Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/P2R5KI0mfa5ZtHzhHcIf8tqbscg.roa
File: P2R5KI0mfa5ZtHzhHcIf8tqbscg.roa (raw, json)
Hash identifier: Ielj2DMfogWo7KfHt7oy3eF4WhAcJoLdahmXcEPW/XA=
Subject key identifier: 3F:64:79:28:8D:26:7D:AE:59:B4:7C:E1:1D:C2:1F:F2:DA:9B:B1:C8
Certificate issuer: /CN=3aba1172472ea80265d12982967de0a8b0bc5901
Certificate serial: 019424B274053D44DB09747823C183E56ADF
Authority key identifier: 3A:BA:11:72:47:2E:A8:02:65:D1:29:82:96:7D:E0:A8:B0:BC:59:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OroRckcuqAJl0SmCln3gqLC8WQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/P2R5KI0mfa5ZtHzhHcIf8tqbscg.roa
Signing time: Thu 02 Jan 2025 01:47:42 +0000
ROA not before: Thu 02 Jan 2025 01:47:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201942
IP address blocks: 46.226.144.0/21 maxlen: 21
185.58.196.0/22 maxlen: 22
185.119.112.0/22 maxlen: 22
185.232.41.0/24 maxlen: 24
193.46.216.0/24 maxlen: 24
193.163.117.0/24 maxlen: 24
194.26.143.0/24 maxlen: 24
195.182.205.0/24 maxlen: 24
195.184.72.0/24 maxlen: 24
212.23.223.0/24 maxlen: 24
2a02:6520::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b2:74:05:3d:44:db:09:74:78:23:c1:83:e5:6a:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3aba1172472ea80265d12982967de0a8b0bc5901
Validity
Not Before: Jan 2 01:47:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3f6479288d267dae59b47ce11dc21ff2da9bb1c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:8a:dd:0f:b1:f4:2f:e8:ee:38:cd:a5:f9:44:
fe:75:bd:57:d6:8d:1f:eb:6b:40:bb:28:48:bf:31:
e5:00:00:8b:fe:69:d4:46:fd:ee:fd:20:c7:57:ba:
1c:23:58:74:5d:8b:07:62:5f:89:9c:01:eb:ea:cb:
fe:c2:52:4a:00:6e:cc:2c:bf:89:69:39:f5:e9:06:
8f:e1:a1:18:c8:6e:dc:d3:f5:b9:61:a4:51:04:c6:
c0:56:94:b3:9f:dc:ab:77:6a:4b:3d:aa:c1:83:5e:
f3:48:c2:b2:b5:f6:dd:1b:bc:38:06:58:f6:3c:11:
53:37:65:4b:61:da:04:12:b5:60:d8:12:19:ff:43:
19:b7:da:13:d0:ce:5f:3f:35:89:2b:9f:3b:c8:4c:
31:ba:60:e2:7f:6a:77:cc:b5:06:85:a0:1b:9f:be:
53:58:20:a5:f2:74:56:09:bb:08:4a:38:62:17:fe:
3a:24:54:fb:fc:b1:0b:6f:7a:a2:e5:e2:ca:c0:a7:
a1:c0:6c:84:5b:a2:8c:3b:df:17:00:65:a1:c0:64:
e3:31:b5:fd:e2:20:f3:b4:b3:a3:3d:0f:1c:56:ea:
54:53:00:7c:8b:24:52:2b:7e:18:23:73:34:d2:0f:
ee:e5:12:be:9e:51:20:85:fa:cd:50:58:fd:29:92:
44:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:64:79:28:8D:26:7D:AE:59:B4:7C:E1:1D:C2:1F:F2:DA:9B:B1:C8
X509v3 Authority Key Identifier:
keyid:3A:BA:11:72:47:2E:A8:02:65:D1:29:82:96:7D:E0:A8:B0:BC:59:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OroRckcuqAJl0SmCln3gqLC8WQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/P2R5KI0mfa5ZtHzhHcIf8tqbscg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.226.144.0/21
185.58.196.0/22
185.119.112.0/22
185.232.41.0/24
193.46.216.0/24
