Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/Q5uzwVr3JsqqF1VB2l7NbdL9dS8.roa
File: Q5uzwVr3JsqqF1VB2l7NbdL9dS8.roa (raw, json)
Hash identifier: gbm+jaDyZ+Up1EHj0sRexII0FFC9U6LrEEr0NdJ6pH0=
Subject key identifier: 43:9B:B3:C1:5A:F7:26:CA:AA:17:55:41:DA:5E:CD:6D:D2:FD:75:2F
Certificate issuer: /CN=ebec9030c70a3d4192d59c28dcc8d547694340b3
Certificate serial: 0194266B55C2194ECB7B07CBCBE81D2F0537
Authority key identifier: EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/Q5uzwVr3JsqqF1VB2l7NbdL9dS8.roa
Signing time: Thu 02 Jan 2025 09:49:16 +0000
ROA not before: Thu 02 Jan 2025 09:49:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8967
IP address blocks: 46.35.182.0/23 maxlen: 24
95.158.156.0/22 maxlen: 24
95.158.172.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:55:c2:19:4e:cb:7b:07:cb:cb:e8:1d:2f:05:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebec9030c70a3d4192d59c28dcc8d547694340b3
Validity
Not Before: Jan 2 09:49:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=439bb3c15af726caaa175541da5ecd6dd2fd752f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:b7:bd:95:20:4e:fd:58:9d:46:03:d1:58:37:
b4:6e:91:a5:91:15:04:f5:32:a7:17:16:19:0a:9f:
6c:0d:48:44:38:27:51:b6:66:49:6e:1d:c3:6b:55:
a3:e7:64:c9:20:84:0d:98:51:8b:b3:04:72:65:7e:
05:2b:9c:5a:a2:3a:49:85:f4:ae:a4:82:76:08:4e:
b6:2b:ff:66:9d:7a:03:e4:f5:c1:70:b6:8f:ee:d7:
a8:38:78:6a:bc:76:cf:25:d5:42:d5:91:78:93:26:
be:5c:c9:f3:4a:b3:c0:a1:bb:16:1d:89:47:8e:6f:
a0:7c:d0:32:c8:ed:07:aa:c4:29:97:2a:e3:59:73:
a5:a4:b0:29:56:8e:50:6d:5e:82:d9:1d:50:55:bb:
95:2d:d7:5f:ca:49:2b:d4:b6:12:f3:61:da:69:e0:
4d:3e:89:86:09:5f:d1:d4:5e:55:81:b7:81:f2:de:
a5:c3:c5:41:1c:90:11:19:42:7d:a6:4c:84:a4:58:
9e:48:72:f1:84:d0:c5:1c:74:32:bd:1d:94:a6:55:
e9:bb:96:c6:40:6b:9a:5a:10:4f:f4:77:75:26:f4:
14:ec:94:c5:a6:21:b8:9e:c2:40:be:63:36:2f:88:
32:ca:c1:a5:64:9f:d9:1f:ed:a1:e7:94:9f:61:3b:
c7:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:9B:B3:C1:5A:F7:26:CA:AA:17:55:41:DA:5E:CD:6D:D2:FD:75:2F
X509v3 Authority Key Identifier:
keyid:EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/Q5uzwVr3JsqqF1VB2l7NbdL9dS8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.35.182.0/23
95.158.156.0/22
95.158.172.0/22
Signature Algorithm: sha256WithRSAEncryption
24:2c:aa:5a:50:9f:8a:8e:e6:c5:5b:1b:9f:08:2c:be:9e:81:
f1:3b:e0:00:75:f3:d1:27:c1:aa:6c:76:cb:e5:b5:ba:6c:92:
