Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/b9VqXSflfRt0z9rfLmmzW3fK3Rs.roa
File: b9VqXSflfRt0z9rfLmmzW3fK3Rs.roa (raw, json)
Hash identifier: HtEtICKPUXBajXkIRA6BBaMW5mSAdMb1fzsSmbx9/uk=
Subject key identifier: 6F:D5:6A:5D:27:E5:7D:1B:74:CF:DA:DF:2E:69:B3:5B:77:CA:DD:1B
Certificate issuer: /CN=d4375814344df0bf6d017733acdc488f002631b2
Certificate serial: 01947E9959D110408AD88B375D89DD4670C9
Authority key identifier: D4:37:58:14:34:4D:F0:BF:6D:01:77:33:AC:DC:48:8F:00:26:31:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1DdYFDRN8L9tAXczrNxIjwAmMbI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/b9VqXSflfRt0z9rfLmmzW3fK3Rs.roa
Signing time: Sun 19 Jan 2025 12:46:06 +0000
ROA not before: Sun 19 Jan 2025 12:46:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16276
IP address blocks: 46.8.97.0/24 maxlen: 24
46.8.116.0/24 maxlen: 24
46.8.200.0/24 maxlen: 24
46.8.201.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:7e:99:59:d1:10:40:8a:d8:8b:37:5d:89:dd:46:70:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4375814344df0bf6d017733acdc488f002631b2
Validity
Not Before: Jan 19 12:46:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6fd56a5d27e57d1b74cfdadf2e69b35b77cadd1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:45:cc:c4:7f:d1:93:85:06:7e:41:ec:63:12:
e1:a0:05:36:00:93:f6:6f:3f:d0:9e:ca:98:02:8f:
ae:b7:19:10:b1:0f:f2:a2:2a:38:1b:87:48:ce:c4:
1f:91:0d:b5:48:18:6c:08:17:5f:e8:cf:e3:d8:42:
b2:af:4d:9a:70:96:55:ba:d3:07:ea:69:30:67:95:
14:7d:86:50:6c:81:fd:9b:c3:00:7e:b1:1d:b8:13:
4b:d4:46:cf:a5:59:79:00:da:8a:4a:e1:12:c8:66:
c2:5b:cf:7d:f7:11:74:8e:1a:c9:84:ec:f1:80:08:
64:54:e8:dd:8c:9d:5c:49:09:ad:42:8c:a2:75:1d:
3e:f5:d3:ba:a0:b0:20:8c:af:1f:d8:6e:18:ef:9f:
d9:79:69:44:dd:95:9d:66:ac:55:13:af:08:1d:a9:
91:3c:ae:77:45:b5:06:9b:d5:e2:4b:e3:bd:e8:11:
5e:89:ce:52:22:3c:89:b9:68:e6:a1:8d:21:9b:85:
2a:53:9b:2e:12:06:e0:45:db:26:a1:df:59:46:88:
06:f6:43:73:f9:dd:0c:27:aa:79:38:06:0e:e6:5f:
1d:3d:83:36:11:08:59:29:bc:c4:5c:73:7b:10:9f:
32:ff:09:a3:ec:32:c4:4b:3f:96:19:9a:d3:8a:1b:
17:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:D5:6A:5D:27:E5:7D:1B:74:CF:DA:DF:2E:69:B3:5B:77:CA:DD:1B
X509v3 Authority Key Identifier:
keyid:D4:37:58:14:34:4D:F0:BF:6D:01:77:33:AC:DC:48:8F:00:26:31:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DdYFDRN8L9tAXczrNxIjwAmMbI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/b9VqXSflfRt0z9rfLmmzW3fK3Rs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/1DdYFDRN8L9tAXczrNxIjwAmMbI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.8.97.0/24
46.8.116.0/24
