Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/b9bb7f-166d-41af-a1db-866b2b021fc5/1/F15HMhO2Pq5wW9Qrh7JsPbw-nBc.roa
File: F15HMhO2Pq5wW9Qrh7JsPbw-nBc.roa (raw, json)
Hash identifier: 3tHYyit8qHmV8WkBFcwd1INspCI96AThtXfSHAxYr9o=
Subject key identifier: 17:5E:47:32:13:B6:3E:AE:70:5B:D4:2B:87:B2:6C:3D:BC:3E:9C:17
Certificate issuer: /CN=aeac1b2129abbac6539f80da6550c49721d0a8c4
Certificate serial: 018CC72732F2F53DCE1C38D2F70E69B1866C
Authority key identifier: AE:AC:1B:21:29:AB:BA:C6:53:9F:80:DA:65:50:C4:97:21:D0:A8:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rqwbISmrusZTn4DaZVDElyHQqMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/b9bb7f-166d-41af-a1db-866b2b021fc5/1/F15HMhO2Pq5wW9Qrh7JsPbw-nBc.roa
Signing time: Mon 01 Jan 2024 22:31:23 +0000
ROA not before: Mon 01 Jan 2024 22:31:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205724
IP address blocks: 46.227.174.0/24 maxlen: 24
2a02:7a00:8::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:32:f2:f5:3d:ce:1c:38:d2:f7:0e:69:b1:86:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aeac1b2129abbac6539f80da6550c49721d0a8c4
Validity
Not Before: Jan 1 22:31:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=175e473213b63eae705bd42b87b26c3dbc3e9c17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:25:ef:99:b1:f2:0e:eb:c3:36:38:1d:7e:95:
61:64:ee:04:07:95:00:c0:56:0b:55:1e:18:36:e2:
86:3c:3c:5d:44:b6:69:9d:13:c9:fb:3b:6c:00:87:
e7:e5:94:5c:88:f1:2f:c5:8f:47:17:4b:21:cc:51:
77:f6:f6:38:b3:3f:9f:4b:bd:5e:8e:fc:69:4e:a4:
f6:0c:bd:37:89:b5:28:f4:bd:ae:9b:ca:7c:3a:ed:
6c:18:18:b5:72:b8:4d:ab:3f:e4:fc:55:0a:45:25:
40:1e:a6:02:83:32:8c:98:8d:88:1d:3a:0c:94:48:
bb:be:11:0a:f6:ed:c5:9b:52:c7:c9:e9:20:58:98:
74:d4:93:45:e9:7b:fa:14:75:90:d4:bb:e0:68:65:
84:49:a3:66:bb:99:ae:a0:b2:51:ce:5c:34:ee:68:
ef:bc:0a:bf:59:ab:75:11:b7:82:34:a1:3a:7c:fb:
73:13:97:eb:69:04:c7:77:ed:77:1c:d0:7d:9a:30:
7c:df:ef:c3:ad:e0:6b:6e:d3:f9:b3:8a:38:01:91:
c4:e4:f1:31:9f:89:bc:1f:a4:02:98:3f:eb:27:7a:
5b:8b:cf:dd:5c:dd:cd:d3:7f:cc:7f:fb:71:ed:a8:
71:04:95:f3:df:89:de:d7:62:c5:33:b2:ea:95:67:
98:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:5E:47:32:13:B6:3E:AE:70:5B:D4:2B:87:B2:6C:3D:BC:3E:9C:17
X509v3 Authority Key Identifier:
keyid:AE:AC:1B:21:29:AB:BA:C6:53:9F:80:DA:65:50:C4:97:21:D0:A8:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rqwbISmrusZTn4DaZVDElyHQqMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/b9bb7f-166d-41af-a1db-866b2b021fc5/1/F15HMhO2Pq5wW9Qrh7JsPbw-nBc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/b9bb7f-166d-41af-a1db-866b2b021fc5/1/rqwbISmrusZTn4DaZVDElyHQqMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.227.174.0/24
