Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/0376a1-49d6-4a4d-8c2a-ed7915436b27/1/9aibnbG15OYXr_CwwXWE25MOQzQ.roa
File: 9aibnbG15OYXr_CwwXWE25MOQzQ.roa (raw, json)
Hash identifier: uojCF0tqrH10N9391h4LuClKmMmHSTH14D7jK0LX19o=
Subject key identifier: F5:A8:9B:9D:B1:B5:E4:E6:17:AF:F0:B0:C1:75:84:DB:93:0E:43:34
Certificate issuer: /CN=1501c845f13dd4ad6e9dae470d5ff69c5cca3771
Certificate serial: 019424B3DA51B2EF386E35CBEF2823DABD7C
Authority key identifier: 15:01:C8:45:F1:3D:D4:AD:6E:9D:AE:47:0D:5F:F6:9C:5C:CA:37:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FQHIRfE91K1una5HDV_2nFzKN3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/0376a1-49d6-4a4d-8c2a-ed7915436b27/1/9aibnbG15OYXr_CwwXWE25MOQzQ.roa
Signing time: Thu 02 Jan 2025 01:49:14 +0000
ROA not before: Thu 02 Jan 2025 01:49:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39636
IP address blocks: 46.233.128.0/18 maxlen: 18
89.184.96.0/19 maxlen: 19
89.184.118.0/24 maxlen: 24
94.74.0.0/18 maxlen: 18
185.182.116.0/22 maxlen: 22
2a01:8320::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:da:51:b2:ef:38:6e:35:cb:ef:28:23:da:bd:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1501c845f13dd4ad6e9dae470d5ff69c5cca3771
Validity
Not Before: Jan 2 01:49:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f5a89b9db1b5e4e617aff0b0c17584db930e4334
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:31:46:db:4a:1f:f6:34:d8:af:b0:ff:bb:5b:
ff:88:82:15:30:d4:0f:08:c9:be:6c:82:14:30:e9:
1d:49:e8:d9:3e:44:24:25:c7:1f:74:e4:6f:bc:95:
50:23:1b:1b:fc:b7:6d:98:7a:93:9a:5d:3a:e2:ca:
53:e7:3f:a0:e4:01:95:e9:80:9c:14:83:4d:7b:c5:
6b:ba:bc:0a:f4:70:b6:78:ad:07:3a:20:ad:af:59:
00:87:be:d3:40:d7:73:fd:86:ab:3c:69:41:fd:70:
c0:9b:f0:fc:e0:6e:0c:71:7f:c7:32:fc:b3:36:e0:
42:b2:1d:88:c5:20:d3:47:a0:9a:94:40:24:f7:0c:
6f:b1:ea:73:58:5a:db:99:f0:b2:85:98:e3:0b:fd:
81:e2:c9:50:d4:10:35:1a:a8:52:46:10:8d:24:3f:
fd:ab:1f:44:60:24:71:22:9e:52:4a:a6:27:ed:29:
a8:19:58:d4:70:ff:ff:08:c2:b0:73:85:58:ce:f1:
4d:a4:65:2a:af:d0:97:44:cc:3f:55:90:ae:84:0c:
3c:27:f8:8e:e4:08:af:57:ae:f1:cb:76:bd:f9:e5:
fd:8e:a1:57:92:ec:79:f6:e7:dd:a4:30:1a:22:bb:
b0:5a:f6:93:b2:6e:68:44:49:f5:23:20:11:d3:06:
26:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:A8:9B:9D:B1:B5:E4:E6:17:AF:F0:B0:C1:75:84:DB:93:0E:43:34
X509v3 Authority Key Identifier:
keyid:15:01:C8:45:F1:3D:D4:AD:6E:9D:AE:47:0D:5F:F6:9C:5C:CA:37:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FQHIRfE91K1una5HDV_2nFzKN3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/0376a1-49d6-4a4d-8c2a-ed7915436b27/1/9aibnbG15OYXr_CwwXWE25MOQzQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/0376a1-49d6-4a4d-8c2a-ed7915436b27/1/FQHIRfE91K1una5HDV_2nFzKN3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.233.128.0/18
