Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/cf4ab4-e914-40e1-82df-14dc7ec0495d/1/AkKW7m-MHHB19PTWABc4m9rKocs.roa
File: AkKW7m-MHHB19PTWABc4m9rKocs.roa (raw, json)
Hash identifier: qHV2PtoHadaa9NwNl5xTEsUFUv4QzTCLjq+mny689nw=
Subject key identifier: 02:42:96:EE:6F:8C:1C:70:75:F4:F4:D6:00:17:38:9B:DA:CA:A1:CB
Certificate issuer: /CN=fcd7a721eda459ebdf98e029f87c90a980e81d94
Certificate serial: 01942520A2764EABFF4D13B02B58E4EC22B9
Authority key identifier: FC:D7:A7:21:ED:A4:59:EB:DF:98:E0:29:F8:7C:90:A9:80:E8:1D:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_NenIe2kWevfmOAp-HyQqYDoHZQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/cf4ab4-e914-40e1-82df-14dc7ec0495d/1/AkKW7m-MHHB19PTWABc4m9rKocs.roa
Signing time: Thu 02 Jan 2025 03:48:03 +0000
ROA not before: Thu 02 Jan 2025 03:48:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 27471
IP address blocks: 46.235.152.0/24 maxlen: 24
46.235.153.0/24 maxlen: 24
46.235.154.0/24 maxlen: 24
46.235.156.0/24 maxlen: 24
46.235.158.0/24 maxlen: 24
46.235.159.0/24 maxlen: 24
185.180.48.0/24 maxlen: 24
185.180.49.0/24 maxlen: 24
185.180.50.0/24 maxlen: 24
185.180.51.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:20:a2:76:4e:ab:ff:4d:13:b0:2b:58:e4:ec:22:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcd7a721eda459ebdf98e029f87c90a980e81d94
Validity
Not Before: Jan 2 03:48:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=024296ee6f8c1c7075f4f4d60017389bdacaa1cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:c4:68:fb:b3:43:e3:80:da:57:91:b2:d8:3c:
d7:8f:97:04:da:03:14:9c:2e:98:e2:23:cf:bc:ad:
ea:bd:45:11:13:f9:3c:b6:e8:a0:df:31:33:65:01:
4b:13:ec:dc:e7:2d:13:31:a0:ab:e2:83:24:2b:0a:
4a:21:64:d8:f5:2e:66:61:a1:24:6f:e4:e6:a6:b4:
9d:3d:0d:a3:92:8a:09:55:1b:b3:9d:b9:93:c4:96:
0a:79:47:1d:c6:60:af:cf:a0:3d:90:cd:e8:3c:3b:
1f:cd:9b:79:9c:17:ef:78:a8:a1:10:7b:34:a2:fd:
b9:2f:b9:42:26:bd:7e:e4:06:fb:90:7e:7f:27:ab:
a9:91:7f:ed:13:39:cb:91:6a:b9:9f:c3:87:dd:37:
33:8b:b4:92:f7:a1:89:70:62:43:f4:a7:d2:fc:39:
2c:bb:82:7e:0f:67:c8:87:91:9d:99:c7:55:2d:97:
1a:1b:fb:27:8d:b9:43:e5:0b:3a:bb:f4:3f:7e:47:
a3:62:73:2c:cb:92:cf:59:49:4b:cd:cb:92:50:df:
6a:7c:d2:c0:92:23:9f:46:eb:79:b5:96:1e:73:b9:
2b:14:c6:61:78:b4:58:11:b6:26:34:2b:df:c3:bb:
8e:a6:3b:49:04:eb:8e:05:9e:c6:b8:3e:01:04:31:
50:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:42:96:EE:6F:8C:1C:70:75:F4:F4:D6:00:17:38:9B:DA:CA:A1:CB
X509v3 Authority Key Identifier:
keyid:FC:D7:A7:21:ED:A4:59:EB:DF:98:E0:29:F8:7C:90:A9:80:E8:1D:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_NenIe2kWevfmOAp-HyQqYDoHZQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/cf4ab4-e914-40e1-82df-14dc7ec0495d/1/AkKW7m-MHHB19PTWABc4m9rKocs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/cf4ab4-e914-40e1-82df-14dc7ec0495d/1/_NenIe2kWevfmOAp-HyQqYDoHZQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.235.152.0-46.235.154.255
