Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/43a672-d151-4c4e-9809-149f6365ffda/1/aZtA3Tb82BUczOl9SsTYverE7lI.roa
File: aZtA3Tb82BUczOl9SsTYverE7lI.roa (raw, json)
Hash identifier: LK8Z2BqrNCcDSNuABGRySwkLhGqKgLJf/sHl1VyEOIw=
Subject key identifier: 69:9B:40:DD:36:FC:D8:15:1C:CC:E9:7D:4A:C4:D8:BD:EA:C4:EE:52
Certificate issuer: /CN=2a019cada163e368cc3362763f206b3deac4d320
Certificate serial: 0194228DD6DB5F381F8ED354283BF265A476
Authority key identifier: 2A:01:9C:AD:A1:63:E3:68:CC:33:62:76:3F:20:6B:3D:EA:C4:D3:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KgGcraFj42jMM2J2PyBrPerE0yA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/43a672-d151-4c4e-9809-149f6365ffda/1/aZtA3Tb82BUczOl9SsTYverE7lI.roa
Signing time: Wed 01 Jan 2025 15:48:28 +0000
ROA not before: Wed 01 Jan 2025 15:48:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16276
IP address blocks: 46.244.32.0/20 maxlen: 20
92.246.224.0/19 maxlen: 19
185.45.160.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:d6:db:5f:38:1f:8e:d3:54:28:3b:f2:65:a4:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a019cada163e368cc3362763f206b3deac4d320
Validity
Not Before: Jan 1 15:48:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=699b40dd36fcd8151ccce97d4ac4d8bdeac4ee52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:44:27:f7:e8:0e:e3:4e:34:39:ba:52:6a:7f:
4b:ed:f6:5d:2e:0e:b0:3f:b8:64:d3:23:b8:f6:07:
29:c3:e3:0f:af:97:54:f7:81:38:ba:ed:09:af:47:
b4:8a:c0:e4:b5:27:2a:f3:aa:ba:6a:9c:28:16:38:
1f:e1:5c:c0:e6:22:54:1e:04:96:2b:e5:d9:09:9e:
2a:51:ea:9e:9a:1e:4e:ca:f5:16:df:15:59:59:48:
c7:8d:42:90:0f:34:25:0d:7b:98:b2:b8:f8:85:4c:
8e:cd:e2:6c:1a:8c:28:84:da:44:bd:32:d7:7b:d0:
4d:78:41:8b:99:09:11:70:05:19:d4:b1:a4:6b:46:
88:52:90:bf:ec:95:4d:1e:58:1a:9e:aa:65:43:f6:
c5:14:91:b6:f2:9e:09:9e:60:1c:79:34:ea:e2:e7:
e7:c8:02:8a:ce:d6:0a:ac:f6:12:88:bb:bc:30:d7:
77:fe:7d:a0:14:dd:29:59:25:f7:ed:00:9a:a4:73:
11:3a:b6:4b:6c:52:5d:18:3a:19:b5:e2:5c:e5:40:
6e:e8:a0:e5:f8:17:44:15:a4:c8:0d:12:c6:60:e6:
21:ce:02:71:92:f6:3e:b6:77:bb:22:84:a4:35:79:
8b:f7:10:bf:c9:6c:3d:64:07:80:b1:a9:8a:11:cf:
f9:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:9B:40:DD:36:FC:D8:15:1C:CC:E9:7D:4A:C4:D8:BD:EA:C4:EE:52
X509v3 Authority Key Identifier:
keyid:2A:01:9C:AD:A1:63:E3:68:CC:33:62:76:3F:20:6B:3D:EA:C4:D3:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KgGcraFj42jMM2J2PyBrPerE0yA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/43a672-d151-4c4e-9809-149f6365ffda/1/aZtA3Tb82BUczOl9SsTYverE7lI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/43a672-d151-4c4e-9809-149f6365ffda/1/KgGcraFj42jMM2J2PyBrPerE0yA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.244.32.0/20
