b4:97:
91:33:02:42:87:23:ec:88:9e:e1:6e:30:92:72:a3:96:80:25:
46:ee:95:0e
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZQlIdRNVkgswGpCKTcF8gxUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjMjYxOTE5YjU1YzJjMDhmNzJhNWFiMWQwZWIxODVlZTEy
YmRmZjcwHhcNMjUwMTAyMDM0OTIxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYjQzNTI2NGFiZGJiOTkyOGZiMTMzYjM3Y2MwNzgzY2E5NjFmNThiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApoa8qqP7BxWRsciAGtGoImbkOqek
bmSjtrpQUgx/2ND/d+ni7kv5kxqf3wS2HD5hlA3NAa/e+dRqbBNxaNMjLBmyO1fP
AS5mysAp2PfFdydnNhny/cXnZ9luCHH9FWb6NILEDWP8ytVAyITIQbz5LO7qJBw4
LhpZdfiqBk8g7v1toDPMrSVIuQz9Tep9zH3FfwchRIe/Pux+2UOQlSajgYQ6KL/B
UiDgqRMAwZamHHVl6VQfun5zJ3ximVaxsPLxiSU1qnIAP/0Y1dYWyIV2qToKlxSB
BQVIcRxgAH3zY5+E4gUIcAb7WYz7Pfr/UjdwuoxhtPevSFNiW7K434OrgwIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFKtDUmSr27mSj7Ezs3zAeDypYfWLMB8GA1UdIwQY
MBaAFEwmGRm1XCwI9ypasdDrGF7hK9/3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVENZWkdiVmNMQWozS2xxeDBPc1lYdUVyM19jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC9jMWQ5NDAtMDQ0ZC00OWM0LWE3YTEt
YTAwNzY2NzliZTYwLzEvcTBOU1pLdmJ1WktQc1RPemZNQjRQS2xoOVlzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OC9jMWQ5NDAtMDQ0ZC00OWM0LWE3YTEtYTAwNzY2NzliZTYw
LzEvVENZWkdiVmNMQWozS2xxeDBPc1lYdUVyM19jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAAuLTED
BAAuLTIwDQYJKoZIhvcNAQELBQADggEBAArB4kcibJ5uPz0De3dzz79SX4lXt5f9
xSE/y9H5yeFNkS0YdqwiBSdb2e98MLeAscs9W7BzmciCZy7YYvd65hPbcDePG2Ko
HK0KD2eWB/uposSQfT8MPVuytAA91m5gNu5bXAzpWIi6DN3ZqIMzSS1kzk8B8+j1
UM1lCcDta3vuk4mqIuiuXGQXIfqELqpFD/N6EzNOkjNMidKz6fC5C3/PqVWHTUsM
2DUQ5BQXA+Ew/1qa4Wu73XgRZ4oKwUyqYSoFwUAEj7wFbQvROm/TX2vW2WrjB5mJ
NsrSnvjknTdeJmyI9crc0Xq0l5EzAkKHI+yInuFuMJJyo5aAJUbulQ4=
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:44:41 2025 by rpki-client