46.235.156.0/24
46.235.158.0/23
185.180.48.0/22
Signature Algorithm: sha256WithRSAEncryption
63:69:49:2f:f7:f9:fb:25:b3:ad:88:9b:1a:7f:b2:b3:d1:32:
6c:ff:1c:1f:d6:6b:fa:86:21:ca:1a:32:15:a6:37:81:71:e5:
e1:0d:a0:bd:65:23:f4:c1:cf:ae:fc:1b:76:c4:43:3f:03:fd:
07:3e:25:7b:d1:72:70:4c:f0:b5:94:d2:71:fe:91:12:a6:9a:
64:6c:a6:01:a1:12:8c:e3:44:44:e4:27:d0:32:c1:4d:1f:10:
6a:db:6a:a2:a5:cc:0d:66:36:a6:9b:65:36:3e:7c:04:90:f0:
4d:04:26:80:4c:81:d2:6b:c9:e4:15:e4:2a:96:e1:0f:9d:97:
da:01:34:f3:72:fa:0d:3d:2b:46:d4:70:7c:49:e1:e0:84:c3:
10:3c:0e:e5:0c:2a:3f:7f:aa:9a:5e:b8:5e:1b:05:72:15:66:
05:69:02:51:e4:f7:0f:5f:85:09:c0:47:e8:85:43:b2:80:97:
14:d3:98:50:7f:3e:a5:78:74:ed:2e:e9:5a:19:76:99:2e:78:
5a:09:6a:f9:d2:0c:07:cc:7e:cc:0c:32:b5:3b:32:50:9b:6e:
88:54:a3:af:ac:bc:77:cd:46:8a:eb:f9:cc:a3:5c:ac:d9:dc:
f7:94:ed:ef:96:0d:4d:a0:87:a1:1c:23:84:ba:56:fb:bb:55:
b7:7a:0b:f1
-----BEGIN CERTIFICATE-----
MIIFFzCCA/+gAwIBAgISAZQlIKJ2Tqv/TROwK1jk7CK5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjZDdhNzIxZWRhNDU5ZWJkZjk4ZTAyOWY4N2M5MGE5ODBl
ODFkOTQwHhcNMjUwMTAyMDM0ODAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMjQyOTZlZTZmOGMxYzcwNzVmNGY0ZDYwMDE3Mzg5YmRhY2FhMWNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1cRo+7ND44DaV5Gy2DzXj5cE2gMU
nC6Y4iPPvK3qvUURE/k8tuig3zEzZQFLE+zc5y0TMaCr4oMkKwpKIWTY9S5mYaEk
b+TmprSdPQ2jkooJVRuznbmTxJYKeUcdxmCvz6A9kM3oPDsfzZt5nBfveKihEHs0
ov25L7lCJr1+5Ab7kH5/J6upkX/tEznLkWq5n8OH3Tczi7SS96GJcGJD9KfS/Dks
u4J+D2fIh5GdmcdVLZcaG/snjblD5Qs6u/Q/fkejYnMsy5LPWUlLzcuSUN9qfNLA
kiOfRut5tZYec7krFMZheLRYEbYmNCvfw7uOpjtJBOuOBZ7GuD4BBDFQ6wIDAQAB
o4ICIzCCAh8wHQYDVR0OBBYEFAJClu5vjBxwdfT01gAXOJvayqHLMB8GA1UdIwQY
MBaAFPzXpyHtpFnr35jgKfh8kKmA6B2UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX05lbkllMmtXZXZmbU9BcC1IeVFxWURvSFpRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS9jZjRhYjQtZTkxNC00MGUxLTgyZGYt
MTRkYzdlYzA0OTVkLzEvQWtLVzdtLU1ISEIxOVBUV0FCYzRtOXJLb2NzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NS9jZjRhYjQtZTkxNC00MGUxLTgyZGYtMTRkYzdlYzA0OTVk
LzEvX05lbkllMmtXZXZmbU9BcC1IeVFxWURvSFpRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgMAwDBAMu65gD
BAAu65oDBAAu65wDBAEu654DBAK5tDAwDQYJKoZIhvcNAQELBQADggEBAGNpSS/3
+fsls62Imxp/srPRMmz/HB/Wa/qGIcoaMhWmN4Fx5eENoL1lI/TBz678G3bEQz8D
/Qc+JXvRcnBM8LWU0nH+kRKmmmRspgGhEozjRETkJ9AywU0fEGrbaqKlzA1mNqab
ZTY+fASQ8E0EJoBMgdJryeQV5CqW4Q+dl9oBNPNy+g09K0bUcHxJ4eCEwxA8DuUM
Kj9/qppeuF4bBXIVZgVpAlHk9w9fhQnAR+iFQ7KAlxTTmFB/PqV4dO0u6VoZdpku
eFoJavnSDAfMfswMMrU7MlCbbohUo6+svHfNRorr+cyjXKzZ3PeU7e+WDU2gh6Ec
I4S6Vvu7Vbd6C/E=
-----END CERTIFICATE-----
Generated at Sun Apr 6 03:13:58 2025 by rpki-client