Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/f97d3d-ed64-40b7-8b7c-152b0abd7c0c/1/9-fbWWjNC4mOvVefigl9UV2UFJs.roa
File: 9-fbWWjNC4mOvVefigl9UV2UFJs.roa (raw, json)
Hash identifier: tWgz0w4Sqnk4S40gqRVMtTMDJNe1eyYOZFDB5oZ2xOA=
Subject key identifier: F7:E7:DB:59:68:CD:0B:89:8E:BD:57:9F:8A:09:7D:51:5D:94:14:9B
Certificate issuer: /CN=3ca6fa999e8a674aa5332deb71f1bad0245c8dc1
Certificate serial: 019425FDC11940123B24493E1585B3DBF58C
Authority key identifier: 3C:A6:FA:99:9E:8A:67:4A:A5:33:2D:EB:71:F1:BA:D0:24:5C:8D:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PKb6mZ6KZ0qlMy3rcfG60CRcjcE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/f97d3d-ed64-40b7-8b7c-152b0abd7c0c/1/9-fbWWjNC4mOvVefigl9UV2UFJs.roa
Signing time: Thu 02 Jan 2025 07:49:34 +0000
ROA not before: Thu 02 Jan 2025 07:49:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35562
IP address blocks: 46.174.240.0/21 maxlen: 21
195.189.248.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:c1:19:40:12:3b:24:49:3e:15:85:b3:db:f5:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ca6fa999e8a674aa5332deb71f1bad0245c8dc1
Validity
Not Before: Jan 2 07:49:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f7e7db5968cd0b898ebd579f8a097d515d94149b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:de:b4:1d:07:30:8c:4d:08:aa:3f:f7:f5:f5:
e3:85:97:49:e8:56:61:27:f3:5f:0a:a5:3a:71:1b:
02:c0:27:54:61:a9:a0:2f:08:6c:a4:68:f6:97:b0:
f0:8e:19:f6:7d:6a:b7:14:bb:a6:56:f2:99:8a:e4:
d2:ae:55:32:87:e3:cc:db:8f:72:b5:3f:1a:39:93:
e3:1c:43:30:ac:89:c6:1c:d2:b3:ad:ba:9d:52:18:
df:35:1c:15:41:38:f0:02:40:ca:1e:eb:38:d7:cc:
2b:73:9a:0f:c6:68:ce:5a:26:ab:1f:d4:d1:1f:16:
8e:3a:32:5d:a6:6c:47:34:c9:81:69:98:21:6e:49:
e4:07:b2:86:52:37:37:06:67:6e:72:73:5e:d1:cf:
ee:25:a7:95:51:11:1b:f7:46:fd:b8:0f:08:1f:fc:
b8:53:ee:db:2d:ea:94:5d:d0:a3:21:30:43:df:dd:
d8:71:4d:b7:ce:18:e5:1a:77:8f:8c:58:ff:63:8c:
7c:70:38:f7:08:61:37:a5:5b:99:63:e1:63:08:5f:
fe:b4:9b:ff:92:94:51:24:fa:60:b7:28:55:e1:06:
7f:e3:56:05:9d:f8:d4:b8:09:f9:2f:f5:71:7b:06:
41:07:b8:66:44:2b:41:fb:9c:f8:a8:a0:f6:af:79:
52:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:E7:DB:59:68:CD:0B:89:8E:BD:57:9F:8A:09:7D:51:5D:94:14:9B
X509v3 Authority Key Identifier:
keyid:3C:A6:FA:99:9E:8A:67:4A:A5:33:2D:EB:71:F1:BA:D0:24:5C:8D:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PKb6mZ6KZ0qlMy3rcfG60CRcjcE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f97d3d-ed64-40b7-8b7c-152b0abd7c0c/1/9-fbWWjNC4mOvVefigl9UV2UFJs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f97d3d-ed64-40b7-8b7c-152b0abd7c0c/1/PKb6mZ6KZ0qlMy3rcfG60CRcjcE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.174.240.0/21
