Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/07bf93-6b71-4752-887e-71b5056d5b02/1/46j1tt7qHpvV87bnAFMEiJ1r1Ks.roa
File: 46j1tt7qHpvV87bnAFMEiJ1r1Ks.roa (raw, json)
Hash identifier: e6vcIxT4dfv15f9EpnyGTV3GOABteiMDMxyJleMHiCM=
Subject key identifier: E3:A8:F5:B6:DE:EA:1E:9B:D5:F3:B6:E7:00:53:04:88:9D:6B:D4:AB
Certificate issuer: /CN=be8baeae76001a87daeeb0bc2a8dd10ce65f865d
Certificate serial: 019421B213DE69E0C683EAB12CE2ED47AC7C
Authority key identifier: BE:8B:AE:AE:76:00:1A:87:DA:EE:B0:BC:2A:8D:D1:0C:E6:5F:86:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vouurnYAGofa7rC8Ko3RDOZfhl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/07bf93-6b71-4752-887e-71b5056d5b02/1/46j1tt7qHpvV87bnAFMEiJ1r1Ks.roa
Signing time: Wed 01 Jan 2025 11:48:26 +0000
ROA not before: Wed 01 Jan 2025 11:48:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207674
IP address blocks: 193.26.146.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:13:de:69:e0:c6:83:ea:b1:2c:e2:ed:47:ac:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be8baeae76001a87daeeb0bc2a8dd10ce65f865d
Validity
Not Before: Jan 1 11:48:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e3a8f5b6deea1e9bd5f3b6e7005304889d6bd4ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:87:a1:fd:a2:81:d9:46:a3:b6:45:1c:97:66:
74:37:e2:ca:1c:6a:f4:f7:76:8b:85:30:89:4d:d8:
23:49:44:0c:16:68:6c:73:59:44:49:2f:34:af:c5:
36:55:3c:da:77:13:56:d2:71:a6:99:bf:92:84:0e:
0b:c4:f5:57:ca:bd:ae:1d:b3:45:0b:fc:a1:8e:f3:
0b:2c:37:1a:ee:e1:ba:05:34:c5:52:46:2c:7d:68:
24:f6:ce:32:18:19:7c:81:f2:01:c6:59:8f:f5:85:
43:35:25:97:4a:3e:3d:16:ad:8f:f2:f5:d1:ab:7d:
c9:2f:31:62:96:43:b1:c0:15:d5:13:21:68:3b:1b:
74:32:2f:10:7c:78:f1:35:bb:cb:85:4b:8a:ec:77:
c2:99:70:2a:25:64:c7:fc:f7:c4:19:b2:26:cf:39:
61:c6:67:d5:5c:9e:23:b8:d9:11:a9:3e:0e:1f:eb:
6d:0e:6a:79:16:46:e5:5b:af:a2:7e:b6:ff:c5:04:
64:7b:d6:38:c7:a3:e6:00:7f:0e:69:76:0c:49:d1:
04:6c:50:e9:7b:68:22:7e:ec:8f:ac:f8:2b:9c:26:
75:e4:92:7d:4f:4a:ca:b7:cb:6f:25:0e:ca:85:ce:
e8:4a:37:19:45:9c:ce:62:22:c7:8c:0d:a4:27:e6:
29:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:A8:F5:B6:DE:EA:1E:9B:D5:F3:B6:E7:00:53:04:88:9D:6B:D4:AB
X509v3 Authority Key Identifier:
keyid:BE:8B:AE:AE:76:00:1A:87:DA:EE:B0:BC:2A:8D:D1:0C:E6:5F:86:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vouurnYAGofa7rC8Ko3RDOZfhl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/07bf93-6b71-4752-887e-71b5056d5b02/1/46j1tt7qHpvV87bnAFMEiJ1r1Ks.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/07bf93-6b71-4752-887e-71b5056d5b02/1/vouurnYAGofa7rC8Ko3RDOZfhl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.26.146.0/23