18:dc:b9:db:74:eb:ff:2e:5e:a9:15:9b:b0:2c:f8:59:f4:cf:
02:e5:28:5f:c2:bf:81:79:e2:8c:a9:91:45:e4:30:eb:5b:fa:
85:e0:9f:3a:e4:f9:bb:98:b5:92:39:a3:8c:cd:af:18:a8:a5:
d9:41:e0:0e:fc:d9:14:1c:f2:97:ff:7a:9c:f6:65:dd:4a:10:
e6:04:62:49:44:24:6a:2e:f6:ed:22:13:78:b9:fe:61:9e:bf:
3a:49:be:e3:3a:51:17:7c:27:7a:fb:40:86:71:31:87:14:ef:
3e:38:96:e8:3a:a6:73:60:5b:8a:40:d7:10:c2:95:77:96:e9:
96:4d:9f:92:38:78:ca:d5:dd:92:79:0f:42:e3:5c:dd:7a:6a:
d7:8c:83:aa:1f:5f:6e:c3:c3:b2:43:53:7d:62:26:4c:27:7b:
44:a4:54:1c:23:01:5d:15:49:c7:f8:ac:9b:fd:13:d5:5b:37:
a9:18:37:86:80:58:54:61:a7:d7:1a:56:ca:fe:58:f2:2b:da:
33:00:59:90:8a:84:91:d1:67:31:ac:31:8b:76:7a:c4:d4:f1:
6e:1e:18:75
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZQma1XCGU7LewfLy+gdLwU3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViZWM5MDMwYzcwYTNkNDE5MmQ1OWMyOGRjYzhkNTQ3Njk0
MzQwYjMwHhcNMjUwMTAyMDk0OTE2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MzliYjNjMTVhZjcyNmNhYWExNzU1NDFkYTVlY2Q2ZGQyZmQ3NTJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA27e9lSBO/VidRgPRWDe0bpGlkRUE
9TKnFxYZCp9sDUhEOCdRtmZJbh3Da1Wj52TJIIQNmFGLswRyZX4FK5xaojpJhfSu
pIJ2CE62K/9mnXoD5PXBcLaP7teoOHhqvHbPJdVC1ZF4kya+XMnzSrPAobsWHYlH
jm+gfNAyyO0HqsQplyrjWXOlpLApVo5QbV6C2R1QVbuVLddfykkr1LYS82HaaeBN
PomGCV/R1F5VgbeB8t6lw8VBHJARGUJ9pkyEpFieSHLxhNDFHHQyvR2UplXpu5bG
QGuaWhBP9Hd1JvQU7JTFpiG4nsJAvmM2L4gyysGlZJ/ZH+2h55SfYTvHSQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFEObs8Fa9ybKqhdVQdpezW3S/XUvMB8GA1UdIwQY
MBaAFOvskDDHCj1BktWcKNzI1UdpQ0CzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNi15UU1NY0tQVUdTMVp3bzNNalZSMmxEUUxNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS8zNzJiODctOTVmNC00Yzk4LWE2ZjQt
NGE2Zjg2ODMyNjVjLzEvUTV1endWcjNKc3FxRjFWQjJsN05iZEw5ZFM4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS8zNzJiODctOTVmNC00Yzk4LWE2ZjQtNGE2Zjg2ODMyNjVj
LzEvNi15UU1NY0tQVUdTMVp3bzNNalZSMmxEUUxNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBLiO2AwQC
X56cAwQCX56sMA0GCSqGSIb3DQEBCwUAA4IBAQAkLKpaUJ+KjubFWxufCCy+noHx
O+AAdfPRJ8GqbHbL5bW6bJIY3LnbdOv/Ll6pFZuwLPhZ9M8C5Shfwr+BeeKMqZFF
5DDrW/qF4J865Pm7mLWSOaOMza8YqKXZQeAO/NkUHPKX/3qc9mXdShDmBGJJRCRq
LvbtIhN4uf5hnr86Sb7jOlEXfCd6+0CGcTGHFO8+OJboOqZzYFuKQNcQwpV3lumW
TZ+SOHjK1d2SeQ9C41zdemrXjIOqH19uw8OyQ1N9YiZMJ3tEpFQcIwFdFUnH+Kyb
/RPVWzepGDeGgFhUYafXGlbK/ljyK9ozAFmQioSR0WcxrDGLdnrE1PFuHhh1
-----END CERTIFICATE-----
Generated at Mon Apr 7 20:03:08 2025 by rpki-client