Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/01a103-5b25-4442-a892-0fe8399de727/1/RoAvwASbb4l0ZFtVXgsI3PT0AVo.roa
File: RoAvwASbb4l0ZFtVXgsI3PT0AVo.roa (raw, json)
Hash identifier: mZqoFIWYuSZ97LTT9lIF7CSJPGIZ96DKu7+NicnF+sU=
Subject key identifier: 46:80:2F:C0:04:9B:6F:89:74:64:5B:55:5E:0B:08:DC:F4:F4:01:5A
Certificate issuer: /CN=d28fcbdf572bcaf93e1544de10a176cb301106bb
Certificate serial: 0194236A42AF64954EAE783A20168D9F407D
Authority key identifier: D2:8F:CB:DF:57:2B:CA:F9:3E:15:44:DE:10:A1:76:CB:30:11:06:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0o_L31cryvk-FUTeEKF2yzARBrs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/01a103-5b25-4442-a892-0fe8399de727/1/RoAvwASbb4l0ZFtVXgsI3PT0AVo.roa
Signing time: Wed 01 Jan 2025 19:49:13 +0000
ROA not before: Wed 01 Jan 2025 19:49:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20677
IP address blocks: 46.17.244.0/22 maxlen: 22
185.38.52.0/22 maxlen: 22
185.113.148.0/22 maxlen: 22
185.113.152.0/22 maxlen: 22
185.145.220.0/22 maxlen: 22
212.87.128.0/19 maxlen: 19
2a00:fac0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:42:af:64:95:4e:ae:78:3a:20:16:8d:9f:40:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d28fcbdf572bcaf93e1544de10a176cb301106bb
Validity
Not Before: Jan 1 19:49:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=46802fc0049b6f8974645b555e0b08dcf4f4015a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:c0:95:a1:7b:9b:28:80:d3:53:88:56:86:6c:
fc:83:f8:0c:ad:8f:25:7d:52:6c:b6:51:da:e8:1f:
ba:f7:d9:6e:dd:43:3f:3c:20:48:b0:cb:10:9c:00:
9a:eb:9e:d9:24:38:20:2a:34:1b:b7:2d:e4:64:93:
47:1c:b4:05:f3:7f:c4:dd:25:85:99:ea:d3:f0:a3:
ce:79:c3:d0:eb:2f:f4:fd:65:fe:cc:67:e8:1f:b5:
a0:7d:d2:65:18:d0:cd:56:12:b0:bb:93:c1:b0:b6:
65:84:b2:e9:41:cd:1a:26:f8:55:ca:26:d9:ad:38:
e9:75:5b:93:a8:6b:1e:e7:9a:a4:0e:79:28:ce:d5:
14:59:1f:33:bf:35:e6:27:a2:0c:55:b2:17:6f:cf:
5e:5d:ae:e6:d6:0a:fa:e4:13:cb:fb:26:5f:79:e5:
ff:ab:cf:09:21:28:38:25:d1:43:a9:6b:da:48:ac:
aa:38:95:75:a4:a8:18:89:02:fc:d9:54:7c:f2:18:
04:24:96:92:a3:d6:8c:6f:ef:b0:a7:7e:ef:7f:e4:
69:88:4a:93:50:3f:0c:b1:36:f0:30:7a:8d:94:39:
5e:0c:bd:5c:b3:ab:e5:e3:04:82:06:40:be:9f:8d:
e6:02:b8:f1:fb:7e:20:82:80:c1:08:fa:39:60:f9:
5a:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:80:2F:C0:04:9B:6F:89:74:64:5B:55:5E:0B:08:DC:F4:F4:01:5A
X509v3 Authority Key Identifier:
keyid:D2:8F:CB:DF:57:2B:CA:F9:3E:15:44:DE:10:A1:76:CB:30:11:06:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0o_L31cryvk-FUTeEKF2yzARBrs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/01a103-5b25-4442-a892-0fe8399de727/1/RoAvwASbb4l0ZFtVXgsI3PT0AVo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/01a103-5b25-4442-a892-0fe8399de727/1/0o_L31cryvk-FUTeEKF2yzARBrs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.17.244.0/22
