Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/a1c6c0-e754-479e-851d-0d0da0d10432/1/awX-yLV9QhTtYIRH8dzM3NZ-YyE.roa
File: awX-yLV9QhTtYIRH8dzM3NZ-YyE.roa (raw, json)
Hash identifier: cUBeWKNk+8N9DHilcnVglMXRUVzQzFqcjW7BKF+It/4=
Subject key identifier: 6B:05:FE:C8:B5:7D:42:14:ED:60:84:47:F1:DC:CC:DC:D6:7E:63:21
Certificate issuer: /CN=c1bf8f3e609072889e74dd0fb4e27f9bac47b3b0
Certificate serial: 019425217C04E5B119D819720C248E0255DA
Authority key identifier: C1:BF:8F:3E:60:90:72:88:9E:74:DD:0F:B4:E2:7F:9B:AC:47:B3:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wb-PPmCQcoiedN0PtOJ_m6xHs7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/a1c6c0-e754-479e-851d-0d0da0d10432/1/awX-yLV9QhTtYIRH8dzM3NZ-YyE.roa
Signing time: Thu 02 Jan 2025 03:48:58 +0000
ROA not before: Thu 02 Jan 2025 03:48:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47389
IP address blocks: 46.33.53.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:7c:04:e5:b1:19:d8:19:72:0c:24:8e:02:55:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1bf8f3e609072889e74dd0fb4e27f9bac47b3b0
Validity
Not Before: Jan 2 03:48:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6b05fec8b57d4214ed608447f1dcccdcd67e6321
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:01:79:b1:81:4a:32:95:a4:6d:73:bb:61:1e:
e1:a1:b3:01:29:ea:a9:93:f9:d2:19:96:c5:92:72:
4b:71:6a:d2:1f:f4:81:ed:7e:04:e8:e8:0e:96:94:
a0:de:85:3f:8a:d6:fe:49:ba:9a:c3:c8:62:cd:e8:
4a:0c:20:c7:16:07:55:3c:fb:31:08:c6:59:02:47:
46:be:67:54:73:c0:00:db:93:b3:6f:1d:90:f4:1d:
4c:02:8b:86:37:3c:a5:ef:59:f1:08:71:b5:e2:00:
3b:98:fa:b3:2a:28:b8:6d:d6:13:01:7d:3a:6e:6f:
96:7b:b6:93:2c:17:07:2b:92:8b:a5:45:dd:08:7f:
64:44:dd:d9:b5:ba:51:80:00:fe:10:d6:ff:10:9c:
6f:d9:11:b2:59:65:9f:b6:d8:b6:84:08:ff:4a:2b:
20:af:46:58:7f:52:11:7b:e8:c5:25:6e:e5:5b:7d:
4c:b9:a1:db:23:fd:bc:ac:2a:87:74:9f:28:ad:52:
46:a0:0a:2d:ac:9e:e5:8e:e0:0b:b6:d9:0c:3e:83:
64:37:21:93:24:e9:99:5f:36:71:19:67:27:c0:02:
a2:6f:cd:47:0d:1b:eb:b6:4f:2a:39:b8:42:cb:7b:
e4:f9:d4:73:fc:95:1e:77:30:33:74:26:f7:fa:68:
e7:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:05:FE:C8:B5:7D:42:14:ED:60:84:47:F1:DC:CC:DC:D6:7E:63:21
X509v3 Authority Key Identifier:
keyid:C1:BF:8F:3E:60:90:72:88:9E:74:DD:0F:B4:E2:7F:9B:AC:47:B3:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wb-PPmCQcoiedN0PtOJ_m6xHs7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a1c6c0-e754-479e-851d-0d0da0d10432/1/awX-yLV9QhTtYIRH8dzM3NZ-YyE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a1c6c0-e754-479e-851d-0d0da0d10432/1/wb-PPmCQcoiedN0PtOJ_m6xHs7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.33.53.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:6b:b4:c7:94:8c:ea:16:36:7e:a7:a5:ab:dd:ef:1c:3e:c3:
87:88:6d:7c:5f:77:fc:89:84:f7:8e:11:95:69:f4:e8:b4:f7:
13:46:26:95:78:23:8d:97:be:26:11:70:ab:f8:d2:dc:75:3a:
03:55:9a:08:6f:73:53:72:84:37:81:54:e0:79:b8:72:7b:8f:
02:da:90:6d:10:a9:11:33:3a:4f:9a:b3:dc:53:04:63:3b:d7:
a3:ab:38:21:60:b1:8e:f1:60:71:9e:16:13:68:6d:4d:cd:93:
73:84:8c:d4:39:ea:6f:0a:e2:dc:36:ee:a1:08:49:ad:1f:d4:
58:37:8a:b9:cb:9e:40:a8:6a:27:3a:f3:49:8f:70:9c:24:49:
a1:88:50:09:59:2e:ad:65:96:dd:c8:f3:66:98:e9:16:0c:39:
77:89:f6:e7:e2:6d:15:8d:6b:a4:92:13:eb:3f:cd:77:93:0b:
eb:90:42:25:a3:e6:3a:69:ce:72:96:53:21:8a:53:ad:1e:bb:
f0:58:25:32:36:63:75:7d:c3:74:13:3b:5c:4c:78:0d:1d:3b:
43:a8:75:fc:2f:85:5f:5a:58:da:c9:44:bb:27:ab:4f:b1:9b:
ae:93:6b:21:31:8b:d6:c5:0e:0a:e3:4d:06:3c:c1:56:74:dc:
14:23:a3:59
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQlIXwE5bEZ2BlyDCSOAlXaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxYmY4ZjNlNjA5MDcyODg5ZTc0ZGQwZmI0ZTI3ZjliYWM0
N2IzYjAwHhcNMjUwMTAyMDM0ODU4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YjA1ZmVjOGI1N2Q0MjE0ZWQ2MDg0NDdmMWRjY2NkY2Q2N2U2MzIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8QF5sYFKMpWkbXO7YR7hobMBKeqp
k/nSGZbFknJLcWrSH/SB7X4E6OgOlpSg3oU/itb+Sbqaw8hizehKDCDHFgdVPPsx
CMZZAkdGvmdUc8AA25Ozbx2Q9B1MAouGNzyl71nxCHG14gA7mPqzKii4bdYTAX06
bm+We7aTLBcHK5KLpUXdCH9kRN3ZtbpRgAD+ENb/EJxv2RGyWWWftti2hAj/Sisg
r0ZYf1IRe+jFJW7lW31MuaHbI/28rCqHdJ8orVJGoAotrJ7ljuALttkMPoNkNyGT
JOmZXzZxGWcnwAKib81HDRvrtk8qObhCy3vk+dRz/JUedzAzdCb3+mjnrwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGsF/si1fUIU7WCER/HczNzWfmMhMB8GA1UdIwQY
MBaAFMG/jz5gkHKInnTdD7Tif5usR7OwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd2ItUFBtQ1Fjb2llZE4wUHRPSl9tNnhIczdBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9hMWM2YzAtZTc1NC00NzllLTg1MWQt
MGQwZGEwZDEwNDMyLzEvYXdYLXlMVjlRaFR0WUlSSDhkek0zTlotWXlFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS9hMWM2YzAtZTc1NC00NzllLTg1MWQtMGQwZGEwZDEwNDMy
LzEvd2ItUFBtQ1Fjb2llZE4wUHRPSl9tNnhIczdBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALiE1MA0G
CSqGSIb3DQEBCwUAA4IBAQCqa7THlIzqFjZ+p6Wr3e8cPsOHiG18X3f8iYT3jhGV
afTotPcTRiaVeCONl74mEXCr+NLcdToDVZoIb3NTcoQ3gVTgebhye48C2pBtEKkR
MzpPmrPcUwRjO9ejqzghYLGO8WBxnhYTaG1NzZNzhIzUOepvCuLcNu6hCEmtH9RY
N4q5y55AqGonOvNJj3CcJEmhiFAJWS6tZZbdyPNmmOkWDDl3ifbn4m0VjWukkhPr
P813kwvrkEIlo+Y6ac5yllMhilOtHrvwWCUyNmN1fcN0EztcTHgNHTtDqHX8L4Vf
WljayUS7J6tPsZuuk2shMYvWxQ4K400GPMFWdNwUI6NZ
-----END CERTIFICATE-----
Generated at Fri Apr 25 04:24:58 2025 by rpki-client