Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/43312f-991d-4e95-93df-2c7ef9ff03f5/1/REqtYQmRREKLJc9dQnOchbRCd38.roa
File: REqtYQmRREKLJc9dQnOchbRCd38.roa (raw, json)
Hash identifier: CsFmG2TMLbA2Znbnw8r80UkQYTzgJ0VzpR3kBwBlHwY=
Subject key identifier: 44:4A:AD:61:09:91:44:42:8B:25:CF:5D:42:73:9C:85:B4:42:77:7F
Certificate issuer: /CN=61d764a0434272c1329ae99288d092bc3ef2228f
Certificate serial: 019421B1EA6226891A2071038C4D7E85FECA
Authority key identifier: 61:D7:64:A0:43:42:72:C1:32:9A:E9:92:88:D0:92:BC:3E:F2:22:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YddkoENCcsEymumSiNCSvD7yIo8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/43312f-991d-4e95-93df-2c7ef9ff03f5/1/REqtYQmRREKLJc9dQnOchbRCd38.roa
Signing time: Wed 01 Jan 2025 11:48:15 +0000
ROA not before: Wed 01 Jan 2025 11:48:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51309
IP address blocks: 46.28.16.0/24 maxlen: 24
46.28.17.0/24 maxlen: 24
46.28.18.0/24 maxlen: 24
46.28.19.0/24 maxlen: 24
46.28.20.0/24 maxlen: 24
46.28.21.0/24 maxlen: 24
46.28.22.0/24 maxlen: 24
46.28.23.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:ea:62:26:89:1a:20:71:03:8c:4d:7e:85:fe:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61d764a0434272c1329ae99288d092bc3ef2228f
Validity
Not Before: Jan 1 11:48:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=444aad61099144428b25cf5d42739c85b442777f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:d4:95:71:68:e5:e8:28:0c:77:9c:ad:06:35:
9e:4d:6f:6b:6e:58:39:97:02:b0:66:f3:c9:8b:cb:
78:66:cb:19:6c:fc:55:b6:ff:d4:8b:48:91:d1:33:
45:61:17:35:ae:c5:93:aa:d8:55:8e:a2:6b:66:53:
31:d4:5a:3e:4c:26:b6:5b:c8:8a:21:98:1d:ef:c2:
da:d2:38:70:55:56:c7:3b:0c:ca:f3:0d:4b:e1:41:
ea:4f:96:6e:d5:eb:d1:f7:16:10:f4:83:5b:8a:be:
4d:db:dc:f5:65:1d:79:55:81:ca:43:be:18:f0:93:
9c:f7:b7:1a:cc:21:aa:1a:88:73:b8:28:61:b5:57:
fb:9f:60:d0:a0:7d:e4:00:f6:4e:1c:cb:7e:9b:2c:
43:47:bf:7f:c8:2c:58:46:cf:0b:81:a3:97:72:4e:
6e:c0:13:4f:62:73:ad:c9:1b:56:81:ff:be:5f:16:
a2:2e:94:31:7e:5a:61:bc:03:e9:d7:bd:ff:e9:ef:
cc:47:9a:8b:cc:03:bb:3a:72:c1:88:d7:3b:dc:fd:
03:6b:c2:95:eb:06:f2:d9:5c:b8:9c:1b:82:ef:de:
65:0f:a6:c6:4c:8b:2c:82:80:0c:91:bb:f4:45:5c:
c3:4a:d0:3d:fe:e8:ee:a3:e7:ca:f4:17:46:86:61:
b9:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:4A:AD:61:09:91:44:42:8B:25:CF:5D:42:73:9C:85:B4:42:77:7F
X509v3 Authority Key Identifier:
keyid:61:D7:64:A0:43:42:72:C1:32:9A:E9:92:88:D0:92:BC:3E:F2:22:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YddkoENCcsEymumSiNCSvD7yIo8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/43312f-991d-4e95-93df-2c7ef9ff03f5/1/REqtYQmRREKLJc9dQnOchbRCd38.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/43312f-991d-4e95-93df-2c7ef9ff03f5/1/YddkoENCcsEymumSiNCSvD7yIo8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.28.16.0/21