185.38.52.0/22
185.113.148.0-185.113.155.255
185.145.220.0/22
212.87.128.0/19
IPv6:
2a00:fac0::/32
Signature Algorithm: sha256WithRSAEncryption
b5:9a:a4:8b:8c:d8:b5:ba:fd:24:47:f8:d6:96:8d:bb:0a:ed:
d3:5e:86:a3:ec:8a:b9:28:81:78:0c:c0:6f:4f:28:b0:71:26:
61:2d:0a:2d:fe:a6:58:e1:c0:03:3c:ea:ea:20:13:e1:a2:1f:
04:46:c6:03:31:c8:cc:82:2c:bf:28:8a:e2:34:9e:23:9a:21:
3d:da:59:19:9c:4d:90:81:dd:57:73:3b:bd:8b:06:b1:aa:f8:
87:0e:63:64:79:ea:3f:65:97:b4:07:7d:c3:2d:99:6e:49:a7:
7e:ad:03:2c:44:fd:54:ef:28:fc:41:d5:7b:97:86:46:f0:6e:
ee:f8:7a:f1:5e:43:3f:b2:0e:06:ab:c4:a5:39:53:94:cc:21:
89:be:c8:c9:08:c4:5f:4d:6c:0c:17:81:a4:7d:2f:c7:03:1e:
41:9d:4a:60:7f:60:65:a7:b6:d7:07:79:0f:a8:dc:fb:cf:e1:
2e:fd:d1:84:9f:c6:fd:36:f8:59:02:08:c3:10:e3:3c:41:0c:
41:1c:f3:f9:36:f2:c7:2f:2e:9e:44:f7:9f:3d:51:dd:d2:a9:
bd:e7:ef:4c:c2:8c:3b:a1:5d:9a:f0:ee:f9:b6:19:d9:fc:bb:
88:bf:6f:78:f1:01:55:a9:9a:6e:b4:cc:f5:48:c0:14:41:e8:
f5:27:76:5b
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgISAZQjakKvZJVOrng6IBaNn0B9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyOGZjYmRmNTcyYmNhZjkzZTE1NDRkZTEwYTE3NmNiMzAx
MTA2YmIwHhcNMjUwMTAxMTk0OTEzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NjgwMmZjMDA0OWI2Zjg5NzQ2NDViNTU1ZTBiMDhkY2Y0ZjQwMTVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlMCVoXubKIDTU4hWhmz8g/gMrY8l
fVJstlHa6B+699lu3UM/PCBIsMsQnACa657ZJDggKjQbty3kZJNHHLQF83/E3SWF
merT8KPOecPQ6y/0/WX+zGfoH7WgfdJlGNDNVhKwu5PBsLZlhLLpQc0aJvhVyibZ
rTjpdVuTqGse55qkDnkoztUUWR8zvzXmJ6IMVbIXb89eXa7m1gr65BPL+yZfeeX/
q88JISg4JdFDqWvaSKyqOJV1pKgYiQL82VR88hgEJJaSo9aMb++wp37vf+RpiEqT
UD8MsTbwMHqNlDleDL1cs6vl4wSCBkC+n43mArjx+34ggoDBCPo5YPla8QIDAQAB
o4ICODCCAjQwHQYDVR0OBBYEFEaAL8AEm2+JdGRbVV4LCNz09AFaMB8GA1UdIwQY
MBaAFNKPy99XK8r5PhVE3hChdsswEQa7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMG9fTDMxY3J5dmstRlVUZUVLRjJ5ekFSQnJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC8wMWExMDMtNWIyNS00NDQyLWE4OTIt
MGZlODM5OWRlNzI3LzEvUm9BdndBU2JiNGwwWkZ0Vlhnc0kzUFQwQVZvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC8wMWExMDMtNWIyNS00NDQyLWE4OTItMGZlODM5OWRlNzI3
LzEvMG9fTDMxY3J5dmstRlVUZUVLRjJ5ekFSQnJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CME4GCCsGAQUFBwEHAQH/BD8wPTAsBAIAATAmAwQCLhH0AwQC
uSY0MAwDBAK5cZQDBAK5cZgDBAK5kdwDBAXUV4AwDQQCAAIwBwMFACoA+sAwDQYJ
KoZIhvcNAQELBQADggEBALWapIuM2LW6/SRH+NaWjbsK7dNehqPsirkogXgMwG9P
KLBxJmEtCi3+pljhwAM86uogE+GiHwRGxgMxyMyCLL8oiuI0niOaIT3aWRmcTZCB
3VdzO72LBrGq+IcOY2R56j9ll7QHfcMtmW5Jp36tAyxE/VTvKPxB1XuXhkbwbu74
evFeQz+yDgarxKU5U5TMIYm+yMkIxF9NbAwXgaR9L8cDHkGdSmB/YGWnttcHeQ+o
3PvP4S790YSfxv02+FkCCMMQ4zxBDEEc8/k28scvLp5E9589Ud3Sqb3n70zCjDuh
XZrw7vm2Gdn8u4i/b3jxAVWpmm60zPVIwBRB6PUndls=
-----END CERTIFICATE-----
Generated at Fri Apr 25 05:50:58 2025 by rpki-client