Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/96520f-7bd8-4fc8-8c7f-7ef2d70d708f/1/DOXYuiiK5rXp8a5rWvhAif5Blx0.roa
File: DOXYuiiK5rXp8a5rWvhAif5Blx0.roa (raw, json)
Hash identifier: XRy2RWwnJQNc1rzcNcNn26NNGWEtVW9kXKiFv26sG1A=
Subject key identifier: 0C:E5:D8:BA:28:8A:E6:B5:E9:F1:AE:6B:5A:F8:40:89:FE:41:97:1D
Certificate issuer: /CN=1792806c34f57583899dc52dca407e25cf9d3622
Certificate serial: 01942823B3B5EF24E29D2F15E27AFBE5E795
Authority key identifier: 17:92:80:6C:34:F5:75:83:89:9D:C5:2D:CA:40:7E:25:CF:9D:36:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F5KAbDT1dYOJncUtykB-Jc-dNiI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/96520f-7bd8-4fc8-8c7f-7ef2d70d708f/1/DOXYuiiK5rXp8a5rWvhAif5Blx0.roa
Signing time: Thu 02 Jan 2025 17:50:15 +0000
ROA not before: Thu 02 Jan 2025 17:50:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34688
IP address blocks: 46.227.240.0/21 maxlen: 21
2a01:7600::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:b3:b5:ef:24:e2:9d:2f:15:e2:7a:fb:e5:e7:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1792806c34f57583899dc52dca407e25cf9d3622
Validity
Not Before: Jan 2 17:50:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0ce5d8ba288ae6b5e9f1ae6b5af84089fe41971d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:74:7a:5d:d9:b2:cc:80:e6:ee:64:0d:cf:78:
67:d6:ce:84:8a:9c:ce:1c:48:f2:d7:b8:b4:30:a3:
71:a9:97:8f:bf:24:c6:dd:f6:df:d8:c1:8e:cb:1e:
ea:1a:37:29:70:fa:9e:3c:db:c8:b3:63:c8:46:cd:
19:d9:32:b4:dc:c3:b1:7e:78:40:90:15:f3:b2:16:
7b:38:6a:a3:71:91:11:a2:42:3f:14:75:9e:77:5d:
12:d6:ef:50:0b:0d:39:b6:16:90:fe:aa:50:10:ad:
b5:72:b7:cc:e3:7a:24:c6:9d:02:ab:e7:19:38:88:
4b:ac:03:3d:e2:a3:f9:d0:ed:dd:fd:7f:ae:3e:15:
88:d2:12:6f:6b:fc:55:8b:98:26:95:ef:a5:97:1f:
26:ba:24:c7:61:d3:37:01:af:11:49:b6:74:d7:74:
cb:ff:01:68:cc:8f:bd:ae:af:85:89:c9:cd:e5:ef:
b0:08:55:5c:50:f9:68:04:23:44:2d:63:fe:71:cd:
06:35:64:32:45:5a:5f:56:06:50:2a:35:29:9d:86:
17:e1:d2:30:7f:21:3c:33:3f:6a:7c:f4:d6:97:c5:
03:67:22:6d:54:73:10:4f:b9:fd:44:1b:a1:f7:ed:
43:2b:59:21:dc:93:77:a6:1e:59:24:63:ef:31:b0:
71:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:E5:D8:BA:28:8A:E6:B5:E9:F1:AE:6B:5A:F8:40:89:FE:41:97:1D
X509v3 Authority Key Identifier:
keyid:17:92:80:6C:34:F5:75:83:89:9D:C5:2D:CA:40:7E:25:CF:9D:36:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F5KAbDT1dYOJncUtykB-Jc-dNiI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/96520f-7bd8-4fc8-8c7f-7ef2d70d708f/1/DOXYuiiK5rXp8a5rWvhAif5Blx0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/96520f-7bd8-4fc8-8c7f-7ef2d70d708f/1/F5KAbDT1dYOJncUtykB-Jc-dNiI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.227.240.0/21
