Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/e2bbf5-b336-4c09-ba42-55a54df1434e/1/q46mhqb037SisDm5N4bZ1WyfVUE.roa
File: q46mhqb037SisDm5N4bZ1WyfVUE.roa (raw, json)
Hash identifier: xXhXgV0190R3J9YqFfSirVPaavfzMb4jIss+4mc25j8=
Subject key identifier: AB:8E:A6:86:A6:F4:DF:B4:A2:B0:39:B9:37:86:D9:D5:6C:9F:55:41
Certificate issuer: /CN=cbe9fc725b0c3ef10373460f9bf59bce3ed50a34
Certificate serial: 019425FD870F4E29EF83BE3A3247283EA6EB
Authority key identifier: CB:E9:FC:72:5B:0C:3E:F1:03:73:46:0F:9B:F5:9B:CE:3E:D5:0A:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y-n8clsMPvEDc0YPm_Wbzj7VCjQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/e2bbf5-b336-4c09-ba42-55a54df1434e/1/q46mhqb037SisDm5N4bZ1WyfVUE.roa
Signing time: Thu 02 Jan 2025 07:49:19 +0000
ROA not before: Thu 02 Jan 2025 07:49:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59444
IP address blocks: 176.121.80.0/22 maxlen: 22
176.121.84.0/24 maxlen: 24
176.121.85.0/24 maxlen: 24
176.121.86.0/24 maxlen: 24
176.121.87.0/24 maxlen: 24
195.64.174.0/24 maxlen: 24
195.64.175.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:87:0f:4e:29:ef:83:be:3a:32:47:28:3e:a6:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbe9fc725b0c3ef10373460f9bf59bce3ed50a34
Validity
Not Before: Jan 2 07:49:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ab8ea686a6f4dfb4a2b039b93786d9d56c9f5541
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:53:0a:49:be:8a:c9:4f:4e:48:da:1d:91:a1:
53:a1:54:74:ed:e7:82:86:e1:8d:5b:88:37:bb:14:
b1:e3:cb:b1:49:c8:02:32:4d:ee:de:e0:cc:03:ab:
00:3b:e1:f3:95:19:ce:0f:f2:da:37:47:49:c3:9a:
3a:2c:54:a5:e3:6f:60:08:04:c5:ca:f6:06:b1:d6:
84:e0:92:d3:fa:3a:a4:cb:8e:2d:55:21:fc:50:7d:
27:8b:c9:08:b5:5c:e0:d9:8f:6c:cc:42:76:7b:49:
fc:df:ab:e1:66:1c:c7:f5:48:47:31:f9:8c:98:59:
77:64:33:50:47:51:45:d6:b4:f5:19:88:b6:0e:cf:
a1:86:66:40:e8:9a:c7:91:38:3f:ff:22:a1:cc:16:
6e:60:ea:72:79:c6:ee:21:0f:76:e3:0b:35:f8:1c:
98:7c:85:23:c8:04:13:44:c3:cf:b3:57:fa:f1:48:
3d:5f:f3:c0:85:ea:87:05:5f:ba:bc:b4:ef:6b:46:
ca:55:6d:4d:52:dd:21:94:02:c5:77:85:ef:03:81:
1e:cc:5e:46:10:50:e6:64:a6:4f:ba:88:8c:ab:e4:
84:26:d6:ba:e1:5c:42:44:f4:c8:c6:cd:ec:5a:4a:
52:0f:ec:8c:69:81:8b:48:c4:21:a5:01:fb:6b:1f:
99:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:8E:A6:86:A6:F4:DF:B4:A2:B0:39:B9:37:86:D9:D5:6C:9F:55:41
X509v3 Authority Key Identifier:
keyid:CB:E9:FC:72:5B:0C:3E:F1:03:73:46:0F:9B:F5:9B:CE:3E:D5:0A:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y-n8clsMPvEDc0YPm_Wbzj7VCjQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/e2bbf5-b336-4c09-ba42-55a54df1434e/1/q46mhqb037SisDm5N4bZ1WyfVUE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/e2bbf5-b336-4c09-ba42-55a54df1434e/1/y-n8clsMPvEDc0YPm_Wbzj7VCjQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.121.80.0/21
