Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/e81e9a-74d9-4ca4-9f46-8f0f4d6b8939/1/FtKrNsRbY8YEqsyb0llCUh6obSk.roa
File: FtKrNsRbY8YEqsyb0llCUh6obSk.roa (raw, json)
Hash identifier: kVlJmS/e2jizfjPWD/a9+A6kgYpw3ZZGXljSwiyx0q0=
Subject key identifier: 16:D2:AB:36:C4:5B:63:C6:04:AA:CC:9B:D2:59:42:52:1E:A8:6D:29
Certificate issuer: /CN=44946968f2f7dd950ea49b87737df1f6aebdbb53
Certificate serial: 019421B1E2B0C161803C3FF67E0C8F1DDF2B
Authority key identifier: 44:94:69:68:F2:F7:DD:95:0E:A4:9B:87:73:7D:F1:F6:AE:BD:BB:53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RJRpaPL33ZUOpJuHc33x9q69u1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/e81e9a-74d9-4ca4-9f46-8f0f4d6b8939/1/FtKrNsRbY8YEqsyb0llCUh6obSk.roa
Signing time: Wed 01 Jan 2025 11:48:13 +0000
ROA not before: Wed 01 Jan 2025 11:48:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201183
IP address blocks: 46.235.9.0/24 maxlen: 24
91.217.219.0/24 maxlen: 24
94.101.108.0/24 maxlen: 24
94.156.72.0/23 maxlen: 24
94.156.156.0/23 maxlen: 24
94.156.160.0/23 maxlen: 24
164.40.188.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:e2:b0:c1:61:80:3c:3f:f6:7e:0c:8f:1d:df:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44946968f2f7dd950ea49b87737df1f6aebdbb53
Validity
Not Before: Jan 1 11:48:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=16d2ab36c45b63c604aacc9bd25942521ea86d29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:24:31:66:60:4f:71:49:2c:d5:38:e6:6c:fb:
10:12:bb:7c:f0:08:2d:05:21:aa:29:98:ca:b2:06:
90:30:e9:b9:3c:a6:93:bf:8a:e5:be:f2:f3:85:8c:
b1:04:0d:4c:bf:45:9f:46:78:bd:e7:78:6d:a2:3a:
c5:3e:74:9d:3a:53:6c:b4:d1:ee:47:83:97:12:62:
d0:0c:bb:17:e0:25:dc:72:ab:e2:7d:0a:c5:c0:90:
6e:ca:dc:0b:6c:fa:23:eb:5e:ad:3f:70:45:f8:52:
b5:1e:e0:c0:30:ea:16:45:0e:12:a9:57:f7:34:9b:
a8:1f:ff:91:d3:02:75:be:fd:dc:35:d2:82:79:fa:
4a:68:04:d0:40:79:fb:10:97:70:2e:5b:32:e5:46:
e6:ad:f8:d4:b2:49:69:55:60:a9:5b:88:ad:a8:9a:
f1:6c:cb:66:54:1f:5d:8e:fd:d1:7b:b4:02:d8:9f:
d4:41:3c:5f:c4:94:76:81:6d:1e:91:ac:37:60:74:
55:9e:5b:79:92:30:27:03:3a:c5:fe:f1:2a:b6:7a:
c7:be:c9:81:f6:8a:99:46:eb:81:31:52:a0:b8:bb:
8d:71:0a:f7:4b:7e:b1:a3:a9:0f:f7:7c:70:1e:ed:
9a:cd:8d:84:88:b8:01:73:ce:73:38:b1:72:57:aa:
67:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:D2:AB:36:C4:5B:63:C6:04:AA:CC:9B:D2:59:42:52:1E:A8:6D:29
X509v3 Authority Key Identifier:
keyid:44:94:69:68:F2:F7:DD:95:0E:A4:9B:87:73:7D:F1:F6:AE:BD:BB:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RJRpaPL33ZUOpJuHc33x9q69u1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e81e9a-74d9-4ca4-9f46-8f0f4d6b8939/1/FtKrNsRbY8YEqsyb0llCUh6obSk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e81e9a-74d9-4ca4-9f46-8f0f4d6b8939/1/RJRpaPL33ZUOpJuHc33x9q69u1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.235.9.0/24
