Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/173173-819f-4bc9-92d8-78791c9356a3/1/vBseKRkIdbzZO1ddn-ofvdi2GJA.roa
File: vBseKRkIdbzZO1ddn-ofvdi2GJA.roa (raw, json)
Hash identifier: ND3FeKVlWj+XXYRRpKXvYZfwYIWF0c8k6ow+131ixZM=
Subject key identifier: BC:1B:1E:29:19:08:75:BC:D9:3B:57:5D:9F:EA:1F:BD:D8:B6:18:90
Certificate issuer: /CN=11bfa2961fa0e0b07041293ddc0c3693a9e0a238
Certificate serial: 0194236975DF564A5F67395896E39194B605
Authority key identifier: 11:BF:A2:96:1F:A0:E0:B0:70:41:29:3D:DC:0C:36:93:A9:E0:A2:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eb-ilh-g4LBwQSk93Aw2k6ngojg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/173173-819f-4bc9-92d8-78791c9356a3/1/vBseKRkIdbzZO1ddn-ofvdi2GJA.roa
Signing time: Wed 01 Jan 2025 19:48:21 +0000
ROA not before: Wed 01 Jan 2025 19:48:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61242
IP address blocks: 46.22.161.0/24 maxlen: 24
46.22.172.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:75:df:56:4a:5f:67:39:58:96:e3:91:94:b6:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11bfa2961fa0e0b07041293ddc0c3693a9e0a238
Validity
Not Before: Jan 1 19:48:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bc1b1e29190875bcd93b575d9fea1fbdd8b61890
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:d4:7a:02:1c:9d:97:91:1b:a7:d8:b3:0b:6b:
10:8a:c8:e0:e2:39:bf:49:4c:21:d2:fa:63:64:c3:
17:07:98:b9:06:52:76:9f:ed:6c:28:51:f7:61:07:
f6:9a:f6:44:57:09:55:5f:89:82:dc:ae:67:68:3b:
86:19:fc:90:de:50:8a:d9:f0:31:43:5d:21:e5:0b:
83:47:a5:0a:81:c7:01:02:1d:30:16:06:98:3a:f5:
d0:ae:21:8b:9b:9b:3b:e3:95:02:53:f1:a2:b8:1e:
7d:9e:59:47:37:e6:3e:14:8e:2f:ab:88:15:81:dd:
c0:85:8c:0f:1e:ab:d5:42:99:8e:d5:95:04:ba:96:
74:19:55:73:59:82:80:53:19:cb:e9:ce:ae:99:fc:
b7:99:3f:b2:99:b5:2f:4d:9f:58:81:6a:30:cc:1a:
e6:bd:57:7c:1f:d7:d7:08:23:dc:13:ed:7c:0a:ec:
05:2d:1b:92:2b:d3:60:03:3b:13:63:df:a8:95:7e:
a2:d5:03:cf:ba:8e:fc:df:0d:d5:86:cd:16:de:9c:
c8:c7:02:c1:15:21:9e:72:13:03:cc:fc:71:9f:38:
60:9d:74:cb:ed:e4:37:aa:ec:a7:45:70:e8:00:82:
ad:cd:39:1a:ac:0a:e4:2d:af:0c:31:df:2d:69:4b:
97:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:1B:1E:29:19:08:75:BC:D9:3B:57:5D:9F:EA:1F:BD:D8:B6:18:90
X509v3 Authority Key Identifier:
keyid:11:BF:A2:96:1F:A0:E0:B0:70:41:29:3D:DC:0C:36:93:A9:E0:A2:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eb-ilh-g4LBwQSk93Aw2k6ngojg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/173173-819f-4bc9-92d8-78791c9356a3/1/vBseKRkIdbzZO1ddn-ofvdi2GJA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/173173-819f-4bc9-92d8-78791c9356a3/1/Eb-ilh-g4LBwQSk93Aw2k6ngojg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.22.161.0/24
