Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/mJjHdX3SCVwj6yoNCT7Dpu7pXSo.roa
File: mJjHdX3SCVwj6yoNCT7Dpu7pXSo.roa (raw, json)
Hash identifier: ccP3x4XUmUaf8il9YXiD7LEPdeAv9/EZKZYCHAVZnrA=
Subject key identifier: 98:98:C7:75:7D:D2:09:5C:23:EB:2A:0D:09:3E:C3:A6:EE:E9:5D:2A
Certificate issuer: /CN=6f3030a4b67f95c2fed902d56657faa2494b5129
Certificate serial: 019420684E7D2A3E2441C5FE55BC348D93FB
Authority key identifier: 6F:30:30:A4:B6:7F:95:C2:FE:D9:02:D5:66:57:FA:A2:49:4B:51:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bzAwpLZ_lcL-2QLVZlf6oklLUSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/mJjHdX3SCVwj6yoNCT7Dpu7pXSo.roa
Signing time: Wed 01 Jan 2025 05:48:14 +0000
ROA not before: Wed 01 Jan 2025 05:48:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59628
IP address blocks: 46.100.144.0/21 maxlen: 21
91.92.172.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:4e:7d:2a:3e:24:41:c5:fe:55:bc:34:8d:93:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f3030a4b67f95c2fed902d56657faa2494b5129
Validity
Not Before: Jan 1 05:48:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9898c7757dd2095c23eb2a0d093ec3a6eee95d2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:65:93:bc:be:00:79:d7:41:ba:f2:e0:35:7e:
78:b4:05:8b:f3:92:5a:71:f3:58:97:31:8c:e8:a3:
90:6f:20:c3:66:4f:c8:0c:69:db:09:b4:0a:2e:44:
38:2f:f5:a4:89:2d:c9:97:22:63:68:69:ca:15:7d:
f0:73:e4:d4:fa:8f:43:fb:fc:99:15:d6:ce:9f:4f:
f2:b9:6e:67:26:25:88:a8:2b:1b:06:4b:3f:27:e9:
d5:05:9a:82:0f:0a:40:1e:0e:df:e5:7f:f5:8b:2a:
44:51:07:90:ef:9a:93:8d:50:ac:4c:03:82:1d:ec:
d4:1f:52:e5:55:96:21:84:63:d2:89:45:73:d5:5f:
95:04:43:b4:48:84:3c:46:0d:8b:38:28:15:fe:74:
8c:4b:10:31:0f:ae:8a:cd:d9:c5:fa:9f:d8:65:17:
41:9a:b4:87:fd:a5:6c:aa:68:c8:44:54:78:c0:3a:
4a:03:ae:39:43:ae:73:c9:29:eb:91:5d:1b:47:68:
c6:d3:55:a3:5f:63:8c:13:93:0a:42:39:e3:b6:bc:
16:0c:a1:f4:77:cb:b9:d8:47:6c:3a:df:56:59:6e:
2e:6e:0b:8c:1c:d2:c7:a9:c4:22:e6:7d:50:cc:a2:
5e:5d:e3:93:a5:7e:f8:ff:4c:c6:ac:db:21:e1:ee:
8b:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:98:C7:75:7D:D2:09:5C:23:EB:2A:0D:09:3E:C3:A6:EE:E9:5D:2A
X509v3 Authority Key Identifier:
keyid:6F:30:30:A4:B6:7F:95:C2:FE:D9:02:D5:66:57:FA:A2:49:4B:51:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bzAwpLZ_lcL-2QLVZlf6oklLUSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/mJjHdX3SCVwj6yoNCT7Dpu7pXSo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/bzAwpLZ_lcL-2QLVZlf6oklLUSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.100.144.0/21
91.92.172.0/22