92.246.224.0/19
185.45.160.0/22
Signature Algorithm: sha256WithRSAEncryption
36:73:cd:84:a5:32:0e:5d:b0:ad:81:0a:33:12:c8:07:92:18:
e8:52:96:ed:ee:29:77:9f:69:c1:8e:6a:95:fb:e0:5b:e4:29:
05:ac:81:ea:e9:ad:93:f8:8c:96:b1:0d:c8:31:bd:40:3e:f8:
60:51:da:61:eb:19:48:5e:f6:e9:29:4b:c3:73:44:d4:59:ee:
0b:9c:b9:c5:42:25:41:86:b2:d6:fe:7c:46:a1:be:14:32:a2:
18:3c:6d:f8:fe:79:2f:f1:fb:18:5b:f1:58:f6:d1:bc:5f:2f:
4f:a6:35:92:c8:9e:25:0c:8a:49:6c:bd:27:36:d2:64:4a:20:
aa:8c:7f:ec:24:5d:5f:8e:46:02:d7:ae:e1:6c:98:d7:50:1d:
82:22:3c:e0:f0:72:a1:0e:f7:85:5a:d1:00:69:57:76:30:58:
4b:c0:f9:57:a4:bb:94:aa:6d:dc:b4:56:d4:da:fa:e6:34:f7:
8a:59:e0:0f:67:12:8f:f6:b2:1d:ba:73:94:7b:9c:d3:87:00:
f5:59:b4:c1:62:79:4e:ba:ee:20:42:66:a5:ed:cd:f3:12:ac:
c8:de:79:65:be:44:8f:36:38:b6:0f:88:82:86:9e:ca:30:3d:
55:23:78:4c:41:55:e4:de:8e:e1:cf:47:a2:aa:61:40:83:5a:
4a:f4:08:dc
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZQijdbbXzgfjtNUKDvyZaR2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhMDE5Y2FkYTE2M2UzNjhjYzMzNjI3NjNmMjA2YjNkZWFj
NGQzMjAwHhcNMjUwMTAxMTU0ODI4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2OTliNDBkZDM2ZmNkODE1MWNjY2U5N2Q0YWM0ZDhiZGVhYzRlZTUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2EQn9+gO4040ObpSan9L7fZdLg6w
P7hk0yO49gcpw+MPr5dU94E4uu0Jr0e0isDktScq86q6apwoFjgf4VzA5iJUHgSW
K+XZCZ4qUeqemh5OyvUW3xVZWUjHjUKQDzQlDXuYsrj4hUyOzeJsGowohNpEvTLX
e9BNeEGLmQkRcAUZ1LGka0aIUpC/7JVNHlganqplQ/bFFJG28p4JnmAceTTq4ufn
yAKKztYKrPYSiLu8MNd3/n2gFN0pWSX37QCapHMROrZLbFJdGDoZteJc5UBu6KDl
+BdEFaTIDRLGYOYhzgJxkvY+tne7IoSkNXmL9xC/yWw9ZAeAsamKEc/5fQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFGmbQN02/NgVHMzpfUrE2L3qxO5SMB8GA1UdIwQY
MBaAFCoBnK2hY+NozDNidj8gaz3qxNMgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS2dHY3JhRmo0MmpNTTJKMlB5QnJQZXJFMHlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi80M2E2NzItZDE1MS00YzRlLTk4MDkt
MTQ5ZjYzNjVmZmRhLzEvYVp0QTNUYjgyQlVjek9sOVNzVFl2ZXJFN2xJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi80M2E2NzItZDE1MS00YzRlLTk4MDktMTQ5ZjYzNjVmZmRh
LzEvS2dHY3JhRmo0MmpNTTJKMlB5QnJQZXJFMHlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQELvQgAwQF
XPbgAwQCuS2gMA0GCSqGSIb3DQEBCwUAA4IBAQA2c82EpTIOXbCtgQozEsgHkhjo
Upbt7il3n2nBjmqV++Bb5CkFrIHq6a2T+IyWsQ3IMb1APvhgUdph6xlIXvbpKUvD
c0TUWe4LnLnFQiVBhrLW/nxGob4UMqIYPG34/nkv8fsYW/FY9tG8Xy9PpjWSyJ4l
DIpJbL0nNtJkSiCqjH/sJF1fjkYC167hbJjXUB2CIjzg8HKhDveFWtEAaVd2MFhL
wPlXpLuUqm3ctFbU2vrmNPeKWeAPZxKP9rIdunOUe5zThwD1WbTBYnlOuu4gQmal
7c3zEqzI3nllvkSPNji2D4iChp7KMD1VI3hMQVXk3o7hz0eiqmFAg1pK9Ajc
-----END CERTIFICATE-----
Generated at Sun Apr 6 06:08:44 2025 by rpki-client