195.189.248.0/23
Signature Algorithm: sha256WithRSAEncryption
05:d7:c7:5d:54:d9:61:24:a7:37:6a:20:77:de:26:c4:fc:22:
e2:9c:b0:a9:5a:1b:5c:2c:2f:88:ec:10:c0:6e:f6:6e:22:3d:
85:de:f5:3d:c9:62:93:8d:d0:9f:7f:ee:59:30:76:a1:1a:6d:
29:72:7f:59:ed:2f:63:ae:33:d0:2c:17:d0:d3:33:8e:2b:eb:
91:ef:87:1d:7d:fd:a2:8c:d8:4f:79:a0:69:e8:e5:88:81:73:
c5:0b:40:3f:f9:8c:89:04:1e:bf:ab:98:fb:20:e7:1b:ce:16:
75:e8:c0:16:4d:0d:ef:6b:47:70:b5:9f:c1:c8:68:6b:59:b7:
ca:b7:e5:29:aa:f5:01:c9:3e:58:bb:cb:87:22:8c:9d:1c:f7:
4c:03:0d:c5:fa:35:1f:5e:31:98:c4:be:c9:9e:60:0e:a1:63:
2e:29:06:0c:b2:b6:32:a2:b4:a7:3c:f1:00:88:e7:c1:86:ca:
95:d0:ee:22:b2:31:02:32:59:22:8e:5b:d8:28:16:3c:42:d2:
a9:05:0f:e9:3b:27:50:67:c5:38:e2:29:09:92:7a:e1:5f:8d:
f0:f7:9b:60:76:9a:c8:12:86:a7:eb:78:25:65:ea:88:b8:d3:
53:f8:d4:fc:d6:94:4b:06:d5:ce:2d:2d:46:7b:85:22:9c:bb:
c4:e0:12:e3
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQl/cEZQBI7JEk+FYWz2/WMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjYTZmYTk5OWU4YTY3NGFhNTMzMmRlYjcxZjFiYWQwMjQ1
YzhkYzEwHhcNMjUwMTAyMDc0OTM0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmN2U3ZGI1OTY4Y2QwYjg5OGViZDU3OWY4YTA5N2Q1MTVkOTQxNDliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuN60HQcwjE0Iqj/39fXjhZdJ6FZh
J/NfCqU6cRsCwCdUYamgLwhspGj2l7Dwjhn2fWq3FLumVvKZiuTSrlUyh+PM249y
tT8aOZPjHEMwrInGHNKzrbqdUhjfNRwVQTjwAkDKHus418wrc5oPxmjOWiarH9TR
HxaOOjJdpmxHNMmBaZghbknkB7KGUjc3BmducnNe0c/uJaeVUREb90b9uA8IH/y4
U+7bLeqUXdCjITBD393YcU23zhjlGnePjFj/Y4x8cDj3CGE3pVuZY+FjCF/+tJv/
kpRRJPpgtyhV4QZ/41YFnfjUuAn5L/VxewZBB7hmRCtB+5z4qKD2r3lSPQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFPfn21lozQuJjr1Xn4oJfVFdlBSbMB8GA1UdIwQY
MBaAFDym+pmeimdKpTMt63HxutAkXI3BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUEtiNm1aNktaMHFsTXkzcmNmRzYwQ1JjamNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9mOTdkM2QtZWQ2NC00MGI3LThiN2Mt
MTUyYjBhYmQ3YzBjLzEvOS1mYldXak5DNG1PdlZlZmlnbDlVVjJVRkpzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9mOTdkM2QtZWQ2NC00MGI3LThiN2MtMTUyYjBhYmQ3YzBj
LzEvUEtiNm1aNktaMHFsTXkzcmNmRzYwQ1JjamNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDLq7wAwQB
w734MA0GCSqGSIb3DQEBCwUAA4IBAQAF18ddVNlhJKc3aiB33ibE/CLinLCpWhtc
LC+I7BDAbvZuIj2F3vU9yWKTjdCff+5ZMHahGm0pcn9Z7S9jrjPQLBfQ0zOOK+uR
74cdff2ijNhPeaBp6OWIgXPFC0A/+YyJBB6/q5j7IOcbzhZ16MAWTQ3va0dwtZ/B
yGhrWbfKt+UpqvUByT5Yu8uHIoydHPdMAw3F+jUfXjGYxL7JnmAOoWMuKQYMsrYy
orSnPPEAiOfBhsqV0O4isjECMlkijlvYKBY8QtKpBQ/pOydQZ8U44ikJknrhX43w
95tgdprIEoan63glZeqIuNNT+NT81pRLBtXOLS1Ge4UinLvE4BLj
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:39 2025 by rpki-client on console.sobornost.net