46.8.200.0/23
Signature Algorithm: sha256WithRSAEncryption
42:e7:2b:e4:5d:84:7a:be:47:ba:98:5e:4d:eb:c4:1f:27:01:
36:e5:4d:f1:89:d3:3f:55:98:e5:e5:29:03:2b:31:80:e4:d9:
c1:ba:22:2f:8a:85:d1:2b:04:28:2e:c8:db:df:e0:5d:3a:97:
02:66:ff:2e:28:41:40:f5:e6:7b:e1:89:3f:e5:dc:18:93:be:
1b:90:ab:91:52:54:ca:18:06:af:6f:3e:b8:6c:d2:d3:bb:87:
b4:44:c3:99:aa:e0:90:b2:8e:09:ba:2d:a0:18:e5:40:9a:fb:
e5:be:46:b4:2a:8e:15:70:0d:54:a9:c0:1e:68:4d:8f:28:7a:
fe:bf:af:a7:38:78:e4:9c:24:e1:76:b0:46:2e:8d:19:3c:42:
00:f2:74:2d:15:b8:06:bb:ee:e2:d1:87:4d:d7:68:41:38:2c:
e3:63:0c:ca:02:fb:80:12:76:ee:c7:92:06:47:e4:15:a4:ba:
fe:36:a7:42:00:c2:4c:00:74:50:07:cd:aa:01:41:6e:5a:bf:
a5:ed:c0:e2:c4:e3:79:ca:77:4e:f5:11:95:18:d1:0b:ca:60:
3c:81:e6:61:39:5c:f3:dd:4b:23:b9:c1:c4:2d:e5:11:85:eb:
e3:01:a4:21:36:da:c2:9a:0c:89:fa:19:60:63:5a:ff:7e:16:
c5:6b:f1:ce
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZR+mVnREECK2Is3XYndRnDJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0Mzc1ODE0MzQ0ZGYwYmY2ZDAxNzczM2FjZGM0ODhmMDAy
NjMxYjIwHhcNMjUwMTE5MTI0NjA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZmQ1NmE1ZDI3ZTU3ZDFiNzRjZmRhZGYyZTY5YjM1Yjc3Y2FkZDFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwUXMxH/Rk4UGfkHsYxLhoAU2AJP2
bz/QnsqYAo+utxkQsQ/yoio4G4dIzsQfkQ21SBhsCBdf6M/j2EKyr02acJZVutMH
6mkwZ5UUfYZQbIH9m8MAfrEduBNL1EbPpVl5ANqKSuESyGbCW8999xF0jhrJhOzx
gAhkVOjdjJ1cSQmtQoyidR0+9dO6oLAgjK8f2G4Y75/ZeWlE3ZWdZqxVE68IHamR
PK53RbUGm9XiS+O96BFeic5SIjyJuWjmoY0hm4UqU5suEgbgRdsmod9ZRogG9kNz
+d0MJ6p5OAYO5l8dPYM2EQhZKbzEXHN7EJ8y/wmj7DLESz+WGZrTihsX3QIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFG/Val0n5X0bdM/a3y5ps1t3yt0bMB8GA1UdIwQY
MBaAFNQ3WBQ0TfC/bQF3M6zcSI8AJjGyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMURkWUZEUk44TDl0QVhjenJOeElqd0FtTWJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9iMjRiMmQtMzUyMy00MjJlLTliY2Yt
MzY3MWQ2N2ViOWY4LzEvYjlWcVhTZmxmUnQwejlyZkxtbXpXM2ZLM1JzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC9iMjRiMmQtMzUyMy00MjJlLTliY2YtMzY3MWQ2N2ViOWY4
LzEvMURkWUZEUk44TDl0QVhjenJOeElqd0FtTWJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQALghhAwQA
Lgh0AwQBLgjIMA0GCSqGSIb3DQEBCwUAA4IBAQBC5yvkXYR6vke6mF5N68QfJwE2
5U3xidM/VZjl5SkDKzGA5NnBuiIvioXRKwQoLsjb3+BdOpcCZv8uKEFA9eZ74Yk/
5dwYk74bkKuRUlTKGAavbz64bNLTu4e0RMOZquCQso4Jui2gGOVAmvvlvka0Ko4V
cA1UqcAeaE2PKHr+v6+nOHjknCThdrBGLo0ZPEIA8nQtFbgGu+7i0YdN12hBOCzj
YwzKAvuAEnbux5IGR+QVpLr+NqdCAMJMAHRQB82qAUFuWr+l7cDixON5yndO9RGV
GNELymA8geZhOVzz3UsjucHELeURhevjAaQhNtrCmgyJ+hlgY1r/fhbFa/HO
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:43:36 2025 by rpki-client