IPv6:
2a02:7a00:8::/48
Signature Algorithm: sha256WithRSAEncryption
11:f4:65:86:5c:cd:d5:4b:a9:70:9a:20:ea:b1:fd:38:d1:af:
9c:39:bb:df:94:dd:8c:b7:8e:d9:fd:4e:71:a3:e9:3e:ea:a5:
be:30:a8:b3:0f:8a:aa:7d:02:b0:a2:c4:ec:45:41:5a:6a:61:
be:46:54:ee:06:e7:a8:4f:cd:65:65:27:ff:b3:a2:be:4c:9b:
d1:05:56:67:8e:38:f9:40:dd:bc:a3:50:f6:92:a3:c1:28:ae:
12:bc:b5:af:c5:3d:5b:20:27:66:1e:ac:d3:3a:ba:5a:02:02:
a5:a0:df:5f:19:68:da:b3:61:eb:27:ee:3e:1c:61:4b:f4:14:
3c:d4:39:f4:39:99:af:cd:c6:8d:c7:62:09:cb:4f:29:67:a0:
71:3e:02:26:51:da:d1:66:44:4e:d2:a4:04:a5:92:b5:54:a9:
8a:26:30:c9:9f:02:ca:6b:b0:72:2d:b5:bb:5f:7f:cb:d9:59:
79:1e:1b:05:c5:a1:91:b2:85:a7:f1:67:1a:19:ad:43:b1:26:
5d:28:b2:d9:ac:d7:dd:eb:65:b9:4a:4c:66:75:3b:28:43:3b:
fc:50:c9:4d:a3:43:ba:5b:ae:1a:25:7d:25:4f:7a:f7:12:78:
d0:11:c6:82:9f:01:59:66:7f:fe:dc:f0:9c:8e:f4:a7:a0:0c:
46:f4:97:d2
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYzHJzLy9T3OHDjS9w5psYZsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlYWMxYjIxMjlhYmJhYzY1MzlmODBkYTY1NTBjNDk3MjFk
MGE4YzQwHhcNMjQwMTAxMjIzMTIzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNzVlNDczMjEzYjYzZWFlNzA1YmQ0MmI4N2IyNmMzZGJjM2U5YzE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtyXvmbHyDuvDNjgdfpVhZO4EB5UA
wFYLVR4YNuKGPDxdRLZpnRPJ+ztsAIfn5ZRciPEvxY9HF0shzFF39vY4sz+fS71e
jvxpTqT2DL03ibUo9L2um8p8Ou1sGBi1crhNqz/k/FUKRSVAHqYCgzKMmI2IHToM
lEi7vhEK9u3Fm1LHyekgWJh01JNF6Xv6FHWQ1LvgaGWESaNmu5muoLJRzlw07mjv
vAq/Wat1EbeCNKE6fPtzE5fraQTHd+13HNB9mjB83+/DreBrbtP5s4o4AZHE5PEx
n4m8H6QCmD/rJ3pbi8/dXN3N03/Mf/tx7ahxBJXz34ne12LFM7LqlWeYfQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFBdeRzITtj6ucFvUK4eybD28PpwXMB8GA1UdIwQY
MBaAFK6sGyEpq7rGU5+A2mVQxJch0KjEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcnF3YklTbXJ1c1pUbjREYVpWREVseUhRcU1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9iOWJiN2YtMTY2ZC00MWFmLWExZGIt
ODY2YjJiMDIxZmM1LzEvRjE1SE1oTzJQcTV3VzlRcmg3SnNQYnctbkJjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS9iOWJiN2YtMTY2ZC00MWFmLWExZGItODY2YjJiMDIxZmM1
LzEvcnF3YklTbXJ1c1pUbjREYVpWREVseUhRcU1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQALuOuMA8E
AgACMAkDBwAqAnoAAAgwDQYJKoZIhvcNAQELBQADggEBABH0ZYZczdVLqXCaIOqx
/TjRr5w5u9+U3Yy3jtn9TnGj6T7qpb4wqLMPiqp9ArCixOxFQVpqYb5GVO4G56hP
zWVlJ/+zor5Mm9EFVmeOOPlA3byjUPaSo8EorhK8ta/FPVsgJ2YerNM6uloCAqWg
318ZaNqzYesn7j4cYUv0FDzUOfQ5ma/Nxo3HYgnLTylnoHE+AiZR2tFmRE7SpASl
krVUqYomMMmfAsprsHIttbtff8vZWXkeGwXFoZGyhafxZxoZrUOxJl0ostms193r
ZblKTGZ1OyhDO/xQyU2jQ7pbrholfSVPevcSeNARxoKfAVlmf/7c8JyO9KegDEb0
l9I=
-----END CERTIFICATE-----
Generated at Wed Dec 25 21:26:42 2024 by rpki-client on console.sobornost.net