IPv6:
2a01:7600::/32
Signature Algorithm: sha256WithRSAEncryption
62:d1:7b:e7:8e:66:88:24:f7:45:16:55:98:76:90:d9:77:af:
3b:b1:10:ef:e5:6b:a0:f4:d0:6a:94:7f:01:27:fa:1e:f8:dc:
89:d3:fa:6c:ed:5e:4f:a9:b8:da:06:ec:d1:b3:14:6d:dd:0b:
b0:e9:4c:69:34:d0:bb:80:44:fe:56:96:81:0b:30:22:46:97:
f4:bd:d4:12:b8:25:46:d8:5d:09:7e:39:84:96:5b:a4:50:84:
9f:6c:0e:51:0a:c1:c7:4f:8c:e7:ef:44:93:f6:f2:84:51:13:
97:05:60:c7:a5:13:b8:b5:37:a0:25:23:5d:e8:92:11:10:66:
ca:04:91:62:db:ad:47:10:86:a9:9d:fc:6f:bf:51:e5:16:2a:
43:15:4a:cd:d5:64:b8:69:a3:67:80:54:3a:91:32:d8:65:02:
2d:aa:f2:c5:f0:c6:b7:55:59:a8:1d:48:29:aa:93:b5:72:38:
03:39:08:8a:6a:3e:b9:ef:4e:83:56:02:15:9a:e6:68:91:20:
9b:eb:a4:94:6e:d5:57:dc:38:01:a1:93:25:14:53:c1:25:56:
ea:dd:96:4f:39:51:94:73:e2:b7:c6:cb:4d:ce:ed:4b:cd:ed:
71:9d:ef:8b:99:b3:40:f6:3b:23:7f:b6:a4:a1:be:e4:ef:71:
75:5f:31:42
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZQoI7O17yTinS8V4nr75eeVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3OTI4MDZjMzRmNTc1ODM4OTlkYzUyZGNhNDA3ZTI1Y2Y5
ZDM2MjIwHhcNMjUwMTAyMTc1MDE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwY2U1ZDhiYTI4OGFlNmI1ZTlmMWFlNmI1YWY4NDA4OWZlNDE5NzFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApXR6XdmyzIDm7mQNz3hn1s6EipzO
HEjy17i0MKNxqZePvyTG3fbf2MGOyx7qGjcpcPqePNvIs2PIRs0Z2TK03MOxfnhA
kBXzshZ7OGqjcZERokI/FHWed10S1u9QCw05thaQ/qpQEK21crfM43okxp0Cq+cZ
OIhLrAM94qP50O3d/X+uPhWI0hJva/xVi5gmle+llx8muiTHYdM3Aa8RSbZ013TL
/wFozI+9rq+FicnN5e+wCFVcUPloBCNELWP+cc0GNWQyRVpfVgZQKjUpnYYX4dIw
fyE8Mz9qfPTWl8UDZyJtVHMQT7n9RBuh9+1DK1kh3JN3ph5ZJGPvMbBxYQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFAzl2Looiua16fGua1r4QIn+QZcdMB8GA1UdIwQY
MBaAFBeSgGw09XWDiZ3FLcpAfiXPnTYiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjVLQWJEVDFkWU9KbmNVdHlrQi1KYy1kTmlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS85NjUyMGYtN2JkOC00ZmM4LThjN2Yt
N2VmMmQ3MGQ3MDhmLzEvRE9YWXVpaUs1clhwOGE1cld2aEFpZjVCbHgwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS85NjUyMGYtN2JkOC00ZmM4LThjN2YtN2VmMmQ3MGQ3MDhm
LzEvRjVLQWJEVDFkWU9KbmNVdHlrQi1KYy1kTmlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQDLuPwMA0E
AgACMAcDBQAqAXYAMA0GCSqGSIb3DQEBCwUAA4IBAQBi0XvnjmaIJPdFFlWYdpDZ
d687sRDv5Wug9NBqlH8BJ/oe+NyJ0/ps7V5PqbjaBuzRsxRt3Quw6UxpNNC7gET+
VpaBCzAiRpf0vdQSuCVG2F0JfjmEllukUISfbA5RCsHHT4zn70ST9vKEUROXBWDH
pRO4tTegJSNd6JIREGbKBJFi261HEIapnfxvv1HlFipDFUrN1WS4aaNngFQ6kTLY
ZQItqvLF8Ma3VVmoHUgpqpO1cjgDOQiKaj65706DVgIVmuZokSCb66SUbtVX3DgB
oZMlFFPBJVbq3ZZPOVGUc+K3xstNzu1Lze1xne+LmbNA9jsjf7akob7k73F1XzFC
-----END CERTIFICATE-----
Generated at Wed Apr 9 01:00:15 2025 by rpki-client