Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/723b15-faac-41ff-a1aa-88739e335053/1/y9g29olg0rXKpPfu-ugn4W-buRY.roa
File: y9g29olg0rXKpPfu-ugn4W-buRY.roa (raw, json)
Hash identifier: 53QMx2XMEn2A6OHJ3kl9Qu3AJqoydkKXzYYpvQUV+Ic=
Subject key identifier: CB:D8:36:F6:89:60:D2:B5:CA:A4:F7:EE:FA:E8:27:E1:6F:9B:B9:16
Certificate issuer: /CN=fbd32968aaaa919c52791ffb07f93436b74fd508
Certificate serial: 018CC8DF245C0A4BBDB6F957CFF64C81615F
Authority key identifier: FB:D3:29:68:AA:AA:91:9C:52:79:1F:FB:07:F9:34:36:B7:4F:D5:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/723b15-faac-41ff-a1aa-88739e335053/1/y9g29olg0rXKpPfu-ugn4W-buRY.roa
Signing time: Tue 02 Jan 2024 06:31:56 +0000
ROA not before: Tue 02 Jan 2024 06:31:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51812
IP address blocks: 46.148.48.0/20 maxlen: 20
46.148.48.0/23 maxlen: 23
46.148.58.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:24:5c:0a:4b:bd:b6:f9:57:cf:f6:4c:81:61:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbd32968aaaa919c52791ffb07f93436b74fd508
Validity
Not Before: Jan 2 06:31:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cbd836f68960d2b5caa4f7eefae827e16f9bb916
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:8b:e8:a0:20:a8:cc:58:02:a1:b5:0c:d2:06:
82:48:ef:23:c6:95:26:3b:40:9c:be:d3:33:a8:9f:
db:fd:ae:d5:92:93:cf:c4:3a:df:73:f3:a3:34:25:
ba:1b:77:a1:86:fa:64:a7:52:aa:5c:c1:bb:99:97:
19:89:a1:92:d9:2e:63:89:9a:74:6c:7c:43:d2:4c:
58:fb:4e:04:f1:73:c3:43:2f:56:e4:9d:13:be:92:
73:d4:ab:ef:da:bf:c4:e5:0b:e7:3d:bf:36:09:f1:
7b:85:e1:62:d7:a5:c8:24:b0:70:db:b7:a7:32:d0:
76:45:db:ad:cc:3a:0d:89:12:40:59:61:3a:d4:52:
8f:4f:8e:93:6c:bd:c7:12:d8:d4:83:95:0d:0d:33:
5f:82:00:b4:2d:53:06:6b:f8:93:9c:9e:5e:ef:16:
52:d3:36:ef:d9:e1:b3:54:f4:1f:1a:4b:09:97:63:
9a:c8:0e:25:e5:5f:d3:67:b7:dd:9b:c6:c9:28:77:
2d:d2:09:34:d9:1d:c5:0c:a8:4f:e7:58:97:0e:ac:
a6:31:0d:54:ac:bf:1b:b6:72:a7:6a:a7:3e:e4:79:
ed:e5:46:97:47:5f:91:e1:dc:e2:b1:7e:b5:d6:6d:
3c:67:d7:84:e0:da:f0:4f:f2:1a:d7:7a:58:ed:77:
e9:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:D8:36:F6:89:60:D2:B5:CA:A4:F7:EE:FA:E8:27:E1:6F:9B:B9:16
X509v3 Authority Key Identifier:
keyid:FB:D3:29:68:AA:AA:91:9C:52:79:1F:FB:07:F9:34:36:B7:4F:D5:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/723b15-faac-41ff-a1aa-88739e335053/1/y9g29olg0rXKpPfu-ugn4W-buRY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/723b15-faac-41ff-a1aa-88739e335053/1/1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.148.48.0/20
Signature Algorithm: sha256WithRSAEncryption
