Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/598e8b-a63f-425e-b4f7-452d6d3826f7/1/OZ7XXs5-vTfiSAWKoDmEkN7zWeQ.roa
File: OZ7XXs5-vTfiSAWKoDmEkN7zWeQ.roa (raw, json)
Hash identifier: l/UsCgIJDNyf/l0N4v4B7v81nHJghd1pRCptDGkln1E=
Subject key identifier: 39:9E:D7:5E:CE:7E:BD:37:E2:48:05:8A:A0:39:84:90:DE:F3:59:E4
Certificate issuer: /CN=468b68141796ca95e4c72f4bfa696acea5083af3
Certificate serial: 0194258F93CB495873F911E49CA1E9199BB4
Authority key identifier: 46:8B:68:14:17:96:CA:95:E4:C7:2F:4B:FA:69:6A:CE:A5:08:3A:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RotoFBeWypXkxy9L-mlqzqUIOvM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/598e8b-a63f-425e-b4f7-452d6d3826f7/1/OZ7XXs5-vTfiSAWKoDmEkN7zWeQ.roa
Signing time: Thu 02 Jan 2025 05:49:13 +0000
ROA not before: Thu 02 Jan 2025 05:49:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210560
IP address blocks: 46.243.146.0/23 maxlen: 23
46.243.146.0/24 maxlen: 24
2a11:f740:2::/48 maxlen: 48
2a11:f740:20::/44 maxlen: 44
2a11:f740:20::/48 maxlen: 48
2a11:f740:21::/48 maxlen: 48
2a11:f740:22::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:93:cb:49:58:73:f9:11:e4:9c:a1:e9:19:9b:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=468b68141796ca95e4c72f4bfa696acea5083af3
Validity
Not Before: Jan 2 05:49:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=399ed75ece7ebd37e248058aa0398490def359e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:a3:f3:75:80:90:98:90:63:aa:45:ef:e1:66:
c5:7b:e6:cc:5f:11:4d:07:5c:5f:3f:71:0c:44:0b:
e1:72:0f:f5:81:67:71:56:5b:55:96:46:5f:b6:b6:
2d:8f:18:77:11:1d:c1:50:a0:4a:d8:1b:54:c8:c2:
e0:ca:90:0d:27:92:45:ff:14:ae:80:77:9e:88:c0:
78:62:83:0f:c0:28:33:74:31:90:30:04:30:c1:eb:
ce:a2:11:f8:df:28:e9:7d:33:58:2f:e6:4a:6d:5e:
38:03:ca:99:d0:e8:15:ec:45:2f:d7:be:4f:79:8c:
74:4d:13:f2:a1:80:ef:69:82:68:f8:5b:7c:d2:69:
fe:99:22:a7:29:bb:d4:bb:57:c9:a8:f3:62:71:cf:
7b:98:e3:0b:69:fa:0a:31:fa:8d:d2:af:0c:32:a7:
72:de:2e:dd:1a:f4:7d:99:da:84:9a:94:cf:03:56:
4c:76:a6:c7:b6:25:46:0e:00:b0:90:c2:2f:d8:ce:
b6:5b:48:29:28:53:55:c3:95:d3:67:c1:38:f6:ee:
a7:a0:cb:85:54:fb:64:03:ae:f5:74:58:88:fe:fd:
9f:41:e3:93:d2:c2:5f:28:d4:4d:fc:40:af:85:23:
e6:a1:aa:f8:bf:ff:ae:d4:9b:d4:77:8a:25:7d:7f:
16:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:9E:D7:5E:CE:7E:BD:37:E2:48:05:8A:A0:39:84:90:DE:F3:59:E4
X509v3 Authority Key Identifier:
keyid:46:8B:68:14:17:96:CA:95:E4:C7:2F:4B:FA:69:6A:CE:A5:08:3A:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RotoFBeWypXkxy9L-mlqzqUIOvM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/598e8b-a63f-425e-b4f7-452d6d3826f7/1/OZ7XXs5-vTfiSAWKoDmEkN7zWeQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/598e8b-a63f-425e-b4f7-452d6d3826f7/1/RotoFBeWypXkxy9L-mlqzqUIOvM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.243.146.0/23
