Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/173173-819f-4bc9-92d8-78791c9356a3/1/tCyUX7lLcCHL4Eg9b-YCZ8hKq84.roa
File: tCyUX7lLcCHL4Eg9b-YCZ8hKq84.roa (raw, json)
Hash identifier: ZHN59gKlvLQCayzjjY8TreGgGDaR4N6wRPXQfVrVtuk=
Subject key identifier: B4:2C:94:5F:B9:4B:70:21:CB:E0:48:3D:6F:E6:02:67:C8:4A:AB:CE
Certificate issuer: /CN=11bfa2961fa0e0b07041293ddc0c3693a9e0a238
Certificate serial: 019423697555DA539DA5EDA81AA8EAD6759C
Authority key identifier: 11:BF:A2:96:1F:A0:E0:B0:70:41:29:3D:DC:0C:36:93:A9:E0:A2:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eb-ilh-g4LBwQSk93Aw2k6ngojg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/173173-819f-4bc9-92d8-78791c9356a3/1/tCyUX7lLcCHL4Eg9b-YCZ8hKq84.roa
Signing time: Wed 01 Jan 2025 19:48:21 +0000
ROA not before: Wed 01 Jan 2025 19:48:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49785
IP address blocks: 46.22.174.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:75:55:da:53:9d:a5:ed:a8:1a:a8:ea:d6:75:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11bfa2961fa0e0b07041293ddc0c3693a9e0a238
Validity
Not Before: Jan 1 19:48:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b42c945fb94b7021cbe0483d6fe60267c84aabce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:cb:bd:d8:41:a7:c7:74:44:79:5b:ac:f8:9c:
34:71:ed:0b:b0:c9:8e:f4:23:6b:5d:82:7a:ff:7f:
61:5a:a0:9d:85:d5:9f:e3:3d:9d:9f:84:d7:5b:df:
b8:89:4a:ff:ac:e5:19:44:f5:fa:52:86:6b:23:65:
57:95:b0:d1:0e:27:94:68:49:3c:9b:c8:37:d5:a6:
d9:fd:31:38:c7:70:be:dd:76:33:74:68:08:0a:ae:
be:92:eb:f3:f6:80:e7:9e:31:8d:ad:db:17:11:9c:
7b:3e:27:c1:05:1b:c2:f5:cd:f0:1f:27:83:da:56:
21:6b:12:30:5f:e6:9c:92:e8:ad:ed:d6:7d:8e:c2:
4f:2f:ce:c4:38:10:69:dd:48:3a:64:38:c5:9d:12:
0a:e1:05:cf:6e:cf:29:4e:02:b3:27:e5:8b:69:08:
08:f8:7a:f2:bc:45:33:92:ce:3f:57:60:ff:5a:92:
e7:a1:89:ae:c5:f6:30:26:c4:38:09:ea:05:ce:da:
89:0e:bd:47:11:1e:14:0c:85:f5:9d:19:4f:be:8e:
60:90:40:68:db:ec:d6:9e:bd:9c:e9:03:1a:c7:cc:
a1:15:93:46:7b:49:05:44:ae:f8:3d:81:ea:c6:11:
64:fb:f2:f6:e4:dd:9a:bf:c2:d4:7f:d7:d2:6a:7a:
88:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:2C:94:5F:B9:4B:70:21:CB:E0:48:3D:6F:E6:02:67:C8:4A:AB:CE
X509v3 Authority Key Identifier:
keyid:11:BF:A2:96:1F:A0:E0:B0:70:41:29:3D:DC:0C:36:93:A9:E0:A2:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eb-ilh-g4LBwQSk93Aw2k6ngojg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/173173-819f-4bc9-92d8-78791c9356a3/1/tCyUX7lLcCHL4Eg9b-YCZ8hKq84.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/173173-819f-4bc9-92d8-78791c9356a3/1/Eb-ilh-g4LBwQSk93Aw2k6ngojg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.22.174.0/24
