Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/28bde3-a4ca-488d-8061-d38d843bfa1d/1/K5gJRaPdUKn9XKhzO7AibxY9CA0.roa
File: K5gJRaPdUKn9XKhzO7AibxY9CA0.roa (raw, json)
Hash identifier: qUxgMl4Hgu/d5oBnuOvT0GW4I1N7zX5/ljI5wWQ4TLY=
Subject key identifier: 2B:98:09:45:A3:DD:50:A9:FD:5C:A8:73:3B:B0:22:6F:16:3D:08:0D
Certificate issuer: /CN=644c50d1dadf8b84b174fdb0587afb5f42df8a5f
Certificate serial: 01942144590AB20810317CA48126DFEC0908
Authority key identifier: 64:4C:50:D1:DA:DF:8B:84:B1:74:FD:B0:58:7A:FB:5F:42:DF:8A:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZExQ0drfi4SxdP2wWHr7X0Lfil8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/28bde3-a4ca-488d-8061-d38d843bfa1d/1/K5gJRaPdUKn9XKhzO7AibxY9CA0.roa
Signing time: Wed 01 Jan 2025 09:48:34 +0000
ROA not before: Wed 01 Jan 2025 09:48:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34273
IP address blocks: 46.17.192.0/21 maxlen: 21
193.138.200.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:59:0a:b2:08:10:31:7c:a4:81:26:df:ec:09:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=644c50d1dadf8b84b174fdb0587afb5f42df8a5f
Validity
Not Before: Jan 1 09:48:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2b980945a3dd50a9fd5ca8733bb0226f163d080d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:fb:45:72:01:43:21:32:03:98:37:2a:cf:14:
64:6f:22:66:81:5d:11:d4:d4:35:a3:af:73:60:eb:
df:65:f1:a6:6e:12:c3:af:00:1b:c8:15:4a:de:5b:
67:59:5b:bc:03:a1:76:39:ed:8c:d1:03:f6:59:b0:
ac:de:f7:e7:d8:fb:1e:4c:4d:a6:a4:02:c5:34:74:
cb:dc:51:3b:6e:34:8f:67:1e:53:98:3a:1e:5d:1c:
89:f6:a7:2a:06:28:a1:86:b9:e9:8a:d2:78:a5:81:
ce:c2:85:1e:45:8e:ed:4a:cc:08:89:b1:1f:14:9b:
72:a6:57:be:60:02:b6:95:19:75:6e:de:57:de:a3:
86:69:17:35:c6:ab:f1:9f:ac:c7:1b:0e:99:d0:09:
9b:7b:84:4f:f4:30:fa:94:34:18:e9:a2:fd:91:e9:
de:2d:b4:e0:a3:9e:4e:b0:5d:44:a4:a4:9d:7a:6d:
26:5c:2c:76:9a:cb:55:8d:54:b4:4c:24:de:77:ce:
ca:ad:6a:24:7d:e4:ca:19:b5:d8:bc:c0:52:e1:5c:
c5:ba:22:e3:02:93:21:1c:d2:e1:8c:15:a9:4b:ca:
1f:76:ac:15:23:fe:c6:6b:11:5c:f5:62:77:37:1e:
1a:40:e3:45:77:49:34:7e:5c:b9:7f:4a:2e:6d:23:
be:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:98:09:45:A3:DD:50:A9:FD:5C:A8:73:3B:B0:22:6F:16:3D:08:0D
X509v3 Authority Key Identifier:
keyid:64:4C:50:D1:DA:DF:8B:84:B1:74:FD:B0:58:7A:FB:5F:42:DF:8A:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZExQ0drfi4SxdP2wWHr7X0Lfil8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/28bde3-a4ca-488d-8061-d38d843bfa1d/1/K5gJRaPdUKn9XKhzO7AibxY9CA0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/28bde3-a4ca-488d-8061-d38d843bfa1d/1/ZExQ0drfi4SxdP2wWHr7X0Lfil8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.17.192.0/21
