Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/cYGTSChE9gFQuUNQB0z3uVeo_M4.roa
File: cYGTSChE9gFQuUNQB0z3uVeo_M4.roa (raw, json)
Hash identifier: oMlb77CshXZ5OhhRrgeA3KmMtc/wbw1QuqBFiLFBoVI=
Subject key identifier: 71:81:93:48:28:44:F6:01:50:B9:43:50:07:4C:F7:B9:57:A8:FC:CE
Certificate issuer: /CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Certificate serial: 019424453F87016E6F48647D7940AF8DA242
Authority key identifier: 4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/cYGTSChE9gFQuUNQB0z3uVeo_M4.roa
Signing time: Wed 01 Jan 2025 23:48:25 +0000
ROA not before: Wed 01 Jan 2025 23:48:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 7018
IP address blocks: 46.34.37.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:3f:87:01:6e:6f:48:64:7d:79:40:af:8d:a2:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Validity
Not Before: Jan 1 23:48:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=718193482844f60150b94350074cf7b957a8fcce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:1b:5d:0e:01:55:ed:c2:ca:80:ca:ae:16:4c:
cc:45:76:cd:ba:ce:aa:de:3f:49:67:d8:9d:d1:74:
47:c7:e0:6f:a8:5c:da:94:c6:b9:08:1e:df:eb:ab:
3b:de:b2:57:7f:62:cb:d9:16:3e:2e:10:58:a4:c8:
51:6d:2c:f6:ff:d9:ce:3f:50:fb:0b:d0:cc:85:02:
f8:e6:e5:3e:52:d8:79:b1:ad:0f:6e:06:13:c7:65:
e3:10:14:8b:bc:20:46:ba:fe:c8:72:da:80:25:f5:
7c:43:9e:5e:4f:67:a1:8d:5d:12:e4:27:21:82:d1:
fc:93:89:48:fb:3f:fb:d0:db:5a:b2:7a:a6:88:d1:
32:15:a1:ad:43:e7:78:65:23:81:e1:ec:4d:95:f6:
fe:6b:dd:75:71:32:48:5f:e7:f7:a2:a4:45:57:a5:
ee:bd:14:63:8f:ea:ce:a5:b5:9a:60:1d:eb:8e:0d:
bd:05:1d:4f:b9:7e:40:56:9c:b9:d0:cb:0d:9f:75:
52:a4:37:81:de:08:8c:2f:c9:b0:eb:94:f5:3c:8b:
c7:26:dd:46:7c:02:b4:5c:21:4b:2a:c9:88:75:a2:
92:1d:b0:09:e8:91:61:46:0f:de:1b:ec:1c:64:e7:
b8:fb:86:49:71:29:21:38:19:25:b1:63:b1:47:d0:
b3:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:81:93:48:28:44:F6:01:50:B9:43:50:07:4C:F7:B9:57:A8:FC:CE
X509v3 Authority Key Identifier:
keyid:4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/cYGTSChE9gFQuUNQB0z3uVeo_M4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.34.37.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:39:b7:d7:b0:89:d2:6a:77:88:80:11:4c:28:7f:ec:55:f7:
4d:c4:c0:3e:7e:61:26:25:a3:04:7f:c6:59:54:f1:45:28:23:
51:cc:54:09:9d:d6:ac:ed:11:04:12:82:ff:bd:ec:29:ea:b6:
f1:3b:f2:d4:df:8b:b1:55:e5:f3:16:3f:f9:aa:04:88:25:45:
b4:f7:2b:5e:b9:c8:97:48:6c:61:6d:54:55:7c:ad:3d:f5:2b:
e1:df:a6:62:51:cd:a4:de:e5:ce:a0:79:10:c2:20:ed:bd:f4:
20:42:e3:24:75:cc:f9:11:16:77:a3:d7:7c:6e:fa:98:3f:b0:
fb:78:4a:ca:c4:e5:c8:df:d5:b2:23:b6:8f:93:49:e7:3c:24:
01:fc:61:1c:04:24:2a:08:1b:bf:98:95:7a:6b:03:7d:02:cb:
e7:e2:7a:41:33:13:79:5f:41:92:27:9b:4b:d0:f8:04:63:b5:
d2:4c:3d:c6:7a:43:3b:64:46:c6:b6:76:35:7a:69:10:36:24:
4a:1f:20:19:a4:4f:6d:05:31:fa:c8:4b:df:71:1c:73:86:cb:
45:8d:34:88:3b:47:54:b0:0b:df:c1:7a:67:28:5f:05:a1:a0:
fe:88:8c:b7:b7:4b:e6:c8:ab:cf:0c:17:a7:cb:ea:a8:c9:0a:
95:0d:3c:b2
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQkRT+HAW5vSGR9eUCvjaJCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhNDcxY2Q2Y2U2MGFiZWRkNzQ3NjJiMTAxYWE1ZTZmNDIw
N2VmY2UwHhcNMjUwMTAxMjM0ODI1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MTgxOTM0ODI4NDRmNjAxNTBiOTQzNTAwNzRjZjdiOTU3YThmY2NlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmRtdDgFV7cLKgMquFkzMRXbNus6q
3j9JZ9id0XRHx+BvqFzalMa5CB7f66s73rJXf2LL2RY+LhBYpMhRbSz2/9nOP1D7
C9DMhQL45uU+Uth5sa0PbgYTx2XjEBSLvCBGuv7IctqAJfV8Q55eT2ehjV0S5Cch
gtH8k4lI+z/70NtasnqmiNEyFaGtQ+d4ZSOB4exNlfb+a911cTJIX+f3oqRFV6Xu
vRRjj+rOpbWaYB3rjg29BR1PuX5AVpy50MsNn3VSpDeB3giML8mw65T1PIvHJt1G
fAK0XCFLKsmIdaKSHbAJ6JFhRg/eG+wcZOe4+4ZJcSkhOBklsWOxR9CzTwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHGBk0goRPYBULlDUAdM97lXqPzOMB8GA1UdIwQY
MBaAFEpHHNbOYKvt10disQGqXm9CB+/OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2tjYzFzNWdxLTNYUjJLeEFhcGViMElINzg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS9lMTc3MTQtNDY3Yi00NDMzLTliN2Qt
YTZiOTkxZjRmYWY4LzEvY1lHVFNDaEU5Z0ZRdVVOUUIwejN1VmVvX000LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS9lMTc3MTQtNDY3Yi00NDMzLTliN2QtYTZiOTkxZjRmYWY4
LzEvU2tjYzFzNWdxLTNYUjJLeEFhcGViMElINzg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALiIlMA0G
CSqGSIb3DQEBCwUAA4IBAQA8ObfXsInSaneIgBFMKH/sVfdNxMA+fmEmJaMEf8ZZ
VPFFKCNRzFQJndas7REEEoL/vewp6rbxO/LU34uxVeXzFj/5qgSIJUW09yteuciX
SGxhbVRVfK099Svh36ZiUc2k3uXOoHkQwiDtvfQgQuMkdcz5ERZ3o9d8bvqYP7D7
eErKxOXI39WyI7aPk0nnPCQB/GEcBCQqCBu/mJV6awN9Asvn4npBMxN5X0GSJ5tL
0PgEY7XSTD3GekM7ZEbGtnY1emkQNiRKHyAZpE9tBTH6yEvfcRxzhstFjTSIO0dU
sAvfwXpnKF8FoaD+iIy3t0vmyKvPDBeny+qoyQqVDTyy
-----END CERTIFICATE-----
Generated at Thu Apr 10 01:30:23 2025 by rpki-client