Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/dcd512-0cb7-49a0-a618-6fbb19483287/1/96zfb_as6Uu1dQBioEPRjkMoH0A.roa
File: 96zfb_as6Uu1dQBioEPRjkMoH0A.roa (raw, json)
Hash identifier: ZbDgERbOZ82dnNJrpA+vEp4hFeMsEzejOuHoVOcv55k=
Subject key identifier: F7:AC:DF:6F:F6:AC:E9:4B:B5:75:00:62:A0:43:D1:8E:43:28:1F:40
Certificate issuer: /CN=b74eb4b20bc594ac2ba3aa5aef30e74e25e156e1
Certificate serial: 01942748863878C7978F9674CE08EACC5266
Authority key identifier: B7:4E:B4:B2:0B:C5:94:AC:2B:A3:AA:5A:EF:30:E7:4E:25:E1:56:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t060sgvFlKwro6pa7zDnTiXhVuE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/dcd512-0cb7-49a0-a618-6fbb19483287/1/96zfb_as6Uu1dQBioEPRjkMoH0A.roa
Signing time: Thu 02 Jan 2025 13:50:51 +0000
ROA not before: Thu 02 Jan 2025 13:50:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60781
IP address blocks: 185.46.180.0/23 maxlen: 23
185.46.180.0/24 maxlen: 24
185.46.181.0/24 maxlen: 24
185.46.182.0/23 maxlen: 23
185.46.182.0/24 maxlen: 24
185.46.183.0/24 maxlen: 24
2a04:8140::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:86:38:78:c7:97:8f:96:74:ce:08:ea:cc:52:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b74eb4b20bc594ac2ba3aa5aef30e74e25e156e1
Validity
Not Before: Jan 2 13:50:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f7acdf6ff6ace94bb5750062a043d18e43281f40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:1e:c1:31:9f:93:ba:81:72:1e:df:eb:02:31:
4e:9a:38:d9:23:83:47:63:a1:22:38:a2:0f:69:08:
eb:a2:29:82:84:b0:f2:b1:64:47:ef:5e:10:64:92:
32:a2:3c:d7:35:5c:e7:13:b5:a9:2d:ea:8a:51:71:
96:50:fd:d1:5d:98:2a:c6:6a:0b:78:ad:94:37:e2:
a1:6d:d6:48:32:e4:fc:4f:26:99:df:54:f2:31:8e:
43:06:38:01:37:91:73:f8:ce:ab:75:f2:54:58:6d:
13:c6:ac:53:36:29:ed:50:68:06:8c:73:0b:17:a2:
36:e1:06:da:de:cb:be:22:f5:79:30:61:b3:86:5f:
7b:5c:70:b0:40:26:58:f8:8e:7a:3e:37:07:08:d4:
2a:7f:17:e0:98:6c:3e:83:2c:ef:21:d8:24:3c:26:
7a:dd:95:f6:61:cd:62:34:0e:1b:79:e2:4b:cf:42:
1c:17:16:c4:d9:94:86:ff:90:0f:80:3f:f0:9b:4e:
4b:c9:ae:00:88:2b:2c:85:c6:22:80:5b:56:99:47:
e8:b8:3b:a9:1e:52:ca:01:20:f9:19:d1:88:be:4e:
0a:93:43:e0:c9:d1:e1:3a:51:13:b5:2a:1d:1f:80:
4d:b5:f3:3a:68:0f:62:04:59:d9:17:42:80:79:7d:
89:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:AC:DF:6F:F6:AC:E9:4B:B5:75:00:62:A0:43:D1:8E:43:28:1F:40
X509v3 Authority Key Identifier:
keyid:B7:4E:B4:B2:0B:C5:94:AC:2B:A3:AA:5A:EF:30:E7:4E:25:E1:56:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t060sgvFlKwro6pa7zDnTiXhVuE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/dcd512-0cb7-49a0-a618-6fbb19483287/1/96zfb_as6Uu1dQBioEPRjkMoH0A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/dcd512-0cb7-49a0-a618-6fbb19483287/1/t060sgvFlKwro6pa7zDnTiXhVuE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.46.180.0/22
