Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/OPuqb4i4UijMF1f_Sw1lYiCTpBg.roa
File: OPuqb4i4UijMF1f_Sw1lYiCTpBg.roa (raw, json)
Hash identifier: s1RfnYT8DrYkI0WHGmvhDr/46WOpEw/GOqpezEyT6Ks=
Subject key identifier: 38:FB:AA:6F:88:B8:52:28:CC:17:57:FF:4B:0D:65:62:20:93:A4:18
Certificate issuer: /CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Certificate serial: 0195C5976B58D8857664E7A875C67A0EB2B2
Authority key identifier: 4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/OPuqb4i4UijMF1f_Sw1lYiCTpBg.roa
Signing time: Mon 24 Mar 2025 00:39:49 +0000
ROA not before: Mon 24 Mar 2025 00:39:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197100
IP address blocks: 46.34.32.0/22 maxlen: 22
46.34.36.0/24 maxlen: 24
46.34.40.0/24 maxlen: 24
46.34.41.0/24 maxlen: 24
46.34.63.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:c5:97:6b:58:d8:85:76:64:e7:a8:75:c6:7a:0e:b2:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Validity
Not Before: Mar 24 00:39:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=38fbaa6f88b85228cc1757ff4b0d65622093a418
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:88:e8:52:33:1d:08:6f:84:8f:2e:70:26:9e:
44:6d:81:b0:13:e2:4f:5b:54:50:21:10:32:b1:51:
6e:2e:df:0f:c3:c0:01:c5:ec:d7:7e:a7:12:82:cb:
2f:9c:d2:61:d1:e8:19:97:69:3d:84:66:26:71:b8:
38:f5:70:1c:d8:a0:b0:9b:62:28:9e:42:1b:14:0d:
f5:64:00:a8:51:3a:7c:08:9c:03:88:36:67:20:7d:
c8:a6:7f:26:55:aa:61:8a:78:eb:7e:6f:2f:28:db:
02:5e:9b:76:ca:0c:ab:36:a9:d3:e9:94:13:0f:e3:
32:e5:8e:67:23:60:71:cc:e0:f9:6e:1b:19:1d:c1:
02:5e:89:e8:46:4f:d2:4e:08:fe:00:a4:cd:17:fb:
35:1a:40:44:25:73:70:00:76:7f:30:f9:04:27:a2:
d4:8f:8d:8b:46:a8:f9:60:69:8b:31:79:ae:b9:bc:
df:e1:8c:8d:d5:43:fa:cf:c6:dd:b6:84:c2:08:19:
15:e6:24:85:2b:99:88:ed:2f:c9:44:4b:50:11:26:
a8:30:e7:4d:d0:1b:2e:96:91:3f:9f:31:3b:3b:7c:
6d:2b:7e:2c:0b:d4:fb:6f:d3:7d:35:40:89:a3:ea:
93:9a:ef:34:f9:f9:cb:24:9e:89:1b:16:84:cd:f2:
ab:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:FB:AA:6F:88:B8:52:28:CC:17:57:FF:4B:0D:65:62:20:93:A4:18
X509v3 Authority Key Identifier:
keyid:4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/OPuqb4i4UijMF1f_Sw1lYiCTpBg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.34.32.0-46.34.36.255
46.34.40.0/23
46.34.63.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:7d:50:28:c8:f9:59:9a:27:89:90:d7:f3:74:86:f9:54:b1:
ee:b8:f1:3c:d3:85:5e:59:d8:c1:2a:33:ec:ea:1b:87:32:87:
0c:f7:bd:44:5e:04:66:c9:26:e2:c0:10:67:38:b2:60:07:da:
ba:76:d6:63:05:af:82:47:87:e9:15:fd:f0:f7:31:bc:bc:ba:
f4:78:fa:e0:c7:cb:fe:95:ac:90:a8:b2:42:3c:94:ca:20:cb:
83:94:77:c0:90:99:55:fc:bc:f6:1d:36:ff:25:69:9d:01:a4:
63:61:f0:8f:7f:b9:c7:14:39:7c:16:c9:8f:4f:89:cf:04:22:
f2:ea:41:31:22:d3:58:7e:0d:ac:d4:3b:e3:65:25:a8:fa:ee:
82:62:47:83:34:3f:4a:02:8f:5d:aa:96:7f:fb:35:d3:6f:43:
cb:e7:88:a5:53:bb:24:39:7c:f8:d2:0e:52:45:8b:55:db:21:
35:19:6c:8a:96:e5:44:2e:cd:8f:bd:ed:65:26:cb:90:23:e2:
0a:6f:e3:04:a1:0b:be:b2:cf:f2:cf:7c:72:8f:19:a3:8d:ed:
d1:3b:28:c0:45:5d:b4:e9:a2:8b:d0:cb:ea:09:f0:e1:a0:45:
cc:ba:05:d0:93:86:30:71:67:11:c7:69:b7:e3:2f:be:20:8c:
3b:d8:7d:af
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgISAZXFl2tY2IV2ZOeodcZ6DrKyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhNDcxY2Q2Y2U2MGFiZWRkNzQ3NjJiMTAxYWE1ZTZmNDIw
N2VmY2UwHhcNMjUwMzI0MDAzOTQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzOGZiYWE2Zjg4Yjg1MjI4Y2MxNzU3ZmY0YjBkNjU2MjIwOTNhNDE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzIjoUjMdCG+Ejy5wJp5EbYGwE+JP
W1RQIRAysVFuLt8Pw8ABxezXfqcSgssvnNJh0egZl2k9hGYmcbg49XAc2KCwm2Io
nkIbFA31ZACoUTp8CJwDiDZnIH3Ipn8mVaphinjrfm8vKNsCXpt2ygyrNqnT6ZQT
D+My5Y5nI2BxzOD5bhsZHcECXonoRk/STgj+AKTNF/s1GkBEJXNwAHZ/MPkEJ6LU
j42LRqj5YGmLMXmuubzf4YyN1UP6z8bdtoTCCBkV5iSFK5mI7S/JREtQESaoMOdN
0BsulpE/nzE7O3xtK34sC9T7b9N9NUCJo+qTmu80+fnLJJ6JGxaEzfKrmwIDAQAB
o4ICHTCCAhkwHQYDVR0OBBYEFDj7qm+IuFIozBdX/0sNZWIgk6QYMB8GA1UdIwQY
MBaAFEpHHNbOYKvt10disQGqXm9CB+/OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2tjYzFzNWdxLTNYUjJLeEFhcGViMElINzg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS9lMTc3MTQtNDY3Yi00NDMzLTliN2Qt
YTZiOTkxZjRmYWY4LzEvT1B1cWI0aTRVaWpNRjFmX1N3MWxZaUNUcEJnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS9lMTc3MTQtNDY3Yi00NDMzLTliN2QtYTZiOTkxZjRmYWY4
LzEvU2tjYzFzNWdxLTNYUjJLeEFhcGViMElINzg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaMAwDBAUuIiAD
BAAuIiQDBAEuIigDBAAuIj8wDQYJKoZIhvcNAQELBQADggEBAB99UCjI+VmaJ4mQ
1/N0hvlUse648TzThV5Z2MEqM+zqG4cyhwz3vUReBGbJJuLAEGc4smAH2rp21mMF
r4JHh+kV/fD3Mby8uvR4+uDHy/6VrJCoskI8lMogy4OUd8CQmVX8vPYdNv8laZ0B
pGNh8I9/uccUOXwWyY9Pic8EIvLqQTEi01h+DazUO+NlJaj67oJiR4M0P0oCj12q
ln/7NdNvQ8vniKVTuyQ5fPjSDlJFi1XbITUZbIqW5UQuzY+97WUmy5Aj4gpv4wSh
C76yz/LPfHKPGaON7dE7KMBFXbTpoovQy+oJ8OGgRcy6BdCThjBxZxHHabfjL74g
jDvYfa8=
-----END CERTIFICATE-----
Generated at Tue Mar 25 22:16:30 2025 by rpki-client on console.sobornost.net