Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/2652cd-7ecf-49e8-a4f8-c7869128582c/1/noQO1tLrNCKz3bIWnBbDMmvuYLg.roa
File: noQO1tLrNCKz3bIWnBbDMmvuYLg.roa (raw, json)
Hash identifier: hYTtEju7KkB6LYquIBvGjeZyYymRK8/pFRz4XyGZMT8=
Subject key identifier: 9E:84:0E:D6:D2:EB:34:22:B3:DD:B2:16:9C:16:C3:32:6B:EE:60:B8
Certificate issuer: /CN=d8284f18cd44604bdd6d08f4d878dc61456c40fd
Certificate serial: 019425218BF4F1780F51071AA93BBC16F376
Authority key identifier: D8:28:4F:18:CD:44:60:4B:DD:6D:08:F4:D8:78:DC:61:45:6C:40:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ChPGM1EYEvdbQj02HjcYUVsQP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/2652cd-7ecf-49e8-a4f8-c7869128582c/1/noQO1tLrNCKz3bIWnBbDMmvuYLg.roa
Signing time: Thu 02 Jan 2025 03:49:02 +0000
ROA not before: Thu 02 Jan 2025 03:49:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211309
IP address blocks: 46.252.7.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:8b:f4:f1:78:0f:51:07:1a:a9:3b:bc:16:f3:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8284f18cd44604bdd6d08f4d878dc61456c40fd
Validity
Not Before: Jan 2 03:49:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9e840ed6d2eb3422b3ddb2169c16c3326bee60b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:12:e4:79:ee:17:91:40:99:5e:e6:59:30:17:
68:ba:c4:67:7f:1a:85:b8:79:48:cc:76:e7:7e:d8:
ba:98:f6:2c:b9:8b:24:5a:e1:12:0c:35:32:cd:ec:
f3:cf:a3:1e:12:ce:37:93:26:82:7e:de:b0:ec:e3:
28:b0:76:fc:64:06:bf:a3:20:d9:ff:b7:36:cd:30:
5c:f2:bf:a6:3c:9e:b4:58:61:8f:fb:c8:d2:59:7f:
23:b3:bf:b0:70:d7:6e:74:25:85:8e:93:d5:e7:74:
99:70:5e:c8:99:54:d7:b3:fa:0e:05:95:d3:81:6d:
54:26:ad:0b:60:36:8a:28:65:23:92:6b:c4:ad:62:
0b:8f:01:ae:fb:e0:34:28:40:e8:39:ce:06:f9:6d:
af:c3:b3:dc:22:0d:3d:f4:62:33:44:bf:5e:98:a8:
52:cf:69:b3:25:2e:f9:cd:e8:9d:58:42:eb:14:0a:
1d:07:5f:07:d2:08:86:6c:c9:5e:72:ff:7b:f7:85:
ba:40:0b:ba:2b:56:e2:89:02:05:4b:61:76:00:26:
95:d8:55:b8:e5:6f:c0:6c:56:41:3b:d5:f3:e5:75:
18:00:8e:fe:d1:b2:2e:dc:2d:e5:7b:a8:b2:6c:fc:
b9:5b:7c:7f:23:1e:e2:63:0f:30:f3:e4:f3:d5:5a:
fb:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:84:0E:D6:D2:EB:34:22:B3:DD:B2:16:9C:16:C3:32:6B:EE:60:B8
X509v3 Authority Key Identifier:
keyid:D8:28:4F:18:CD:44:60:4B:DD:6D:08:F4:D8:78:DC:61:45:6C:40:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ChPGM1EYEvdbQj02HjcYUVsQP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/2652cd-7ecf-49e8-a4f8-c7869128582c/1/noQO1tLrNCKz3bIWnBbDMmvuYLg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/2652cd-7ecf-49e8-a4f8-c7869128582c/1/2ChPGM1EYEvdbQj02HjcYUVsQP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.252.7.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:3a:1c:7b:c8:61:4a:6b:2a:ac:22:ff:0f:07:7c:48:50:d8:
e4:24:1c:25:e0:8b:1c:65:6d:84:7f:2c:6f:2a:df:75:9f:11:
af:06:88:76:fe:4c:66:3d:3b:74:7c:b5:87:a5:05:aa:5a:a6:
87:90:60:d7:ac:10:a1:0d:1b:4c:18:17:3b:b1:c0:c1:66:50:
d5:a1:6f:3d:55:9f:46:ab:f6:56:5d:20:2a:79:68:d4:0f:ee:
13:e8:d9:ec:b3:a4:63:71:0f:a7:88:1f:00:78:8d:84:07:29:
24:4e:33:3c:cd:79:a1:f1:9a:95:e3:0a:71:bd:58:79:07:8e:
8c:95:15:e9:09:8f:b4:c7:a6:88:f9:f4:48:e2:28:d5:dd:eb:
1d:e4:d5:0c:9d:84:93:ee:f0:94:e9:58:99:23:ff:05:ec:7e:
54:82:3c:44:94:9d:dd:39:58:2f:ff:09:f3:57:11:d4:40:9a:
af:80:33:63:5a:dc:87:40:1a:83:31:ef:29:24:d0:21:d2:ba:
df:e0:83:9f:dc:7c:1e:39:3a:74:12:31:94:28:db:48:c9:10:
8c:15:64:87:f8:7f:88:73:ee:2e:f4:41:62:1e:11:ae:ef:5c:
21:41:8e:78:bf:5c:f6:a1:4b:61:32:51:65:ed:00:e9:07:3f:
f7:2d:37:fd
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQlIYv08XgPUQcaqTu8FvN2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4Mjg0ZjE4Y2Q0NDYwNGJkZDZkMDhmNGQ4NzhkYzYxNDU2
YzQwZmQwHhcNMjUwMTAyMDM0OTAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZTg0MGVkNmQyZWIzNDIyYjNkZGIyMTY5YzE2YzMzMjZiZWU2MGI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuhLkee4XkUCZXuZZMBdousRnfxqF
uHlIzHbnfti6mPYsuYskWuESDDUyzezzz6MeEs43kyaCft6w7OMosHb8ZAa/oyDZ
/7c2zTBc8r+mPJ60WGGP+8jSWX8js7+wcNdudCWFjpPV53SZcF7ImVTXs/oOBZXT
gW1UJq0LYDaKKGUjkmvErWILjwGu++A0KEDoOc4G+W2vw7PcIg099GIzRL9emKhS
z2mzJS75zeidWELrFAodB18H0giGbMlecv9794W6QAu6K1biiQIFS2F2ACaV2FW4
5W/AbFZBO9Xz5XUYAI7+0bIu3C3le6iybPy5W3x/Ix7iYw8w8+Tz1Vr7LwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJ6EDtbS6zQis92yFpwWwzJr7mC4MB8GA1UdIwQY
MBaAFNgoTxjNRGBL3W0I9Nh43GFFbED9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMkNoUEdNMUVZRXZkYlFqMDJIamNZVVZzUVAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi8yNjUyY2QtN2VjZi00OWU4LWE0Zjgt
Yzc4NjkxMjg1ODJjLzEvbm9RTzF0THJOQ0t6M2JJV25CYkRNbXZ1WUxnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi8yNjUyY2QtN2VjZi00OWU4LWE0ZjgtYzc4NjkxMjg1ODJj
LzEvMkNoUEdNMUVZRXZkYlFqMDJIamNZVVZzUVAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALvwHMA0G
CSqGSIb3DQEBCwUAA4IBAQC2Ohx7yGFKayqsIv8PB3xIUNjkJBwl4IscZW2Efyxv
Kt91nxGvBoh2/kxmPTt0fLWHpQWqWqaHkGDXrBChDRtMGBc7scDBZlDVoW89VZ9G
q/ZWXSAqeWjUD+4T6Nnss6RjcQ+niB8AeI2EBykkTjM8zXmh8ZqV4wpxvVh5B46M
lRXpCY+0x6aI+fRI4ijV3esd5NUMnYST7vCU6ViZI/8F7H5UgjxElJ3dOVgv/wnz
VxHUQJqvgDNjWtyHQBqDMe8pJNAh0rrf4IOf3HweOTp0EjGUKNtIyRCMFWSH+H+I
c+4u9EFiHhGu71whQY54v1z2oUthMlFl7QDpBz/3LTf9
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:29 2025 by rpki-client on console.sobornost.net