Signature Algorithm: sha256WithRSAEncryption
67:da:48:42:e8:3e:87:00:4e:36:26:63:33:01:85:d7:b4:97:
6f:dc:aa:76:1c:1d:ea:5c:fa:8f:8e:7f:6b:98:7b:52:c6:00:
50:9b:37:d6:79:fd:5c:d1:21:c2:ba:3b:41:b2:18:6f:71:38:
09:75:07:c0:55:69:98:3e:c8:87:cb:c7:1f:29:bc:a6:6d:bb:
87:7d:d2:f7:6d:c3:27:e3:f6:1d:85:ad:42:fc:f7:e8:02:1f:
b3:51:88:a9:fe:a3:f5:92:8b:23:1c:75:a4:24:a4:99:42:e4:
41:63:b6:3d:05:91:a7:3a:8d:53:1a:a6:83:ee:ea:43:99:3f:
1d:86:e4:c6:b5:b7:b7:93:f4:ff:d9:cb:fc:00:ff:d1:34:e0:
5f:05:16:19:f6:98:26:bb:ee:c7:42:39:42:ea:b5:46:86:b0:
a1:c1:e2:37:dc:2c:5d:6e:dc:7e:62:84:8a:d5:d7:bf:37:6a:
59:e4:ff:ed:24:87:44:ee:2d:53:29:30:01:28:62:70:af:ec:
b8:c7:62:80:e7:57:20:cf:87:7c:39:c9:d1:46:a1:47:1b:b1:
8d:2f:e8:2a:33:8c:1e:e2:31:95:01:fc:ed:d4:37:f5:e2:31:
c8:8b:95:e5:88:f4:5c:22:87:b3:52:80:e9:4a:50:db:cf:6a:
95:31:0e:04
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQgaE59Kj4kQcX+Vbw0jZP7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmMzAzMGE0YjY3Zjk1YzJmZWQ5MDJkNTY2NTdmYWEyNDk0
YjUxMjkwHhcNMjUwMTAxMDU0ODE0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ODk4Yzc3NTdkZDIwOTVjMjNlYjJhMGQwOTNlYzNhNmVlZTk1ZDJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy2WTvL4AeddBuvLgNX54tAWL85Ja
cfNYlzGM6KOQbyDDZk/IDGnbCbQKLkQ4L/WkiS3JlyJjaGnKFX3wc+TU+o9D+/yZ
FdbOn0/yuW5nJiWIqCsbBks/J+nVBZqCDwpAHg7f5X/1iypEUQeQ75qTjVCsTAOC
HezUH1LlVZYhhGPSiUVz1V+VBEO0SIQ8Rg2LOCgV/nSMSxAxD66KzdnF+p/YZRdB
mrSH/aVsqmjIRFR4wDpKA645Q65zySnrkV0bR2jG01WjX2OME5MKQjnjtrwWDKH0
d8u52EdsOt9WWW4ubguMHNLHqcQi5n1QzKJeXeOTpX74/0zGrNsh4e6LdwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFJiYx3V90glcI+sqDQk+w6bu6V0qMB8GA1UdIwQY
MBaAFG8wMKS2f5XC/tkC1WZX+qJJS1EpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYnpBd3BMWl9sY0wtMlFMVlpsZjZva2xMVVNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy8yYjk5YTMtZGQ1Zi00ZmZlLTgyZWYt
YmYzYjIxYTI3MGYyLzEvbUpqSGRYM1NDVndqNnlvTkNUN0RwdTdwWFNvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy8yYjk5YTMtZGQ1Zi00ZmZlLTgyZWYtYmYzYjIxYTI3MGYy
LzEvYnpBd3BMWl9sY0wtMlFMVlpsZjZva2xMVVNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDLmSQAwQC
W1ysMA0GCSqGSIb3DQEBCwUAA4IBAQBn2khC6D6HAE42JmMzAYXXtJdv3Kp2HB3q
XPqPjn9rmHtSxgBQmzfWef1c0SHCujtBshhvcTgJdQfAVWmYPsiHy8cfKbymbbuH
fdL3bcMn4/Ydha1C/PfoAh+zUYip/qP1kosjHHWkJKSZQuRBY7Y9BZGnOo1TGqaD
7upDmT8dhuTGtbe3k/T/2cv8AP/RNOBfBRYZ9pgmu+7HQjlC6rVGhrChweI33Cxd
btx+YoSK1de/N2pZ5P/tJIdE7i1TKTABKGJwr+y4x2KA51cgz4d8OcnRRqFHG7GN
L+gqM4we4jGVAfzt1Df14jHIi5XliPRcIoezUoDpSlDbz2qVMQ4E
-----END CERTIFICATE-----
Generated at Mon Apr 7 15:26:47 2025 by rpki-client