IPv6:
2a11:f740:2::/48
2a11:f740:20::/44
Signature Algorithm: sha256WithRSAEncryption
4c:76:d4:76:82:b9:8e:b6:88:b6:df:dc:65:91:98:6f:b5:22:
0d:87:2b:7c:76:35:19:80:9a:3b:d0:82:ba:8d:90:a2:45:77:
df:6e:2e:ff:2b:f8:00:64:27:20:c6:1d:01:01:3a:57:84:1a:
7e:66:59:c8:87:42:f2:c9:00:54:2e:9b:d1:e4:04:fd:7a:23:
60:ee:3b:32:c9:04:b4:c2:6b:c2:de:a2:02:28:df:db:de:c7:
fa:cb:54:80:d1:e0:97:71:4a:5c:8f:ce:7a:44:9f:5f:f3:b6:
37:c6:84:07:35:77:29:b4:86:84:99:e1:ec:4b:0a:e7:01:92:
1c:ee:da:43:d3:b8:b9:8c:12:36:2f:e6:cf:07:28:b6:51:52:
7f:22:9f:2f:52:b8:bc:1a:dd:8e:94:e1:5d:5d:07:f0:6d:16:
f1:b9:3b:dd:f8:0c:34:eb:05:57:04:86:88:33:8b:b3:f7:18:
7d:2a:23:b8:f3:e3:bf:b4:34:0a:62:10:8d:08:5f:c6:d4:30:
2a:db:2b:02:c0:67:96:c2:0e:30:35:21:55:35:f8:63:be:4d:
37:21:a1:ad:cc:cf:bb:c9:29:00:f4:b0:31:e4:bc:92:a8:4b:
c5:c5:e2:fa:c0:0f:12:da:f9:ba:5e:6e:8f:d7:17:b3:a2:20:
92:4f:49:a4
-----BEGIN CERTIFICATE-----
MIIFFzCCA/+gAwIBAgISAZQlj5PLSVhz+RHknKHpGZu0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2OGI2ODE0MTc5NmNhOTVlNGM3MmY0YmZhNjk2YWNlYTUw
ODNhZjMwHhcNMjUwMTAyMDU0OTEzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzOTllZDc1ZWNlN2ViZDM3ZTI0ODA1OGFhMDM5ODQ5MGRlZjM1OWU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2qPzdYCQmJBjqkXv4WbFe+bMXxFN
B1xfP3EMRAvhcg/1gWdxVltVlkZftrYtjxh3ER3BUKBK2BtUyMLgypANJ5JF/xSu
gHeeiMB4YoMPwCgzdDGQMAQwwevOohH43yjpfTNYL+ZKbV44A8qZ0OgV7EUv175P
eYx0TRPyoYDvaYJo+Ft80mn+mSKnKbvUu1fJqPNicc97mOMLafoKMfqN0q8MMqdy
3i7dGvR9mdqEmpTPA1ZMdqbHtiVGDgCwkMIv2M62W0gpKFNVw5XTZ8E49u6noMuF
VPtkA671dFiI/v2fQeOT0sJfKNRN/ECvhSPmoar4v/+u1JvUd4olfX8WFwIDAQAB
o4ICIzCCAh8wHQYDVR0OBBYEFDme117Ofr034kgFiqA5hJDe81nkMB8GA1UdIwQY
MBaAFEaLaBQXlsqV5McvS/ppas6lCDrzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUm90b0ZCZVd5cFhreHk5TC1tbHF6cVVJT3ZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi81OThlOGItYTYzZi00MjVlLWI0Zjct
NDUyZDZkMzgyNmY3LzEvT1o3WFhzNS12VGZpU0FXS29EbUVrTjd6V2VRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi81OThlOGItYTYzZi00MjVlLWI0ZjctNDUyZDZkMzgyNmY3
LzEvUm90b0ZCZVd5cFhreHk5TC1tbHF6cVVJT3ZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAMBAIAATAGAwQBLvOSMBgE
AgACMBIDBwAqEfdAAAIDBwQqEfdAACAwDQYJKoZIhvcNAQELBQADggEBAEx21HaC
uY62iLbf3GWRmG+1Ig2HK3x2NRmAmjvQgrqNkKJFd99uLv8r+ABkJyDGHQEBOleE
Gn5mWciHQvLJAFQum9HkBP16I2DuOzLJBLTCa8LeogIo39vex/rLVIDR4JdxSlyP
znpEn1/ztjfGhAc1dym0hoSZ4exLCucBkhzu2kPTuLmMEjYv5s8HKLZRUn8iny9S
uLwa3Y6U4V1dB/BtFvG5O934DDTrBVcEhogzi7P3GH0qI7jz47+0NApiEI0IX8bU
MCrbKwLAZ5bCDjA1IVU1+GO+TTchoa3Mz7vJKQD0sDHkvJKoS8XF4vrADxLa+bpe
bo/XF7OiIJJPSaQ=
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:42:38 2025 by rpki-client