Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/79aca9-51dd-4f22-b404-d53866e9186a/1/IPPrratubHXAQd-ifZngdpirX5c.roa
File: IPPrratubHXAQd-ifZngdpirX5c.roa (raw, json)
Hash identifier: I/yflOCWYAytKofslD/06DhDQeYHbVXIxz2aV+s2uxk=
Subject key identifier: 20:F3:EB:AD:AB:6E:6C:75:C0:41:DF:A2:7D:99:E0:76:98:AB:5F:97
Certificate issuer: /CN=2d1172c1c73f971a9fb2e89b7917200c500ee407
Certificate serial: 019425FC2E1A4D4466C0AED537E3C73AFB9D
Authority key identifier: 2D:11:72:C1:C7:3F:97:1A:9F:B2:E8:9B:79:17:20:0C:50:0E:E4:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRFywcc_lxqfsuibeRcgDFAO5Ac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/79aca9-51dd-4f22-b404-d53866e9186a/1/IPPrratubHXAQd-ifZngdpirX5c.roa
Signing time: Thu 02 Jan 2025 07:47:51 +0000
ROA not before: Thu 02 Jan 2025 07:47:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197143
IP address blocks: 46.245.160.0/24 maxlen: 24
46.245.161.0/24 maxlen: 24
46.245.162.0/24 maxlen: 24
46.245.163.0/24 maxlen: 24
46.245.164.0/24 maxlen: 24
46.245.165.0/24 maxlen: 24
46.245.166.0/24 maxlen: 24
46.245.167.0/24 maxlen: 24
185.33.128.0/24 maxlen: 24
185.33.129.0/24 maxlen: 24
185.33.130.0/24 maxlen: 24
185.33.131.0/24 maxlen: 24
185.218.218.0/24 maxlen: 24
185.218.219.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:2e:1a:4d:44:66:c0:ae:d5:37:e3:c7:3a:fb:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d1172c1c73f971a9fb2e89b7917200c500ee407
Validity
Not Before: Jan 2 07:47:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=20f3ebadab6e6c75c041dfa27d99e07698ab5f97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:e4:98:8c:a8:a0:75:57:0a:fd:2a:dd:7e:b1:
f2:63:0c:f4:ce:3d:7a:51:7c:60:8b:55:80:48:d7:
b5:35:78:96:56:94:ea:08:1f:28:b4:39:a3:4b:b7:
2b:3b:55:b0:a5:f4:f1:f7:2e:71:78:1a:a0:16:55:
29:48:51:09:28:15:7a:a1:cf:ee:48:d5:d8:14:38:
13:67:db:6b:e3:ac:df:cc:ab:e3:b1:ae:3f:40:1e:
c3:80:79:e4:77:ac:1a:fc:10:23:49:03:ad:b0:51:
70:79:05:88:ca:bb:ce:8f:11:79:9f:31:c3:08:ef:
14:bc:3d:ed:3f:29:a6:e5:a4:cd:b0:0c:98:9e:ca:
4b:99:32:4c:4c:2a:cd:f4:de:ba:11:c1:c1:fd:01:
cd:37:5a:55:30:3f:9b:bd:fa:5b:7f:82:3d:d0:cd:
01:bf:3e:0f:7d:8c:82:44:1d:4b:4f:0d:05:f8:b7:
e2:51:3c:6d:88:ca:fe:e3:2f:79:0d:42:14:22:6d:
a2:0e:36:dd:36:99:ac:60:62:5f:da:20:44:cf:55:
a8:35:b4:50:9d:0b:7b:fe:cc:f3:ec:79:e2:94:4e:
e4:91:d0:a1:53:91:97:07:6e:32:9b:51:f7:4c:05:
5c:ac:91:5e:15:3c:38:52:53:31:0c:93:fa:cc:31:
40:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:F3:EB:AD:AB:6E:6C:75:C0:41:DF:A2:7D:99:E0:76:98:AB:5F:97
X509v3 Authority Key Identifier:
keyid:2D:11:72:C1:C7:3F:97:1A:9F:B2:E8:9B:79:17:20:0C:50:0E:E4:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRFywcc_lxqfsuibeRcgDFAO5Ac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/79aca9-51dd-4f22-b404-d53866e9186a/1/IPPrratubHXAQd-ifZngdpirX5c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/79aca9-51dd-4f22-b404-d53866e9186a/1/LRFywcc_lxqfsuibeRcgDFAO5Ac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.245.160.0/21
