Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/e03bd4-fae6-4d9d-9ab3-0231ab9ee7c2/1/i0q0WkljmRyWQBIX1k1gWh9MzA8.roa
File: i0q0WkljmRyWQBIX1k1gWh9MzA8.roa (raw, json)
Hash identifier: trVbr6O3e+ojVgxfkyiAOzBDkcebOcDQG0rTpSEVsGs=
Subject key identifier: 8B:4A:B4:5A:49:63:99:1C:96:40:12:17:D6:4D:60:5A:1F:4C:CC:0F
Certificate issuer: /CN=eaab976ee39968b70271276f6d22e5b91c8e16e3
Certificate serial: 0194266B515CA8529975EB28C493E599EF58
Authority key identifier: EA:AB:97:6E:E3:99:68:B7:02:71:27:6F:6D:22:E5:B9:1C:8E:16:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6quXbuOZaLcCcSdvbSLluRyOFuM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/e03bd4-fae6-4d9d-9ab3-0231ab9ee7c2/1/i0q0WkljmRyWQBIX1k1gWh9MzA8.roa
Signing time: Thu 02 Jan 2025 09:49:14 +0000
ROA not before: Thu 02 Jan 2025 09:49:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43614
IP address blocks: 46.255.224.0/21 maxlen: 21
185.3.8.0/22 maxlen: 22
2a00:da80::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:51:5c:a8:52:99:75:eb:28:c4:93:e5:99:ef:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaab976ee39968b70271276f6d22e5b91c8e16e3
Validity
Not Before: Jan 2 09:49:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8b4ab45a4963991c96401217d64d605a1f4ccc0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:8e:2b:9b:e5:88:5b:ba:62:3e:32:31:3d:06:
83:e5:9b:24:25:ae:c7:f3:92:fd:66:c4:df:59:51:
02:89:ba:7f:5d:85:99:24:61:b8:68:6b:15:b1:4e:
d5:ff:48:e2:63:2d:d5:78:00:a1:4c:46:26:ef:0d:
8c:43:a7:0f:44:b1:6a:db:8d:d6:9f:0c:a9:fb:64:
85:c3:fc:d8:8d:2e:14:86:a6:28:63:c8:1b:c5:7c:
db:f6:f9:a3:ca:47:da:e8:16:9a:aa:e0:8c:dc:84:
fe:6e:ca:6e:af:b9:95:eb:69:b3:b9:3f:fa:ee:f7:
73:3b:b1:cc:51:1f:a2:29:67:3b:f1:dc:5d:e3:b9:
be:9e:13:ac:a2:49:ed:26:6c:3e:ae:b7:b4:91:43:
58:1a:63:02:d5:ce:bf:fb:74:38:bb:d0:78:f9:d4:
60:84:ee:72:28:82:75:79:10:f7:35:9d:c6:54:26:
1a:36:80:1f:45:f6:f2:26:56:ea:49:b4:20:78:ff:
0b:82:23:8f:d6:1f:3c:6d:ca:dd:30:3a:f0:29:81:
90:e3:d4:6e:c0:21:27:73:46:a7:4d:ad:a7:6c:78:
03:83:df:c2:08:ac:9d:05:37:2e:bb:79:02:61:cf:
0a:c0:dc:6d:b6:c4:b2:d3:3b:2b:e8:8e:8a:27:a4:
e3:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:4A:B4:5A:49:63:99:1C:96:40:12:17:D6:4D:60:5A:1F:4C:CC:0F
X509v3 Authority Key Identifier:
keyid:EA:AB:97:6E:E3:99:68:B7:02:71:27:6F:6D:22:E5:B9:1C:8E:16:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6quXbuOZaLcCcSdvbSLluRyOFuM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/e03bd4-fae6-4d9d-9ab3-0231ab9ee7c2/1/i0q0WkljmRyWQBIX1k1gWh9MzA8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/e03bd4-fae6-4d9d-9ab3-0231ab9ee7c2/1/6quXbuOZaLcCcSdvbSLluRyOFuM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.255.224.0/21