89.184.96.0/19
94.74.0.0/18
185.182.116.0/22
IPv6:
2a01:8320::/32
Signature Algorithm: sha256WithRSAEncryption
cb:c8:42:85:90:49:27:d3:98:e7:64:fe:68:b0:dd:95:de:84:
d0:dd:65:ab:e4:f8:ae:ab:d9:78:62:28:d4:7e:2a:05:57:fa:
6a:a2:b7:f0:83:d8:b2:8f:29:48:80:b8:78:5a:64:bc:8c:26:
d6:11:b3:72:f5:6a:7f:ec:3f:08:2e:dd:6d:16:e6:da:78:8d:
9d:ea:69:cf:3c:58:02:67:0d:60:a7:1c:a0:04:e5:26:b8:33:
10:a0:8b:28:02:b0:e0:0b:52:9f:ec:7f:64:37:6b:86:dd:9d:
79:ad:ae:ee:21:ec:58:8c:93:7b:a7:95:11:70:e1:79:7f:8e:
30:2a:ff:52:a7:e1:6e:c3:98:28:fa:40:23:ec:45:84:ef:9f:
90:54:0c:9d:3c:b1:50:da:06:33:a4:b0:01:ec:27:6a:ee:eb:
5c:cf:33:d1:ec:c6:ca:14:67:07:0f:8e:ad:f2:17:12:8a:01:
af:7f:b5:3b:4c:c0:25:b0:95:e1:e9:c9:ee:ca:de:9c:46:da:
43:f0:78:eb:1c:bd:93:04:c3:93:df:bf:0c:3f:81:e5:f8:16:
31:cc:95:61:2e:ea:8a:ea:05:79:c5:4a:8c:b6:45:4d:a6:31:
1f:9a:ac:be:d8:70:03:7e:5b:0a:34:97:70:7f:52:e5:58:e8:
13:ed:2b:bf
-----BEGIN CERTIFICATE-----
MIIFHjCCBAagAwIBAgISAZQks9pRsu84bjXL7ygj2r18MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1MDFjODQ1ZjEzZGQ0YWQ2ZTlkYWU0NzBkNWZmNjljNWNj
YTM3NzEwHhcNMjUwMTAyMDE0OTE0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNWE4OWI5ZGIxYjVlNGU2MTdhZmYwYjBjMTc1ODRkYjkzMGU0MzM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmTFG20of9jTYr7D/u1v/iIIVMNQP
CMm+bIIUMOkdSejZPkQkJccfdORvvJVQIxsb/LdtmHqTml064spT5z+g5AGV6YCc
FINNe8VrurwK9HC2eK0HOiCtr1kAh77TQNdz/YarPGlB/XDAm/D84G4McX/HMvyz
NuBCsh2IxSDTR6CalEAk9wxvsepzWFrbmfCyhZjjC/2B4slQ1BA1GqhSRhCNJD/9
qx9EYCRxIp5SSqYn7SmoGVjUcP//CMKwc4VYzvFNpGUqr9CXRMw/VZCuhAw8J/iO
5AivV67xy3a9+eX9jqFXkux59ufdpDAaIruwWvaTsm5oREn1IyAR0wYmdQIDAQAB
o4ICKjCCAiYwHQYDVR0OBBYEFPWom52xteTmF6/wsMF1hNuTDkM0MB8GA1UdIwQY
MBaAFBUByEXxPdStbp2uRw1f9pxcyjdxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRlFISVJmRTkxSzF1bmE1SERWXzJuRnpLTjNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8wMzc2YTEtNDlkNi00YTRkLThjMmEt
ZWQ3OTE1NDM2YjI3LzEvOWFpYm5iRzE1T1lYcl9Dd3dYV0UyNU1PUXpRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS8wMzc2YTEtNDlkNi00YTRkLThjMmEtZWQ3OTE1NDM2YjI3
LzEvRlFISVJmRTkxSzF1bmE1SERWXzJuRnpLTjNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQGLumAAwQF
WbhgAwQGXkoAAwQCubZ0MA0EAgACMAcDBQAqAYMgMA0GCSqGSIb3DQEBCwUAA4IB
AQDLyEKFkEkn05jnZP5osN2V3oTQ3WWr5Piuq9l4YijUfioFV/pqorfwg9iyjylI
gLh4WmS8jCbWEbNy9Wp/7D8ILt1tFubaeI2d6mnPPFgCZw1gpxygBOUmuDMQoIso
ArDgC1Kf7H9kN2uG3Z15ra7uIexYjJN7p5URcOF5f44wKv9Sp+Fuw5go+kAj7EWE
75+QVAydPLFQ2gYzpLAB7Cdq7utczzPR7MbKFGcHD46t8hcSigGvf7U7TMAlsJXh
6cnuyt6cRtpD8HjrHL2TBMOT378MP4Hl+BYxzJVhLuqK6gV5xUqMtkVNpjEfmqy+
2HADflsKNJdwf1LlWOgT7Su/
-----END CERTIFICATE-----
Generated at Sun Apr 27 06:30:05 2025 by rpki-client