46.22.172.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:42:c1:58:55:23:b6:e5:35:ec:d8:bf:af:f1:02:32:f8:62:
af:f4:28:e2:bc:62:de:a1:b2:86:dc:3a:ec:aa:ed:0b:be:ef:
90:12:c3:03:c3:56:82:0f:0d:2e:05:7f:09:92:fc:e0:2d:57:
31:10:84:5d:c2:ba:0b:88:02:e4:d8:69:57:13:1c:40:b4:42:
79:26:38:34:40:c1:9a:43:6a:2b:bf:cc:c6:ae:5e:98:6f:61:
8f:1f:0a:7e:a4:ab:66:b7:8e:23:09:53:36:a1:79:ec:74:a0:
06:24:80:79:32:00:7c:02:bd:16:ef:d7:f0:7c:54:f8:e4:c6:
bb:f5:98:ed:f9:dc:6f:7f:42:9a:5c:14:48:75:55:24:19:36:
a1:25:74:4b:53:3d:00:7e:2d:e5:d2:f8:fc:f6:94:e4:76:a2:
c3:d6:ac:8d:4c:ad:83:32:eb:6d:f7:c4:25:f1:c9:ca:25:c6:
96:58:42:b6:17:fb:5e:78:5f:61:8a:0d:96:bd:24:8a:53:0b:
db:cf:cf:e8:5d:53:81:04:7d:37:e1:a2:02:f2:b4:22:ae:91:
dc:84:79:8b:ef:13:23:4a:45:35:11:8a:e2:cb:79:21:dd:b6:
c1:22:94:c8:20:b9:61:09:22:ac:c5:13:3a:a9:66:cf:12:3a:
3e:ee:71:4b
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQjaXXfVkpfZzlYluORlLYFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExYmZhMjk2MWZhMGUwYjA3MDQxMjkzZGRjMGMzNjkzYTll
MGEyMzgwHhcNMjUwMTAxMTk0ODIxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYzFiMWUyOTE5MDg3NWJjZDkzYjU3NWQ5ZmVhMWZiZGQ4YjYxODkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAytR6Ahydl5Ebp9izC2sQisjg4jm/
SUwh0vpjZMMXB5i5BlJ2n+1sKFH3YQf2mvZEVwlVX4mC3K5naDuGGfyQ3lCK2fAx
Q10h5QuDR6UKgccBAh0wFgaYOvXQriGLm5s745UCU/GiuB59nllHN+Y+FI4vq4gV
gd3AhYwPHqvVQpmO1ZUEupZ0GVVzWYKAUxnL6c6umfy3mT+ymbUvTZ9YgWowzBrm
vVd8H9fXCCPcE+18CuwFLRuSK9NgAzsTY9+olX6i1QPPuo783w3Vhs0W3pzIxwLB
FSGechMDzPxxnzhgnXTL7eQ3quynRXDoAIKtzTkarArkLa8MMd8taUuXowIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFLwbHikZCHW82TtXXZ/qH73YthiQMB8GA1UdIwQY
MBaAFBG/opYfoOCwcEEpPdwMNpOp4KI4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWItaWxoLWc0TEJ3UVNrOTNBdzJrNm5nb2pnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8xNzMxNzMtODE5Zi00YmM5LTkyZDgt
Nzg3OTFjOTM1NmEzLzEvdkJzZUtSa0lkYnpaTzFkZG4tb2Z2ZGkyR0pBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC8xNzMxNzMtODE5Zi00YmM5LTkyZDgtNzg3OTFjOTM1NmEz
LzEvRWItaWxoLWc0TEJ3UVNrOTNBdzJrNm5nb2pnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALhahAwQA
LhasMA0GCSqGSIb3DQEBCwUAA4IBAQBMQsFYVSO25TXs2L+v8QIy+GKv9CjivGLe
obKG3Drsqu0Lvu+QEsMDw1aCDw0uBX8JkvzgLVcxEIRdwroLiALk2GlXExxAtEJ5
Jjg0QMGaQ2orv8zGrl6Yb2GPHwp+pKtmt44jCVM2oXnsdKAGJIB5MgB8Ar0W79fw
fFT45Ma79Zjt+dxvf0KaXBRIdVUkGTahJXRLUz0Afi3l0vj89pTkdqLD1qyNTK2D
Mutt98Ql8cnKJcaWWEK2F/teeF9hig2WvSSKUwvbz8/oXVOBBH034aIC8rQirpHc
hHmL7xMjSkU1EYriy3kh3bbBIpTIILlhCSKsxRM6qWbPEjo+7nFL
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:35:26 2025 by rpki-client