Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/b0c402-e09e-4c69-acc9-84da62066e8a/1/QmUYw5l8TMqaNfF3JSU0acuRB3s.roa
File: QmUYw5l8TMqaNfF3JSU0acuRB3s.roa (raw, json)
Hash identifier: t39joXHyBYMdwOJnRsabaP0OeOGjo1Nb45Zc+DrVAXM=
Subject key identifier: 42:65:18:C3:99:7C:4C:CA:9A:35:F1:77:25:25:34:69:CB:91:07:7B
Certificate issuer: /CN=026d511ce3af90c4d601c7ccf8360523713e2c90
Certificate serial: 01938C070342F37078334ADFCEE9BF075C39
Authority key identifier: 02:6D:51:1C:E3:AF:90:C4:D6:01:C7:CC:F8:36:05:23:71:3E:2C:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Am1RHOOvkMTWAcfM-DYFI3E-LJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/b0c402-e09e-4c69-acc9-84da62066e8a/1/QmUYw5l8TMqaNfF3JSU0acuRB3s.roa
Signing time: Tue 03 Dec 2024 10:18:10 +0000
ROA not before: Tue 03 Dec 2024 10:18:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200359
IP address blocks: 46.232.168.0/24 maxlen: 24
46.232.169.0/24 maxlen: 24
46.232.172.0/24 maxlen: 24
46.232.173.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:8c:07:03:42:f3:70:78:33:4a:df:ce:e9:bf:07:5c:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=026d511ce3af90c4d601c7ccf8360523713e2c90
Validity
Not Before: Dec 3 10:18:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=426518c3997c4cca9a35f17725253469cb91077b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:6d:12:ff:ef:3e:cb:06:a5:ee:b7:49:f8:77:
33:31:3b:7a:ef:7d:bd:0d:20:21:09:f1:17:df:f6:
ab:95:b5:21:7f:0c:97:2c:a9:a3:1f:33:e9:ee:67:
9b:ec:7b:c4:ad:03:9c:d9:00:b7:55:c6:45:7e:ed:
42:c7:58:dc:e0:9a:9d:86:86:80:cd:73:27:e3:98:
41:2a:d2:a7:e8:28:04:ef:8d:88:91:c6:d5:40:59:
06:05:03:fc:ed:93:b5:29:cb:00:c2:b2:86:0b:a4:
53:40:37:e3:b7:ff:0d:c8:e9:c8:09:2e:19:58:12:
1b:ef:56:4c:9e:8e:56:12:50:f6:15:e8:08:78:21:
9f:d2:79:78:18:91:8f:17:ad:12:6d:94:47:d7:dc:
18:45:99:56:a1:26:7f:3d:c2:74:30:94:96:1f:a7:
ae:91:d7:af:68:ee:f3:26:dd:bc:3b:1f:f1:ea:ea:
04:46:e8:34:2d:3a:46:f2:83:95:81:c0:e2:5d:71:
96:40:2c:be:2f:e9:83:9c:d9:88:3e:48:b7:64:09:
0e:7b:35:85:63:b5:8e:4e:50:39:d6:5c:45:c2:f3:
96:db:b3:bf:61:ad:33:77:f4:5f:f3:c2:7e:df:50:
8e:a2:75:e4:64:d1:df:77:22:1b:d8:af:ae:3e:f1:
91:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:65:18:C3:99:7C:4C:CA:9A:35:F1:77:25:25:34:69:CB:91:07:7B
X509v3 Authority Key Identifier:
keyid:02:6D:51:1C:E3:AF:90:C4:D6:01:C7:CC:F8:36:05:23:71:3E:2C:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Am1RHOOvkMTWAcfM-DYFI3E-LJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b0c402-e09e-4c69-acc9-84da62066e8a/1/QmUYw5l8TMqaNfF3JSU0acuRB3s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b0c402-e09e-4c69-acc9-84da62066e8a/1/Am1RHOOvkMTWAcfM-DYFI3E-LJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.232.168.0/23
