Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/e413d8-d389-473e-b63a-204d76eee661/1/5BEa602wZYpMxTuh3zw8qo0mrK4.roa
File: 5BEa602wZYpMxTuh3zw8qo0mrK4.roa (raw, json)
Hash identifier: +ORzsbOhqz/jkJrclx5p3HM7N8Z+T1SUhWKkKSdLD+M=
Subject key identifier: E4:11:1A:EB:4D:B0:65:8A:4C:C5:3B:A1:DF:3C:3C:AA:8D:26:AC:AE
Certificate issuer: /CN=8095e0cc6e4a8de8acd3b07cce5ea0c040c47ff1
Certificate serial: 01941FFA60A83E1F0537378E5D9C00ED52D5
Authority key identifier: 80:95:E0:CC:6E:4A:8D:E8:AC:D3:B0:7C:CE:5E:A0:C0:40:C4:7F:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gJXgzG5Kjeis07B8zl6gwEDEf_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/e413d8-d389-473e-b63a-204d76eee661/1/5BEa602wZYpMxTuh3zw8qo0mrK4.roa
Signing time: Wed 01 Jan 2025 03:48:09 +0000
ROA not before: Wed 01 Jan 2025 03:48:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211600
IP address blocks: 46.243.74.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:60:a8:3e:1f:05:37:37:8e:5d:9c:00:ed:52:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8095e0cc6e4a8de8acd3b07cce5ea0c040c47ff1
Validity
Not Before: Jan 1 03:48:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e4111aeb4db0658a4cc53ba1df3c3caa8d26acae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:8b:e3:19:56:c2:b7:0e:1d:6b:02:36:08:ab:
6d:b9:40:20:5e:b4:98:a9:56:68:4f:ed:59:af:80:
64:69:13:0b:09:5a:02:56:da:07:3b:5e:0d:01:e1:
69:16:48:2f:d9:d0:38:26:34:bf:3a:71:7a:ad:94:
69:35:e8:44:f6:79:7c:1d:6a:2c:d9:78:a9:ab:45:
41:cf:04:de:59:03:93:aa:40:bf:bf:e9:21:cd:de:
c1:52:40:3c:a0:ba:a1:8f:65:a0:b9:32:75:87:9b:
0d:10:38:84:6a:75:40:78:ba:2c:72:13:7d:c2:34:
9a:da:29:01:20:7a:da:2a:39:3b:fa:fa:30:f5:43:
9c:72:c9:48:1f:22:71:c6:9b:41:aa:91:52:fc:de:
a8:ce:56:7c:33:b8:4e:7d:7d:03:4b:41:56:e2:50:
99:b1:b7:4e:66:e2:64:30:e0:d8:06:2f:3b:24:99:
35:d4:dd:88:7e:39:c9:2c:7d:dd:48:d8:13:1a:a9:
a6:ac:bd:33:4d:60:f3:d1:53:49:25:5b:dd:80:22:
a9:e3:32:cb:30:b7:af:b9:32:4b:5f:f2:1d:dc:42:
21:b1:cc:33:66:cc:40:6a:68:d1:ee:54:b0:0d:f1:
44:26:70:cc:e8:76:78:bd:67:e6:37:cf:cb:50:7a:
31:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:11:1A:EB:4D:B0:65:8A:4C:C5:3B:A1:DF:3C:3C:AA:8D:26:AC:AE
X509v3 Authority Key Identifier:
keyid:80:95:E0:CC:6E:4A:8D:E8:AC:D3:B0:7C:CE:5E:A0:C0:40:C4:7F:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gJXgzG5Kjeis07B8zl6gwEDEf_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e413d8-d389-473e-b63a-204d76eee661/1/5BEa602wZYpMxTuh3zw8qo0mrK4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e413d8-d389-473e-b63a-204d76eee661/1/gJXgzG5Kjeis07B8zl6gwEDEf_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.243.74.0/23