193.138.200.0/22
Signature Algorithm: sha256WithRSAEncryption
80:23:31:4b:af:49:04:d7:cb:ee:62:99:be:7b:0a:49:a9:99:
6f:7c:e8:3f:56:ab:7b:85:01:fd:a4:d2:ec:fe:6d:e6:99:0d:
9b:7b:c8:68:af:59:80:f9:c1:a2:d9:b0:42:c6:57:bf:ea:3d:
b3:98:c5:27:6a:5c:62:cd:33:8d:06:9f:b6:b2:5b:2b:44:56:
3f:1c:2e:49:6e:d6:5d:69:53:2d:95:2b:a5:10:76:78:b5:a5:
65:db:b3:62:f6:22:92:ea:08:a1:cb:e5:96:b8:b2:5a:a7:89:
fb:6e:d1:0c:63:66:db:0f:a4:2e:23:d4:03:6c:cb:24:57:c6:
81:3e:a8:4f:46:54:9f:27:04:90:74:b2:bc:77:9d:a8:bd:98:
08:13:4d:4f:5d:94:05:67:0f:38:0d:0b:1a:2e:83:44:61:60:
b5:a4:7c:73:09:af:53:ac:6b:f5:66:eb:2e:6d:36:16:ed:7c:
b7:be:81:ae:72:70:07:0f:0b:b1:18:88:91:09:f2:33:4c:a3:
60:12:94:62:70:60:76:5b:6e:d1:7c:2e:a7:b5:bc:67:9f:51:
75:f2:ed:0e:3e:1f:22:31:80:db:44:9a:68:f3:d6:fc:a5:4c:
f6:83:22:bd:a1:41:98:64:d4:96:28:0e:4a:4c:ea:01:cc:df:
31:0f:0e:59
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQhRFkKsggQMXykgSbf7AkIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0NGM1MGQxZGFkZjhiODRiMTc0ZmRiMDU4N2FmYjVmNDJk
ZjhhNWYwHhcNMjUwMTAxMDk0ODM0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYjk4MDk0NWEzZGQ1MGE5ZmQ1Y2E4NzMzYmIwMjI2ZjE2M2QwODBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3/tFcgFDITIDmDcqzxRkbyJmgV0R
1NQ1o69zYOvfZfGmbhLDrwAbyBVK3ltnWVu8A6F2Oe2M0QP2WbCs3vfn2PseTE2m
pALFNHTL3FE7bjSPZx5TmDoeXRyJ9qcqBiihhrnpitJ4pYHOwoUeRY7tSswIibEf
FJtyple+YAK2lRl1bt5X3qOGaRc1xqvxn6zHGw6Z0Ambe4RP9DD6lDQY6aL9kene
LbTgo55OsF1EpKSdem0mXCx2mstVjVS0TCTed87KrWokfeTKGbXYvMBS4VzFuiLj
ApMhHNLhjBWpS8ofdqwVI/7GaxFc9WJ3Nx4aQONFd0k0fly5f0oubSO+sQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFCuYCUWj3VCp/VyoczuwIm8WPQgNMB8GA1UdIwQY
MBaAFGRMUNHa34uEsXT9sFh6+19C34pfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWkV4UTBkcmZpNFN4ZFAyd1dIcjdYMExmaWw4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi8yOGJkZTMtYTRjYS00ODhkLTgwNjEt
ZDM4ZDg0M2JmYTFkLzEvSzVnSlJhUGRVS245WEtoek83QWlieFk5Q0EwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi8yOGJkZTMtYTRjYS00ODhkLTgwNjEtZDM4ZDg0M2JmYTFk
LzEvWkV4UTBkcmZpNFN4ZFAyd1dIcjdYMExmaWw4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDLhHAAwQC
wYrIMA0GCSqGSIb3DQEBCwUAA4IBAQCAIzFLr0kE18vuYpm+ewpJqZlvfOg/Vqt7
hQH9pNLs/m3mmQ2be8hor1mA+cGi2bBCxle/6j2zmMUnalxizTONBp+2slsrRFY/
HC5JbtZdaVMtlSulEHZ4taVl27Ni9iKS6gihy+WWuLJap4n7btEMY2bbD6QuI9QD
bMskV8aBPqhPRlSfJwSQdLK8d52ovZgIE01PXZQFZw84DQsaLoNEYWC1pHxzCa9T
rGv1ZusubTYW7Xy3voGucnAHDwuxGIiRCfIzTKNgEpRicGB2W27RfC6ntbxnn1F1
8u0OPh8iMYDbRJpo89b8pUz2gyK9oUGYZNSWKA5KTOoBzN8xDw5Z
-----END CERTIFICATE-----
Generated at Fri Apr 25 06:24:17 2025 by rpki-client