Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/88fff5-dfd9-4008-95b7-785e5883644d/1/8M_09VVLxylfbEqHIyfptDRGhoo.roa
File: 8M_09VVLxylfbEqHIyfptDRGhoo.roa (raw, json)
Hash identifier: tLYUA9NqCpDPmLSPIvH5GBkj0bNXLvDAI9qY1ZRb0HA=
Subject key identifier: F0:CF:F4:F5:55:4B:C7:29:5F:6C:4A:87:23:27:E9:B4:34:46:86:8A
Certificate issuer: /CN=d8d662dcc6fe3b81ef3de2fca3cfcedc11ebaa43
Certificate serial: 01947E82766233986E2FB0C03FAA8DA17AA2
Authority key identifier: D8:D6:62:DC:C6:FE:3B:81:EF:3D:E2:FC:A3:CF:CE:DC:11:EB:AA:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2NZi3Mb-O4HvPeL8o8_O3BHrqkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/88fff5-dfd9-4008-95b7-785e5883644d/1/8M_09VVLxylfbEqHIyfptDRGhoo.roa
Signing time: Sun 19 Jan 2025 12:21:06 +0000
ROA not before: Sun 19 Jan 2025 12:21:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 46.36.97.0/24 maxlen: 24
46.36.100.0/24 maxlen: 24
46.36.101.0/24 maxlen: 24
46.36.102.0/24 maxlen: 24
46.36.103.0/24 maxlen: 24
46.36.106.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:7e:82:76:62:33:98:6e:2f:b0:c0:3f:aa:8d:a1:7a:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8d662dcc6fe3b81ef3de2fca3cfcedc11ebaa43
Validity
Not Before: Jan 19 12:21:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f0cff4f5554bc7295f6c4a872327e9b43446868a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:59:d0:9d:30:c2:ea:60:87:4f:99:79:a3:32:
aa:74:63:56:3f:b4:da:7c:8a:68:4b:73:8d:13:78:
87:c9:32:b6:66:0a:0c:a7:91:4d:7a:7b:58:8b:49:
15:4e:ca:c4:17:4b:4e:10:dd:2f:c1:ee:50:2c:2f:
b0:39:f4:82:6e:fc:63:97:1b:5f:96:40:b4:ab:a6:
f5:7e:16:36:0b:31:3d:46:1f:b5:44:f6:92:7b:6a:
cb:3f:95:cc:15:76:2f:8e:0a:69:d0:86:e6:69:40:
e8:f8:49:63:91:57:03:79:3d:85:e0:eb:94:ef:eb:
3a:d9:8c:30:b6:e3:42:6f:83:3c:de:5f:d8:3c:63:
ca:21:5f:38:33:8e:6e:e3:fe:af:02:6d:2a:7d:a3:
ec:90:85:6a:e3:f3:71:d7:db:ba:0c:bb:ae:77:89:
ba:f0:88:e7:b4:92:ed:17:77:11:da:df:26:63:27:
e7:64:f4:21:05:3e:bd:2a:8c:41:33:c9:89:e8:0f:
bf:ac:6f:13:78:2e:f6:1b:1d:a9:6f:7c:7f:95:7a:
26:85:2d:c3:ac:de:f9:82:a6:cd:09:e2:0a:76:36:
aa:77:61:ef:fc:c3:16:a4:b6:e3:df:48:c3:31:cd:
e4:ee:c0:8d:01:6e:54:77:c7:ba:d3:9b:f5:46:36:
67:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:CF:F4:F5:55:4B:C7:29:5F:6C:4A:87:23:27:E9:B4:34:46:86:8A
X509v3 Authority Key Identifier:
keyid:D8:D6:62:DC:C6:FE:3B:81:EF:3D:E2:FC:A3:CF:CE:DC:11:EB:AA:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2NZi3Mb-O4HvPeL8o8_O3BHrqkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/88fff5-dfd9-4008-95b7-785e5883644d/1/8M_09VVLxylfbEqHIyfptDRGhoo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/88fff5-dfd9-4008-95b7-785e5883644d/1/2NZi3Mb-O4HvPeL8o8_O3BHrqkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.36.97.0/24
