Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/Zh97KIGZcf6mgNRGRnr0AzTc7eY.roa
File: Zh97KIGZcf6mgNRGRnr0AzTc7eY.roa (raw, json)
Hash identifier: J5zSC7jcWucRB6ls6X3Hsy1uqPJT2rDCdXStnCbORLA=
Subject key identifier: 66:1F:7B:28:81:99:71:FE:A6:80:D4:46:46:7A:F4:03:34:DC:ED:E6
Certificate issuer: /CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5
Certificate serial: 01950A54C5BF2B7AB7CCA56190C6DC1F1E95
Authority key identifier: 6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/Zh97KIGZcf6mgNRGRnr0AzTc7eY.roa
Signing time: Sat 15 Feb 2025 15:58:02 +0000
ROA not before: Sat 15 Feb 2025 15:58:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 46.233.32.0/22 maxlen: 24
46.233.42.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:0a:54:c5:bf:2b:7a:b7:cc:a5:61:90:c6:dc:1f:1e:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5
Validity
Not Before: Feb 15 15:58:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=661f7b28819971fea680d446467af40334dcede6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:18:43:75:92:e7:4a:8e:b4:13:57:1d:c7:85:
67:b0:75:42:32:61:87:b4:26:bd:73:b5:6d:46:18:
ee:01:63:f6:95:f0:39:3d:7e:8b:eb:89:4a:a4:c6:
d7:fe:a2:26:c7:d8:62:90:84:a0:86:f7:b1:c6:6d:
aa:d6:20:78:20:f1:8d:3d:f1:83:e7:f3:91:cc:7f:
58:d2:a9:ce:27:e9:7d:21:6d:6c:f5:0c:8f:57:50:
57:08:92:d6:2c:ec:ea:b1:40:d7:37:ee:7f:0e:be:
45:e3:d1:38:76:0d:fc:4a:e5:30:ee:f0:91:cf:a8:
ed:c2:ed:02:df:26:e9:43:82:71:b0:b6:55:23:a0:
37:25:b4:2b:a7:e0:77:f3:c6:06:6c:e6:f2:ad:7d:
fb:d5:b9:a4:bf:cf:1f:b4:92:44:8a:54:de:b4:c2:
e9:fd:e7:74:b4:05:6b:96:80:59:a0:30:76:ee:8b:
a6:f0:6e:38:c5:4e:33:1e:9b:32:29:bf:ed:f3:f4:
90:c8:15:55:ff:33:c6:d5:39:b4:46:ad:f5:47:2f:
7a:fc:8d:4c:bd:24:18:23:6f:40:19:6d:f8:52:a2:
74:32:9c:2d:61:96:8a:67:98:b3:c8:5e:dd:6d:43:
ce:2a:7a:b7:9b:6d:6b:c2:c6:9c:52:c8:9f:27:70:
b1:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:1F:7B:28:81:99:71:FE:A6:80:D4:46:46:7A:F4:03:34:DC:ED:E6
X509v3 Authority Key Identifier:
keyid:6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/Zh97KIGZcf6mgNRGRnr0AzTc7eY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.233.32.0/22
46.233.42.0/23
Signature Algorithm: sha256WithRSAEncryption
2f:d8:98:d6:26:bd:6a:b5:57:8e:ae:57:81:9a:52:eb:17:c6:
d8:97:91:57:9d:b8:ca:be:0b:bb:49:7f:87:9c:59:15:e8:e1:
b4:ef:49:07:f3:50:fc:ee:49:b2:51:d1:29:34:32:ce:db:4d:
