Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/Z3XKrGVp2Xl9zGxjlW3GuCf1-HU.roa
File: Z3XKrGVp2Xl9zGxjlW3GuCf1-HU.roa (raw, json)
Hash identifier: PGeDPFeIQjFBRjCURjcgvm8bWjQIdMceaR1t9c7i9A4=
Subject key identifier: 67:75:CA:AC:65:69:D9:79:7D:CC:6C:63:95:6D:C6:B8:27:F5:F8:75
Certificate issuer: /CN=57c670c8db32dd748df797c5c93013d8c91fa839
Certificate serial: 01943242E4F9B86BA3DDE44E44E892CB9B52
Authority key identifier: 57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/Z3XKrGVp2Xl9zGxjlW3GuCf1-HU.roa
Signing time: Sat 04 Jan 2025 17:00:32 +0000
ROA not before: Sat 04 Jan 2025 17:00:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216475
IP address blocks: 46.243.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:32:42:e4:f9:b8:6b:a3:dd:e4:4e:44:e8:92:cb:9b:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57c670c8db32dd748df797c5c93013d8c91fa839
Validity
Not Before: Jan 4 17:00:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6775caac6569d9797dcc6c63956dc6b827f5f875
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:98:a6:1f:a7:98:42:17:18:a8:e6:73:28:29:
b6:e5:42:be:8a:84:26:ad:21:5d:98:e6:c1:5e:2b:
ca:0e:8e:c2:0a:9a:94:9b:61:7f:d7:9a:5b:ac:21:
8a:67:15:c9:89:fb:8f:81:3c:71:9b:73:32:13:06:
f4:68:ca:bf:36:a8:61:f1:cd:09:3f:21:c7:5f:dd:
12:06:e1:0a:b1:bf:79:04:11:84:04:50:41:09:39:
81:cc:44:11:f9:ab:d8:de:d1:51:df:eb:f4:37:2c:
91:6b:09:f2:59:39:de:8c:b3:e2:3e:57:46:bf:8f:
0e:a2:31:6d:44:9a:12:ee:a6:9c:d4:1c:30:e6:f5:
6c:20:bd:44:cc:68:78:1b:3a:53:ce:77:52:d0:52:
42:3f:5d:38:01:f1:d2:c4:6a:1e:db:db:86:cd:a2:
e4:29:9c:02:61:2f:be:5e:d5:94:d7:46:ae:b8:16:
21:dd:2e:2b:a1:89:ba:32:c2:bb:2a:53:b6:e7:85:
2c:3b:db:22:91:0a:84:d2:ac:4e:1a:81:59:ac:01:
14:57:05:4e:fa:a8:28:87:61:5e:3b:28:6a:c3:68:
6f:f0:f6:6d:bb:df:f9:96:9a:aa:4d:75:34:bd:6e:
72:82:1d:9b:9d:5d:8e:a9:9d:c7:68:ab:42:35:b1:
4b:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:75:CA:AC:65:69:D9:79:7D:CC:6C:63:95:6D:C6:B8:27:F5:F8:75
X509v3 Authority Key Identifier:
keyid:57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/Z3XKrGVp2Xl9zGxjlW3GuCf1-HU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.243.3.0/24
Signature Algorithm: sha256WithRSAEncryption
91:82:a7:3e:e5:25:81:48:55:ea:2f:c4:ee:d6:a4:7c:e7:1c:
b8:ca:b3:5e:f8:8d:3d:c8:64:a0:f4:d6:ab:2e:6a:6a:e5:dd:
5e:bb:a7:5b:6b:2f:e0:66:02:c8:5e:a1:04:25:2d:a8:d3:8e:
a6:56:39:a5:24:7a:b2:f9:8f:8a:36:57:64:66:48:92:27:9f:
9c:1d:05:ba:8a:cc:58:31:00:cc:99:be:c0:f2:f1:6f:b1:65:
74:0b:f1:ab:db:72:54:37:60:bb:93:a4:71:3f:55:81:ca:a8:
e0:0f:15:37:ac:f3:a6:14:73:64:0d:e9:52:1f:ba:ae:0c:16:
5d:19:49:1a:ab:fc:56:bb:ef:63:2d:a9:6e:76:1d:55:30:66:
d2:15:d4:c3:62:3d:b0:09:29:a7:0b:36:ae:19:a3:36:44:28:
91:61:7a:2a:3c:74:4f:b2:6e:a9:e2:f8:c5:67:c7:25:a8:0d:
20:67:f3:eb:70:93:1a:0a:4b:af:d6:3a:28:ce:4e:97:1d:92:
93:dc:9e:c0:bd:e3:47:23:7a:86:f9:51:16:61:66:a0:a0:12:
d0:9b:93:62:41:ff:47:8d:aa:f1:fb:40:d8:52:72:02:67:8a:
52:42:1b:5c:da:c6:32:56:d5:11:d4:f6:4d:2a:24:6d:f6:e8:
fe:ba:3b:39
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQyQuT5uGuj3eROROiSy5tSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3YzY3MGM4ZGIzMmRkNzQ4ZGY3OTdjNWM5MzAxM2Q4Yzkx
ZmE4MzkwHhcNMjUwMTA0MTcwMDMyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2Nzc1Y2FhYzY1NjlkOTc5N2RjYzZjNjM5NTZkYzZiODI3ZjVmODc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj5imH6eYQhcYqOZzKCm25UK+ioQm
rSFdmObBXivKDo7CCpqUm2F/15pbrCGKZxXJifuPgTxxm3MyEwb0aMq/Nqhh8c0J
PyHHX90SBuEKsb95BBGEBFBBCTmBzEQR+avY3tFR3+v0NyyRawnyWTnejLPiPldG
v48OojFtRJoS7qac1Bww5vVsIL1EzGh4GzpTzndS0FJCP104AfHSxGoe29uGzaLk
KZwCYS++XtWU10auuBYh3S4roYm6MsK7KlO254UsO9sikQqE0qxOGoFZrAEUVwVO
+qgoh2FeOyhqw2hv8PZtu9/5lpqqTXU0vW5ygh2bnV2OqZ3HaKtCNbFLwwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGd1yqxladl5fcxsY5Vtxrgn9fh1MB8GA1UdIwQY
MBaAFFfGcMjbMt10jfeXxckwE9jJH6g5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVjhad3lOc3kzWFNOOTVmRnlUQVQyTWtmcURrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC81YTZmZGEtNzg5Ni00YzUwLWFmZmQt
MzA0OTVmNDAzNzg0LzEvWjNYS3JHVnAyWGw5ekd4amxXM0d1Q2YxLUhVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC81YTZmZGEtNzg5Ni00YzUwLWFmZmQtMzA0OTVmNDAzNzg0
LzEvVjhad3lOc3kzWFNOOTVmRnlUQVQyTWtmcURrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALvMDMA0G
CSqGSIb3DQEBCwUAA4IBAQCRgqc+5SWBSFXqL8Tu1qR85xy4yrNe+I09yGSg9Nar
Lmpq5d1eu6dbay/gZgLIXqEEJS2o046mVjmlJHqy+Y+KNldkZkiSJ5+cHQW6isxY
MQDMmb7A8vFvsWV0C/Gr23JUN2C7k6RxP1WByqjgDxU3rPOmFHNkDelSH7quDBZd
GUkaq/xWu+9jLaludh1VMGbSFdTDYj2wCSmnCzauGaM2RCiRYXoqPHRPsm6p4vjF
Z8clqA0gZ/PrcJMaCkuv1joozk6XHZKT3J7AveNHI3qG+VEWYWagoBLQm5NiQf9H
jarx+0DYUnICZ4pSQhtc2sYyVtUR1PZNKiRt9uj+ujs5
-----END CERTIFICATE-----
Generated at Mon Apr 7 11:12:56 2025 by rpki-client