Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/7f3ef6-9c8c-4144-bafd-449b82bb18ea/1/hxoU7bK7Qj1iXHvSJaH5GKy_l8I.roa
File: hxoU7bK7Qj1iXHvSJaH5GKy_l8I.roa (raw, json)
Hash identifier: n/5QZHdG/Bx/6OrBgXM//TkHfTWUxl34XS+kNzZvMXI=
Subject key identifier: 87:1A:14:ED:B2:BB:42:3D:62:5C:7B:D2:25:A1:F9:18:AC:BF:97:C2
Certificate issuer: /CN=7dcfb7e0cbb8d78112d1e7df9261d20ebee5bee2
Certificate serial: 0188C1223480DAC41CE8844FFDA318D85CA8
Authority key identifier: 7D:CF:B7:E0:CB:B8:D7:81:12:D1:E7:DF:92:61:D2:0E:BE:E5:BE:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fc-34Mu414ES0effkmHSDr7lvuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/7f3ef6-9c8c-4144-bafd-449b82bb18ea/1/hxoU7bK7Qj1iXHvSJaH5GKy_l8I.roa
Signing time: Thu 15 Jun 2023 22:17:04 +0000
ROA not before: Thu 15 Jun 2023 22:17:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198246
IP address blocks: 46.31.68.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:c1:22:34:80:da:c4:1c:e8:84:4f:fd:a3:18:d8:5c:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dcfb7e0cbb8d78112d1e7df9261d20ebee5bee2
Validity
Not Before: Jun 15 22:17:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=871a14edb2bb423d625c7bd225a1f918acbf97c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:a8:dc:78:ea:14:b9:2c:c4:77:e5:37:30:20:
52:e2:67:03:ad:d6:1f:f2:1f:52:94:7b:f7:05:41:
5d:4e:2a:7d:b6:35:f9:6c:a9:b9:2e:0a:79:06:a7:
1f:bd:bf:37:d2:0a:a7:35:74:4c:df:1b:08:f0:29:
79:43:54:15:2e:be:99:36:62:99:c6:f6:fc:cb:03:
54:45:a0:92:06:ae:46:14:e0:08:f7:a9:6a:7c:c4:
d4:0d:f9:84:b2:4c:c0:1c:fa:38:ea:42:59:aa:b6:
a8:34:e4:f8:6f:be:df:c9:b2:f0:b6:85:d2:2c:be:
e9:cb:62:83:78:a4:03:17:e0:17:bd:1d:e1:e6:94:
3a:25:39:ac:78:d9:b8:d9:01:af:42:13:39:be:df:
d7:12:e0:43:a2:9f:5b:a3:e7:c4:fb:fe:4f:d4:b9:
dd:ca:8c:9d:f7:eb:c7:d6:d1:0c:fd:ac:a6:13:9f:
64:91:4e:d7:ea:7b:f6:ea:a8:89:cd:59:9f:a3:fa:
c0:cc:ea:26:aa:5b:d3:30:65:ff:fa:d9:81:a0:39:
66:09:40:45:fb:62:20:b4:73:cb:2e:b6:d1:f3:a5:
37:f6:48:1b:4f:00:a1:44:25:d7:03:9d:f0:83:78:
47:2c:22:1c:7e:ae:24:94:9b:fc:a9:a2:c1:09:dc:
52:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:1A:14:ED:B2:BB:42:3D:62:5C:7B:D2:25:A1:F9:18:AC:BF:97:C2
X509v3 Authority Key Identifier:
keyid:7D:CF:B7:E0:CB:B8:D7:81:12:D1:E7:DF:92:61:D2:0E:BE:E5:BE:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc-34Mu414ES0effkmHSDr7lvuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/7f3ef6-9c8c-4144-bafd-449b82bb18ea/1/hxoU7bK7Qj1iXHvSJaH5GKy_l8I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/7f3ef6-9c8c-4144-bafd-449b82bb18ea/1/fc-34Mu414ES0effkmHSDr7lvuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.31.68.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:47:31:52:96:bf:ed:f8:1f:25:2b:77:54:9d:07:d3:1e:a9:
5a:67:31:5d:78:bf:7f:8e:20:fe:fe:f4:8f:86:14:99:55:68:
3b:60:5f:81:99:a2:1d:f9:78:ed:ba:02:61:2c:9f:d0:c2:79:
3c:a4:d4:4a:fd:33:ed:4b:60:67:11:72:29:a5:74:47:f2:62:
e9:36:bc:fe:20:e1:4d:4a:61:f7:c2:02:c4:9d:6c:6a:57:6a:
cd:ca:fc:61:8e:21:61:ec:81:8d:7b:cd:71:71:d6:f8:0f:8f:
08:48:a2:2f:2f:1c:22:fe:2d:4e:59:64:a6:16:89:35:61:8e:
b2:30:1b:1a:0f:f7:8e:2c:86:c8:0f:bf:53:57:ef:4e:33:42:
f7:d2:78:1e:d9:bd:7c:16:50:ad:2e:78:0c:85:8a:a2:08:76:
26:d9:08:28:37:0a:58:11:0d:b4:ee:5f:7b:19:60:8d:2b:51:
c8:01:ad:2d:cc:27:18:e3:80:30:5e:0b:f7:1b:5f:17:9d:e4:
d9:79:de:4e:9b:90:17:99:7c:fe:94:f5:b9:db:d8:7f:27:93:
e8:bb:c3:37:7c:2b:6c:a0:58:62:49:c6:9b:21:0c:13:0b:43:
e5:20:26:7e:b0:08:18:f8:37:c9:72:dc:0d:91:04:c3:8a:55:
6a:5a:8f:20
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYjBIjSA2sQc6IRP/aMY2FyoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkY2ZiN2UwY2JiOGQ3ODExMmQxZTdkZjkyNjFkMjBlYmVl
NWJlZTIwHhcNMjMwNjE1MjIxNzA0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NzFhMTRlZGIyYmI0MjNkNjI1YzdiZDIyNWExZjkxOGFjYmY5N2MyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh6jceOoUuSzEd+U3MCBS4mcDrdYf
8h9SlHv3BUFdTip9tjX5bKm5Lgp5Bqcfvb830gqnNXRM3xsI8Cl5Q1QVLr6ZNmKZ
xvb8ywNURaCSBq5GFOAI96lqfMTUDfmEskzAHPo46kJZqraoNOT4b77fybLwtoXS
LL7py2KDeKQDF+AXvR3h5pQ6JTmseNm42QGvQhM5vt/XEuBDop9bo+fE+/5P1Lnd
yoyd9+vH1tEM/aymE59kkU7X6nv26qiJzVmfo/rAzOomqlvTMGX/+tmBoDlmCUBF
+2IgtHPLLrbR86U39kgbTwChRCXXA53wg3hHLCIcfq4klJv8qaLBCdxSxQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIcaFO2yu0I9Ylx70iWh+Risv5fCMB8GA1UdIwQY
MBaAFH3Pt+DLuNeBEtHn35Jh0g6+5b7iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmMtMzRNdTQxNEVTMGVmZmttSFNEcjdsdnVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy83ZjNlZjYtOWM4Yy00MTQ0LWJhZmQt
NDQ5YjgyYmIxOGVhLzEvaHhvVTdiSzdRajFpWEh2U0phSDVHS3lfbDhJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy83ZjNlZjYtOWM4Yy00MTQ0LWJhZmQtNDQ5YjgyYmIxOGVh
LzEvZmMtMzRNdTQxNEVTMGVmZmttSFNEcjdsdnVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALh9EMA0G
CSqGSIb3DQEBCwUAA4IBAQC3RzFSlr/t+B8lK3dUnQfTHqlaZzFdeL9/jiD+/vSP
hhSZVWg7YF+BmaId+XjtugJhLJ/Qwnk8pNRK/TPtS2BnEXIppXRH8mLpNrz+IOFN
SmH3wgLEnWxqV2rNyvxhjiFh7IGNe81xcdb4D48ISKIvLxwi/i1OWWSmFok1YY6y
MBsaD/eOLIbID79TV+9OM0L30nge2b18FlCtLngMhYqiCHYm2QgoNwpYEQ207l97
GWCNK1HIAa0tzCcY44AwXgv3G18XneTZed5Om5AXmXz+lPW529h/J5Pou8M3fCts
oFhiScabIQwTC0PlICZ+sAgY+DfJctwNkQTDilVqWo8g
-----END CERTIFICATE-----
Generated at Thu Mar 13 20:22:24 2025 by rpki-client