Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/ArupuQqxIpZ9KRGErEWkolf9CMo.roa
File: ArupuQqxIpZ9KRGErEWkolf9CMo.roa (raw, json)
Hash identifier: cmyIpgJGXndY9DYqZiShJ9nFF8ZvJK4I3MWykMztzK8=
Subject key identifier: 02:BB:A9:B9:0A:B1:22:96:7D:29:11:84:AC:45:A4:A2:57:FD:08:CA
Certificate issuer: /CN=0c90c356e2864f43894857443555d8b5c0352819
Certificate serial: 0194228DDED14B238112208C645E0DC6562D
Authority key identifier: 0C:90:C3:56:E2:86:4F:43:89:48:57:44:35:55:D8:B5:C0:35:28:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DJDDVuKGT0OJSFdENVXYtcA1KBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/ArupuQqxIpZ9KRGErEWkolf9CMo.roa
Signing time: Wed 01 Jan 2025 15:48:30 +0000
ROA not before: Wed 01 Jan 2025 15:48:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8932
IP address blocks: 46.36.124.0/22 maxlen: 24
46.162.220.0/22 maxlen: 24
185.48.240.0/22 maxlen: 24
2a00:cc40:1::/48 maxlen: 48
2a00:cc40:2::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:de:d1:4b:23:81:12:20:8c:64:5e:0d:c6:56:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c90c356e2864f43894857443555d8b5c0352819
Validity
Not Before: Jan 1 15:48:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=02bba9b90ab122967d291184ac45a4a257fd08ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b9:e0:39:39:2b:39:8a:55:d0:61:d3:46:c1:
38:68:cd:53:d5:b7:63:36:64:4d:a2:02:ff:ad:5a:
a0:86:ae:75:d3:27:32:3d:ae:fa:f7:9a:f9:05:69:
11:09:57:97:f5:dd:1f:c6:10:cd:57:25:d5:9b:7c:
e1:ab:3a:e4:5e:f8:eb:04:83:cc:fc:8c:47:14:df:
37:18:38:84:4c:33:6a:18:c1:42:63:67:a1:49:4d:
c8:40:c4:32:84:74:c3:85:dd:9f:97:d3:1a:ff:c7:
5e:18:57:3e:c3:59:f2:df:de:aa:81:73:5d:de:cc:
fc:59:b9:1a:e8:71:b4:40:b9:44:0a:d8:85:d6:4f:
f8:24:f6:32:92:74:83:2b:a7:fe:60:de:19:00:cb:
ff:a2:e6:18:bc:a6:c5:7d:79:d7:ad:93:df:8c:97:
4b:71:44:d7:bc:16:a0:d2:ef:d4:30:55:75:d7:05:
cc:94:2b:2e:da:61:9a:0d:fb:55:ba:d2:92:54:13:
a7:41:d8:18:d4:35:79:9a:15:dd:09:98:a1:4e:51:
6c:de:d0:ea:03:24:95:d7:b2:38:11:f9:f5:fd:b5:
10:fa:74:c6:3b:e8:14:33:3c:9b:62:b8:2d:a6:3e:
f8:5a:39:62:70:09:6c:45:7d:cb:62:d1:08:1f:af:
50:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:BB:A9:B9:0A:B1:22:96:7D:29:11:84:AC:45:A4:A2:57:FD:08:CA
X509v3 Authority Key Identifier:
keyid:0C:90:C3:56:E2:86:4F:43:89:48:57:44:35:55:D8:B5:C0:35:28:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DJDDVuKGT0OJSFdENVXYtcA1KBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/ArupuQqxIpZ9KRGErEWkolf9CMo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.36.124.0/22
46.162.220.0/22
185.48.240.0/22
IPv6:
2a00:cc40:1::-2a00:cc40:2:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
