Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/5da375-99a9-4329-9d29-cec8931ce631/1/JgAVdG5w-EH5axbD1z99GAhSHwM.roa
File: JgAVdG5w-EH5axbD1z99GAhSHwM.roa (raw, json)
Hash identifier: MwMkmJqrwD8veDf1qY/q68vIiUTS/FtXreiv/2+O3/c=
Subject key identifier: 26:00:15:74:6E:70:F8:41:F9:6B:16:C3:D7:3F:7D:18:08:52:1F:03
Certificate issuer: /CN=ad5c2e74c6d46cc73c98a4c16087a8a3b3a6f759
Certificate serial: 01955BEDB71BFCBABB63161C9DAB563A0F4F
Authority key identifier: AD:5C:2E:74:C6:D4:6C:C7:3C:98:A4:C1:60:87:A8:A3:B3:A6:F7:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rVwudMbUbMc8mKTBYIeoo7Om91k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/5da375-99a9-4329-9d29-cec8931ce631/1/JgAVdG5w-EH5axbD1z99GAhSHwM.roa
Signing time: Mon 03 Mar 2025 12:14:20 +0000
ROA not before: Mon 03 Mar 2025 12:14:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212609
IP address blocks: 45.94.236.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:5b:ed:b7:1b:fc:ba:bb:63:16:1c:9d:ab:56:3a:0f:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad5c2e74c6d46cc73c98a4c16087a8a3b3a6f759
Validity
Not Before: Mar 3 12:14:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=260015746e70f841f96b16c3d73f7d1808521f03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:c3:e4:d8:3b:44:48:f3:38:77:bd:f3:3c:7f:
43:c8:fe:4a:50:ff:e7:bc:1e:a4:cc:2d:eb:ad:07:
32:a8:9f:0a:e2:c1:2d:52:18:c9:d0:46:dd:78:65:
69:db:b3:b3:99:59:05:72:c9:e5:6f:bc:01:83:14:
ba:ae:b7:86:a6:60:69:52:16:14:f3:24:e3:04:81:
62:a7:9d:c3:0c:47:d7:c7:08:40:f1:84:42:e0:6f:
eb:cc:d4:4d:ac:74:e7:79:64:81:dd:eb:5f:2d:f4:
27:a7:1b:c5:84:3d:43:b6:2b:68:77:50:9a:e9:d8:
aa:6f:91:9d:ea:64:11:17:8e:7d:f5:55:a3:87:e5:
c2:2a:6b:8d:72:b3:3d:20:f7:76:f7:4c:c1:02:20:
f2:db:ff:dc:b8:cf:32:62:71:56:53:29:5e:68:98:
8a:8c:a6:fa:39:71:58:d7:52:58:15:48:3c:fd:00:
8a:f1:a9:cc:85:b2:00:73:53:db:e2:7f:69:ed:17:
4b:f1:0e:db:f3:98:da:1e:80:50:8d:ec:7c:27:50:
78:a9:db:2b:ec:5c:85:96:b4:69:33:65:08:f4:e4:
48:04:63:34:54:76:40:49:cc:0f:3c:3f:46:f3:f0:
54:c2:e4:ac:0b:b4:7a:3e:50:be:16:d5:27:81:b0:
52:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:00:15:74:6E:70:F8:41:F9:6B:16:C3:D7:3F:7D:18:08:52:1F:03
X509v3 Authority Key Identifier:
keyid:AD:5C:2E:74:C6:D4:6C:C7:3C:98:A4:C1:60:87:A8:A3:B3:A6:F7:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rVwudMbUbMc8mKTBYIeoo7Om91k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5da375-99a9-4329-9d29-cec8931ce631/1/JgAVdG5w-EH5axbD1z99GAhSHwM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5da375-99a9-4329-9d29-cec8931ce631/1/rVwudMbUbMc8mKTBYIeoo7Om91k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.236.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:b2:71:11:a5:52:2a:32:66:02:4e:32:0b:57:34:3b:4f:e1:
3c:8d:be:ba:95:c4:e7:c6:c4:d3:9b:45:f4:a6:b9:a0:3e:63:
c5:b9:4a:b6:29:87:7d:14:ff:7a:5f:c6:58:e2:5c:1f:67:a4:
bd:c5:97:35:95:b6:32:42:38:9a:16:4f:28:b7:33:15:ca:bc:
78:81:94:b5:85:fa:15:7a:8f:bc:43:ed:90:66:ab:b8:55:78:
b9:d6:3b:13:21:3c:16:bc:d3:c9:16:81:f2:c7:db:ea:3c:9c:
19:cf:73:ae:7d:71:7d:a9:fa:9d:0b:df:a9:1f:ef:72:1f:a5:
96:4c:fd:5a:49:bc:43:8f:91:43:48:20:0b:e8:7d:2a:71:01:
82:f3:b3:0a:be:40:8d:f6:ff:86:a3:1d:75:75:a7:11:85:c6:
61:00:20:7b:40:c5:e0:4d:0b:31:b9:a5:f3:a2:13:9a:8a:ee:
ee:dc:da:5e:03:fb:c7:b1:08:b1:6c:3a:bb:95:2f:cc:f2:a1:
06:48:e1:01:21:90:ba:6a:ed:85:71:6f:4e:e1:1e:f7:32:d6:
6f:64:e9:f0:4b:07:fd:e8:75:01:00:66:1b:a9:d0:2a:de:d5:
36:ca:2d:83:6f:1e:18:b0:9d:5c:06:ae:2d:2c:fb:64:31:81:
bf:a1:7e:bd
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZVb7bcb/Lq7YxYcnatWOg9PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkNWMyZTc0YzZkNDZjYzczYzk4YTRjMTYwODdhOGEzYjNh
NmY3NTkwHhcNMjUwMzAzMTIxNDIwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNjAwMTU3NDZlNzBmODQxZjk2YjE2YzNkNzNmN2QxODA4NTIxZjAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlsPk2DtESPM4d73zPH9DyP5KUP/n
vB6kzC3rrQcyqJ8K4sEtUhjJ0EbdeGVp27OzmVkFcsnlb7wBgxS6rreGpmBpUhYU
8yTjBIFip53DDEfXxwhA8YRC4G/rzNRNrHTneWSB3etfLfQnpxvFhD1Dtitod1Ca
6diqb5Gd6mQRF4599VWjh+XCKmuNcrM9IPd290zBAiDy2//cuM8yYnFWUyleaJiK
jKb6OXFY11JYFUg8/QCK8anMhbIAc1Pb4n9p7RdL8Q7b85jaHoBQjex8J1B4qdsr
7FyFlrRpM2UI9ORIBGM0VHZAScwPPD9G8/BUwuSsC7R6PlC+FtUngbBSOwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCYAFXRucPhB+WsWw9c/fRgIUh8DMB8GA1UdIwQY
MBaAFK1cLnTG1GzHPJikwWCHqKOzpvdZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvclZ3dWRNYlViTWM4bUtUQllJZW9vN09tOTFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC81ZGEzNzUtOTlhOS00MzI5LTlkMjkt
Y2VjODkzMWNlNjMxLzEvSmdBVmRHNXctRUg1YXhiRDF6OTlHQWhTSHdNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC81ZGEzNzUtOTlhOS00MzI5LTlkMjktY2VjODkzMWNlNjMx
LzEvclZ3dWRNYlViTWM4bUtUQllJZW9vN09tOTFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALV7sMA0G
CSqGSIb3DQEBCwUAA4IBAQAbsnERpVIqMmYCTjILVzQ7T+E8jb66lcTnxsTTm0X0
prmgPmPFuUq2KYd9FP96X8ZY4lwfZ6S9xZc1lbYyQjiaFk8otzMVyrx4gZS1hfoV
eo+8Q+2QZqu4VXi51jsTITwWvNPJFoHyx9vqPJwZz3OufXF9qfqdC9+pH+9yH6WW
TP1aSbxDj5FDSCAL6H0qcQGC87MKvkCN9v+Gox11dacRhcZhACB7QMXgTQsxuaXz
ohOaiu7u3NpeA/vHsQixbDq7lS/M8qEGSOEBIZC6au2FcW9O4R73MtZvZOnwSwf9
6HUBAGYbqdAq3tU2yi2Dbx4YsJ1cBq4tLPtkMYG/oX69
-----END CERTIFICATE-----
Generated at Sat Apr 5 22:06:40 2025 by rpki-client