Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/BUbLcDK2mlbMmQrWrXK_KkB_Z8I.roa
File: BUbLcDK2mlbMmQrWrXK_KkB_Z8I.roa (raw, json)
Hash identifier: 5p58mg305UQz5j2iOVYn7ENJmD3sfGRtf406Z23M5Fg=
Subject key identifier: 05:46:CB:70:32:B6:9A:56:CC:99:0A:D6:AD:72:BF:2A:40:7F:67:C2
Certificate issuer: /CN=a36d0ae5e2fbffcce08770ebc20c216b9fbf9485
Certificate serial: 019486A9DDC2DCBED4403959D2745E3B5B18
Authority key identifier: A3:6D:0A:E5:E2:FB:FF:CC:E0:87:70:EB:C2:0C:21:6B:9F:BF:94:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o20K5eL7_8zgh3Drwgwha5-_lIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/BUbLcDK2mlbMmQrWrXK_KkB_Z8I.roa
Signing time: Tue 21 Jan 2025 02:21:06 +0000
ROA not before: Tue 21 Jan 2025 02:21:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57128
IP address blocks: 46.191.224.0/22 maxlen: 22
46.191.224.0/23 maxlen: 23
46.191.224.0/24 maxlen: 24
46.191.225.0/24 maxlen: 24
46.191.226.0/23 maxlen: 23
46.191.226.0/24 maxlen: 24
46.191.227.0/24 maxlen: 24
77.79.156.0/22 maxlen: 22
77.79.156.0/23 maxlen: 23
77.79.156.0/24 maxlen: 24
77.79.157.0/24 maxlen: 24
77.79.158.0/23 maxlen: 23
77.79.158.0/24 maxlen: 24
77.79.159.0/24 maxlen: 24
84.39.244.0/22 maxlen: 22
84.39.244.0/23 maxlen: 23
84.39.244.0/24 maxlen: 24
84.39.245.0/24 maxlen: 24
84.39.246.0/23 maxlen: 23
84.39.246.0/24 maxlen: 24
84.39.247.0/24 maxlen: 24
93.157.248.0/22 maxlen: 22
93.157.248.0/23 maxlen: 23
93.157.248.0/24 maxlen: 24
93.157.249.0/24 maxlen: 24
93.157.250.0/23 maxlen: 23
93.157.250.0/24 maxlen: 24
93.157.251.0/24 maxlen: 24
95.105.64.0/20 maxlen: 20
95.105.64.0/22 maxlen: 22
95.105.64.0/23 maxlen: 23
95.105.64.0/24 maxlen: 24
95.105.65.0/24 maxlen: 24
95.105.66.0/23 maxlen: 23
95.105.66.0/24 maxlen: 24
95.105.67.0/24 maxlen: 24
95.105.68.0/22 maxlen: 22
95.105.68.0/23 maxlen: 23
95.105.68.0/24 maxlen: 24
95.105.69.0/24 maxlen: 24
95.105.70.0/23 maxlen: 23
95.105.70.0/24 maxlen: 24
95.105.71.0/24 maxlen: 24
95.105.72.0/22 maxlen: 22
95.105.72.0/23 maxlen: 23
95.105.72.0/24 maxlen: 24
95.105.73.0/24 maxlen: 24
95.105.74.0/23 maxlen: 23
95.105.74.0/24 maxlen: 24
95.105.75.0/24 maxlen: 24
95.105.76.0/22 maxlen: 22
95.105.76.0/23 maxlen: 23
95.105.76.0/24 maxlen: 24
95.105.77.0/24 maxlen: 24
95.105.78.0/23 maxlen: 23
95.105.78.0/24 maxlen: 24
95.105.79.0/24 maxlen: 24
2a02:1c8:9::/48 maxlen: 48
2a02:1c8:30::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:86:a9:dd:c2:dc:be:d4:40:39:59:d2:74:5e:3b:5b:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a36d0ae5e2fbffcce08770ebc20c216b9fbf9485
Validity
Not Before: Jan 21 02:21:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0546cb7032b69a56cc990ad6ad72bf2a407f67c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:3a:fa:ea:6b:30:2a:ca:4e:71:20:b9:1d:51:
12:4b:d9:21:43:41:3a:3a:89:a4:3c:61:b1:33:a1:
6e:4a:3a:c0:40:ac:10:7c:a3:11:e8:71:72:77:47:
60:e8:7a:c3:ea:0a:3a:90:de:85:ca:ed:bd:42:c8:
61:38:3f:53:6e:a3:af:4f:87:a3:99:ab:c3:45:0f:
57:92:57:f1:05:84:96:b9:88:a8:3a:e0:ba:42:a5:
15:f8:48:1b:ac:d5:dd:d6:38:43:79:ea:fa:89:66:
ab:ee:83:3e:77:ab:21:1f:ba:dd:d5:df:bf:6a:84:
2e:09:64:6d:d0:63:6c:ec:2f:e1:86:a9:af:8f:55:
9d:00:3f:ff:71:81:d7:e1:3c:36:a1:56:41:35:d2:
b4:a3:31:4a:2f:0c:5b:5f:5f:0e:0c:60:04:c7:1f:
bb:5c:59:0e:84:9e:e9:83:fa:78:8b:11:bf:a3:76:
c1:11:b7:9b:d5:30:af:1c:19:89:28:e1:b8:6a:a1:
49:51:fb:27:2c:4f:1b:35:a3:5a:36:01:c5:42:97:
e7:a2:95:36:af:b6:a5:3a:82:82:79:fe:05:44:c8:
61:ff:ae:ef:d3:21:b4:28:93:73:6e:6c:a9:b9:a0:
33:0c:12:4d:13:5e:f4:57:d8:2e:38:2e:4b:74:45:
68:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:46:CB:70:32:B6:9A:56:CC:99:0A:D6:AD:72:BF:2A:40:7F:67:C2
X509v3 Authority Key Identifier:
keyid:A3:6D:0A:E5:E2:FB:FF:CC:E0:87:70:EB:C2:0C:21:6B:9F:BF:94:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o20K5eL7_8zgh3Drwgwha5-_lIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/BUbLcDK2mlbMmQrWrXK_KkB_Z8I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/o20K5eL7_8zgh3Drwgwha5-_lIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.191.224.0/22
77.79.156.0/22
84.39.244.0/22
93.157.248.0/22
95.105.64.0/20
IPv6:
2a02:1c8:9::/48
2a02:1c8:30::/44
Signature Algorithm: sha256WithRSAEncryption
93:38:e7:52:6c:23:49:30:9e:b1:0b:83:42:e9:8e:e9:ab:69:
51:0e:ca:9b:9a:5c:bd:1e:36:bf:9c:08:51:6b:53:2f:00:cd:
18:ca:1d:0c:c7:00:26:f8:fe:ee:c8:5c:dd:81:d8:83:f7:b4:
2c:c6:cf:41:0b:b3:c2:38:26:4e:f8:6c:92:b5:63:b9:d2:96:
16:7e:e1:ff:6b:61:8f:76:fb:0c:3b:0d:c3:31:cc:a1:7e:c7:
11:1b:81:21:5d:7f:48:bc:be:72:48:30:f5:33:84:65:54:e4:
d0:ac:0a:e2:45:23:e5:b7:48:e1:0b:3a:4f:81:a8:a5:9d:05:
2a:f7:f6:03:3f:d9:99:cc:d5:82:a1:4e:9e:c5:15:7d:ff:cc:
19:44:9a:fc:4f:b9:dd:5c:ae:45:7a:41:e2:09:5a:f7:05:63:
fd:b8:a9:98:18:0a:f4:6d:1d:c7:f4:bc:07:d6:4a:ad:8f:52:
f4:26:aa:6f:8d:be:ad:ac:ed:15:78:2b:bf:69:9e:ee:a5:a0:
6d:7f:e0:a1:0a:ff:66:bc:9b:75:25:c0:a5:04:8b:91:b9:b6:
15:21:a1:fc:78:fd:89:75:36:45:ff:e8:d9:9b:74:b0:ef:4a:
89:87:c0:a1:0a:24:49:e8:24:70:55:5e:69:7a:6d:5f:06:8a:
d1:ff:8f:4a
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgISAZSGqd3C3L7UQDlZ0nReO1sYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzNmQwYWU1ZTJmYmZmY2NlMDg3NzBlYmMyMGMyMTZiOWZi
Zjk0ODUwHhcNMjUwMTIxMDIyMTA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNTQ2Y2I3MDMyYjY5YTU2Y2M5OTBhZDZhZDcyYmYyYTQwN2Y2N2MyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Tr66mswKspOcSC5HVESS9khQ0E6
OomkPGGxM6FuSjrAQKwQfKMR6HFyd0dg6HrD6go6kN6Fyu29QshhOD9TbqOvT4ej
mavDRQ9XklfxBYSWuYioOuC6QqUV+EgbrNXd1jhDeer6iWar7oM+d6shH7rd1d+/
aoQuCWRt0GNs7C/hhqmvj1WdAD//cYHX4Tw2oVZBNdK0ozFKLwxbX18ODGAExx+7
XFkOhJ7pg/p4ixG/o3bBEbeb1TCvHBmJKOG4aqFJUfsnLE8bNaNaNgHFQpfnopU2
r7alOoKCef4FRMhh/67v0yG0KJNzbmypuaAzDBJNE170V9guOC5LdEVo7wIDAQAB
o4ICOzCCAjcwHQYDVR0OBBYEFAVGy3AytppWzJkK1q1yvypAf2fCMB8GA1UdIwQY
MBaAFKNtCuXi+//M4Idw68IMIWufv5SFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbzIwSzVlTDdfOHpnaDNEcndnd2hhNS1fbElVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC84Y2FjMGMtMzQyNi00ZjA3LWFmMjAt
Y2JiOTUxODNiMjdhLzEvQlViTGNESzJtbGJNbVFyV3JYS19La0JfWjhJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC84Y2FjMGMtMzQyNi00ZjA3LWFmMjAtY2JiOTUxODNiMjdh
LzEvbzIwSzVlTDdfOHpnaDNEcndnd2hhNS1fbElVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFEGCCsGAQUFBwEHAQH/BEIwQDAkBAIAATAeAwQCLr/gAwQC
TU+cAwQCVCf0AwQCXZ34AwQEX2lAMBgEAgACMBIDBwAqAgHIAAkDBwQqAgHIADAw
DQYJKoZIhvcNAQELBQADggEBAJM451JsI0kwnrELg0LpjumraVEOypuaXL0eNr+c
CFFrUy8AzRjKHQzHACb4/u7IXN2B2IP3tCzGz0ELs8I4Jk74bJK1Y7nSlhZ+4f9r
YY92+ww7DcMxzKF+xxEbgSFdf0i8vnJIMPUzhGVU5NCsCuJFI+W3SOELOk+BqKWd
BSr39gM/2ZnM1YKhTp7FFX3/zBlEmvxPud1crkV6QeIJWvcFY/24qZgYCvRtHcf0
vAfWSq2PUvQmqm+Nvq2s7RV4K79pnu6loG1/4KEK/2a8m3UlwKUEi5G5thUhofx4
/Yl1NkX/6NmbdLDvSomHwKEKJEnoJHBVXml6bV8GitH/j0o=
-----END CERTIFICATE-----
Generated at Fri Feb 21 13:05:18 2025 by rpki-client