c4:8f:c4:6d:2a:b1:0a:74:29:87:26:3f:df:e6:4d:9e:67:6c:
dd:70:aa:d2:81:58:87:60:82:80:8b:2d:a4:11:48:6e:94:34:
64:d3:d6:1e:58:8a:0f:a3:67:04:91:24:18:ae:7f:09:87:4b:
e2:75:44:92:94:cd:40:30:91:4c:5f:12:07:f1:e1:93:de:8b:
ce:7d:8b:25:7c:16:f1:3e:c2:4a:dc:45:8b:db:53:38:92:28:
4c:48:c0:e7:b0:09:de:f9:02:f6:fd:c4:77:1d:01:dc:b8:3d:
62:f2:67:e0:74:85:cd:f0:2d:80:99:69:11:88:ac:63:1f:f6:
39:eb:67:51:db:1d:7a:3d:86:94:12:37:df:5c:8b:b1:51:ac:
30:3b:41:51:f4:1d:8a:9b:b0:04:ba:b0:c9:34:6e:ed:0f:b2:
00:0c:08:d0:17:b8:b5:a3:af:b7:f2:cc:90:f0:10:b6:31:c6:
01:a9:53:3b:5b:ef:e4:d8:a6:dc:29:80:d2:37:31:a7:37:7e:
71:65:1c:aa:8f:57:7a:68:a6:67:c3:38:9c:44:e1:82:a9:bf:
42:f5:c7:bd:fd:22:60:87:8d:8d:85:64:f4:5b:0e:9c:ac:db:
09:38:21:0c:82:23:68:45:26:cd:55:3d:23:ec:5a:89:e3:81:
fd:69:44:1f
-----BEGIN CERTIFICATE-----
MIIFJTCCBA2gAwIBAgISAZQijd7RSyOBEiCMZF4NxlYtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjOTBjMzU2ZTI4NjRmNDM4OTQ4NTc0NDM1NTVkOGI1YzAz
NTI4MTkwHhcNMjUwMTAxMTU0ODMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMmJiYTliOTBhYjEyMjk2N2QyOTExODRhYzQ1YTRhMjU3ZmQwOGNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAurngOTkrOYpV0GHTRsE4aM1T1bdj
NmRNogL/rVqghq510ycyPa7695r5BWkRCVeX9d0fxhDNVyXVm3zhqzrkXvjrBIPM
/IxHFN83GDiETDNqGMFCY2ehSU3IQMQyhHTDhd2fl9Ma/8deGFc+w1ny396qgXNd
3sz8Wbka6HG0QLlECtiF1k/4JPYyknSDK6f+YN4ZAMv/ouYYvKbFfXnXrZPfjJdL
cUTXvBag0u/UMFV11wXMlCsu2mGaDftVutKSVBOnQdgY1DV5mhXdCZihTlFs3tDq
AySV17I4Efn1/bUQ+nTGO+gUMzybYrgtpj74WjlicAlsRX3LYtEIH69QwQIDAQAB
o4ICMTCCAi0wHQYDVR0OBBYEFAK7qbkKsSKWfSkRhKxFpKJX/QjKMB8GA1UdIwQY
MBaAFAyQw1bihk9DiUhXRDVV2LXANSgZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvREpERFZ1S0dUME9KU0ZkRU5WWFl0Y0ExS0JrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9hYzVhNTYtMTYzYS00OTdhLTk1NDct
ZTM3OTlhZGU5ZGZlLzEvQXJ1cHVRcXhJcFo5S1JHRXJFV2tvbGY5Q01vLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9hYzVhNTYtMTYzYS00OTdhLTk1NDctZTM3OTlhZGU5ZGZl
LzEvREpERFZ1S0dUME9KU0ZkRU5WWFl0Y0ExS0JrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEcGCCsGAQUFBwEHAQH/BDgwNjAYBAIAATASAwQCLiR8AwQC
LqLcAwQCuTDwMBoEAgACMBQwEgMHACoAzEAAAQMHACoAzEAAAjANBgkqhkiG9w0B
AQsFAAOCAQEAxI/EbSqxCnQphyY/3+ZNnmds3XCq0oFYh2CCgIstpBFIbpQ0ZNPW
HliKD6NnBJEkGK5/CYdL4nVEkpTNQDCRTF8SB/Hhk96Lzn2LJXwW8T7CStxFi9tT
OJIoTEjA57AJ3vkC9v3Edx0B3Lg9YvJn4HSFzfAtgJlpEYisYx/2OetnUdsdej2G
lBI331yLsVGsMDtBUfQdipuwBLqwyTRu7Q+yAAwI0Be4taOvt/LMkPAQtjHGAalT
O1vv5Nim3CmA0jcxpzd+cWUcqo9XemimZ8M4nEThgqm/QvXHvf0iYIeNjYVk9FsO
nKzbCTghDIIjaEUmzVU9I+xaieOB/WlEHw==
-----END CERTIFICATE-----
Generated at Thu Feb 20 03:18:06 2025 by rpki-client