Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/d61b33-abdf-4903-a82c-b5172597f73a/1/46WoegmIkS8QL_J6FbxBkD87iiI.roa
File: 46WoegmIkS8QL_J6FbxBkD87iiI.roa (raw, json)
Hash identifier: U0pIUVkWJNq7HiCSxGgpV90jaz+MKbll3yx6GCWcg+0=
Subject key identifier: E3:A5:A8:7A:09:88:91:2F:10:2F:F2:7A:15:BC:41:90:3F:3B:8A:22
Certificate issuer: /CN=55843a1b20a2dbe3e4ed53e7548d7689678d5a37
Certificate serial: 019424454CD6054DEA77786ED9D258A96A89
Authority key identifier: 55:84:3A:1B:20:A2:DB:E3:E4:ED:53:E7:54:8D:76:89:67:8D:5A:37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYQ6GyCi2-Pk7VPnVI12iWeNWjc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/d61b33-abdf-4903-a82c-b5172597f73a/1/46WoegmIkS8QL_J6FbxBkD87iiI.roa
Signing time: Wed 01 Jan 2025 23:48:28 +0000
ROA not before: Wed 01 Jan 2025 23:48:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198068
IP address blocks: 5.45.112.0/20 maxlen: 32
5.101.112.0/20 maxlen: 32
5.101.176.0/20 maxlen: 32
5.188.16.0/21 maxlen: 32
5.188.24.0/22 maxlen: 32
45.67.128.0/22 maxlen: 32
46.36.216.0/21 maxlen: 32
159.253.16.0/21 maxlen: 32
181.114.240.0/20 maxlen: 32
185.4.72.0/22 maxlen: 32
2a03:f480::/32 maxlen: 128
2a09:8240::/32 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:4c:d6:05:4d:ea:77:78:6e:d9:d2:58:a9:6a:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55843a1b20a2dbe3e4ed53e7548d7689678d5a37
Validity
Not Before: Jan 1 23:48:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e3a5a87a0988912f102ff27a15bc41903f3b8a22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:47:2a:98:0b:6d:52:eb:03:9a:3b:1f:52:65:
a3:82:f0:54:54:da:aa:f7:dd:3e:3a:07:6f:71:56:
cf:93:4e:46:97:80:00:c0:a5:93:34:5a:2f:e0:ff:
44:49:62:7a:c6:3e:55:55:da:15:20:b8:b0:6f:8f:
fb:9b:7e:70:05:34:92:e8:18:8a:5c:d6:6b:82:28:
4e:8b:a5:fe:c4:d0:2b:b2:75:b4:83:0c:19:4c:62:
53:c0:36:cd:ed:74:4b:b5:dd:ca:b7:81:c3:94:4d:
17:ab:7b:1d:2a:87:c8:3f:4b:d3:78:95:11:87:7a:
ba:9b:c2:e3:4d:82:b7:03:ed:f8:57:c4:93:b9:01:
03:fa:de:75:eb:66:06:30:08:5e:dd:aa:6d:c7:25:
0b:be:85:97:73:5c:43:9c:bb:1e:f5:12:18:e6:db:
7d:7e:28:a3:58:a0:99:d3:a9:35:0f:88:8b:4b:e3:
9a:47:d9:c7:e0:b8:57:85:0f:4f:a2:44:de:4f:31:
2d:4b:74:b8:9b:3c:03:ab:e6:0a:89:c7:12:7e:f0:
a4:c7:68:99:8b:f1:5e:00:4b:41:99:f7:26:1e:13:
fe:59:1d:2f:3e:40:47:1d:f8:63:bb:1f:ae:f2:ee:
cc:28:4a:a7:f6:60:ee:78:03:1c:7a:76:46:e5:5a:
f8:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:A5:A8:7A:09:88:91:2F:10:2F:F2:7A:15:BC:41:90:3F:3B:8A:22
X509v3 Authority Key Identifier:
keyid:55:84:3A:1B:20:A2:DB:E3:E4:ED:53:E7:54:8D:76:89:67:8D:5A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYQ6GyCi2-Pk7VPnVI12iWeNWjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/d61b33-abdf-4903-a82c-b5172597f73a/1/46WoegmIkS8QL_J6FbxBkD87iiI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/d61b33-abdf-4903-a82c-b5172597f73a/1/VYQ6GyCi2-Pk7VPnVI12iWeNWjc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.45.112.0/20
5.101.112.0/20
5.101.176.0/20
5.188.16.0-5.188.27.255
45.67.128.0/22
46.36.216.0/21
159.253.16.0/21
181.114.240.0/20
185.4.72.0/22
IPv6:
2a03:f480::/32
2a09:8240::/32
Signature Algorithm: sha256WithRSAEncryption
52:ae:4f:e5:ab:e4:dc:9f:1d:1c:ae:a0:03:4f:cc:ad:90:ac:
91:6a:57:94:92:c6:2c:23:d7:14:a4:2f:60:0a:8a:4c:99:d7:
29:cd:b8:0b:06:71:fd:78:a4:c1:81:90:93:1c:ef:04:c7:d9:
7b:1f:af:ec:d4:98:26:40:be:c8:f5:44:18:51:93:f2:12:1a:
72:27:8a:5a:83:f3:04:a6:5e:a7:6d:bf:73:bb:a5:a7:28:8d:
c0:69:65:de:a6:b3:c4:93:bb:3f:39:2f:4a:28:16:f4:5d:e8:
68:79:a2:60:64:61:42:9a:25:e1:e3:c0:d5:90:cc:c7:93:2f:
c4:f4:26:74:20:f8:b4:25:11:73:e1:c7:ed:41:48:78:14:cd:
5f:ea:88:20:99:05:81:e8:80:9a:d2:58:3c:28:fc:e0:be:7f:
1c:72:f2:b4:db:76:66:4b:2c:ce:da:09:16:92:f7:c9:86:2b:
db:7b:65:05:38:b9:ba:c1:fb:50:72:3b:4d:34:89:6b:f4:c5:
68:ad:3d:f5:ba:61:97:1d:60:74:75:38:9d:90:48:0e:5b:45:
19:43:92:9e:e9:50:69:8d:47:74:d4:52:e0:4d:14:b9:81:2e:
75:c3:12:e0:5a:f7:a5:95:9c:de:5a:3f:3f:88:dc:f2:3c:95:
d6:e0:50:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:02:41 2025 by rpki-client