Signature Algorithm: sha256WithRSAEncryption
69:31:de:53:f4:17:e1:e0:39:a5:cb:d6:46:73:37:97:7f:23:
4f:d8:0e:18:5a:fa:37:aa:ad:f2:1d:01:56:d8:a8:b9:8b:61:
e6:1b:a6:bb:02:1d:af:65:2d:e7:af:b5:b0:f1:a3:ec:ec:41:
53:32:6f:1d:16:cd:60:b4:4f:02:8f:3a:1d:3a:30:c3:0e:d6:
d1:e7:f2:93:7e:c7:25:83:48:be:e9:17:8c:d4:a9:95:58:99:
f6:21:bc:e1:dc:a0:ec:78:6c:8a:52:fe:ee:90:81:a9:e1:b5:
b8:cd:a9:bb:32:0b:b2:a9:89:5c:cc:96:9d:3a:38:3a:18:4a:
8b:a5:ba:78:17:c5:e3:e5:52:51:b7:eb:db:b8:37:6a:4b:00:
38:9f:e5:3c:f4:1b:da:86:6c:25:a8:c2:5c:65:ce:c3:16:2f:
a7:58:20:c6:9a:7a:08:b6:49:47:4c:80:3d:40:48:8b:87:25:
4d:91:4c:fe:57:ce:44:e3:d1:5a:46:e5:7e:d4:62:29:7b:11:
a2:fa:cc:e9:d8:73:c7:fd:f7:c7:8d:06:22:ef:35:17:86:10:
35:30:1d:fe:ea:01:fa:11:30:8c:f7:bf:d9:6e:ef:d2:b5:c6:
97:14:73:3c:dd:4d:d5:60:18:cd:6b:d3:d2:57:38:1a:90:bb:
bf:76:8a:34
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQhshPeaeDGg+qxLOLtR6x8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlOGJhZWFlNzYwMDFhODdkYWVlYjBiYzJhOGRkMTBjZTY1
Zjg2NWQwHhcNMjUwMTAxMTE0ODI2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlM2E4ZjViNmRlZWExZTliZDVmM2I2ZTcwMDUzMDQ4ODlkNmJkNGFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4oeh/aKB2UajtkUcl2Z0N+LKHGr0
93aLhTCJTdgjSUQMFmhsc1lESS80r8U2VTzadxNW0nGmmb+ShA4LxPVXyr2uHbNF
C/yhjvMLLDca7uG6BTTFUkYsfWgk9s4yGBl8gfIBxlmP9YVDNSWXSj49Fq2P8vXR
q33JLzFilkOxwBXVEyFoOxt0Mi8QfHjxNbvLhUuK7HfCmXAqJWTH/PfEGbImzzlh
xmfVXJ4juNkRqT4OH+ttDmp5FkblW6+ifrb/xQRke9Y4x6PmAH8OaXYMSdEEbFDp
e2gifuyPrPgrnCZ15JJ9T0rKt8tvJQ7Khc7oSjcZRZzOYiLHjA2kJ+Yp3QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOOo9bbe6h6b1fO25wBTBIida9SrMB8GA1UdIwQY
MBaAFL6Lrq52ABqH2u6wvCqN0QzmX4ZdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdm91dXJuWUFHb2ZhN3JDOEtvM1JET1pmaGwwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi8wN2JmOTMtNmI3MS00NzUyLTg4N2Ut
NzFiNTA1NmQ1YjAyLzEvNDZqMXR0N3FIcHZWODdibkFGTUVpSjFyMUtzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Zi8wN2JmOTMtNmI3MS00NzUyLTg4N2UtNzFiNTA1NmQ1YjAy
LzEvdm91dXJuWUFHb2ZhN3JDOEtvM1JET1pmaGwwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwRqSMA0G
CSqGSIb3DQEBCwUAA4IBAQBpMd5T9Bfh4Dmly9ZGczeXfyNP2A4YWvo3qq3yHQFW
2Ki5i2HmG6a7Ah2vZS3nr7Ww8aPs7EFTMm8dFs1gtE8CjzodOjDDDtbR5/KTfscl
g0i+6ReM1KmVWJn2Ibzh3KDseGyKUv7ukIGp4bW4zam7MguyqYlczJadOjg6GEqL
pbp4F8Xj5VJRt+vbuDdqSwA4n+U89BvahmwlqMJcZc7DFi+nWCDGmnoItklHTIA9
QEiLhyVNkUz+V85E49FaRuV+1GIpexGi+szp2HPH/ffHjQYi7zUXhhA1MB3+6gH6
ETCM97/Zbu/StcaXFHM83U3VYBjNa9PSVzgakLu/doo0
-----END CERTIFICATE-----
Generated at Fri Apr 25 04:03:54 2025 by rpki-client