Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/EVa4PhO6CzEs2a3gao6_bMfoT2k.roa
File: EVa4PhO6CzEs2a3gao6_bMfoT2k.roa (raw, json)
Hash identifier: VWmEcBykzjII/jx+xoqUBFcV+1pGeZMhlC96XEfv1wc=
Subject key identifier: 11:56:B8:3E:13:BA:0B:31:2C:D9:AD:E0:6A:8E:BF:6C:C7:E8:4F:69
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 019427489352FAA551208C845A16DCE2A24C
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/EVa4PhO6CzEs2a3gao6_bMfoT2k.roa
Signing time: Thu 02 Jan 2025 13:50:55 +0000
ROA not before: Thu 02 Jan 2025 13:50:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 149020
IP address blocks: 45.142.105.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:93:52:fa:a5:51:20:8c:84:5a:16:dc:e2:a2:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Jan 2 13:50:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1156b83e13ba0b312cd9ade06a8ebf6cc7e84f69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:0f:82:19:31:67:4a:ca:01:19:17:7e:93:d8:
79:a6:60:0f:a3:93:f4:ab:5f:e4:99:bb:98:e1:81:
c8:6d:58:f0:7e:f4:06:d4:a8:98:2a:df:57:d7:a0:
48:fc:a9:58:e4:35:ac:d9:65:50:60:a0:57:18:9a:
8a:40:f5:a6:b9:af:6e:7e:02:88:17:5f:21:c4:84:
c7:7d:4c:ed:75:13:fe:d3:0a:01:e0:0f:b4:fc:7b:
1f:db:cb:f0:8c:c3:d6:3b:f2:17:01:90:8c:92:e4:
b3:20:18:b3:45:66:21:c2:d1:f6:5d:e6:80:e6:9d:
94:69:07:ba:97:87:bd:91:4f:fa:70:1f:f2:bc:66:
d0:32:20:f9:65:ce:36:54:e0:58:3a:22:90:8e:fd:
02:9d:c9:ab:10:1d:8a:4b:f2:c8:fe:16:3f:87:bd:
a5:fc:a6:e4:d0:11:27:5c:e5:9a:08:ff:11:d6:e0:
74:f8:69:42:54:bb:fa:63:b7:e3:49:15:4c:a1:43:
1e:3c:7f:1a:83:fc:3e:b9:0b:52:e3:f3:68:f0:39:
49:eb:9e:eb:43:ec:d8:e1:53:ce:39:f9:f5:64:d2:
1d:4c:aa:f4:8d:02:62:57:ed:bc:37:14:76:1e:f7:
cb:73:60:ff:f5:50:c5:c6:a3:15:44:1f:e0:a4:7a:
72:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:56:B8:3E:13:BA:0B:31:2C:D9:AD:E0:6A:8E:BF:6C:C7:E8:4F:69
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/EVa4PhO6CzEs2a3gao6_bMfoT2k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.105.0/24
Signature Algorithm: sha256WithRSAEncryption
40:95:ea:77:5f:45:f1:6e:a3:1f:64:47:a0:0b:92:f5:a4:02:
33:d5:87:0b:96:dc:b2:cb:69:b6:cb:44:43:44:9b:49:6b:80:
de:c9:64:63:ce:66:cc:7d:66:d9:56:ea:e0:fa:f6:32:c0:c6:
35:77:af:61:17:a8:fe:88:bc:f5:2a:12:e8:49:94:dc:b6:9b:
76:67:8f:19:78:f2:f4:18:d4:f8:5e:18:ca:ce:07:f0:58:41:
07:47:29:6c:64:87:4e:1b:ab:b1:e4:70:45:6b:f6:17:75:81:
97:ac:f6:a6:43:d4:a4:a6:ba:f4:48:53:06:84:3e:95:51:11:
91:13:2d:43:da:cc:c1:43:b1:e4:2a:92:b5:cd:15:2c:bc:76:
8d:92:9b:ec:ff:d5:36:ab:ba:81:f5:c8:b5:a9:c9:00:2e:a9:
c6:23:7d:cb:19:59:32:2e:c1:a3:78:6a:a4:53:29:0b:60:ed:
ee:09:7a:d4:1a:ba:7f:7e:61:c7:81:7c:b6:57:a3:64:36:78:
78:47:6f:bc:71:c3:fd:5f:d0:69:58:a1:56:53:02:a6:6a:31:
25:27:a8:e1:61:b9:3a:8c:72:b2:82:77:8e:53:95:45:b8:32:
b0:71:f0:9d:f6:50:df:6a:7c:6c:91:51:cf:3f:42:7b:48:56:
83:64:20:b5
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQnSJNS+qVRIIyEWhbc4qJMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiMDQxNWJmYzQzYjM4ZTljZmQxYTEyOTk1MjAyZTg3NjM3
NTJmZGUwHhcNMjUwMTAyMTM1MDU1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMTU2YjgzZTEzYmEwYjMxMmNkOWFkZTA2YThlYmY2Y2M3ZTg0ZjY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAng+CGTFnSsoBGRd+k9h5pmAPo5P0
q1/kmbuY4YHIbVjwfvQG1KiYKt9X16BI/KlY5DWs2WVQYKBXGJqKQPWmua9ufgKI
F18hxITHfUztdRP+0woB4A+0/Hsf28vwjMPWO/IXAZCMkuSzIBizRWYhwtH2XeaA
5p2UaQe6l4e9kU/6cB/yvGbQMiD5Zc42VOBYOiKQjv0CncmrEB2KS/LI/hY/h72l
/Kbk0BEnXOWaCP8R1uB0+GlCVLv6Y7fjSRVMoUMePH8ag/w+uQtS4/No8DlJ657r
Q+zY4VPOOfn1ZNIdTKr0jQJiV+28NxR2HvfLc2D/9VDFxqMVRB/gpHpyawIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBFWuD4TugsxLNmt4GqOv2zH6E9pMB8GA1UdIwQY
MBaAFBsEFb/EOzjpz9GhKZUgLodjdS/eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3dRVnY4UTdPT25QMGFFcGxTQXVoMk4xTDk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi8wOTQwODEtOGFlYi00MmJmLWE1Nzgt
YTNjYTBkYjgzMjU0LzEvRVZhNFBoTzZDekVzMmEzZ2FvNl9iTWZvVDJrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi8wOTQwODEtOGFlYi00MmJmLWE1NzgtYTNjYTBkYjgzMjU0
LzEvR3dRVnY4UTdPT25QMGFFcGxTQXVoMk4xTDk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALY5pMA0G
CSqGSIb3DQEBCwUAA4IBAQBAlep3X0XxbqMfZEegC5L1pAIz1YcLltyyy2m2y0RD
RJtJa4DeyWRjzmbMfWbZVurg+vYywMY1d69hF6j+iLz1KhLoSZTctpt2Z48ZePL0
GNT4XhjKzgfwWEEHRylsZIdOG6ux5HBFa/YXdYGXrPamQ9Skprr0SFMGhD6VURGR
Ey1D2szBQ7HkKpK1zRUsvHaNkpvs/9U2q7qB9ci1qckALqnGI33LGVkyLsGjeGqk
UykLYO3uCXrUGrp/fmHHgXy2V6NkNnh4R2+8ccP9X9BpWKFWUwKmajElJ6jhYbk6
jHKygneOU5VFuDKwcfCd9lDfanxskVHPP0J7SFaDZCC1
-----END CERTIFICATE-----
Generated at Sat Apr 5 12:41:44 2025 by rpki-client