Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/0301d4-4805-405c-a6e0-a42e1f1f4798/1/PsH0T0HA4q611pE2-TqYOfMEvtE.roa
File: PsH0T0HA4q611pE2-TqYOfMEvtE.roa (raw, json)
Hash identifier: YuO1r/ViiGZlU0bORq+WH7czhRQVk89ieeJ//ER4s4E=
Subject key identifier: 3E:C1:F4:4F:41:C0:E2:AE:B5:D6:91:36:F9:3A:98:39:F3:04:BE:D1
Certificate issuer: /CN=a9b5ffd24d2eb5d5c1e1cfe78b003c4bab5a2f13
Certificate serial: 0194266C11125825EFEFF5CCB9BE6529AC63
Authority key identifier: A9:B5:FF:D2:4D:2E:B5:D5:C1:E1:CF:E7:8B:00:3C:4B:AB:5A:2F:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qbX_0k0utdXB4c_niwA8S6taLxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/0301d4-4805-405c-a6e0-a42e1f1f4798/1/PsH0T0HA4q611pE2-TqYOfMEvtE.roa
Signing time: Thu 02 Jan 2025 09:50:03 +0000
ROA not before: Thu 02 Jan 2025 09:50:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50414
IP address blocks: 212.46.55.0/24 maxlen: 24
2a12:bc0::/48 maxlen: 48
2a12:bc0:1::/48 maxlen: 48
2a12:bc0:2::/48 maxlen: 48
2a12:bc0:3::/48 maxlen: 48
2a12:bc0:4::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:11:12:58:25:ef:ef:f5:cc:b9:be:65:29:ac:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9b5ffd24d2eb5d5c1e1cfe78b003c4bab5a2f13
Validity
Not Before: Jan 2 09:50:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3ec1f44f41c0e2aeb5d69136f93a9839f304bed1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:6b:22:29:e0:26:a6:fe:9e:98:43:63:06:ba:
88:e9:80:df:fa:eb:ef:8a:bc:9a:1a:52:de:c3:b6:
0b:6c:e4:cd:d3:d4:90:89:89:88:f1:2e:a1:dc:8f:
7a:8b:c5:29:3d:94:65:5d:27:36:3a:42:7b:82:56:
30:7b:b9:a6:b5:d0:a9:e0:1f:0c:2b:01:29:bf:62:
db:f0:ff:6f:61:2e:c8:dc:b6:c0:6f:0d:fd:d7:16:
56:3c:18:72:5a:38:85:93:92:9e:15:c0:d7:4d:38:
6a:d9:1c:a3:1d:be:7a:30:a7:69:44:46:26:46:53:
7c:3c:e5:82:31:24:67:c4:5d:2f:17:bc:d7:20:0d:
5f:7a:1e:de:b5:7b:63:a1:74:f1:0c:24:d5:59:5d:
d6:8b:b7:f3:c3:75:0e:ff:68:69:c1:5a:45:4a:21:
ae:bc:c9:85:46:0c:6d:40:94:b5:2f:f1:d5:83:c5:
2b:99:36:96:d5:09:b8:3d:84:c3:59:12:c6:f8:0c:
7c:d6:52:24:08:a9:fa:ef:cd:e8:16:3a:1b:59:47:
89:a7:58:8b:0a:b8:6a:f7:dc:0e:fa:b3:c0:9e:21:
95:cd:ef:ca:f9:ab:a7:4b:d7:3e:ca:4f:ce:c8:39:
e3:77:58:14:d6:02:ed:c0:0c:88:8c:31:b0:7b:6f:
d7:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:C1:F4:4F:41:C0:E2:AE:B5:D6:91:36:F9:3A:98:39:F3:04:BE:D1
X509v3 Authority Key Identifier:
keyid:A9:B5:FF:D2:4D:2E:B5:D5:C1:E1:CF:E7:8B:00:3C:4B:AB:5A:2F:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qbX_0k0utdXB4c_niwA8S6taLxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/0301d4-4805-405c-a6e0-a42e1f1f4798/1/PsH0T0HA4q611pE2-TqYOfMEvtE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/0301d4-4805-405c-a6e0-a42e1f1f4798/1/qbX_0k0utdXB4c_niwA8S6taLxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.46.55.0/24