185.3.8.0/22
IPv6:
2a00:da80::/32
Signature Algorithm: sha256WithRSAEncryption
4f:d6:bd:b2:40:5f:19:db:71:8d:cb:86:d3:a1:37:4b:b4:59:
7f:41:ca:89:06:be:5f:7e:2b:63:23:0e:bc:e9:c4:95:9b:b9:
dc:1f:d5:93:9c:22:b2:aa:ae:69:b4:b4:a4:7c:6f:66:a8:27:
d7:36:4f:a7:43:0b:6c:3c:81:31:0a:7f:02:36:29:7b:39:49:
6a:c6:97:70:96:8c:e3:e6:c4:ba:a9:95:91:dd:d2:cd:88:28:
a9:b9:e4:f3:a9:d3:40:ff:f5:1d:75:4c:97:eb:7b:49:b2:c2:
fa:b0:e3:e7:76:f3:e1:91:cc:cc:12:7b:f7:be:b4:9e:5a:3a:
84:1a:d3:7c:d5:c8:50:c5:76:4d:3a:52:cc:a0:4a:c2:66:2d:
d9:46:5b:c1:ff:5c:c5:33:d0:f3:d3:c5:08:cc:7f:aa:5e:0e:
dc:d2:20:60:af:6e:ba:3e:ce:22:f6:7f:2a:1f:61:a5:5d:b7:
f0:9c:58:f3:ac:bb:d4:d5:88:69:f4:06:e1:e5:b3:f0:b7:77:
0e:fc:11:e1:70:c5:5f:bc:50:bc:ce:3b:1c:7b:7a:11:95:8b:
40:32:40:0b:55:95:0a:77:de:6e:ce:d1:23:99:01:43:81:dd:
52:1f:ec:ff:77:19:60:72:29:13:a9:fe:f1:78:18:54:6f:64:
6b:7b:83:16
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAZQma1FcqFKZdesoxJPlme9YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhYWI5NzZlZTM5OTY4YjcwMjcxMjc2ZjZkMjJlNWI5MWM4
ZTE2ZTMwHhcNMjUwMTAyMDk0OTE0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YjRhYjQ1YTQ5NjM5OTFjOTY0MDEyMTdkNjRkNjA1YTFmNGNjYzBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzo4rm+WIW7piPjIxPQaD5ZskJa7H
85L9ZsTfWVECibp/XYWZJGG4aGsVsU7V/0jiYy3VeAChTEYm7w2MQ6cPRLFq243W
nwyp+2SFw/zYjS4UhqYoY8gbxXzb9vmjykfa6BaaquCM3IT+bspur7mV62mzuT/6
7vdzO7HMUR+iKWc78dxd47m+nhOsokntJmw+rre0kUNYGmMC1c6/+3Q4u9B4+dRg
hO5yKIJ1eRD3NZ3GVCYaNoAfRfbyJlbqSbQgeP8LgiOP1h88bcrdMDrwKYGQ49Ru
wCEnc0anTa2nbHgDg9/CCKydBTcuu3kCYc8KwNxttsSy0zsr6I6KJ6TjPQIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFItKtFpJY5kclkASF9ZNYFofTMwPMB8GA1UdIwQY
MBaAFOqrl27jmWi3AnEnb20i5bkcjhbjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNnF1WGJ1T1phTGNDY1NkdmJTTGx1UnlPRnVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9lMDNiZDQtZmFlNi00ZDlkLTlhYjMt
MDIzMWFiOWVlN2MyLzEvaTBxMFdrbGptUnlXUUJJWDFrMWdXaDlNekE4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy9lMDNiZDQtZmFlNi00ZDlkLTlhYjMtMDIzMWFiOWVlN2My
LzEvNnF1WGJ1T1phTGNDY1NkdmJTTGx1UnlPRnVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQDLv/gAwQC
uQMIMA0EAgACMAcDBQAqANqAMA0GCSqGSIb3DQEBCwUAA4IBAQBP1r2yQF8Z23GN
y4bToTdLtFl/QcqJBr5ffitjIw686cSVm7ncH9WTnCKyqq5ptLSkfG9mqCfXNk+n
QwtsPIExCn8CNil7OUlqxpdwlozj5sS6qZWR3dLNiCipueTzqdNA//UddUyX63tJ
ssL6sOPndvPhkczMEnv3vrSeWjqEGtN81chQxXZNOlLMoErCZi3ZRlvB/1zFM9Dz
08UIzH+qXg7c0iBgr266Ps4i9n8qH2GlXbfwnFjzrLvU1Yhp9Abh5bPwt3cO/BHh
cMVfvFC8zjsce3oRlYtAMkALVZUKd95uztEjmQFDgd1SH+z/dxlgcikTqf7xeBhU
b2Rre4MW
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:50 2025 by rpki-client on console.sobornost.net