a0:27:fd:be:57:94:60:ad:13:c2:4a:e3:8b:ef:3a:2b:7a:c8:
91:44:7e:ff:ac:04:30:5c:3b:c0:6d:d1:0c:5e:92:b0:ae:66:
05:45:39:53:97:0e:13:c2:42:c1:3c:62:43:6f:91:17:a3:54:
26:03:62:e4:d4:3e:36:17:80:dd:e1:55:7c:64:b5:f1:74:10:
a3:d8:7a:da:b7:ce:b2:c4:7f:cb:eb:76:44:c8:41:96:be:c8:
90:8a:45:98:80:57:98:d9:18:a6:58:14:8d:48:f9:ce:8e:87:
b6:d7:5d:c4:b4:10:36:1b:18:a0:85:32:f3:d6:7a:1a:53:aa:
1d:c1:88:82:e9:8f:67:e5:54:b0:59:53:34:31:14:69:9e:e8:
51:c4:92:34:50:3c:36:9f:59:e3:a3:a1:ea:ac:fc:12:26:91:
70:19:ef:91:b5:f6:fd:e0:06:8a:1b:1e:ad:15:f8:67:b4:c6:
db:5f:85:4d:f7:54:e3:a8:97:e5:58:59:c8:f5:b5:62:ae:2b:
c8:8c:06:10
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZUKVMW/K3q3zKVhkMbcHx6VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmYzUwZDBkNDIwNjdiNzZhYjFhMmU4ZTUzM2ZmODQ5YjY1
ZDU2ZjUwHhcNMjUwMjE1MTU1ODAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NjFmN2IyODgxOTk3MWZlYTY4MGQ0NDY0NjdhZjQwMzM0ZGNlZGU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0xhDdZLnSo60E1cdx4VnsHVCMmGH
tCa9c7VtRhjuAWP2lfA5PX6L64lKpMbX/qImx9hikISghvexxm2q1iB4IPGNPfGD
5/ORzH9Y0qnOJ+l9IW1s9QyPV1BXCJLWLOzqsUDXN+5/Dr5F49E4dg38SuUw7vCR
z6jtwu0C3ybpQ4JxsLZVI6A3JbQrp+B388YGbObyrX371bmkv88ftJJEilTetMLp
/ed0tAVrloBZoDB27oum8G44xU4zHpsyKb/t8/SQyBVV/zPG1Tm0Rq31Ry96/I1M
vSQYI29AGW34UqJ0MpwtYZaKZ5izyF7dbUPOKnq3m21rwsacUsifJ3CxWwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFGYfeyiBmXH+poDURkZ69AM03O3mMB8GA1UdIwQY
MBaAFG/FDQ1CBnt2qxoujlM/+Em2XVb1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjhVTkRVSUdlM2FyR2k2T1V6XzRTYlpkVnZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS9mMmJkNmMtNDg0My00ZWFkLWFhMDkt
M2MxNmZmODQxYWIyLzEvWmg5N0tJR1pjZjZtZ05SR1JucjBBelRjN2VZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZS9mMmJkNmMtNDg0My00ZWFkLWFhMDktM2MxNmZmODQxYWIy
LzEvYjhVTkRVSUdlM2FyR2k2T1V6XzRTYlpkVnZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCLukgAwQB
LukqMA0GCSqGSIb3DQEBCwUAA4IBAQAv2JjWJr1qtVeOrleBmlLrF8bYl5FXnbjK
vgu7SX+HnFkV6OG070kH81D87kmyUdEpNDLO202gJ/2+V5RgrRPCSuOL7zoresiR
RH7/rAQwXDvAbdEMXpKwrmYFRTlTlw4TwkLBPGJDb5EXo1QmA2Lk1D42F4Dd4VV8
ZLXxdBCj2Hrat86yxH/L63ZEyEGWvsiQikWYgFeY2RimWBSNSPnOjoe2113EtBA2
GxighTLz1noaU6odwYiC6Y9n5VSwWVM0MRRpnuhRxJI0UDw2n1njo6HqrPwSJpFw
Ge+Rtfb94AaKGx6tFfhntMbbX4VN91TjqJflWFnI9bVirivIjAYQ
-----END CERTIFICATE-----
Generated at Sat Apr 5 16:42:06 2025 by rpki-client