185.33.128.0/22
185.218.218.0/23
Signature Algorithm: sha256WithRSAEncryption
a1:c7:59:58:10:9d:09:77:4c:84:bc:5b:ab:5d:cc:6c:e6:e3:
00:dc:b6:03:12:77:9b:52:9e:87:8e:b6:7d:97:e2:6d:da:18:
64:e2:33:d3:42:98:f4:12:b4:52:6e:0e:fa:f2:56:e3:7c:d5:
2d:52:c9:ae:02:14:20:42:d9:9c:c0:d2:84:be:b2:63:3f:39:
7c:b5:21:f6:65:94:1f:3b:4c:da:7b:41:aa:cc:60:7d:57:20:
f5:0f:8c:80:68:9a:3f:ca:55:58:ac:13:69:96:57:d9:63:6d:
f5:9f:97:d3:15:fb:14:6d:37:1e:1d:b9:0a:42:5e:0b:83:89:
1c:82:e9:78:37:c4:35:1d:2c:8d:a0:52:11:fc:0d:ad:72:74:
65:68:54:7f:ce:22:a0:63:2b:25:b8:a3:dd:91:2a:58:b3:8e:
30:d0:18:58:9d:26:71:80:a6:2b:74:63:dc:b6:cd:8a:80:27:
e6:0d:5b:32:bf:92:01:7e:bd:a8:4b:08:bb:80:20:4f:e9:9a:
36:69:51:bd:32:6f:59:ec:fd:26:7c:13:db:64:36:c2:e7:33:
3e:e6:80:af:fc:71:27:47:3c:1d:3e:d0:fb:e5:80:ba:68:55:
36:de:47:75:2e:b7:83:87:fe:44:26:1d:fd:b6:df:97:97:27:
d2:cb:f3:3d
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZQl/C4aTURmwK7VN+PHOvudMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkMTE3MmMxYzczZjk3MWE5ZmIyZTg5Yjc5MTcyMDBjNTAw
ZWU0MDcwHhcNMjUwMTAyMDc0NzUxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMGYzZWJhZGFiNmU2Yzc1YzA0MWRmYTI3ZDk5ZTA3Njk4YWI1Zjk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnOSYjKigdVcK/SrdfrHyYwz0zj16
UXxgi1WASNe1NXiWVpTqCB8otDmjS7crO1WwpfTx9y5xeBqgFlUpSFEJKBV6oc/u
SNXYFDgTZ9tr46zfzKvjsa4/QB7DgHnkd6wa/BAjSQOtsFFweQWIyrvOjxF5nzHD
CO8UvD3tPymm5aTNsAyYnspLmTJMTCrN9N66EcHB/QHNN1pVMD+bvfpbf4I90M0B
vz4PfYyCRB1LTw0F+LfiUTxtiMr+4y95DUIUIm2iDjbdNpmsYGJf2iBEz1WoNbRQ
nQt7/szz7HnilE7kkdChU5GXB24ym1H3TAVcrJFeFTw4UlMxDJP6zDFAfwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFCDz662rbmx1wEHfon2Z4HaYq1+XMB8GA1UdIwQY
MBaAFC0RcsHHP5can7Lom3kXIAxQDuQHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTFJGeXdjY19seHFmc3VpYmVSY2dERkFPNUFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS83OWFjYTktNTFkZC00ZjIyLWI0MDQt
ZDUzODY2ZTkxODZhLzEvSVBQcnJhdHViSFhBUWQtaWZabmdkcGlyWDVjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS83OWFjYTktNTFkZC00ZjIyLWI0MDQtZDUzODY2ZTkxODZh
LzEvTFJGeXdjY19seHFmc3VpYmVSY2dERkFPNUFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQDLvWgAwQC
uSGAAwQBudraMA0GCSqGSIb3DQEBCwUAA4IBAQChx1lYEJ0Jd0yEvFurXcxs5uMA
3LYDEnebUp6HjrZ9l+Jt2hhk4jPTQpj0ErRSbg768lbjfNUtUsmuAhQgQtmcwNKE
vrJjPzl8tSH2ZZQfO0zae0GqzGB9VyD1D4yAaJo/ylVYrBNpllfZY231n5fTFfsU
bTceHbkKQl4Lg4kcgul4N8Q1HSyNoFIR/A2tcnRlaFR/ziKgYysluKPdkSpYs44w
0BhYnSZxgKYrdGPcts2KgCfmDVsyv5IBfr2oSwi7gCBP6Zo2aVG9Mm9Z7P0mfBPb
ZDbC5zM+5oCv/HEnRzwdPtD75YC6aFU23kd1LreDh/5EJh39tt+XlyfSy/M9
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:35:43 2025 by rpki-client