46.232.172.0/23
Signature Algorithm: sha256WithRSAEncryption
90:f4:0e:50:fa:7d:6f:ca:d3:cf:9f:39:e5:bf:5a:3f:af:50:
48:1c:6e:e1:fd:10:e1:6d:6a:90:9b:b4:5d:e7:96:f1:58:63:
c9:7a:3c:83:db:4e:72:3b:91:b1:27:66:1d:ad:79:e0:05:e6:
7f:0f:53:04:b5:b3:71:75:3e:56:30:76:43:16:90:3d:d0:ee:
37:6d:b4:42:4c:42:e1:d9:e9:1c:8c:cb:1a:17:ed:a7:b6:c0:
04:6e:e5:43:f7:f4:46:28:55:70:8d:18:0e:99:08:bb:2a:aa:
a2:a4:9b:b6:8d:87:75:35:9e:a5:8e:a7:4f:c3:02:ff:e1:83:
57:01:6a:cb:df:cd:4e:1a:1f:1d:93:a4:a8:10:84:f1:d4:c5:
90:f0:2c:aa:08:5b:8f:d5:28:86:8f:af:01:eb:fd:3b:0b:f9:
5c:29:8b:1e:9d:41:37:3d:c8:e7:60:ec:0c:ec:44:2a:77:ed:
06:92:ae:80:6d:1a:37:71:36:48:53:50:62:7b:bd:c2:8f:11:
e2:5d:c7:da:5a:50:c5:ec:4d:7c:4e:a2:e1:33:0f:52:9d:83:
23:22:24:aa:fb:5d:f0:bb:5f:19:97:3d:dc:e6:db:4a:ec:62:
d2:a2:bc:53:a2:6a:92:7b:8f:b9:c3:e6:5b:82:72:ea:b8:a3:
9a:15:78:84
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZOMBwNC83B4M0rfzum/B1w5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyNmQ1MTFjZTNhZjkwYzRkNjAxYzdjY2Y4MzYwNTIzNzEz
ZTJjOTAwHhcNMjQxMjAzMTAxODEwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MjY1MThjMzk5N2M0Y2NhOWEzNWYxNzcyNTI1MzQ2OWNiOTEwNzdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAum0S/+8+ywal7rdJ+HczMTt67329
DSAhCfEX3/arlbUhfwyXLKmjHzPp7meb7HvErQOc2QC3VcZFfu1Cx1jc4JqdhoaA
zXMn45hBKtKn6CgE742IkcbVQFkGBQP87ZO1KcsAwrKGC6RTQDfjt/8NyOnICS4Z
WBIb71ZMno5WElD2FegIeCGf0nl4GJGPF60SbZRH19wYRZlWoSZ/PcJ0MJSWH6eu
kdevaO7zJt28Ox/x6uoERug0LTpG8oOVgcDiXXGWQCy+L+mDnNmIPki3ZAkOezWF
Y7WOTlA51lxFwvOW27O/Ya0zd/Rf88J+31COonXkZNHfdyIb2K+uPvGRFQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFEJlGMOZfEzKmjXxdyUlNGnLkQd7MB8GA1UdIwQY
MBaAFAJtURzjr5DE1gHHzPg2BSNxPiyQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQW0xUkhPT3ZrTVRXQWNmTS1EWUZJM0UtTEpBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC9iMGM0MDItZTA5ZS00YzY5LWFjYzkt
ODRkYTYyMDY2ZThhLzEvUW1VWXc1bDhUTXFhTmZGM0pTVTBhY3VSQjNzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC9iMGM0MDItZTA5ZS00YzY5LWFjYzktODRkYTYyMDY2ZThh
LzEvQW0xUkhPT3ZrTVRXQWNmTS1EWUZJM0UtTEpBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBLuioAwQB
LuisMA0GCSqGSIb3DQEBCwUAA4IBAQCQ9A5Q+n1vytPPnznlv1o/r1BIHG7h/RDh
bWqQm7Rd55bxWGPJejyD205yO5GxJ2YdrXngBeZ/D1MEtbNxdT5WMHZDFpA90O43
bbRCTELh2ekcjMsaF+2ntsAEbuVD9/RGKFVwjRgOmQi7KqqipJu2jYd1NZ6ljqdP
wwL/4YNXAWrL381OGh8dk6SoEITx1MWQ8CyqCFuP1SiGj68B6/07C/lcKYsenUE3
PcjnYOwM7EQqd+0Gkq6AbRo3cTZIU1Bie73CjxHiXcfaWlDF7E18TqLhMw9SnYMj
IiSq+13wu18Zlz3c5ttK7GLSorxTomqSe4+5w+ZbgnLquKOaFXiE
-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:34 2024 by rpki-client on console.sobornost.net