Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/659d27-bbb5-49f4-8fd1-c264b75b6b78/1/4NCyaBU3y3IsV-tIz8ykBHkjQrA.roa
File: 4NCyaBU3y3IsV-tIz8ykBHkjQrA.roa (raw, json)
Hash identifier: 6MR/wTh/d3g4brX5BBFxl1tdarfWH7geP5gRFSxNByI=
Subject key identifier: E0:D0:B2:68:15:37:CB:72:2C:57:EB:48:CF:CC:A4:04:79:23:42:B0
Certificate issuer: /CN=e2b4692a9291f2c67b56cc15da4d310120230177
Certificate serial: 01941F8C6F13D1669B7BD99F6D7D45D3D44E
Authority key identifier: E2:B4:69:2A:92:91:F2:C6:7B:56:CC:15:DA:4D:31:01:20:23:01:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4rRpKpKR8sZ7VswV2k0xASAjAXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/659d27-bbb5-49f4-8fd1-c264b75b6b78/1/4NCyaBU3y3IsV-tIz8ykBHkjQrA.roa
Signing time: Wed 01 Jan 2025 01:48:04 +0000
ROA not before: Wed 01 Jan 2025 01:48:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48416
IP address blocks: 46.32.64.0/22 maxlen: 22
46.32.68.0/22 maxlen: 22
46.32.72.0/22 maxlen: 22
46.32.76.0/22 maxlen: 22
46.32.80.0/22 maxlen: 22
46.32.84.0/22 maxlen: 22
46.32.88.0/22 maxlen: 22
46.32.92.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:6f:13:d1:66:9b:7b:d9:9f:6d:7d:45:d3:d4:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2b4692a9291f2c67b56cc15da4d310120230177
Validity
Not Before: Jan 1 01:48:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e0d0b2681537cb722c57eb48cfcca404792342b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:12:f9:49:43:69:32:83:55:53:6c:73:1f:db:
40:5e:d6:81:05:12:c8:8f:08:81:99:90:e6:48:2f:
35:32:6f:b1:ab:47:53:bf:2d:0f:af:bc:e9:2b:70:
ff:30:7b:9a:28:15:50:b2:b2:6a:3e:5f:34:cb:ea:
eb:44:9d:1f:f4:05:4e:a8:fe:8c:2a:00:db:5e:5c:
08:ac:92:03:7c:1a:a8:d7:ca:24:fd:cc:fa:73:53:
8d:a4:df:f9:69:ef:51:d4:5d:dc:19:77:65:85:40:
c8:8c:e5:f9:35:3b:4c:ea:21:6e:81:d2:84:59:ce:
5d:4c:e7:1e:83:f6:6f:f6:76:8d:bb:4d:a9:13:9f:
d0:67:3c:eb:cc:a3:97:6d:7c:83:a2:28:e7:04:94:
f3:89:c0:5e:47:4b:be:e8:31:5d:2d:6d:d9:13:64:
01:ff:d4:a4:dd:2b:46:bd:33:08:0b:de:18:21:cf:
dd:59:a9:68:f5:7b:ef:fe:78:3c:0f:01:7d:ba:f1:
ad:18:7f:0c:48:45:d7:61:4a:1e:f3:ec:37:7e:53:
cc:c0:79:26:c5:75:40:39:80:ea:ed:e4:d9:01:b9:
3a:20:4f:9a:4a:09:8d:de:4d:d2:90:9c:96:70:b5:
db:8d:a0:5d:f7:72:20:4c:eb:49:0b:7f:90:f4:a6:
38:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:D0:B2:68:15:37:CB:72:2C:57:EB:48:CF:CC:A4:04:79:23:42:B0
X509v3 Authority Key Identifier:
keyid:E2:B4:69:2A:92:91:F2:C6:7B:56:CC:15:DA:4D:31:01:20:23:01:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4rRpKpKR8sZ7VswV2k0xASAjAXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/659d27-bbb5-49f4-8fd1-c264b75b6b78/1/4NCyaBU3y3IsV-tIz8ykBHkjQrA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/659d27-bbb5-49f4-8fd1-c264b75b6b78/1/4rRpKpKR8sZ7VswV2k0xASAjAXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.32.64.0/19
