Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/kC3rNl_UHdn-CNb6aCHsLrxS98Q.roa
File: kC3rNl_UHdn-CNb6aCHsLrxS98Q.roa (raw, json)
Hash identifier: 1HQePVd4oj57DlYrJg866ZwBO3ttz1hacWXVoenAvOE=
Subject key identifier: 90:2D:EB:36:5F:D4:1D:D9:FE:08:D6:FA:68:21:EC:2E:BC:52:F7:C4
Certificate issuer: /CN=a4bcc12afa4f05739f45f605e221c64c3c0d2ed6
Certificate serial: 019427B5EC3CE082BA5524506718D823E280
Authority key identifier: A4:BC:C1:2A:FA:4F:05:73:9F:45:F6:05:E2:21:C6:4C:3C:0D:2E:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pLzBKvpPBXOfRfYF4iHGTDwNLtY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/kC3rNl_UHdn-CNb6aCHsLrxS98Q.roa
Signing time: Thu 02 Jan 2025 15:50:21 +0000
ROA not before: Thu 02 Jan 2025 15:50:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210050
IP address blocks: 46.229.52.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:ec:3c:e0:82:ba:55:24:50:67:18:d8:23:e2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4bcc12afa4f05739f45f605e221c64c3c0d2ed6
Validity
Not Before: Jan 2 15:50:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=902deb365fd41dd9fe08d6fa6821ec2ebc52f7c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:4b:e4:6f:96:8d:88:0e:92:08:02:6d:e1:35:
8f:be:50:db:8f:e5:da:98:df:b6:3c:6d:9e:1e:be:
b9:d6:07:d0:5f:b9:27:db:73:e2:7b:7e:64:c2:a5:
6b:af:f1:f6:c5:a8:e5:0c:94:9e:08:b2:ac:52:85:
9f:f7:6d:b6:a6:86:4b:12:eb:3a:a4:33:1b:37:c5:
80:2f:63:f8:0e:4c:04:4d:f8:f6:d3:6c:aa:87:64:
8d:1d:76:48:58:1c:d4:4d:8e:52:3f:79:1d:cc:b1:
af:ee:8e:80:65:11:cf:3c:a1:24:cf:62:3f:3c:84:
76:7c:d0:ed:c5:02:40:9e:96:d8:78:40:08:e5:c1:
f7:a0:f8:cb:18:45:3f:05:32:65:89:a2:c2:39:51:
a2:ad:db:d2:ce:28:28:96:8e:51:79:08:78:90:9a:
21:71:55:6e:92:ac:0a:cf:6e:16:5f:bb:1e:15:0e:
93:b5:09:bb:47:be:13:01:af:76:24:8a:81:ef:2e:
2a:17:02:2b:45:ac:8d:8c:81:b9:f6:5a:ab:93:e4:
24:64:4b:97:15:61:b7:52:16:e2:b2:6b:8a:24:2b:
37:45:3b:6c:08:c2:f4:ee:4a:0c:db:3f:6c:54:15:
71:e8:3d:bb:1f:35:aa:ed:3e:d0:d3:0d:b8:31:d6:
c5:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:2D:EB:36:5F:D4:1D:D9:FE:08:D6:FA:68:21:EC:2E:BC:52:F7:C4
X509v3 Authority Key Identifier:
keyid:A4:BC:C1:2A:FA:4F:05:73:9F:45:F6:05:E2:21:C6:4C:3C:0D:2E:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pLzBKvpPBXOfRfYF4iHGTDwNLtY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/kC3rNl_UHdn-CNb6aCHsLrxS98Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/pLzBKvpPBXOfRfYF4iHGTDwNLtY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.229.52.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:8d:66:2b:80:41:2a:ee:d2:6e:c7:20:2d:f6:cf:25:25:35:
e0:6c:06:e7:03:8c:e7:f8:bb:5b:b8:0a:b6:e9:d2:9e:5f:3e:
c3:41:49:92:08:98:36:29:0a:15:44:f8:c0:8c:96:9f:ad:32:
23:b2:dd:9f:ab:bd:ad:69:52:de:3c:e6:34:be:96:e5:8d:75:
02:e4:a8:68:95:7a:0d:52:23:91:3d:68:3f:7d:de:f8:b8:61:
4f:93:41:24:95:84:c7:9e:79:e0:6b:b8:51:53:44:c6:90:c5:
04:83:c4:bc:1a:b1:a4:38:24:bf:1b:47:13:96:d5:c6:de:5d:
ec:e2:18:e9:19:91:9f:f5:20:d7:3f:6c:20:9d:29:a4:95:84:
25:9c:fe:0e:5f:0a:6e:3f:49:a7:f0:a3:30:cc:31:8b:c0:fa:
2e:f9:3d:cd:ae:3c:d9:fd:1a:07:cf:bd:a0:e3:a6:a2:4f:c6:
05:50:1f:c3:81:01:73:51:83:d9:72:42:c0:7e:fb:89:8c:d5:
3e:e8:42:be:ac:1e:32:25:49:30:55:19:49:59:ba:72:18:a4:
3f:74:7e:bb:fa:de:9c:f2:9f:45:be:23:9b:e0:f9:e5:74:cf:
b6:27:5f:44:af:b8:f6:5f:d9:fa:e5:a6:1e:95:f1:cd:47:23:
08:b2:f8:7b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQntew84IK6VSRQZxjYI+KAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0YmNjMTJhZmE0ZjA1NzM5ZjQ1ZjYwNWUyMjFjNjRjM2Mw
ZDJlZDYwHhcNMjUwMTAyMTU1MDIxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MDJkZWIzNjVmZDQxZGQ5ZmUwOGQ2ZmE2ODIxZWMyZWJjNTJmN2M0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Uvkb5aNiA6SCAJt4TWPvlDbj+Xa
mN+2PG2eHr651gfQX7kn23Pie35kwqVrr/H2xajlDJSeCLKsUoWf9222poZLEus6
pDMbN8WAL2P4DkwETfj202yqh2SNHXZIWBzUTY5SP3kdzLGv7o6AZRHPPKEkz2I/
PIR2fNDtxQJAnpbYeEAI5cH3oPjLGEU/BTJliaLCOVGirdvSzigolo5ReQh4kJoh
cVVukqwKz24WX7seFQ6TtQm7R74TAa92JIqB7y4qFwIrRayNjIG59lqrk+QkZEuX
FWG3UhbismuKJCs3RTtsCML07koM2z9sVBVx6D27HzWq7T7Q0w24MdbFPwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJAt6zZf1B3Z/gjW+mgh7C68UvfEMB8GA1UdIwQY
MBaAFKS8wSr6TwVzn0X2BeIhxkw8DS7WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcEx6Qkt2cFBCWE9mUmZZRjRpSEdURHdOTHRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC9iYjE0MGEtMmEyMS00ZjVmLWJkY2Mt
ODhiMDE2YmJkNTgxLzEva0Mzck5sX1VIZG4tQ05iNmFDSHNMcnhTOThRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC9iYjE0MGEtMmEyMS00ZjVmLWJkY2MtODhiMDE2YmJkNTgx
LzEvcEx6Qkt2cFBCWE9mUmZZRjRpSEdURHdOTHRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALuU0MA0G
CSqGSIb3DQEBCwUAA4IBAQCrjWYrgEEq7tJuxyAt9s8lJTXgbAbnA4zn+LtbuAq2
6dKeXz7DQUmSCJg2KQoVRPjAjJafrTIjst2fq72taVLePOY0vpbljXUC5KholXoN
UiORPWg/fd74uGFPk0EklYTHnnnga7hRU0TGkMUEg8S8GrGkOCS/G0cTltXG3l3s
4hjpGZGf9SDXP2wgnSmklYQlnP4OXwpuP0mn8KMwzDGLwPou+T3NrjzZ/RoHz72g
46aiT8YFUB/DgQFzUYPZckLAfvuJjNU+6EK+rB4yJUkwVRlJWbpyGKQ/dH67+t6c
8p9FviOb4PnldM+2J19Er7j2X9n65aYelfHNRyMIsvh7
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:24:49 2025 by rpki-client