Signature Algorithm: sha256WithRSAEncryption
86:a7:b9:5e:fa:de:a0:ef:dd:81:62:48:c3:05:0d:de:16:bb:
1a:d7:4e:56:eb:17:c8:e7:fb:31:87:7f:2f:49:82:6f:85:05:
65:c4:04:a4:85:c2:b6:77:0b:96:29:2c:90:ed:2d:b1:7b:f4:
da:1c:20:4f:fa:a6:0d:75:4b:88:35:55:39:f9:60:dc:46:24:
04:5b:bf:77:d2:4e:f5:c4:ce:38:56:f7:93:58:24:53:bc:8f:
96:bb:c1:45:cf:7e:38:ab:4e:04:5d:06:d0:e2:6d:70:1e:8c:
1b:41:ba:cb:ca:ce:1b:9e:e1:6b:c5:03:67:44:c6:05:48:86:
02:6e:2a:46:0e:d8:42:17:92:b0:d9:46:1f:20:05:a4:2c:3a:
27:66:59:53:11:d8:a6:45:4b:b4:24:c6:0f:bf:eb:e4:57:21:
57:2f:0b:6d:fb:00:1e:eb:a9:7f:6e:0a:a4:ca:d7:b6:d6:a4:
ec:18:38:b6:f8:65:0f:3a:86:8e:cb:7d:6a:07:58:be:f8:2b:
fd:23:9b:f8:48:4d:89:9f:47:f7:4d:42:de:26:35:78:ce:c0:
7c:f0:89:ee:88:fb:6f:40:74:7c:b8:e6:cf:9d:6c:6d:a1:ed:
89:03:09:20:18:93:14:cd:ad:7a:81:47:3a:e5:52:76:5e:c1:
f7:33:f5:21
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQjaXVV2lOdpe2oGqjq1nWcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExYmZhMjk2MWZhMGUwYjA3MDQxMjkzZGRjMGMzNjkzYTll
MGEyMzgwHhcNMjUwMTAxMTk0ODIxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNDJjOTQ1ZmI5NGI3MDIxY2JlMDQ4M2Q2ZmU2MDI2N2M4NGFhYmNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj8u92EGnx3REeVus+Jw0ce0LsMmO
9CNrXYJ6/39hWqCdhdWf4z2dn4TXW9+4iUr/rOUZRPX6UoZrI2VXlbDRDieUaEk8
m8g31abZ/TE4x3C+3XYzdGgICq6+kuvz9oDnnjGNrdsXEZx7PifBBRvC9c3wHyeD
2lYhaxIwX+ackuit7dZ9jsJPL87EOBBp3Ug6ZDjFnRIK4QXPbs8pTgKzJ+WLaQgI
+HryvEUzks4/V2D/WpLnoYmuxfYwJsQ4CeoFztqJDr1HER4UDIX1nRlPvo5gkEBo
2+zWnr2c6QMax8yhFZNGe0kFRK74PYHqxhFk+/L25N2av8LUf9fSanqIwQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLQslF+5S3Ahy+BIPW/mAmfISqvOMB8GA1UdIwQY
MBaAFBG/opYfoOCwcEEpPdwMNpOp4KI4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWItaWxoLWc0TEJ3UVNrOTNBdzJrNm5nb2pnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8xNzMxNzMtODE5Zi00YmM5LTkyZDgt
Nzg3OTFjOTM1NmEzLzEvdEN5VVg3bExjQ0hMNEVnOWItWUNaOGhLcTg0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC8xNzMxNzMtODE5Zi00YmM5LTkyZDgtNzg3OTFjOTM1NmEz
LzEvRWItaWxoLWc0TEJ3UVNrOTNBdzJrNm5nb2pnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALhauMA0G
CSqGSIb3DQEBCwUAA4IBAQCGp7le+t6g792BYkjDBQ3eFrsa105W6xfI5/sxh38v
SYJvhQVlxASkhcK2dwuWKSyQ7S2xe/TaHCBP+qYNdUuINVU5+WDcRiQEW7930k71
xM44VveTWCRTvI+Wu8FFz344q04EXQbQ4m1wHowbQbrLys4bnuFrxQNnRMYFSIYC
bipGDthCF5Kw2UYfIAWkLDonZllTEdimRUu0JMYPv+vkVyFXLwtt+wAe66l/bgqk
yte21qTsGDi2+GUPOoaOy31qB1i++Cv9I5v4SE2Jn0f3TULeJjV4zsB88InuiPtv
QHR8uObPnWxtoe2JAwkgGJMUza16gUc65VJ2XsH3M/Uh
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:35:49 2025 by rpki-client