IPv6:
2a12:bc0::-2a12:bc0:4:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
13:60:8a:e8:c1:7a:a4:30:8f:12:99:a8:e5:ee:bf:fe:b0:56:
5a:37:cd:ad:18:cf:a0:80:95:6c:06:bd:09:0a:d8:c0:9b:34:
88:d7:e7:b5:c3:3d:0d:d0:76:a3:81:06:87:89:a4:3d:fa:18:
65:06:01:f3:3e:4a:38:64:96:fb:3c:4e:6e:6c:b9:62:b1:2b:
17:47:5e:6b:bc:09:4a:10:3a:4f:f3:e0:d1:80:79:6b:54:e7:
0e:08:b3:ed:4f:f2:35:32:90:fa:42:b6:a7:77:21:0d:bd:49:
c4:a4:a3:4f:1d:54:1c:73:a2:f8:a9:04:de:7f:cb:c3:af:a2:
fb:a7:33:58:90:87:2c:1a:d0:2d:a3:82:8c:63:17:0c:d2:fd:
e8:7c:5a:9a:57:6a:b8:4b:43:5b:a4:45:00:ac:88:56:23:cf:
82:a5:3c:69:6a:f6:5b:66:01:99:f9:b3:a0:0b:f0:e9:3d:cd:
24:1c:f9:f8:f3:2c:4d:38:43:38:cf:c6:5f:b9:de:bc:60:e8:
c3:92:6a:29:db:4e:db:3e:d3:ac:99:96:8d:81:54:af:8d:40:
5b:13:05:46:3a:b5:86:20:8a:e9:ad:db:da:16:29:90:94:cc:
d8:4f:ea:59:a1:bf:87:b9:21:62:cc:08:3a:77:68:a8:c5:7c:
bb:70:c0:31
-----BEGIN CERTIFICATE-----
MIIFFzCCA/+gAwIBAgISAZQmbBESWCXv7/XMub5lKaxjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5YjVmZmQyNGQyZWI1ZDVjMWUxY2ZlNzhiMDAzYzRiYWI1
YTJmMTMwHhcNMjUwMTAyMDk1MDAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZWMxZjQ0ZjQxYzBlMmFlYjVkNjkxMzZmOTNhOTgzOWYzMDRiZWQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnGsiKeAmpv6emENjBrqI6YDf+uvv
iryaGlLew7YLbOTN09SQiYmI8S6h3I96i8UpPZRlXSc2OkJ7glYwe7mmtdCp4B8M
KwEpv2Lb8P9vYS7I3LbAbw391xZWPBhyWjiFk5KeFcDXTThq2RyjHb56MKdpREYm
RlN8POWCMSRnxF0vF7zXIA1feh7etXtjoXTxDCTVWV3Wi7fzw3UO/2hpwVpFSiGu
vMmFRgxtQJS1L/HVg8UrmTaW1Qm4PYTDWRLG+Ax81lIkCKn6783oFjobWUeJp1iL
Crhq99wO+rPAniGVze/K+aunS9c+yk/OyDnjd1gU1gLtwAyIjDGwe2/XfwIDAQAB
o4ICIzCCAh8wHQYDVR0OBBYEFD7B9E9BwOKutdaRNvk6mDnzBL7RMB8GA1UdIwQY
MBaAFKm1/9JNLrXVweHP54sAPEurWi8TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWJYXzBrMHV0ZFhCNGNfbml3QThTNnRhTHhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi8wMzAxZDQtNDgwNS00MDVjLWE2ZTAt
YTQyZTFmMWY0Nzk4LzEvUHNIMFQwSEE0cTYxMXBFMi1UcVlPZk1FdnRFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi8wMzAxZDQtNDgwNS00MDVjLWE2ZTAtYTQyZTFmMWY0Nzk4
LzEvcWJYXzBrMHV0ZFhCNGNfbml3QThTNnRhTHhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAMBAIAATAGAwQA1C43MBgE
AgACMBIwEAMFBioSC8ADBwAqEgvAAAQwDQYJKoZIhvcNAQELBQADggEBABNgiujB
eqQwjxKZqOXuv/6wVlo3za0Yz6CAlWwGvQkK2MCbNIjX57XDPQ3QdqOBBoeJpD36
GGUGAfM+Sjhklvs8Tm5suWKxKxdHXmu8CUoQOk/z4NGAeWtU5w4Is+1P8jUykPpC
tqd3IQ29ScSko08dVBxzovipBN5/y8OvovunM1iQhywa0C2jgoxjFwzS/eh8WppX
arhLQ1ukRQCsiFYjz4KlPGlq9ltmAZn5s6AL8Ok9zSQc+fjzLE04QzjPxl+53rxg
6MOSainbTts+06yZlo2BVK+NQFsTBUY6tYYgiumt29oWKZCUzNhP6lmhv4e5IWLM
CDp3aKjFfLtwwDE=
-----END CERTIFICATE-----
Generated at Thu Feb 20 03:15:19 2025 by rpki-client