Signature Algorithm: sha256WithRSAEncryption
82:94:dc:7f:14:e1:62:1c:d5:f2:18:2e:eb:9c:b0:5f:34:0d:
7a:65:5c:37:4d:4b:83:3e:b4:b1:e1:4a:6b:71:5e:d4:09:f4:
8d:a3:ba:b5:77:3e:e9:af:76:87:1b:78:0e:57:38:c3:57:d8:
6f:80:e1:8a:45:69:ea:b0:7f:2d:48:a8:bc:96:d2:e8:04:8b:
97:7a:16:65:c9:0c:b8:2c:7b:63:5c:8f:c6:28:ae:58:1d:0d:
ca:03:52:3b:74:50:d1:0e:ce:8e:a0:9a:56:dc:10:5b:ca:d4:
b9:81:18:aa:22:9a:06:28:12:35:49:0e:57:ee:07:13:81:3e:
f1:95:5c:5a:67:0f:e0:ec:8c:58:94:d0:57:e3:41:df:e6:d4:
a8:97:1c:2f:e5:1d:a0:bd:7d:53:d3:e4:d1:93:e2:3a:5e:63:
e8:92:34:ba:fe:02:65:e9:df:0b:bf:a7:15:31:b7:5b:b4:55:
2f:b2:a5:97:5a:24:d4:0e:5b:71:ab:66:ad:f5:1b:54:51:ed:
ca:31:91:a6:99:4d:1c:04:69:0d:0d:4e:97:5f:18:bd:0c:c0:
4c:4d:2b:d8:25:9a:98:58:02:57:f5:48:74:11:58:0e:c9:61:
dc:81:92:b2:75:0a:e4:a8:a9:8a:1e:b0:22:38:ef:27:ac:44:
99:7d:0f:d7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQhsepiJokaIHEDjE1+hf7KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxZDc2NGEwNDM0MjcyYzEzMjlhZTk5Mjg4ZDA5MmJjM2Vm
MjIyOGYwHhcNMjUwMTAxMTE0ODE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NDRhYWQ2MTA5OTE0NDQyOGIyNWNmNWQ0MjczOWM4NWI0NDI3NzdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9tSVcWjl6CgMd5ytBjWeTW9rblg5
lwKwZvPJi8t4ZssZbPxVtv/Ui0iR0TNFYRc1rsWTqthVjqJrZlMx1Fo+TCa2W8iK
IZgd78La0jhwVVbHOwzK8w1L4UHqT5Zu1evR9xYQ9INbir5N29z1ZR15VYHKQ74Y
8JOc97cazCGqGohzuChhtVf7n2DQoH3kAPZOHMt+myxDR79/yCxYRs8LgaOXck5u
wBNPYnOtyRtWgf++XxaiLpQxflphvAPp173/6e/MR5qLzAO7OnLBiNc73P0Da8KV
6wby2Vy4nBuC795lD6bGTIssgoAMkbv0RVzDStA9/ujuo+fK9BdGhmG5+QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFERKrWEJkURCiyXPXUJznIW0Qnd/MB8GA1UdIwQY
MBaAFGHXZKBDQnLBMprpkojQkrw+8iKPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWRka29FTkNjc0V5bXVtU2lOQ1N2RDd5SW84LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi80MzMxMmYtOTkxZC00ZTk1LTkzZGYt
MmM3ZWY5ZmYwM2Y1LzEvUkVxdFlRbVJSRUtMSmM5ZFFuT2NoYlJDZDM4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi80MzMxMmYtOTkxZC00ZTk1LTkzZGYtMmM3ZWY5ZmYwM2Y1
LzEvWWRka29FTkNjc0V5bXVtU2lOQ1N2RDd5SW84LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDLhwQMA0G
CSqGSIb3DQEBCwUAA4IBAQCClNx/FOFiHNXyGC7rnLBfNA16ZVw3TUuDPrSx4Upr
cV7UCfSNo7q1dz7pr3aHG3gOVzjDV9hvgOGKRWnqsH8tSKi8ltLoBIuXehZlyQy4
LHtjXI/GKK5YHQ3KA1I7dFDRDs6OoJpW3BBbytS5gRiqIpoGKBI1SQ5X7gcTgT7x
lVxaZw/g7IxYlNBX40Hf5tSolxwv5R2gvX1T0+TRk+I6XmPokjS6/gJl6d8Lv6cV
MbdbtFUvsqWXWiTUDltxq2at9RtUUe3KMZGmmU0cBGkNDU6XXxi9DMBMTSvYJZqY
WAJX9Uh0EVgOyWHcgZKydQrkqKmKHrAiOO8nrESZfQ/X
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:39:30 2025 by rpki-client