91.217.219.0/24
94.101.108.0/24
94.156.72.0/23
94.156.156.0/23
94.156.160.0/23
164.40.188.0/22
Signature Algorithm: sha256WithRSAEncryption
54:b7:b9:bc:ec:b1:23:bd:e8:fb:29:98:77:09:f5:0e:1f:36:
b8:9e:1f:d6:c2:d1:84:80:e6:ad:f0:83:ce:da:40:42:96:71:
79:d4:06:3e:7e:94:47:f1:cb:28:47:6d:f0:36:e2:c6:23:4d:
dc:ed:72:c0:c2:4c:d7:da:93:84:90:32:b4:47:23:c6:2e:bb:
81:57:a9:17:c9:20:ac:07:f9:9f:55:5a:f0:57:2a:5a:12:89:
67:d8:57:85:fd:54:15:5a:a7:93:40:89:80:7f:d5:54:9b:d9:
a8:e6:8e:31:a9:5b:1e:b6:02:2d:ab:cb:c9:88:a0:2d:23:1b:
f2:db:9e:e7:04:5b:4b:13:4f:9f:47:59:ca:fc:88:58:bb:c4:
e5:64:d1:7b:6f:48:c6:23:fb:25:9c:60:aa:37:51:a3:32:10:
9b:e3:72:1d:66:0e:f5:91:98:e3:3e:80:18:67:c2:e5:ab:6a:
d8:b3:55:4a:87:49:96:99:fb:27:b9:2b:47:af:9a:c4:a6:3c:
10:ae:e2:4a:bd:9f:4d:ad:a4:4d:32:83:ce:54:d1:65:24:9c:
bb:32:48:b1:8b:d3:28:fc:a0:c0:98:29:e7:e6:fb:d4:46:22:
16:23:6d:e6:cb:8e:5d:cf:2e:0e:05:d2:9a:75:46:e2:92:47:
02:45:a9:d1
-----BEGIN CERTIFICATE-----
MIIFITCCBAmgAwIBAgISAZQhseKwwWGAPD/2fgyPHd8rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0OTQ2OTY4ZjJmN2RkOTUwZWE0OWI4NzczN2RmMWY2YWVi
ZGJiNTMwHhcNMjUwMTAxMTE0ODEzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNmQyYWIzNmM0NWI2M2M2MDRhYWNjOWJkMjU5NDI1MjFlYTg2ZDI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAriQxZmBPcUks1TjmbPsQErt88Agt
BSGqKZjKsgaQMOm5PKaTv4rlvvLzhYyxBA1Mv0WfRni953htojrFPnSdOlNstNHu
R4OXEmLQDLsX4CXccqvifQrFwJBuytwLbPoj616tP3BF+FK1HuDAMOoWRQ4SqVf3
NJuoH/+R0wJ1vv3cNdKCefpKaATQQHn7EJdwLlsy5UbmrfjUsklpVWCpW4itqJrx
bMtmVB9djv3Re7QC2J/UQTxfxJR2gW0ekaw3YHRVnlt5kjAnAzrF/vEqtnrHvsmB
9oqZRuuBMVKguLuNcQr3S36xo6kP93xwHu2azY2EiLgBc85zOLFyV6pnHwIDAQAB
o4ICLTCCAikwHQYDVR0OBBYEFBbSqzbEW2PGBKrMm9JZQlIeqG0pMB8GA1UdIwQY
MBaAFESUaWjy992VDqSbh3N98fauvbtTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUkpScGFQTDMzWlVPcEp1SGMzM3g5cTY5dTFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9lODFlOWEtNzRkOS00Y2E0LTlmNDYt
OGYwZjRkNmI4OTM5LzEvRnRLck5zUmJZOFlFcXN5YjBsbENVaDZvYlNrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi9lODFlOWEtNzRkOS00Y2E0LTlmNDYtOGYwZjRkNmI4OTM5
LzEvUkpScGFQTDMzWlVPcEp1SGMzM3g5cTY5dTFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQALusJAwQA
W9nbAwQAXmVsAwQBXpxIAwQBXpycAwQBXpygAwQCpCi8MA0GCSqGSIb3DQEBCwUA
A4IBAQBUt7m87LEjvej7KZh3CfUOHza4nh/WwtGEgOat8IPO2kBClnF51AY+fpRH
8csoR23wNuLGI03c7XLAwkzX2pOEkDK0RyPGLruBV6kXySCsB/mfVVrwVypaEoln
2FeF/VQVWqeTQImAf9VUm9mo5o4xqVsetgItq8vJiKAtIxvy257nBFtLE0+fR1nK
/IhYu8TlZNF7b0jGI/slnGCqN1GjMhCb43IdZg71kZjjPoAYZ8Llq2rYs1VKh0mW
mfsnuStHr5rEpjwQruJKvZ9NraRNMoPOVNFlJJy7Mkixi9Mo/KDAmCnn5vvURiIW
I23my45dzy4OBdKadUbikkcCRanR
-----END CERTIFICATE-----
Generated at Mon Apr 28 21:44:49 2025 by rpki-client