Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/758c96-611d-4167-80cd-041ab302c2f9/1/Dv-VGx1rozEswI7yPkVTQ7Gyapw.roa
File: Dv-VGx1rozEswI7yPkVTQ7Gyapw.roa (raw, json)
Hash identifier: F3OIBssrDveHpDBeL9nsVccWNMSovgng4oHRHgdsq9Y=
Subject key identifier: 0E:FF:95:1B:1D:6B:A3:31:2C:C0:8E:F2:3E:45:53:43:B1:B2:6A:9C
Certificate issuer: /CN=e5825fbee7c43a29838eabe4fc87d794349c0c80
Certificate serial: 0194703C47310F0F931C446C55FA83068D4C
Authority key identifier: E5:82:5F:BE:E7:C4:3A:29:83:8E:AB:E4:FC:87:D7:94:34:9C:0C:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5YJfvufEOimDjqvk_IfXlDScDIA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/758c96-611d-4167-80cd-041ab302c2f9/1/Dv-VGx1rozEswI7yPkVTQ7Gyapw.roa
Signing time: Thu 16 Jan 2025 17:49:46 +0000
ROA not before: Thu 16 Jan 2025 17:49:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48045
IP address blocks: 46.46.64.0/18 maxlen: 18
94.240.128.0/22 maxlen: 22
2a09:65c0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:70:3c:47:31:0f:0f:93:1c:44:6c:55:fa:83:06:8d:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5825fbee7c43a29838eabe4fc87d794349c0c80
Validity
Not Before: Jan 16 17:49:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0eff951b1d6ba3312cc08ef23e455343b1b26a9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:28:55:f3:fa:a1:97:cb:43:e4:4f:68:94:5f:
5a:12:c7:d9:1b:f2:2b:a1:c6:a8:37:d7:be:53:57:
df:dd:ec:31:3c:dd:34:e5:0c:0e:96:72:92:96:99:
aa:f2:f0:d1:81:dd:ca:ab:f5:39:e4:e7:29:2a:d7:
92:f5:17:b3:45:e7:47:3a:8f:dc:e4:ac:43:d5:12:
f2:10:eb:7a:65:8a:fd:0e:a0:4c:a8:93:9d:aa:c8:
9e:65:5f:cc:5b:53:ca:9d:3f:a8:f5:8f:8f:e6:c4:
21:39:59:75:94:e7:23:a0:0d:a8:66:ae:1c:f5:73:
40:dd:f1:43:07:8c:c0:ff:a5:f0:94:76:4d:fa:42:
f9:81:8f:5c:72:46:15:36:a1:be:d7:e8:23:06:48:
54:44:3b:22:a2:18:93:66:2c:ed:66:92:28:5a:08:
3c:a2:3d:d6:ab:7a:e1:4a:d0:07:39:61:8e:02:8c:
96:72:8e:4d:8b:0a:9a:18:01:22:9b:de:24:4c:df:
33:bd:7c:f3:7b:11:23:1c:06:9c:51:5b:49:f3:21:
d7:99:cd:6d:27:ae:98:05:dc:da:ef:cf:e5:2d:cc:
46:3b:1d:78:be:b5:c3:64:24:16:b0:89:bc:7f:93:
9f:4a:11:ec:0c:3b:d5:59:25:68:f6:1e:45:c7:89:
4e:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:FF:95:1B:1D:6B:A3:31:2C:C0:8E:F2:3E:45:53:43:B1:B2:6A:9C
X509v3 Authority Key Identifier:
keyid:E5:82:5F:BE:E7:C4:3A:29:83:8E:AB:E4:FC:87:D7:94:34:9C:0C:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5YJfvufEOimDjqvk_IfXlDScDIA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/758c96-611d-4167-80cd-041ab302c2f9/1/Dv-VGx1rozEswI7yPkVTQ7Gyapw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/758c96-611d-4167-80cd-041ab302c2f9/1/5YJfvufEOimDjqvk_IfXlDScDIA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.46.64.0/18
