Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/0HACyBUxgNOKSEcXcfPHI7LfmIg.roa
File: 0HACyBUxgNOKSEcXcfPHI7LfmIg.roa (raw, json)
Hash identifier: wqTJepcUODfu+UsDaT3UCXuLJcUfFBmEBfdq4N3Rg18=
Subject key identifier: D0:70:02:C8:15:31:80:D3:8A:48:47:17:71:F3:C7:23:B2:DF:98:88
Certificate issuer: /CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97
Certificate serial: 019427479F648527093921F437A88FBCAF22
Authority key identifier: FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/0HACyBUxgNOKSEcXcfPHI7LfmIg.roa
Signing time: Thu 02 Jan 2025 13:49:52 +0000
ROA not before: Thu 02 Jan 2025 13:49:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197677
IP address blocks: 46.247.142.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:9f:64:85:27:09:39:21:f4:37:a8:8f:bc:af:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97
Validity
Not Before: Jan 2 13:49:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d07002c8153180d38a48471771f3c723b2df9888
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:7e:01:c2:15:2e:b1:46:1c:61:4e:16:e0:c5:
d5:12:2d:1c:a4:58:70:d5:df:08:93:c7:ce:b3:38:
d9:f5:3a:6b:24:cb:28:23:01:64:6a:5b:b5:52:84:
fe:30:05:93:6d:71:f3:25:89:3f:c9:5b:fa:33:91:
7f:e8:68:6d:ce:09:4d:54:44:a5:00:db:fb:5b:40:
53:bf:43:89:b3:23:aa:3a:5c:21:e5:aa:83:f3:ad:
5d:e7:7e:38:68:05:a3:b9:a4:0f:96:39:5f:70:f9:
85:31:fa:a1:f5:fd:a8:3c:41:dc:66:c5:95:46:4a:
6f:fd:bf:47:40:04:1b:dd:32:9a:d6:92:db:a2:94:
99:19:16:3f:72:3a:54:7b:95:68:cf:d9:b6:0f:e6:
3e:97:d4:b2:91:76:f3:99:47:84:d9:46:b6:3d:5d:
5e:06:3c:c1:2a:db:32:eb:45:40:3e:be:c5:ce:fe:
88:4b:d5:ad:a6:06:1c:b8:2c:d4:98:47:69:8e:66:
d7:2e:b8:a6:8b:3e:3c:24:85:b1:66:c1:ae:eb:23:
8f:ee:13:95:98:d7:ce:1c:a1:00:67:3b:46:0f:36:
91:0d:ea:8b:b6:0d:f5:e8:a2:cd:54:b4:bc:34:9a:
26:cb:4b:d2:99:06:6c:e4:22:97:ab:19:11:ce:8f:
60:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:70:02:C8:15:31:80:D3:8A:48:47:17:71:F3:C7:23:B2:DF:98:88
X509v3 Authority Key Identifier:
keyid:FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/0HACyBUxgNOKSEcXcfPHI7LfmIg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.247.142.0/24
Signature Algorithm: sha256WithRSAEncryption
78:1d:94:34:cc:b7:2c:71:55:f9:c0:0f:6a:37:9d:7e:9b:13:
c3:2d:97:43:3d:dc:0c:8f:ee:c3:34:f0:5b:97:80:d6:5a:87:
cc:01:1a:c5:ca:5b:ff:d8:77:0e:a8:65:06:d7:cc:7f:3b:35:
40:3f:05:34:1d:f1:44:e8:42:6a:93:80:d3:47:bc:b5:89:1e:
0d:57:21:d6:74:4a:38:8b:03:84:97:b4:e1:5d:d1:93:5d:52:
3a:ad:71:4d:85:35:04:c4:fd:c0:96:ed:7b:00:96:55:57:d5:
1d:4e:18:a5:33:51:a6:53:57:16:38:f4:2b:7b:b0:73:d0:60:
6e:23:c7:ba:12:b1:3e:ff:c6:4f:31:e3:03:d1:61:bf:8c:f1:
c3:ab:44:ee:cd:40:48:33:3d:9d:82:64:9c:c4:a6:1a:31:e5:
46:7e:c1:44:2e:1b:9a:ff:c1:b0:89:78:07:a4:4f:4a:dc:c0:
0c:91:39:6d:7b:d3:ac:ee:61:60:15:82:24:2e:55:37:9a:c4:
f3:f4:dc:55:73:a8:df:55:5d:15:e0:36:18:b0:eb:18:12:d4:
60:60:08:b2:97:ea:67:42:16:af:f9:fb:9d:60:0f:ae:e2:02:
25:d0:4b:31:c5:89:3a:4c:b1:32:f1:07:5d:88:a8:2c:4f:ac:
ad:e2:f2:e4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQnR59khScJOSH0N6iPvK8iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZkMzdjYzhmMTZiM2M2Y2JkMzM0NmFhM2VkNjE3NzFmM2U4
M2FjOTcwHhcNMjUwMTAyMTM0OTUyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMDcwMDJjODE1MzE4MGQzOGE0ODQ3MTc3MWYzYzcyM2IyZGY5ODg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs34BwhUusUYcYU4W4MXVEi0cpFhw
1d8Ik8fOszjZ9TprJMsoIwFkalu1UoT+MAWTbXHzJYk/yVv6M5F/6GhtzglNVESl
ANv7W0BTv0OJsyOqOlwh5aqD861d5344aAWjuaQPljlfcPmFMfqh9f2oPEHcZsWV
Rkpv/b9HQAQb3TKa1pLbopSZGRY/cjpUe5Voz9m2D+Y+l9SykXbzmUeE2Ua2PV1e
BjzBKtsy60VAPr7Fzv6IS9WtpgYcuCzUmEdpjmbXLrimiz48JIWxZsGu6yOP7hOV
mNfOHKEAZztGDzaRDeqLtg316KLNVLS8NJomy0vSmQZs5CKXqxkRzo9gUwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNBwAsgVMYDTikhHF3HzxyOy35iIMB8GA1UdIwQY
MBaAFP03zI8Ws8bL0zRqo+1hdx8+g6yXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX1RmTWp4YXp4c3ZUTkdxajdXRjNIejZEckpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8wNWUxN2YtZDMxZi00MzFmLWE4YmMt
N2UwNWFiNDFiNmU0LzEvMEhBQ3lCVXhnTk9LU0VjWGNmUEhJN0xmbUlnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS8wNWUxN2YtZDMxZi00MzFmLWE4YmMtN2UwNWFiNDFiNmU0
LzEvX1RmTWp4YXp4c3ZUTkdxajdXRjNIejZEckpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALveOMA0G
CSqGSIb3DQEBCwUAA4IBAQB4HZQ0zLcscVX5wA9qN51+mxPDLZdDPdwMj+7DNPBb
l4DWWofMARrFylv/2HcOqGUG18x/OzVAPwU0HfFE6EJqk4DTR7y1iR4NVyHWdEo4
iwOEl7ThXdGTXVI6rXFNhTUExP3Alu17AJZVV9UdThilM1GmU1cWOPQre7Bz0GBu
I8e6ErE+/8ZPMeMD0WG/jPHDq0TuzUBIMz2dgmScxKYaMeVGfsFELhua/8GwiXgH
pE9K3MAMkTlte9Os7mFgFYIkLlU3msTz9NxVc6jfVV0V4DYYsOsYEtRgYAiyl+pn
Qhav+fudYA+u4gIl0EsxxYk6TLEy8QddiKgsT6yt4vLk
-----END CERTIFICATE-----
Generated at Mon Apr 7 02:12:32 2025 by rpki-client