Signature Algorithm: sha256WithRSAEncryption
20:18:c9:2c:51:44:19:a5:97:45:28:b3:2b:9c:7c:e3:c8:21:
9a:7b:37:df:81:78:59:59:e0:d5:5a:4d:6c:53:f9:0e:a3:0d:
08:71:1d:f6:49:e0:c8:12:a1:36:fe:d1:80:77:35:54:70:5c:
f9:61:68:ff:7c:79:59:64:83:69:8f:14:f1:1a:bc:92:21:69:
82:f7:30:91:b6:66:a1:b6:45:07:af:de:72:f3:d1:f7:b3:b1:
0d:af:52:11:18:ab:d0:b3:90:e7:ce:69:27:3c:2c:1f:32:53:
37:d9:c7:5b:76:28:69:73:29:a5:51:92:22:19:53:43:3e:f7:
fa:e6:c5:39:93:47:e9:17:5d:97:48:1b:05:ab:8b:23:9e:fc:
70:34:0b:c7:4e:d9:c4:2f:96:2c:af:50:12:6b:f5:03:39:42:
87:eb:9d:dd:f7:00:3e:bf:15:32:9e:38:2a:fe:dc:97:10:e8:
52:04:f9:c3:8b:f9:22:a6:92:08:d3:9f:bf:d0:95:ee:1c:a0:
d0:28:cd:b9:3e:cf:5d:8e:79:99:86:ba:e0:d9:07:e7:96:6e:
0c:26:62:95:b7:bd:0a:07:ad:11:ec:87:26:40:f4:a8:4a:7c:
47:c7:c0:72:73:d7:fc:88:33:fc:2a:12:94:94:df:a8:20:c1:
e9:69:fe:77
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQfjG8T0Wabe9mfbX1F09ROMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyYjQ2OTJhOTI5MWYyYzY3YjU2Y2MxNWRhNGQzMTAxMjAy
MzAxNzcwHhcNMjUwMTAxMDE0ODA0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMGQwYjI2ODE1MzdjYjcyMmM1N2ViNDhjZmNjYTQwNDc5MjM0MmIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxBL5SUNpMoNVU2xzH9tAXtaBBRLI
jwiBmZDmSC81Mm+xq0dTvy0Pr7zpK3D/MHuaKBVQsrJqPl80y+rrRJ0f9AVOqP6M
KgDbXlwIrJIDfBqo18ok/cz6c1ONpN/5ae9R1F3cGXdlhUDIjOX5NTtM6iFugdKE
Wc5dTOceg/Zv9naNu02pE5/QZzzrzKOXbXyDoijnBJTzicBeR0u+6DFdLW3ZE2QB
/9Sk3StGvTMIC94YIc/dWalo9Xvv/ng8DwF9uvGtGH8MSEXXYUoe8+w3flPMwHkm
xXVAOYDq7eTZAbk6IE+aSgmN3k3SkJyWcLXbjaBd93IgTOtJC3+Q9KY4kwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFODQsmgVN8tyLFfrSM/MpAR5I0KwMB8GA1UdIwQY
MBaAFOK0aSqSkfLGe1bMFdpNMQEgIwF3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHJScEtwS1I4c1o3VnN3VjJrMHhBU0FqQVhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC82NTlkMjctYmJiNS00OWY0LThmZDEt
YzI2NGI3NWI2Yjc4LzEvNE5DeWFCVTN5M0lzVi10SXo4eWtCSGtqUXJBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC82NTlkMjctYmJiNS00OWY0LThmZDEtYzI2NGI3NWI2Yjc4
LzEvNHJScEtwS1I4c1o3VnN3VjJrMHhBU0FqQVhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFLiBAMA0G
CSqGSIb3DQEBCwUAA4IBAQAgGMksUUQZpZdFKLMrnHzjyCGaezffgXhZWeDVWk1s
U/kOow0IcR32SeDIEqE2/tGAdzVUcFz5YWj/fHlZZINpjxTxGrySIWmC9zCRtmah
tkUHr95y89H3s7ENr1IRGKvQs5DnzmknPCwfMlM32cdbdihpcymlUZIiGVNDPvf6
5sU5k0fpF12XSBsFq4sjnvxwNAvHTtnEL5Ysr1ASa/UDOUKH653d9wA+vxUynjgq
/tyXEOhSBPnDi/kippII05+/0JXuHKDQKM25Ps9djnmZhrrg2Qfnlm4MJmKVt70K
B60R7IcmQPSoSnxHx8Byc9f8iDP8KhKUlN+oIMHpaf53
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:09 2025 by rpki-client on console.sobornost.net