00:05:33:b3:a0:6a:3a:bf:5e:ac:38:1c:12:90:2d:a6:1c:12:
77:ef:82:e0:f6:ae:19:3e:fd:37:94:cb:69:98:f8:8d:94:f8:
70:2d:21:06:27:70:b3:48:ab:57:35:17:44:f9:b2:39:0b:16:
73:0b:3f:88:42:fd:46:f0:84:54:b3:ca:bc:3b:1b:87:32:e3:
96:74:a3:f7:8e:02:29:46:03:95:e4:8d:34:45:d4:85:8d:1c:
25:7b:8b:af:40:9d:d3:1a:01:c4:7a:e5:53:69:ca:e3:0a:14:
9a:df:42:b1:9e:93:5e:b5:c6:d1:1e:c1:c1:97:00:16:b8:80:
4c:4b:4f:3a:a8:9c:3e:10:94:2f:45:52:53:5a:ce:95:8d:24:
5a:b7:a0:0e:e7:a9:d1:d1:a9:9d:51:ef:e7:fc:8b:e3:54:82:
93:83:1e:8d:cd:9c:92:93:79:07:1c:3b:01:8a:8f:de:db:ed:
5f:38:f1:9b:00:9b:9a:8f:f3:d9:30:6d:8d:ca:fc:12:e6:ec:
3a:78:20:b4:7a:17:fe:20:78:ad:50:c8:7b:c9:3e:c9:b6:29:
80:75:4c:db:cf:bb:48:c1:cf:47:88:e8:17:93:33:5d:f7:b7:
83:2a:8c:7e:6e:5a:7c:e3:3e:f8:d6:90:19:6d:5c:b8:21:ed:
28:2f:66:2f
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAYzI3yRcCku9tvlXz/ZMgWFfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiZDMyOTY4YWFhYTkxOWM1Mjc5MWZmYjA3ZjkzNDM2Yjc0
ZmQ1MDgwHhcNMjQwMTAyMDYzMTU2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYmQ4MzZmNjg5NjBkMmI1Y2FhNGY3ZWVmYWU4MjdlMTZmOWJiOTE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnIvooCCozFgCobUM0gaCSO8jxpUm
O0CcvtMzqJ/b/a7VkpPPxDrfc/OjNCW6G3ehhvpkp1KqXMG7mZcZiaGS2S5jiZp0
bHxD0kxY+04E8XPDQy9W5J0TvpJz1Kvv2r/E5QvnPb82CfF7heFi16XIJLBw27en
MtB2RdutzDoNiRJAWWE61FKPT46TbL3HEtjUg5UNDTNfggC0LVMGa/iTnJ5e7xZS
0zbv2eGzVPQfGksJl2OayA4l5V/TZ7fdm8bJKHct0gk02R3FDKhP51iXDqymMQ1U
rL8btnKnaqc+5Hnt5UaXR1+R4dzisX611m08Z9eE4NrwT/Ia13pY7XfpJQIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFMvYNvaJYNK1yqT37vroJ+Fvm7kWMB8GA1UdIwQY
MBaAFPvTKWiqqpGcUnkf+wf5NDa3T9UIMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS05TXBhS3Fxa1p4U2VSXzdCX2swTnJkUDFRZy5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTAvNzIzYjE1LWZhYWMtNDFmZi1hMWFh
LTg4NzM5ZTMzNTA1My8xL3k5ZzI5b2xnMHJYS3BQZnUtdWduNFctYnVSWS5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvYTAvNzIzYjE1LWZhYWMtNDFmZi1hMWFhLTg4NzM5ZTMzNTA1
My8xLzEtOU1wYUtxcWtaeFNlUl83Ql9rME5yZFAxUWcuY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAQulDAw
DQYJKoZIhvcNAQELBQADggEBAAAFM7Ogajq/Xqw4HBKQLaYcEnfvguD2rhk+/TeU
y2mY+I2U+HAtIQYncLNIq1c1F0T5sjkLFnMLP4hC/UbwhFSzyrw7G4cy45Z0o/eO
AilGA5XkjTRF1IWNHCV7i69AndMaAcR65VNpyuMKFJrfQrGek161xtEewcGXABa4
gExLTzqonD4QlC9FUlNazpWNJFq3oA7nqdHRqZ1R7+f8i+NUgpODHo3NnJKTeQcc
OwGKj97b7V848ZsAm5qP89kwbY3K/BLm7Dp4ILR6F/4geK1QyHvJPsm2KYB1TNvP
u0jBz0eI6BeTM133t4MqjH5uWnzjPvjWkBltXLgh7SgvZi8=
-----END CERTIFICATE-----
Generated at Wed Dec 25 21:29:13 2024 by rpki-client on console.sobornost.net