Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/BoraV6Yjahe2zZ5AX6qehkNe46k.roa
File: BoraV6Yjahe2zZ5AX6qehkNe46k.roa (raw, json)
Hash identifier: mG9iKwGkBiMt8vDwNPJ1ZpJ4HP6m6vTGSrVr4T2e7qw=
Subject key identifier: 06:8A:DA:57:A6:23:6A:17:B6:CD:9E:40:5F:AA:9E:86:43:5E:E3:A9
Certificate issuer: /CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Certificate serial: 01942747F006874A9E6E83066AEF97016FFA
Authority key identifier: 84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/BoraV6Yjahe2zZ5AX6qehkNe46k.roa
Signing time: Thu 02 Jan 2025 13:50:13 +0000
ROA not before: Thu 02 Jan 2025 13:50:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44851
IP address blocks: 46.10.197.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:f0:06:87:4a:9e:6e:83:06:6a:ef:97:01:6f:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Validity
Not Before: Jan 2 13:50:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=068ada57a6236a17b6cd9e405faa9e86435ee3a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:c4:48:12:53:d3:f8:a6:9b:a1:df:d9:03:80:
5c:7e:3b:63:6d:81:58:f4:34:aa:58:bc:ed:13:5d:
a7:3f:3d:cd:7a:76:41:44:18:48:0b:52:41:1e:da:
0c:4a:0f:8a:a9:22:f6:55:f2:ed:4b:91:b8:aa:7a:
cd:89:57:b2:e6:9a:b9:e2:89:b2:74:41:9d:30:23:
2e:de:31:2f:a9:71:ff:21:db:16:4a:26:12:7f:bc:
87:ea:a8:ac:4a:3c:b8:ed:fd:8a:b5:ae:5a:cc:10:
ea:0a:ec:3a:2f:e3:6b:0a:3a:a2:87:66:75:d5:8d:
1c:b4:10:bb:16:2a:5c:8a:d6:b2:48:31:46:a1:69:
73:cf:61:6a:ff:3e:fc:b6:b9:55:74:0c:0e:23:b2:
44:b3:1c:c9:e1:14:05:3b:e2:a5:38:45:ad:31:b4:
86:eb:dd:5d:1c:5e:84:9c:c4:64:f6:06:fb:59:16:
86:c1:ce:2b:a0:ff:d7:60:3c:c9:28:6f:ad:b6:05:
36:28:99:e1:df:03:f8:30:2c:6d:72:55:7e:53:05:
13:3f:92:31:80:e9:0f:5d:7b:a5:3a:79:df:a4:c5:
92:79:5f:72:14:8e:33:82:2a:88:0f:a0:e9:ad:da:
56:3f:df:a0:dd:06:84:69:86:c4:06:a1:7e:ab:d0:
a6:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:8A:DA:57:A6:23:6A:17:B6:CD:9E:40:5F:AA:9E:86:43:5E:E3:A9
X509v3 Authority Key Identifier:
keyid:84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/BoraV6Yjahe2zZ5AX6qehkNe46k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.10.197.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:dd:dc:91:b9:92:18:f0:cb:57:f2:9f:02:bc:ce:5c:60:cb:
f4:98:62:b2:2e:de:82:af:cc:71:fe:bf:18:1a:f1:53:36:e1:
0f:9e:51:b5:bd:1e:26:00:7b:4c:df:22:6e:20:14:5c:d0:65:
a7:92:d2:94:af:4d:e1:ed:ed:52:4a:aa:a4:e8:52:f9:31:c8:
b7:53:d5:5d:eb:e0:78:9d:81:f8:9a:2d:61:f1:31:19:36:2a:
ed:4e:09:49:84:2d:9d:31:db:dc:70:eb:f5:ce:58:a1:14:78:
08:d5:f5:2f:99:11:e1:7d:82:e5:6a:e5:3d:6d:c3:9b:45:80:
17:f9:6e:fc:6a:31:ee:3f:07:d7:fc:4e:c9:85:bb:23:9e:6a:
de:f1:75:e0:9c:09:3f:bf:78:73:30:72:28:8f:3c:51:35:63:
81:ce:83:cb:c8:e4:64:b8:23:a2:f8:1e:33:13:85:f3:31:cb:
27:85:28:95:e9:81:cc:cc:eb:90:60:75:f4:2f:c5:c1:ef:8d:
50:c8:0c:9a:59:a0:c2:58:22:33:17:ba:c6:0c:f6:ce:92:0c:
ca:d0:7f:02:2d:4b:41:a9:a5:fc:a8:cf:3c:74:3c:7e:1c:d8:
e4:ea:25:bd:3d:b4:0d:a6:0b:50:05:06:e6:4e:78:f3:37:a8:
f7:6b:63:72
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQnR/AGh0qeboMGau+XAW/6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0YjJmNGZhNTE2M2FmOTYxNjhlODhmYmY5Y2I0ZWQxZWQ4
ZmI0YzQwHhcNMjUwMTAyMTM1MDEzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNjhhZGE1N2E2MjM2YTE3YjZjZDllNDA1ZmFhOWU4NjQzNWVlM2E5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzsRIElPT+Kabod/ZA4BcfjtjbYFY
9DSqWLztE12nPz3NenZBRBhIC1JBHtoMSg+KqSL2VfLtS5G4qnrNiVey5pq54omy
dEGdMCMu3jEvqXH/IdsWSiYSf7yH6qisSjy47f2Kta5azBDqCuw6L+NrCjqih2Z1
1Y0ctBC7FipcitaySDFGoWlzz2Fq/z78trlVdAwOI7JEsxzJ4RQFO+KlOEWtMbSG
691dHF6EnMRk9gb7WRaGwc4roP/XYDzJKG+ttgU2KJnh3wP4MCxtclV+UwUTP5Ix
gOkPXXulOnnfpMWSeV9yFI4zgiqID6DprdpWP9+g3QaEaYbEBqF+q9CmSQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAaK2lemI2oXts2eQF+qnoZDXuOpMB8GA1UdIwQY
MBaAFISy9PpRY6+WFo6I+/nLTtHtj7TEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaExMMC1sRmpyNVlXam9qNy1jdE8wZTJQdE1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC80YWE3ODktODc4Yi00NzJiLWI4NDct
ODcyYmEyZDlmNDRjLzEvQm9yYVY2WWphaGUyelo1QVg2cWVoa05lNDZrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC80YWE3ODktODc4Yi00NzJiLWI4NDctODcyYmEyZDlmNDRj
LzEvaExMMC1sRmpyNVlXam9qNy1jdE8wZTJQdE1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALgrFMA0G
CSqGSIb3DQEBCwUAA4IBAQAf3dyRuZIY8MtX8p8CvM5cYMv0mGKyLt6Cr8xx/r8Y
GvFTNuEPnlG1vR4mAHtM3yJuIBRc0GWnktKUr03h7e1SSqqk6FL5Mci3U9Vd6+B4
nYH4mi1h8TEZNirtTglJhC2dMdvccOv1zlihFHgI1fUvmRHhfYLlauU9bcObRYAX
+W78ajHuPwfX/E7Jhbsjnmre8XXgnAk/v3hzMHIojzxRNWOBzoPLyORkuCOi+B4z
E4XzMcsnhSiV6YHMzOuQYHX0L8XB741QyAyaWaDCWCIzF7rGDPbOkgzK0H8CLUtB
qaX8qM88dDx+HNjk6iW9PbQNpgtQBQbmTnjzN6j3a2Ny
-----END CERTIFICATE-----
Generated at Fri Apr 25 08:23:08 2025 by rpki-client