Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/e5d869-30bc-4465-bd6f-4773b6669716/1/AdYUGZij8DmxO3Ha06S--PKOAmc.roa
File: AdYUGZij8DmxO3Ha06S--PKOAmc.roa (raw, json)
Hash identifier: VsJTbLEE5i06CunQsxcyU7AB2xtGSY0X2LHBs6SuerI=
Subject key identifier: 01:D6:14:19:98:A3:F0:39:B1:3B:71:DA:D3:A4:BE:F8:F2:8E:02:67
Certificate issuer: /CN=68c6adf8eecabc1052e1f783d3bce4a1c5db5410
Certificate serial: 0194266BC0071EBB55764D2774B775BFF072
Authority key identifier: 68:C6:AD:F8:EE:CA:BC:10:52:E1:F7:83:D3:BC:E4:A1:C5:DB:54:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aMat-O7KvBBS4feD07zkocXbVBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/e5d869-30bc-4465-bd6f-4773b6669716/1/AdYUGZij8DmxO3Ha06S--PKOAmc.roa
Signing time: Thu 02 Jan 2025 09:49:43 +0000
ROA not before: Thu 02 Jan 2025 09:49:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 46.18.245.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:c0:07:1e:bb:55:76:4d:27:74:b7:75:bf:f0:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68c6adf8eecabc1052e1f783d3bce4a1c5db5410
Validity
Not Before: Jan 2 09:49:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=01d6141998a3f039b13b71dad3a4bef8f28e0267
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:eb:21:20:04:32:70:e4:d3:7a:d8:b7:63:29:
90:da:30:23:c2:17:a0:7d:a3:63:30:f6:a4:f3:02:
82:05:62:84:48:7f:ff:da:81:d6:3e:cb:6b:bf:6c:
f5:ba:f2:2e:1c:02:67:a1:e0:1a:b9:8a:67:0b:9f:
dc:14:1c:eb:d4:1c:ad:f4:0c:20:c8:ef:17:68:26:
0c:e8:5e:7a:bc:31:73:69:9e:37:b7:21:03:4e:3e:
ed:6f:88:8f:25:eb:1c:80:8a:10:ee:b3:26:27:d7:
a9:1e:64:1d:d0:4e:b3:6e:83:13:85:5d:2c:0e:b4:
e2:89:65:09:17:62:c8:90:09:a9:e2:59:68:46:f5:
fe:ba:ec:e0:34:b8:db:d8:dd:5f:f1:af:2e:6c:8f:
6c:ba:58:7a:05:36:07:86:89:55:c2:05:a3:4d:b8:
ef:e8:d4:64:ef:c4:f9:fb:4c:54:b4:13:73:3e:a0:
0b:86:07:55:c6:7b:db:45:c5:82:16:7f:84:3d:8d:
54:77:ec:22:27:11:fa:95:c3:60:05:f5:f6:95:52:
3b:75:00:6b:d5:04:95:c8:f0:c0:71:a5:15:83:40:
cf:da:63:23:6c:ae:af:b2:04:97:64:fb:5f:c5:c3:
57:b4:33:00:dc:59:67:2c:41:20:d5:7a:6e:ac:ad:
71:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:D6:14:19:98:A3:F0:39:B1:3B:71:DA:D3:A4:BE:F8:F2:8E:02:67
X509v3 Authority Key Identifier:
keyid:68:C6:AD:F8:EE:CA:BC:10:52:E1:F7:83:D3:BC:E4:A1:C5:DB:54:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aMat-O7KvBBS4feD07zkocXbVBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/e5d869-30bc-4465-bd6f-4773b6669716/1/AdYUGZij8DmxO3Ha06S--PKOAmc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/e5d869-30bc-4465-bd6f-4773b6669716/1/aMat-O7KvBBS4feD07zkocXbVBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.18.245.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:21:12:28:c4:2b:77:a7:dd:0d:8d:a5:64:db:e8:6e:bf:02:
20:e3:d9:e7:6d:2d:c9:df:22:63:0b:58:21:a0:fd:0e:44:f0:
5d:18:d3:67:5a:68:cf:0c:20:5c:7a:5b:d2:2b:3d:85:ab:f9:
bd:a2:75:50:55:ec:4b:bc:f0:16:9e:b7:6d:a7:b3:5d:a2:20:
9b:28:74:e6:bc:a4:d9:62:d9:a5:93:32:a9:63:79:c2:25:51:
9a:e3:ad:63:7d:31:27:95:30:ad:85:41:91:e6:3b:9b:99:fe:
7a:1a:bf:70:38:82:68:10:8b:80:62:14:13:3a:b2:1a:d2:f4:
a6:88:af:23:3b:b0:de:d1:a6:c9:f1:35:60:10:7a:58:e5:82:
7f:a1:f4:67:f0:2f:c4:1c:a0:fd:21:34:e0:2b:9f:f2:d3:42:
9f:48:2d:c5:ee:ca:dc:98:b1:50:12:4b:3a:cd:aa:e8:1a:40:
57:cb:1d:35:30:46:db:62:f9:c9:71:b1:0c:d6:6f:ed:45:b2:
7f:4b:ed:8d:15:72:2e:e3:da:d8:da:d1:c8:63:7f:f3:88:b0:
2d:da:35:14:28:30:1c:0e:1e:7d:e5:b2:9a:3d:e1:58:51:95:
52:ab:ff:c0:b5:f6:3f:03:d4:af:d5:d4:0d:4e:62:ba:f0:5c:
3b:ba:11:8b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQma8AHHrtVdk0ndLd1v/ByMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4YzZhZGY4ZWVjYWJjMTA1MmUxZjc4M2QzYmNlNGExYzVk
YjU0MTAwHhcNMjUwMTAyMDk0OTQzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMWQ2MTQxOTk4YTNmMDM5YjEzYjcxZGFkM2E0YmVmOGYyOGUwMjY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmOshIAQycOTTeti3YymQ2jAjwheg
faNjMPak8wKCBWKESH//2oHWPstrv2z1uvIuHAJnoeAauYpnC5/cFBzr1Byt9Awg
yO8XaCYM6F56vDFzaZ43tyEDTj7tb4iPJescgIoQ7rMmJ9epHmQd0E6zboMThV0s
DrTiiWUJF2LIkAmp4lloRvX+uuzgNLjb2N1f8a8ubI9sulh6BTYHholVwgWjTbjv
6NRk78T5+0xUtBNzPqALhgdVxnvbRcWCFn+EPY1Ud+wiJxH6lcNgBfX2lVI7dQBr
1QSVyPDAcaUVg0DP2mMjbK6vsgSXZPtfxcNXtDMA3FlnLEEg1XpurK1xFQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAHWFBmYo/A5sTtx2tOkvvjyjgJnMB8GA1UdIwQY
MBaAFGjGrfjuyrwQUuH3g9O85KHF21QQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYU1hdC1PN0t2QkJTNGZlRDA3emtvY1hiVkJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9lNWQ4NjktMzBiYy00NDY1LWJkNmYt
NDc3M2I2NjY5NzE2LzEvQWRZVUdaaWo4RG14TzNIYTA2Uy0tUEtPQW1jLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS9lNWQ4NjktMzBiYy00NDY1LWJkNmYtNDc3M2I2NjY5NzE2
LzEvYU1hdC1PN0t2QkJTNGZlRDA3emtvY1hiVkJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALhL1MA0G
CSqGSIb3DQEBCwUAA4IBAQAOIRIoxCt3p90NjaVk2+huvwIg49nnbS3J3yJjC1gh
oP0ORPBdGNNnWmjPDCBcelvSKz2Fq/m9onVQVexLvPAWnrdtp7NdoiCbKHTmvKTZ
YtmlkzKpY3nCJVGa461jfTEnlTCthUGR5jubmf56Gr9wOIJoEIuAYhQTOrIa0vSm
iK8jO7De0abJ8TVgEHpY5YJ/ofRn8C/EHKD9ITTgK5/y00KfSC3F7srcmLFQEks6
zaroGkBXyx01MEbbYvnJcbEM1m/tRbJ/S+2NFXIu49rY2tHIY3/ziLAt2jUUKDAc
Dh595bKaPeFYUZVSq//AtfY/A9Sv1dQNTmK68Fw7uhGL
-----END CERTIFICATE-----
Generated at Thu Feb 20 03:33:23 2025 by rpki-client