Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/cfa2ae-e524-4bd0-875b-89ace38220fb/1/QNtVfkNdeG1v9DJyZBEjTrZNyBc.roa
File: QNtVfkNdeG1v9DJyZBEjTrZNyBc.roa (raw, json)
Hash identifier: vaJZALNBXUbhDyRfKEtlNDFsggROpnhoQdeymesJ/Rw=
Subject key identifier: 40:DB:55:7E:43:5D:78:6D:6F:F4:32:72:64:11:23:4E:B6:4D:C8:17
Certificate issuer: /CN=46ba3f80039b9e784cfb24bf2c7ddb24e1900a76
Certificate serial: 019425217A7E68558911F21834D1A46F1DF1
Authority key identifier: 46:BA:3F:80:03:9B:9E:78:4C:FB:24:BF:2C:7D:DB:24:E1:90:0A:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rro_gAObnnhM-yS_LH3bJOGQCnY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/cfa2ae-e524-4bd0-875b-89ace38220fb/1/QNtVfkNdeG1v9DJyZBEjTrZNyBc.roa
Signing time: Thu 02 Jan 2025 03:48:58 +0000
ROA not before: Thu 02 Jan 2025 03:48:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215070
IP address blocks: 90.156.244.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:7a:7e:68:55:89:11:f2:18:34:d1:a4:6f:1d:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46ba3f80039b9e784cfb24bf2c7ddb24e1900a76
Validity
Not Before: Jan 2 03:48:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=40db557e435d786d6ff432726411234eb64dc817
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:51:69:d3:94:9d:2d:6e:1f:71:5d:79:da:ad:
8e:56:2c:e9:57:ae:09:21:5a:8f:d8:20:75:1c:f0:
20:83:41:14:fe:ef:0c:80:fc:75:dc:8e:b2:04:bb:
44:7c:d7:8e:f0:4d:04:70:ca:a2:4c:30:b9:87:ec:
0f:92:75:d3:41:82:9a:4f:fc:cc:df:9b:55:c0:a9:
d0:7b:da:75:24:93:4d:8d:db:f1:26:56:31:75:b8:
3a:7c:89:b7:b3:ea:92:f1:b2:c8:cb:71:f6:f1:f0:
23:43:97:94:ce:57:eb:ef:ae:c9:95:94:76:bf:7a:
70:49:ca:49:b4:90:0e:c0:c4:8f:5d:be:57:ea:c8:
96:5b:d4:11:5d:20:e2:f1:5a:2c:48:71:4f:e4:c4:
93:1e:80:ef:51:2d:fa:66:1e:df:6e:e1:90:26:82:
86:ed:38:2a:f1:16:c0:9d:9b:99:6d:2b:ae:a1:8c:
95:a2:9d:68:1f:34:b2:fc:01:f9:1e:53:f7:99:9b:
43:67:76:bb:c6:d8:e4:c8:05:7c:05:68:7a:2e:fe:
c1:83:91:ba:c4:86:87:f3:cb:4d:c4:e0:d6:da:3d:
d0:10:36:3a:09:34:d8:57:36:d1:36:1b:ef:7b:2c:
b4:63:d4:ee:22:e0:55:d7:89:05:1c:18:b6:1c:13:
67:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:DB:55:7E:43:5D:78:6D:6F:F4:32:72:64:11:23:4E:B6:4D:C8:17
X509v3 Authority Key Identifier:
keyid:46:BA:3F:80:03:9B:9E:78:4C:FB:24:BF:2C:7D:DB:24:E1:90:0A:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rro_gAObnnhM-yS_LH3bJOGQCnY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/cfa2ae-e524-4bd0-875b-89ace38220fb/1/QNtVfkNdeG1v9DJyZBEjTrZNyBc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/cfa2ae-e524-4bd0-875b-89ace38220fb/1/Rro_gAObnnhM-yS_LH3bJOGQCnY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
