Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/4bAryrdr2pyrK7sXb9U2cyc_U9g.roa
File: 4bAryrdr2pyrK7sXb9U2cyc_U9g.roa (raw, json)
Hash identifier: QBOv3gp8FpwacVFkQN2qNraMGqsHW5/ivQwonD+0KXQ=
Subject key identifier: E1:B0:2B:CA:B7:6B:DA:9C:AB:2B:BB:17:6F:D5:36:73:27:3F:53:D8
Certificate issuer: /CN=b72945f57103153a07854e74e227f2aec1c5f430
Certificate serial: 0194222008830B53E90B7758CAEFA86C5AFF
Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/4bAryrdr2pyrK7sXb9U2cyc_U9g.roa
Signing time: Wed 01 Jan 2025 13:48:32 +0000
ROA not before: Wed 01 Jan 2025 13:48:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214419
IP address blocks: 46.38.142.0/24 maxlen: 24
109.94.165.0/24 maxlen: 24
2a00:7d80:11::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:08:83:0b:53:e9:0b:77:58:ca:ef:a8:6c:5a:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430
Validity
Not Before: Jan 1 13:48:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e1b02bcab76bda9cab2bbb176fd53673273f53d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:66:db:04:05:33:77:d0:00:d3:6a:b3:c2:27:
13:87:d5:b1:a7:a7:f5:08:4d:54:d4:2a:59:c4:ac:
0f:3c:c2:fa:48:4b:8d:df:21:1b:64:4e:95:e5:41:
c3:0e:c3:a1:99:24:b8:6f:e2:84:06:bd:11:6c:90:
a1:1d:f4:3e:fc:35:0d:d3:b2:42:89:3f:80:ee:dd:
73:c7:34:2e:83:49:41:01:31:17:4c:e2:54:57:96:
b9:2b:e7:f4:a4:14:57:69:6e:18:2a:64:4c:18:81:
82:15:86:38:37:84:c8:35:37:5e:b7:d9:86:b5:cf:
6b:4e:9b:bf:92:fd:3c:1d:55:e4:a2:21:c6:6a:73:
8b:58:a5:32:7f:40:06:bd:c1:16:73:2a:10:df:5b:
97:d5:d5:4a:7b:47:14:28:c3:ca:3c:44:1a:a8:1f:
62:dd:3b:bd:0d:27:49:11:47:b9:2a:e6:00:f7:15:
38:9f:0b:df:26:76:fd:09:5f:32:91:7b:5b:29:38:
02:ae:cc:9f:9a:77:fd:78:df:e3:55:5f:2f:c9:f7:
2d:ab:4f:10:c8:07:d8:f6:d8:d7:63:f4:26:79:f9:
de:11:c3:28:7e:31:68:36:fa:9f:b6:46:71:f1:58:
47:09:55:be:ca:2b:1d:33:6f:e9:23:37:d6:1c:72:
5f:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:B0:2B:CA:B7:6B:DA:9C:AB:2B:BB:17:6F:D5:36:73:27:3F:53:D8
X509v3 Authority Key Identifier:
keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/4bAryrdr2pyrK7sXb9U2cyc_U9g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.38.142.0/24
109.94.165.0/24
IPv6:
2a00:7d80:11::/48
Signature Algorithm: sha256WithRSAEncryption
6b:8e:1a:0a:6a:1f:f9:e1:f8:de:67:1c:0d:fa:b9:3d:3f:c5:
03:7b:2d:bb:02:54:49:5d:f3:bb:75:f1:1d:df:70:b0:47:e0:
bd:ba:e6:b2:8e:1f:f9:21:5d:35:21:eb:a7:70:42:98:8c:95:
98:29:88:70:56:cd:f1:ed:fa:d5:ce:6f:e3:70:fc:33:44:1a:
f2:06:59:66:66:ee:4f:23:95:b8:c5:16:f2:1d:47:98:34:23:
11:ac:79:13:7a:40:43:62:b1:fe:25:77:ab:6d:fd:fe:e0:d9:
70:51:6b:60:4c:16:b4:0b:77:c3:6f:85:23:a8:6d:0a:c0:b2:
de:87:63:e5:47:fe:bd:66:eb:48:cf:f3:44:29:36:4a:eb:6a:
69:e4:52:f0:8c:db:bf:ad:ff:ca:f2:2f:d9:ff:b8:42:1d:1f:
2b:6b:8b:e2:8d:14:53:41:e4:f2:d9:d1:c1:49:62:a1:67:35:
f1:6c:81:bb:a7:06:6f:2e:53:9a:60:eb:45:b2:49:3a:a3:c2:
78:e6:ee:66:40:a9:a9:4b:aa:e1:b4:fb:40:5a:73:e7:9d:25:
8d:5d:fd:6c:52:98:1b:d9:a4:62:38:b3:a7:8a:07:3d:15:75:
ba:94:11:e2:d6:ef:44:4b:7c:bb:53:b2:7a:73:11:3c:19:2b:
62:c1:8f:b8
-----BEGIN CERTIFICATE-----
MIIFFDCCA/ygAwIBAgISAZQiIAiDC1PpC3dYyu+obFr/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3Mjk0NWY1NzEwMzE1M2EwNzg1NGU3NGUyMjdmMmFlYzFj
NWY0MzAwHhcNMjUwMTAxMTM0ODMyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMWIwMmJjYWI3NmJkYTljYWIyYmJiMTc2ZmQ1MzY3MzI3M2Y1M2Q4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArWbbBAUzd9AA02qzwicTh9Wxp6f1
CE1U1CpZxKwPPML6SEuN3yEbZE6V5UHDDsOhmSS4b+KEBr0RbJChHfQ+/DUN07JC
iT+A7t1zxzQug0lBATEXTOJUV5a5K+f0pBRXaW4YKmRMGIGCFYY4N4TINTdet9mG
tc9rTpu/kv08HVXkoiHGanOLWKUyf0AGvcEWcyoQ31uX1dVKe0cUKMPKPEQaqB9i
3Tu9DSdJEUe5KuYA9xU4nwvfJnb9CV8ykXtbKTgCrsyfmnf9eN/jVV8vyfctq08Q
yAfY9tjXY/QmefneEcMofjFoNvqftkZx8VhHCVW+yisdM2/pIzfWHHJfFQIDAQAB
o4ICIDCCAhwwHQYDVR0OBBYEFOGwK8q3a9qcqyu7F2/VNnMnP1PYMB8GA1UdIwQY
MBaAFLcpRfVxAxU6B4VOdOIn8q7BxfQwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdHlsRjlYRURGVG9IaFU1MDRpZnlyc0hGOURBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS81ZjY5MDYtM2ZiMC00ZGZmLThkMDEt
MmEwOWNjNTNhODA1LzEvNGJBcnlyZHIycHlySzdzWGI5VTJjeWNfVTlnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS81ZjY5MDYtM2ZiMC00ZGZmLThkMDEtMmEwOWNjNTNhODA1
LzEvdHlsRjlYRURGVG9IaFU1MDRpZnlyc0hGOURBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQALiaOAwQA
bV6lMA8EAgACMAkDBwAqAH2AABEwDQYJKoZIhvcNAQELBQADggEBAGuOGgpqH/nh
+N5nHA36uT0/xQN7LbsCVEld87t18R3fcLBH4L265rKOH/khXTUh66dwQpiMlZgp
iHBWzfHt+tXOb+Nw/DNEGvIGWWZm7k8jlbjFFvIdR5g0IxGseRN6QENisf4ld6tt
/f7g2XBRa2BMFrQLd8NvhSOobQrAst6HY+VH/r1m60jP80QpNkrramnkUvCM27+t
/8ryL9n/uEIdHytri+KNFFNB5PLZ0cFJYqFnNfFsgbunBm8uU5pg60WySTqjwnjm
7mZAqalLquG0+0Bac+edJY1d/WxSmBvZpGI4s6eKBz0VdbqUEeLW70RLfLtTsnpz
ETwZK2LBj7g=
-----END CERTIFICATE-----
Generated at Fri Apr 25 05:37:07 2025 by rpki-client