Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/c3rZ379lmLCgMm2swrbV5CubngI.roa
File: c3rZ379lmLCgMm2swrbV5CubngI.roa (raw, json)
Hash identifier: HM4x4k1RUzaWJrz/vBRZ+JEfie29ruIfs8csTGemCx4=
Subject key identifier: 73:7A:D9:DF:BF:65:98:B0:A0:32:6D:AC:C2:B6:D5:E4:2B:9B:9E:02
Certificate issuer: /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Certificate serial: 018AEA04D5C504EBB6149600FAB964910E29
Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/c3rZ379lmLCgMm2swrbV5CubngI.roa
Signing time: Sun 01 Oct 2023 06:55:00 +0000
ROA not before: Sun 01 Oct 2023 06:55:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208685
IP address blocks: 46.23.99.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:ea:04:d5:c5:04:eb:b6:14:96:00:fa:b9:64:91:0e:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Validity
Not Before: Oct 1 06:55:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=737ad9dfbf6598b0a0326dacc2b6d5e42b9b9e02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:2c:d7:30:91:0b:51:54:4e:46:6f:36:27:2a:
4d:7e:68:37:39:66:41:35:82:73:08:43:42:28:af:
f5:aa:67:e2:c9:f5:ab:a9:fa:3f:08:0a:7c:55:ce:
bb:5e:8c:b8:cf:77:89:4a:b8:aa:e0:91:5b:2e:9c:
87:60:9f:5b:59:67:e9:04:ba:37:b7:db:a4:01:47:
4e:28:b0:32:f0:e6:f9:56:96:68:84:7a:27:20:53:
3f:79:9a:32:86:ac:56:f6:e3:f4:2e:1e:c0:79:4a:
ca:d3:d0:9d:6d:da:7c:61:4c:4a:96:1d:b9:22:da:
62:d1:57:b4:45:40:36:01:9a:9c:a8:27:6f:6c:3c:
f5:86:d2:bb:b9:a0:96:82:5d:21:25:7d:3e:41:45:
6b:ff:0b:25:24:5f:3a:8f:f1:7f:09:a0:14:b1:05:
7d:33:59:5a:04:c4:48:b5:50:e9:04:48:df:77:1f:
06:03:df:30:91:f1:46:c6:3a:af:2e:da:a8:73:c4:
1c:f6:d8:1e:11:f6:b5:ef:ec:ef:6c:ff:35:d0:af:
01:50:c3:1d:31:39:ad:5d:d2:f8:12:3e:3a:cf:f6:
cb:15:5e:c8:fc:13:ac:99:2d:05:fb:c2:98:bc:0d:
5a:5d:65:74:8d:c6:c0:0b:91:da:23:8a:23:6d:b0:
dc:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:7A:D9:DF:BF:65:98:B0:A0:32:6D:AC:C2:B6:D5:E4:2B:9B:9E:02
X509v3 Authority Key Identifier:
keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/c3rZ379lmLCgMm2swrbV5CubngI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.23.99.0/24
Signature Algorithm: sha256WithRSAEncryption
11:23:1d:5a:49:0d:09:85:6b:76:65:df:31:2f:7d:33:6f:f8:
7e:91:14:fb:01:e3:03:9b:ae:51:49:95:db:5b:fd:0f:e4:29:
e9:0b:07:a6:79:cc:a8:aa:ac:3a:cc:81:64:e9:73:9c:46:ec:
6e:35:5d:f3:ee:d5:07:0c:7f:6b:0c:eb:cc:10:d5:ee:f4:bd:
88:29:c5:ff:4a:b8:d7:b5:54:36:4c:28:f1:71:e4:7e:1e:ff:
1c:17:e7:36:24:a1:7f:43:be:d5:0a:22:04:9f:1e:57:95:7b:
b7:d7:1a:57:86:30:9f:48:1c:a4:68:da:1a:75:16:6c:6e:24:
d7:10:bf:45:58:b4:4a:8b:71:a8:c3:db:d0:3b:e3:52:22:88:
8e:2a:f1:e0:b0:3b:9a:76:43:c5:08:87:40:5b:1c:47:59:8b:
b3:52:00:92:cf:d5:e9:70:bf:0a:6c:df:2e:43:39:fb:04:8f:
52:dd:16:ba:dc:38:7f:f7:ea:04:0a:13:42:4f:e8:57:b8:61:
b8:73:d1:1c:9f:be:28:85:06:26:56:5d:a0:73:5c:1a:e2:6b:
6e:0b:c0:97:a4:30:e3:0f:df:4e:85:ce:c2:e3:e7:6e:3d:74:
fc:22:a6:2b:a6:31:71:91:70:f9:6d:b2:b6:42:3c:01:ce:a4:
b7:f6:6f:bc
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYrqBNXFBOu2FJYA+rlkkQ4pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkMDZhNDJiYjI0NDZlNTFmMTkyZWEzNzViZGY3ZWVjNWE1
MWM3N2YwHhcNMjMxMDAxMDY1NTAwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MzdhZDlkZmJmNjU5OGIwYTAzMjZkYWNjMmI2ZDVlNDJiOWI5ZTAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2SzXMJELUVRORm82JypNfmg3OWZB
NYJzCENCKK/1qmfiyfWrqfo/CAp8Vc67Xoy4z3eJSriq4JFbLpyHYJ9bWWfpBLo3
t9ukAUdOKLAy8Ob5VpZohHonIFM/eZoyhqxW9uP0Lh7AeUrK09Cdbdp8YUxKlh25
Itpi0Ve0RUA2AZqcqCdvbDz1htK7uaCWgl0hJX0+QUVr/wslJF86j/F/CaAUsQV9
M1laBMRItVDpBEjfdx8GA98wkfFGxjqvLtqoc8Qc9tgeEfa17+zvbP810K8BUMMd
MTmtXdL4Ej46z/bLFV7I/BOsmS0F+8KYvA1aXWV0jcbAC5HaI4ojbbDcMQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHN62d+/ZZiwoDJtrMK21eQrm54CMB8GA1UdIwQY
MBaAFH0GpCuyRG5R8ZLqN1vffuxaUcd/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlFha0s3SkVibEh4a3VvM1c5OS03RnBSeDM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy83ODAwMmEtNGZjMC00ZGJmLTg1ODUt
MmNmODA2YjJkMGYyLzEvYzNyWjM3OWxtTENnTW0yc3dyYlY1Q3VibmdJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy83ODAwMmEtNGZjMC00ZGJmLTg1ODUtMmNmODA2YjJkMGYy
LzEvZlFha0s3SkVibEh4a3VvM1c5OS03RnBSeDM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALhdjMA0G
CSqGSIb3DQEBCwUAA4IBAQARIx1aSQ0JhWt2Zd8xL30zb/h+kRT7AeMDm65RSZXb
W/0P5CnpCwemecyoqqw6zIFk6XOcRuxuNV3z7tUHDH9rDOvMENXu9L2IKcX/SrjX
tVQ2TCjxceR+Hv8cF+c2JKF/Q77VCiIEnx5XlXu31xpXhjCfSBykaNoadRZsbiTX
EL9FWLRKi3Gow9vQO+NSIoiOKvHgsDuadkPFCIdAWxxHWYuzUgCSz9XpcL8KbN8u
Qzn7BI9S3Ra63Dh/9+oEChNCT+hXuGG4c9Ecn74ohQYmVl2gc1wa4mtuC8CXpDDj
D99Ohc7C4+duPXT8IqYrpjFxkXD5bbK2QjwBzqS39m+8
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:38:32 2025 by rpki-client