46.36.100.0/22
46.36.106.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:9a:de:10:67:c9:2e:59:00:85:70:34:a1:40:8c:09:0f:94:
11:60:35:ef:6e:64:1a:5e:c0:97:c4:44:23:c8:83:02:96:8e:
39:aa:26:61:0f:ef:18:e9:31:70:71:86:8a:61:98:2b:b0:bc:
a5:ff:13:7c:27:ef:04:f3:90:70:ac:2e:2c:40:5e:68:48:11:
6f:00:b5:92:2c:35:f6:0e:25:da:eb:2d:17:23:e9:5b:f9:75:
06:49:8c:fc:e6:26:ab:4d:48:92:3a:87:2b:75:ca:c6:94:a0:
ad:61:8c:5c:33:14:99:51:cb:a9:6f:d8:0b:90:c0:60:88:81:
6a:44:29:07:83:69:ab:03:77:47:20:2c:27:0b:36:4a:8d:7b:
02:57:ea:24:97:e5:88:ee:4e:1b:0d:b5:fd:ae:1a:92:4e:dd:
58:94:54:c4:ce:2d:e5:0d:74:da:04:27:fb:b2:83:23:fd:3d:
3f:37:bf:17:29:47:08:03:e9:d2:8b:09:3b:3d:af:73:de:5c:
2d:e6:b9:c2:6a:cc:6d:14:72:64:35:cf:f1:51:74:b6:2a:ed:
5f:84:a6:77:68:36:8f:49:e3:23:9a:51:af:3c:2b:97:c9:02:
cb:c0:36:f7:ca:f9:69:73:53:95:ca:a7:42:36:a7:6f:34:c3:
aa:83:fa:d1
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZR+gnZiM5huL7DAP6qNoXqiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4ZDY2MmRjYzZmZTNiODFlZjNkZTJmY2EzY2ZjZWRjMTFl
YmFhNDMwHhcNMjUwMTE5MTIyMTA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMGNmZjRmNTU1NGJjNzI5NWY2YzRhODcyMzI3ZTliNDM0NDY4NjhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyFnQnTDC6mCHT5l5ozKqdGNWP7Ta
fIpoS3ONE3iHyTK2ZgoMp5FNentYi0kVTsrEF0tOEN0vwe5QLC+wOfSCbvxjlxtf
lkC0q6b1fhY2CzE9Rh+1RPaSe2rLP5XMFXYvjgpp0IbmaUDo+EljkVcDeT2F4OuU
7+s62YwwtuNCb4M83l/YPGPKIV84M45u4/6vAm0qfaPskIVq4/Nx19u6DLuud4m6
8IjntJLtF3cR2t8mYyfnZPQhBT69KoxBM8mJ6A+/rG8TeC72Gx2pb3x/lXomhS3D
rN75gqbNCeIKdjaqd2Hv/MMWpLbj30jDMc3k7sCNAW5Ud8e605v1RjZnYwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFPDP9PVVS8cpX2xKhyMn6bQ0RoaKMB8GA1UdIwQY
MBaAFNjWYtzG/juB7z3i/KPPztwR66pDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMk5aaTNNYi1PNEh2UGVMOG84X08zQkhycWtNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS84OGZmZjUtZGZkOS00MDA4LTk1Yjct
Nzg1ZTU4ODM2NDRkLzEvOE1fMDlWVkx4eWxmYkVxSEl5ZnB0RFJHaG9vLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS84OGZmZjUtZGZkOS00MDA4LTk1YjctNzg1ZTU4ODM2NDRk
LzEvMk5aaTNNYi1PNEh2UGVMOG84X08zQkhycWtNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQALiRhAwQC
LiRkAwQALiRqMA0GCSqGSIb3DQEBCwUAA4IBAQChmt4QZ8kuWQCFcDShQIwJD5QR
YDXvbmQaXsCXxEQjyIMClo45qiZhD+8Y6TFwcYaKYZgrsLyl/xN8J+8E85BwrC4s
QF5oSBFvALWSLDX2DiXa6y0XI+lb+XUGSYz85iarTUiSOocrdcrGlKCtYYxcMxSZ
Ucupb9gLkMBgiIFqRCkHg2mrA3dHICwnCzZKjXsCV+okl+WI7k4bDbX9rhqSTt1Y
lFTEzi3lDXTaBCf7soMj/T0/N78XKUcIA+nSiwk7Pa9z3lwt5rnCasxtFHJkNc/x
UXS2Ku1fhKZ3aDaPSeMjmlGvPCuXyQLLwDb3yvlpc1OVyqdCNqdvNMOqg/rR
-----END CERTIFICATE-----
Generated at Thu Apr 24 19:06:35 2025 by rpki-client