Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/942e61-7ee6-41d4-b691-019a05ce5e7a/1/RX0vF7s1v3ZmCOZA2PNfN34Nc0Q.roa
File: RX0vF7s1v3ZmCOZA2PNfN34Nc0Q.roa (raw, json)
Hash identifier: DL5GkVVXEPj8zi75flOVBOwBTEyMxXVt8DN9ATKiCDI=
Subject key identifier: 45:7D:2F:17:BB:35:BF:76:66:08:E6:40:D8:F3:5F:37:7E:0D:73:44
Certificate issuer: /CN=4b8c59eac9684834cb97cc2ad858d5c74dcf6ced
Certificate serial: 019420D5D48C2595D15B584A361B42F5D567
Authority key identifier: 4B:8C:59:EA:C9:68:48:34:CB:97:CC:2A:D8:58:D5:C7:4D:CF:6C:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S4xZ6sloSDTLl8wq2FjVx03PbO0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/942e61-7ee6-41d4-b691-019a05ce5e7a/1/RX0vF7s1v3ZmCOZA2PNfN34Nc0Q.roa
Signing time: Wed 01 Jan 2025 07:47:52 +0000
ROA not before: Wed 01 Jan 2025 07:47:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 196791
IP address blocks: 46.172.112.0/20 maxlen: 20
193.169.60.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:d4:8c:25:95:d1:5b:58:4a:36:1b:42:f5:d5:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b8c59eac9684834cb97cc2ad858d5c74dcf6ced
Validity
Not Before: Jan 1 07:47:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=457d2f17bb35bf766608e640d8f35f377e0d7344
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:9d:bd:27:c1:17:35:fb:33:b3:42:f0:0c:1d:
49:4e:a2:5c:ff:c0:9c:e5:b2:04:24:1c:9a:0a:7b:
76:bf:0f:c5:52:df:12:29:7c:38:58:a1:c6:fc:9f:
30:91:b0:09:96:75:c9:6c:e3:7a:7b:30:df:fe:0d:
ae:d1:28:b9:a3:d9:15:e4:84:60:13:bc:06:89:7c:
b5:6d:ab:a9:0d:c9:90:4a:55:cc:d3:0d:ef:41:9e:
b7:64:8c:d3:cf:cb:9c:c5:aa:fa:8c:40:58:14:08:
66:48:01:26:81:1f:41:36:b3:3a:46:52:4e:00:4a:
bf:f6:ae:12:cd:2f:2b:18:a7:c8:4b:b2:33:83:29:
44:b5:28:37:12:92:ca:7a:04:ea:12:9c:01:5f:92:
1e:cd:e1:d1:66:7c:1c:4b:21:7b:68:ca:42:08:19:
1e:a1:46:67:39:50:7e:ed:c3:6a:25:be:b3:b4:50:
8b:ec:4c:8c:e0:23:a9:d3:b9:aa:09:71:09:76:84:
73:0a:af:86:ae:ce:3d:e3:c3:23:ca:51:6b:bc:7f:
f8:2c:ad:e0:01:88:44:9e:e8:88:45:5f:83:9e:19:
c4:95:22:d9:c2:7d:20:6a:03:14:5d:56:6d:33:c4:
6d:be:8d:55:86:2d:6b:ee:c1:90:49:79:34:15:21:
92:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:7D:2F:17:BB:35:BF:76:66:08:E6:40:D8:F3:5F:37:7E:0D:73:44
X509v3 Authority Key Identifier:
keyid:4B:8C:59:EA:C9:68:48:34:CB:97:CC:2A:D8:58:D5:C7:4D:CF:6C:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S4xZ6sloSDTLl8wq2FjVx03PbO0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/942e61-7ee6-41d4-b691-019a05ce5e7a/1/RX0vF7s1v3ZmCOZA2PNfN34Nc0Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/942e61-7ee6-41d4-b691-019a05ce5e7a/1/S4xZ6sloSDTLl8wq2FjVx03PbO0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.172.112.0/20