193.163.117.0/24
194.26.143.0/24
195.182.205.0/24
195.184.72.0/24
212.23.223.0/24
IPv6:
2a02:6520::/32
Signature Algorithm: sha256WithRSAEncryption
1c:b5:26:1b:8c:b9:3d:dd:18:67:4e:3a:a8:d9:fa:32:ab:7b:
a5:9d:56:9c:ac:66:27:7a:ec:56:8c:5e:f2:be:8b:5e:56:99:
01:68:5c:96:ce:39:79:fe:85:cc:4d:9e:86:ca:bb:3c:02:fc:
3a:12:6b:b5:d9:e8:d4:12:5a:fc:7a:85:91:04:d5:7b:e9:6f:
4f:e0:3a:47:40:b6:07:92:56:c8:16:31:b7:3d:04:1e:d8:9c:
a4:bf:88:6a:60:d8:65:f5:ea:0f:9c:fd:ee:db:ba:ea:17:94:
d5:3a:b7:a1:19:ef:ad:45:f5:8f:15:2b:c7:b6:d9:18:b4:0a:
0f:e1:5c:6f:d1:a2:06:b7:e8:7d:52:c8:38:47:5c:e4:26:b1:
15:78:83:96:63:71:9a:e0:6c:da:98:b1:e9:cc:dc:d2:85:e6:
9d:4e:b0:a6:85:79:db:b5:cb:17:e0:4e:d3:37:ac:27:56:8f:
2d:3b:4d:3b:2f:a5:c7:78:5c:0e:1e:83:a9:86:d5:79:a1:87:
f1:eb:08:47:25:b6:20:1e:58:9e:81:f3:17:d5:57:cb:42:ac:
d8:19:db:6c:f9:81:03:20:36:0b:72:fa:df:86:6c:7b:28:f8:
c9:f1:ce:b5:72:72:0e:dc:76:67:3f:d4:50:63:39:17:71:90:
f2:d5:18:17
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgISAZQksnQFPUTbCXR4I8GD5WrfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhYmExMTcyNDcyZWE4MDI2NWQxMjk4Mjk2N2RlMGE4YjBi
YzU5MDEwHhcNMjUwMTAyMDE0NzQyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZjY0NzkyODhkMjY3ZGFlNTliNDdjZTExZGMyMWZmMmRhOWJiMWM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnIrdD7H0L+juOM2l+UT+db1X1o0f
62tAuyhIvzHlAACL/mnURv3u/SDHV7ocI1h0XYsHYl+JnAHr6sv+wlJKAG7MLL+J
aTn16QaP4aEYyG7c0/W5YaRRBMbAVpSzn9yrd2pLParBg17zSMKytfbdG7w4Blj2
PBFTN2VLYdoEErVg2BIZ/0MZt9oT0M5fPzWJK587yEwxumDif2p3zLUGhaAbn75T
WCCl8nRWCbsISjhiF/46JFT7/LELb3qi5eLKwKehwGyEW6KMO98XAGWhwGTjMbX9
4iDztLOjPQ8cVupUUwB8iyRSK34YI3M00g/u5RK+nlEghfrNUFj9KZJE3wIDAQAB
o4ICTjCCAkowHQYDVR0OBBYEFD9keSiNJn2uWbR84R3CH/Lam7HIMB8GA1UdIwQY
MBaAFDq6EXJHLqgCZdEpgpZ94KiwvFkBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3JvUmNrY3VxQUpsMFNtQ2xuM2dxTEM4V1FFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My83YjFjNTUtZGRkMC00MjgxLTgzNzgt
NGRkMDQzNDZhYmMzLzEvUDJSNUtJMG1mYTVadEh6aEhjSWY4dHFic2NnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My83YjFjNTUtZGRkMC00MjgxLTgzNzgtNGRkMDQzNDZhYmMz
LzEvT3JvUmNrY3VxQUpsMFNtQ2xuM2dxTEM4V1FFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGQGCCsGAQUFBwEHAQH/BFUwUzBCBAIAATA8AwQDLuKQAwQC
uTrEAwQCuXdwAwQAuegpAwQAwS7YAwQAwaN1AwQAwhqPAwQAw7bNAwQAw7hIAwQA
1BffMA0EAgACMAcDBQAqAmUgMA0GCSqGSIb3DQEBCwUAA4IBAQActSYbjLk93Rhn
Tjqo2foyq3ulnVacrGYneuxWjF7yvoteVpkBaFyWzjl5/oXMTZ6Gyrs8Avw6Emu1
2ejUElr8eoWRBNV76W9P4DpHQLYHklbIFjG3PQQe2Jykv4hqYNhl9eoPnP3u27rq
F5TVOrehGe+tRfWPFSvHttkYtAoP4Vxv0aIGt+h9Usg4R1zkJrEVeIOWY3Ga4Gza
mLHpzNzSheadTrCmhXnbtcsX4E7TN6wnVo8tO007L6XHeFwOHoOphtV5oYfx6whH
JbYgHliegfMX1VfLQqzYGdts+YEDIDYLcvrfhmx7KPjJ8c61cnIO3HZnP9RQYzkX
cZDy1RgX
-----END CERTIFICATE-----
Generated at Fri Apr 25 03:17:52 2025 by rpki-client