90.156.244.0/22
Signature Algorithm: sha256WithRSAEncryption
81:cd:a3:1e:5c:58:72:d4:4d:87:1b:60:e4:05:c1:1f:9c:67:
86:ff:bc:78:87:a7:8e:a1:1f:65:8c:87:ff:cc:73:c3:d0:fe:
82:fe:34:75:3e:b7:bf:f6:b2:b6:1d:e2:af:ef:cb:fb:44:60:
9f:cc:7c:77:3b:12:40:08:3b:56:55:62:90:d8:d7:79:91:9f:
6d:9d:79:23:bb:22:3b:40:80:33:ca:7a:1f:1e:8e:73:fa:51:
5f:b1:e5:f4:98:cc:81:c1:f3:cc:88:f3:5d:ef:f1:41:37:8c:
01:b7:6a:f7:4d:84:cf:18:8e:c2:f5:7e:70:63:6d:2c:fc:53:
37:04:26:22:03:0e:3f:0e:bb:ac:cf:f4:1b:10:25:e4:17:df:
55:25:6e:38:cc:b7:b9:27:a7:c1:a4:c1:71:71:0c:75:12:25:
2e:20:1e:14:fe:39:57:8f:d7:5d:d0:65:ad:8d:3f:55:c5:21:
fd:11:0d:9e:d7:d2:1a:2b:1e:d2:4d:05:43:a4:72:57:17:18:
08:5b:ab:24:a0:ce:c9:d0:d6:ac:b6:ec:01:05:91:9c:30:de:
40:23:8c:ca:31:4a:83:1b:60:b7:2e:36:19:ad:9c:45:54:21:
12:99:42:e3:42:25:3a:b1:7c:11:a7:aa:3e:f3:c5:13:1e:e3:
31:48:90:24
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQlIXp+aFWJEfIYNNGkbx3xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2YmEzZjgwMDM5YjllNzg0Y2ZiMjRiZjJjN2RkYjI0ZTE5
MDBhNzYwHhcNMjUwMTAyMDM0ODU4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MGRiNTU3ZTQzNWQ3ODZkNmZmNDMyNzI2NDExMjM0ZWI2NGRjODE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtlFp05SdLW4fcV152q2OVizpV64J
IVqP2CB1HPAgg0EU/u8MgPx13I6yBLtEfNeO8E0EcMqiTDC5h+wPknXTQYKaT/zM
35tVwKnQe9p1JJNNjdvxJlYxdbg6fIm3s+qS8bLIy3H28fAjQ5eUzlfr767JlZR2
v3pwScpJtJAOwMSPXb5X6siWW9QRXSDi8VosSHFP5MSTHoDvUS36Zh7fbuGQJoKG
7Tgq8RbAnZuZbSuuoYyVop1oHzSy/AH5HlP3mZtDZ3a7xtjkyAV8BWh6Lv7Bg5G6
xIaH88tNxODW2j3QEDY6CTTYVzbRNhvveyy0Y9TuIuBV14kFHBi2HBNnewIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEDbVX5DXXhtb/QycmQRI062TcgXMB8GA1UdIwQY
MBaAFEa6P4ADm554TPskvyx92yThkAp2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUnJvX2dBT2JubmhNLXlTX0xIM2JKT0dRQ25ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS9jZmEyYWUtZTUyNC00YmQwLTg3NWIt
ODlhY2UzODIyMGZiLzEvUU50VmZrTmRlRzF2OURKeVpCRWpUclpOeUJjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NS9jZmEyYWUtZTUyNC00YmQwLTg3NWItODlhY2UzODIyMGZi
LzEvUnJvX2dBT2JubmhNLXlTX0xIM2JKT0dRQ25ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCWpz0MA0G
CSqGSIb3DQEBCwUAA4IBAQCBzaMeXFhy1E2HG2DkBcEfnGeG/7x4h6eOoR9ljIf/
zHPD0P6C/jR1Pre/9rK2HeKv78v7RGCfzHx3OxJACDtWVWKQ2Nd5kZ9tnXkjuyI7
QIAzynofHo5z+lFfseX0mMyBwfPMiPNd7/FBN4wBt2r3TYTPGI7C9X5wY20s/FM3
BCYiAw4/Drusz/QbECXkF99VJW44zLe5J6fBpMFxcQx1EiUuIB4U/jlXj9dd0GWt
jT9VxSH9EQ2e19IaKx7STQVDpHJXFxgIW6skoM7J0NastuwBBZGcMN5AI4zKMUqD
G2C3LjYZrZxFVCESmULjQiU6sXwRp6o+88UTHuMxSJAk
-----END CERTIFICATE-----
Generated at Fri Apr 25 04:01:14 2025 by rpki-client