193.169.60.0/23
Signature Algorithm: sha256WithRSAEncryption
74:a3:54:cc:4d:cf:31:63:bd:5f:7d:27:5d:e9:74:1b:2e:11:
26:86:5b:dd:2a:f1:28:07:8f:b5:67:32:7d:29:44:71:02:5b:
d0:1e:8f:47:9c:05:1e:48:61:d4:6c:45:78:c3:a7:30:85:7a:
fc:84:3a:48:49:f1:33:ee:44:f3:47:65:9b:82:3b:dd:a6:ce:
e1:51:4c:0a:d7:a6:82:e5:5d:71:a4:82:ac:25:cb:2e:97:19:
e0:fc:54:5a:fc:2f:84:9d:76:94:18:42:de:d1:a0:e7:b6:02:
c2:d7:2e:03:9e:f7:2d:e3:58:97:87:00:d7:1c:07:a6:72:bd:
34:b6:e9:72:0f:15:52:73:e2:78:82:0f:7a:d3:eb:37:8f:0d:
64:21:6f:23:cd:16:6c:49:1e:26:e3:f0:17:7c:05:22:ec:5e:
d4:0d:89:f7:74:06:2a:57:90:05:05:c6:de:85:55:23:31:46:
6f:76:e5:78:22:df:90:8b:c8:1d:dc:8d:76:a1:2b:c5:c7:43:
56:41:d5:86:3a:83:a6:9b:ff:d1:d4:4f:ab:f9:68:3f:63:94:
0f:fd:bf:a4:a4:27:90:0f:67:2a:5e:b7:0a:a0:df:48:95:92:
bb:ed:2a:48:27:d5:45:27:df:0b:56:33:12:33:11:5f:85:e6:
5e:12:77:d4
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQg1dSMJZXRW1hKNhtC9dVnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiOGM1OWVhYzk2ODQ4MzRjYjk3Y2MyYWQ4NThkNWM3NGRj
ZjZjZWQwHhcNMjUwMTAxMDc0NzUyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NTdkMmYxN2JiMzViZjc2NjYwOGU2NDBkOGYzNWYzNzdlMGQ3MzQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmZ29J8EXNfszs0LwDB1JTqJc/8Cc
5bIEJByaCnt2vw/FUt8SKXw4WKHG/J8wkbAJlnXJbON6ezDf/g2u0Si5o9kV5IRg
E7wGiXy1baupDcmQSlXM0w3vQZ63ZIzTz8ucxar6jEBYFAhmSAEmgR9BNrM6RlJO
AEq/9q4SzS8rGKfIS7IzgylEtSg3EpLKegTqEpwBX5IezeHRZnwcSyF7aMpCCBke
oUZnOVB+7cNqJb6ztFCL7EyM4COp07mqCXEJdoRzCq+Grs4948MjylFrvH/4LK3g
AYhEnuiIRV+DnhnElSLZwn0gagMUXVZtM8Rtvo1Vhi1r7sGQSXk0FSGSHQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFEV9Lxe7Nb92ZgjmQNjzXzd+DXNEMB8GA1UdIwQY
MBaAFEuMWerJaEg0y5fMKthY1cdNz2ztMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUzR4WjZzbG9TRFRMbDh3cTJGalZ4MDNQYk8wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi85NDJlNjEtN2VlNi00MWQ0LWI2OTEt
MDE5YTA1Y2U1ZTdhLzEvUlgwdkY3czF2M1ptQ09aQTJQTmZOMzROYzBRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi85NDJlNjEtN2VlNi00MWQ0LWI2OTEtMDE5YTA1Y2U1ZTdh
LzEvUzR4WjZzbG9TRFRMbDh3cTJGalZ4MDNQYk8wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQELqxwAwQB
wak8MA0GCSqGSIb3DQEBCwUAA4IBAQB0o1TMTc8xY71ffSdd6XQbLhEmhlvdKvEo
B4+1ZzJ9KURxAlvQHo9HnAUeSGHUbEV4w6cwhXr8hDpISfEz7kTzR2Wbgjvdps7h
UUwK16aC5V1xpIKsJcsulxng/FRa/C+EnXaUGELe0aDntgLC1y4Dnvct41iXhwDX
HAemcr00tulyDxVSc+J4gg960+s3jw1kIW8jzRZsSR4m4/AXfAUi7F7UDYn3dAYq
V5AFBcbehVUjMUZvduV4It+Qi8gd3I12oSvFx0NWQdWGOoOmm//R1E+r+Wg/Y5QP
/b+kpCeQD2cqXrcKoN9IlZK77SpIJ9VFJ98LVjMSMxFfheZeEnfU
-----END CERTIFICATE-----
Generated at Fri Apr 25 05:58:19 2025 by rpki-client