94.240.128.0/22
IPv6:
2a09:65c0::/32
Signature Algorithm: sha256WithRSAEncryption
19:d2:90:71:b1:68:ad:96:2f:71:76:49:c4:37:06:1d:af:c8:
59:c2:a6:c6:15:18:34:e1:42:ba:06:8c:20:c0:fa:8a:b5:aa:
ff:15:21:83:3f:72:16:d2:d2:66:08:c7:31:8f:95:35:c9:29:
2c:13:4d:c2:f3:1d:3c:08:8f:b9:9c:3e:0e:f0:75:0e:7e:42:
ae:28:c3:3a:85:4d:38:30:0a:23:c0:d2:a4:7c:ce:4d:08:62:
f8:d6:c1:e1:e9:47:0d:bd:fe:57:b5:a8:2e:4c:cb:3f:61:e7:
99:d9:97:9d:6a:b5:cc:b7:eb:a3:62:71:51:39:8b:08:12:a2:
79:fc:7f:de:10:f5:a6:85:72:a4:0c:8a:74:92:6e:0d:09:ab:
fd:76:8b:10:6a:9e:a0:ef:ee:d0:8e:81:7e:9d:08:55:f9:81:
d8:80:c0:8f:00:d2:a9:68:7e:2f:42:a2:65:45:9c:5b:7e:88:
87:07:36:a5:61:51:89:1e:e7:e0:da:82:cb:5b:43:96:31:9a:
b8:38:d1:ed:1b:20:9e:ec:50:8c:48:3c:96:93:95:53:a5:a7:
69:07:76:30:25:a3:ed:c1:2c:b5:63:3b:77:db:4d:7b:cc:08:
02:15:7f:9e:9a:d7:0b:61:86:75:f8:3a:72:f0:b0:5e:4a:48:
f0:cf:57:4f
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAZRwPEcxDw+THERsVfqDBo1MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1ODI1ZmJlZTdjNDNhMjk4MzhlYWJlNGZjODdkNzk0MzQ5
YzBjODAwHhcNMjUwMTE2MTc0OTQ2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZWZmOTUxYjFkNmJhMzMxMmNjMDhlZjIzZTQ1NTM0M2IxYjI2YTljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwShV8/qhl8tD5E9olF9aEsfZG/Ir
ocaoN9e+U1ff3ewxPN005QwOlnKSlpmq8vDRgd3Kq/U55OcpKteS9RezRedHOo/c
5KxD1RLyEOt6ZYr9DqBMqJOdqsieZV/MW1PKnT+o9Y+P5sQhOVl1lOcjoA2oZq4c
9XNA3fFDB4zA/6XwlHZN+kL5gY9cckYVNqG+1+gjBkhURDsiohiTZiztZpIoWgg8
oj3Wq3rhStAHOWGOAoyWco5NiwqaGAEim94kTN8zvXzzexEjHAacUVtJ8yHXmc1t
J66YBdza78/lLcxGOx14vrXDZCQWsIm8f5OfShHsDDvVWSVo9h5Fx4lObQIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFA7/lRsda6MxLMCO8j5FU0OxsmqcMB8GA1UdIwQY
MBaAFOWCX77nxDopg46r5PyH15Q0nAyAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNVlKZnZ1ZkVPaW1EanF2a19JZlhsRFNjRElBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS83NThjOTYtNjExZC00MTY3LTgwY2Qt
MDQxYWIzMDJjMmY5LzEvRHYtVkd4MXJvekVzd0k3eVBrVlRRN0d5YXB3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OS83NThjOTYtNjExZC00MTY3LTgwY2QtMDQxYWIzMDJjMmY5
LzEvNVlKZnZ1ZkVPaW1EanF2a19JZlhsRFNjRElBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQGLi5AAwQC
XvCAMA0EAgACMAcDBQAqCWXAMA0GCSqGSIb3DQEBCwUAA4IBAQAZ0pBxsWitli9x
dknENwYdr8hZwqbGFRg04UK6BowgwPqKtar/FSGDP3IW0tJmCMcxj5U1ySksE03C
8x08CI+5nD4O8HUOfkKuKMM6hU04MAojwNKkfM5NCGL41sHh6UcNvf5XtaguTMs/
YeeZ2ZedarXMt+ujYnFROYsIEqJ5/H/eEPWmhXKkDIp0km4NCav9dosQap6g7+7Q
joF+nQhV+YHYgMCPANKpaH4vQqJlRZxbfoiHBzalYVGJHufg2oLLW0OWMZq4ONHt
GyCe7FCMSDyWk5VTpadpB3YwJaPtwSy1Yzt32017zAgCFX+emtcLYYZ1+Dpy8LBe
Skjwz1dP
-----END CERTIFICATE-----
Generated at Fri Apr 25 10:05:59 2025 by rpki-client