IPv6:
2a04:8140::/48
Signature Algorithm: sha256WithRSAEncryption
c4:2c:5e:8a:f8:e4:db:ee:09:24:86:11:5f:90:36:b2:01:94:
e6:16:cb:dc:05:a6:62:88:4d:97:e2:1c:fb:61:25:cf:4c:ac:
22:4d:d6:ee:26:41:e3:91:47:db:76:8c:53:b5:34:70:de:93:
7e:8d:98:8b:bc:9c:11:b4:2a:5d:16:c1:57:10:03:42:02:58:
e2:fe:a7:cd:a3:b3:88:09:a0:d6:6c:94:59:e9:53:58:c8:16:
fa:06:b2:22:f1:37:4e:86:49:0f:7b:88:49:58:dd:b7:e6:10:
05:64:bb:ed:2a:54:40:1b:da:04:e9:f1:0e:df:97:75:88:24:
23:ee:76:b9:ae:e9:d5:21:8c:2b:dc:40:d2:e3:e9:91:b3:61:
4a:ab:ba:56:5d:97:cc:6c:43:54:a8:09:e6:75:0c:5b:f9:1a:
b4:a3:cc:3d:61:65:77:b7:90:6b:df:a9:28:78:28:d0:25:fb:
2e:e3:a7:d4:5b:60:ce:0c:d3:b3:97:63:d3:00:b5:a3:ef:8e:
b6:00:a4:2c:37:77:6d:88:f6:07:4e:ae:0b:6e:a6:a2:89:35:
c7:ab:3c:e8:79:91:b3:a2:d5:98:66:f5:bf:52:45:92:20:34:
32:e3:ba:f7:c5:c7:0f:30:e3:fd:20:91:16:0b:33:c9:94:25:
92:9c:d8:b1
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAZQnSIY4eMeXj5Z0zgjqzFJmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3NGViNGIyMGJjNTk0YWMyYmEzYWE1YWVmMzBlNzRlMjVl
MTU2ZTEwHhcNMjUwMTAyMTM1MDUxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmN2FjZGY2ZmY2YWNlOTRiYjU3NTAwNjJhMDQzZDE4ZTQzMjgxZjQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkh7BMZ+TuoFyHt/rAjFOmjjZI4NH
Y6EiOKIPaQjroimChLDysWRH714QZJIyojzXNVznE7WpLeqKUXGWUP3RXZgqxmoL
eK2UN+KhbdZIMuT8TyaZ31TyMY5DBjgBN5Fz+M6rdfJUWG0TxqxTNintUGgGjHML
F6I24Qba3su+IvV5MGGzhl97XHCwQCZY+I56PjcHCNQqfxfgmGw+gyzvIdgkPCZ6
3ZX2Yc1iNA4beeJLz0IcFxbE2ZSG/5APgD/wm05Lya4AiCsshcYigFtWmUfouDup
HlLKASD5GdGIvk4Kk0PgydHhOlETtSodH4BNtfM6aA9iBFnZF0KAeX2JvwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFPes32/2rOlLtXUAYqBD0Y5DKB9AMB8GA1UdIwQY
MBaAFLdOtLILxZSsK6OqWu8w504l4VbhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdDA2MHNndkZsS3dybzZwYTd6RG5UaVhoVnVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy9kY2Q1MTItMGNiNy00OWEwLWE2MTgt
NmZiYjE5NDgzMjg3LzEvOTZ6ZmJfYXM2VXUxZFFCaW9FUFJqa01vSDBBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy9kY2Q1MTItMGNiNy00OWEwLWE2MTgtNmZiYjE5NDgzMjg3
LzEvdDA2MHNndkZsS3dybzZwYTd6RG5UaVhoVnVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQCuS60MA8E
AgACMAkDBwAqBIFAAAAwDQYJKoZIhvcNAQELBQADggEBAMQsXor45NvuCSSGEV+Q
NrIBlOYWy9wFpmKITZfiHPthJc9MrCJN1u4mQeORR9t2jFO1NHDek36NmIu8nBG0
Kl0WwVcQA0ICWOL+p82js4gJoNZslFnpU1jIFvoGsiLxN06GSQ97iElY3bfmEAVk
u+0qVEAb2gTp8Q7fl3WIJCPudrmu6dUhjCvcQNLj6ZGzYUqrulZdl8xsQ1SoCeZ1
DFv5GrSjzD1hZXe3kGvfqSh4KNAl+y7jp9RbYM4M07OXY9MAtaPvjrYApCw3d22I
9gdOrgtupqKJNcerPOh5kbOi1Zhm9b9SRZIgNDLjuvfFxw8w4/0gkRYLM8mUJZKc
2LE=
-----END CERTIFICATE-----
Generated at Fri Apr 4 19:29:43 2025 by rpki-client