195.64.174.0/23
Signature Algorithm: sha256WithRSAEncryption
ab:7a:8d:44:fb:92:80:27:48:1b:69:e9:2a:ff:f3:a8:35:dd:
7b:87:62:04:e6:aa:f2:fb:b0:75:c4:38:16:aa:76:40:aa:b1:
12:a7:bf:fe:04:49:ce:12:2d:61:3b:82:02:23:61:cc:a8:9a:
56:bb:61:28:19:40:d0:01:96:4e:6d:71:09:98:e8:2d:67:bc:
9c:90:8c:e2:ab:d6:5e:f2:bc:36:cf:5b:ee:2f:3b:93:bc:a2:
46:7e:82:1d:2e:8b:b9:1c:76:8a:db:47:3a:e8:87:d4:31:f6:
9e:cd:b9:75:f0:db:ab:0a:74:2d:13:92:2a:30:d8:5e:5f:9d:
10:5e:13:de:5d:1c:01:5c:a4:eb:02:4b:f0:5d:3d:73:76:7d:
57:a1:d8:46:81:eb:c5:61:4b:74:ba:91:78:9f:e0:70:06:56:
4e:92:2b:f5:4f:89:82:3b:da:d0:16:7b:7d:64:2c:11:35:bf:
f8:27:8e:3e:25:4f:a5:6a:c2:f7:96:10:05:6b:a1:46:f2:9d:
c9:fa:c5:a6:c0:a5:0f:ca:a9:1d:1b:46:eb:23:0b:96:fc:f5:
5e:e9:9b:b3:d7:97:d2:6c:0b:e7:07:db:1a:fe:21:0d:eb:35:
c0:18:dc:93:4b:1f:f6:e0:bf:a2:16:53:42:d7:e1:c9:46:60:
05:12:c1:bf
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQl/YcPTinvg746MkcoPqbrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiZTlmYzcyNWIwYzNlZjEwMzczNDYwZjliZjU5YmNlM2Vk
NTBhMzQwHhcNMjUwMTAyMDc0OTE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYjhlYTY4NmE2ZjRkZmI0YTJiMDM5YjkzNzg2ZDlkNTZjOWY1NTQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqlMKSb6KyU9OSNodkaFToVR07eeC
huGNW4g3uxSx48uxScgCMk3u3uDMA6sAO+HzlRnOD/LaN0dJw5o6LFSl429gCATF
yvYGsdaE4JLT+jqky44tVSH8UH0ni8kItVzg2Y9szEJ2e0n836vhZhzH9UhHMfmM
mFl3ZDNQR1FF1rT1GYi2Ds+hhmZA6JrHkTg//yKhzBZuYOpyecbuIQ924ws1+ByY
fIUjyAQTRMPPs1f68Ug9X/PAheqHBV+6vLTva0bKVW1NUt0hlALFd4XvA4EezF5G
EFDmZKZPuoiMq+SEJta64VxCRPTIxs3sWkpSD+yMaYGLSMQhpQH7ax+Z5QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFKuOpoam9N+0orA5uTeG2dVsn1VBMB8GA1UdIwQY
MBaAFMvp/HJbDD7xA3NGD5v1m84+1Qo0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveS1uOGNsc01QdkVEYzBZUG1fV2J6ajdWQ2pRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC9lMmJiZjUtYjMzNi00YzA5LWJhNDIt
NTVhNTRkZjE0MzRlLzEvcTQ2bWhxYjAzN1Npc0RtNU40YloxV3lmVlVFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC9lMmJiZjUtYjMzNi00YzA5LWJhNDItNTVhNTRkZjE0MzRl
LzEveS1uOGNsc01QdkVEYzBZUG1fV2J6ajdWQ2pRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDsHlQAwQB
w0CuMA0GCSqGSIb3DQEBCwUAA4IBAQCreo1E+5KAJ0gbaekq//OoNd17h2IE5qry
+7B1xDgWqnZAqrESp7/+BEnOEi1hO4ICI2HMqJpWu2EoGUDQAZZObXEJmOgtZ7yc
kIziq9Ze8rw2z1vuLzuTvKJGfoIdLou5HHaK20c66IfUMfaezbl18NurCnQtE5Iq
MNheX50QXhPeXRwBXKTrAkvwXT1zdn1XodhGgevFYUt0upF4n+BwBlZOkiv1T4mC
O9rQFnt9ZCwRNb/4J44+JU+lasL3lhAFa6FG8p3J+sWmwKUPyqkdG0brIwuW/PVe
6Zuz15fSbAvnB9sa/iEN6zXAGNyTSx/24L+iFlNC1+HJRmAFEsG/
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:18 2025 by rpki-client on console.sobornost.net