Signature Algorithm: sha256WithRSAEncryption
71:9a:d7:cd:3e:7b:c0:56:17:b2:39:29:77:b7:9c:32:f5:ab:
19:ba:02:16:23:3f:54:90:34:5a:46:1f:49:e3:68:62:d9:6b:
cf:fe:69:a0:91:a0:b9:1a:4e:55:00:0d:3a:87:98:e6:47:5c:
96:c8:12:a9:5b:90:4e:18:2d:03:d6:5f:e2:0a:e2:8b:98:c1:
cf:d1:c5:23:7b:d0:d8:b9:07:0a:40:27:59:75:53:f2:59:3c:
d5:98:7f:21:3a:fb:66:61:68:8d:71:14:2e:6f:53:87:09:78:
fe:87:ac:f5:a8:2c:f2:ae:dc:b1:2d:a9:fa:17:2c:34:ee:c5:
af:8b:6a:9d:e5:b7:7c:80:bb:38:e6:f5:83:ee:33:2d:78:d3:
81:cc:70:19:42:9d:05:53:21:fa:b6:20:83:d6:86:39:e5:d0:
00:95:e0:bc:e4:cd:4d:61:00:44:c5:2e:a4:f7:5b:da:b2:58:
6f:f4:13:68:6c:09:dd:4e:99:71:ef:f7:97:62:72:25:b1:06:
43:e9:be:fb:9f:1a:37:ca:73:46:29:48:ef:2c:0f:f6:68:b7:
8e:a3:a2:85:00:f3:5d:79:dc:ca:06:0b:ed:1e:54:5a:54:ab:
2a:79:a5:ad:09:31:8e:07:0e:cb:94:69:00:2c:ae:e2:13:48:
de:e2:0d:45
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQf+mCoPh8FNzeOXZwA7VLVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgwOTVlMGNjNmU0YThkZThhY2QzYjA3Y2NlNWVhMGMwNDBj
NDdmZjEwHhcNMjUwMTAxMDM0ODA5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNDExMWFlYjRkYjA2NThhNGNjNTNiYTFkZjNjM2NhYThkMjZhY2FlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqovjGVbCtw4dawI2CKttuUAgXrSY
qVZoT+1Zr4BkaRMLCVoCVtoHO14NAeFpFkgv2dA4JjS/OnF6rZRpNehE9nl8HWos
2Xipq0VBzwTeWQOTqkC/v+khzd7BUkA8oLqhj2WguTJ1h5sNEDiEanVAeLoschN9
wjSa2ikBIHraKjk7+vow9UOccslIHyJxxptBqpFS/N6ozlZ8M7hOfX0DS0FW4lCZ
sbdOZuJkMODYBi87JJk11N2IfjnJLH3dSNgTGqmmrL0zTWDz0VNJJVvdgCKp4zLL
MLevuTJLX/Id3EIhscwzZsxAamjR7lSwDfFEJnDM6HZ4vWfmN8/LUHoxfQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOQRGutNsGWKTMU7od88PKqNJqyuMB8GA1UdIwQY
MBaAFICV4MxuSo3orNOwfM5eoMBAxH/xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ0pYZ3pHNUtqZWlzMDdCOHpsNmd3RURFZl9FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9lNDEzZDgtZDM4OS00NzNlLWI2M2Et
MjA0ZDc2ZWVlNjYxLzEvNUJFYTYwMndaWXBNeFR1aDN6dzhxbzBtcks0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC9lNDEzZDgtZDM4OS00NzNlLWI2M2EtMjA0ZDc2ZWVlNjYx
LzEvZ0pYZ3pHNUtqZWlzMDdCOHpsNmd3RURFZl9FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLvNKMA0G
CSqGSIb3DQEBCwUAA4IBAQBxmtfNPnvAVheyOSl3t5wy9asZugIWIz9UkDRaRh9J
42hi2WvP/mmgkaC5Gk5VAA06h5jmR1yWyBKpW5BOGC0D1l/iCuKLmMHP0cUje9DY
uQcKQCdZdVPyWTzVmH8hOvtmYWiNcRQub1OHCXj+h6z1qCzyrtyxLan6Fyw07sWv
i2qd5bd8gLs45vWD7jMteNOBzHAZQp0FUyH6tiCD1oY55dAAleC85M1NYQBExS6k
91vaslhv9BNobAndTplx7/eXYnIlsQZD6b77nxo3ynNGKUjvLA/2aLeOo6KFAPNd
edzKBgvtHlRaVKsqeaWtCTGOBw7LlGkALK7iE0je4g1F
-----END CERTIFICATE-----
Generated at Thu Feb 20 03:33:51 2025 by rpki-client