Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/kzO8r54JZPnHGX4ypEwnhtOz6bw.roa
File: kzO8r54JZPnHGX4ypEwnhtOz6bw.roa (raw, json)
Hash identifier: PHTGOQs8fAPH7Qw133xaTVPj2oqNH+EagRYasws10h4=
Subject key identifier: 93:33:BC:AF:9E:09:64:F9:C7:19:7E:32:A4:4C:27:86:D3:B3:E9:BC
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 019459E732FEEBB1024E812CE57BC16FC461
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/kzO8r54JZPnHGX4ypEwnhtOz6bw.roa
Signing time: Sun 12 Jan 2025 09:45:11 +0000
ROA not before: Sun 12 Jan 2025 09:45:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 36530
IP address blocks: 45.92.218.0/23 maxlen: 23
45.134.38.0/24 maxlen: 24
45.152.162.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:59:e7:32:fe:eb:b1:02:4e:81:2c:e5:7b:c1:6f:c4:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Jan 12 09:45:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9333bcaf9e0964f9c7197e32a44c2786d3b3e9bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:47:9f:23:bb:3f:2d:b4:07:fc:ac:7a:6d:75:
1c:85:ca:4d:dc:0f:de:18:9c:2a:76:9f:6c:73:97:
d6:0b:21:fb:ee:d2:52:ba:a8:4b:ec:37:c1:24:b6:
fe:a4:ba:83:8f:29:40:e0:96:03:dd:a0:0d:2b:9c:
bf:bf:16:3c:f0:ba:76:7d:aa:7e:b2:d0:49:d2:1e:
d6:75:f5:ae:8e:5b:b2:59:27:d7:b1:eb:3d:54:61:
a8:04:30:fa:2f:d6:0b:96:08:06:a6:c7:97:52:0f:
78:a1:ba:d1:4c:39:71:1f:e4:8f:18:46:d6:38:1b:
94:d7:2c:f1:b1:35:d2:cc:b3:a2:a1:05:4a:34:55:
3d:5d:9a:e3:b3:f2:5c:ae:b4:6c:db:0b:1b:7f:7f:
8d:77:e6:f4:78:c9:70:f9:89:55:9c:9d:cd:ce:90:
c0:e4:0d:76:0c:55:73:33:ad:35:fe:fa:05:86:14:
f1:28:34:26:b8:5a:06:4c:53:ec:7d:79:0e:81:c3:
63:19:a8:c1:67:f2:6c:2f:c9:c8:01:f6:a9:ba:49:
c8:4c:e2:fc:13:a4:98:da:ae:fb:27:ca:8e:9b:d7:
ed:17:20:72:c1:b2:ed:c8:9d:f7:67:ee:e4:53:fc:
46:4a:91:33:ce:3a:a1:bb:d7:90:1c:97:87:ef:2f:
0a:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:33:BC:AF:9E:09:64:F9:C7:19:7E:32:A4:4C:27:86:D3:B3:E9:BC
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/kzO8r54JZPnHGX4ypEwnhtOz6bw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.92.218.0/23
45.134.38.0/24
45.152.162.0/23
Signature Algorithm: sha256WithRSAEncryption
8f:1a:2e:ee:0c:7e:e8:2f:d5:45:f6:4c:f7:7e:1d:be:1c:40:
c2:07:81:7f:6b:93:e2:b0:5b:7b:ea:96:51:f3:b7:6a:b5:73:
17:f1:ab:01:0c:8f:3f:c8:a2:9a:78:1b:c3:b8:83:d3:dd:bc:
fd:c1:d3:43:f7:d0:72:bc:90:06:2d:43:1a:8a:e2:b6:bd:8f:
71:c3:8a:d7:1f:8d:70:f1:90:0b:4d:0f:d2:77:c9:a4:0b:bf:
fe:df:ac:56:20:e5:2f:f7:3d:ff:fd:82:60:47:13:31:ae:b6:
c1:f6:f3:99:54:f5:16:de:e6:78:70:dd:d2:8c:87:d2:33:40:
18:40:e1:d6:bd:8f:50:bf:41:f2:df:2c:3d:4a:82:b2:03:65:
57:e2:84:cc:cc:74:9d:8b:9f:be:71:37:7d:ca:4b:25:fe:97:
1a:4f:13:4f:3e:73:c9:a4:1e:05:e3:09:8b:94:2f:d2:30:18:
3f:8e:c0:31:da:ed:7f:fb:97:ff:26:ac:a4:b5:15:6a:bc:a1:
81:9e:d7:f8:38:33:1b:c4:ff:17:c0:08:ec:2e:f5:79:18:06:
2a:0c:c3:b1:d2:4a:22:6f:cd:04:5c:32:29:55:e3:93:91:ad:
40:ce:52:8a:8e:56:7d:bc:fa:0b:c9:66:a5:c8:80:d0:82:d7:
68:6c:49:ea
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZRZ5zL+67ECToEs5XvBb8RhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiMDQxNWJmYzQzYjM4ZTljZmQxYTEyOTk1MjAyZTg3NjM3
NTJmZGUwHhcNMjUwMTEyMDk0NTExWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MzMzYmNhZjllMDk2NGY5YzcxOTdlMzJhNDRjMjc4NmQzYjNlOWJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3UefI7s/LbQH/Kx6bXUchcpN3A/e
GJwqdp9sc5fWCyH77tJSuqhL7DfBJLb+pLqDjylA4JYD3aANK5y/vxY88Lp2fap+
stBJ0h7WdfWujluyWSfXses9VGGoBDD6L9YLlggGpseXUg94obrRTDlxH+SPGEbW
OBuU1yzxsTXSzLOioQVKNFU9XZrjs/JcrrRs2wsbf3+Nd+b0eMlw+YlVnJ3NzpDA
5A12DFVzM601/voFhhTxKDQmuFoGTFPsfXkOgcNjGajBZ/JsL8nIAfapuknITOL8
E6SY2q77J8qOm9ftFyBywbLtyJ33Z+7kU/xGSpEzzjqhu9eQHJeH7y8KpQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFJMzvK+eCWT5xxl+MqRMJ4bTs+m8MB8GA1UdIwQY
MBaAFBsEFb/EOzjpz9GhKZUgLodjdS/eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3dRVnY4UTdPT25QMGFFcGxTQXVoMk4xTDk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi8wOTQwODEtOGFlYi00MmJmLWE1Nzgt
YTNjYTBkYjgzMjU0LzEva3pPOHI1NEpaUG5IR1g0eXBFd25odE96NmJ3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi8wOTQwODEtOGFlYi00MmJmLWE1NzgtYTNjYTBkYjgzMjU0
LzEvR3dRVnY4UTdPT25QMGFFcGxTQXVoMk4xTDk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBLVzaAwQA
LYYmAwQBLZiiMA0GCSqGSIb3DQEBCwUAA4IBAQCPGi7uDH7oL9VF9kz3fh2+HEDC
B4F/a5PisFt76pZR87dqtXMX8asBDI8/yKKaeBvDuIPT3bz9wdND99ByvJAGLUMa
iuK2vY9xw4rXH41w8ZALTQ/Sd8mkC7/+36xWIOUv9z3//YJgRxMxrrbB9vOZVPUW
3uZ4cN3SjIfSM0AYQOHWvY9Qv0Hy3yw9SoKyA2VX4oTMzHSdi5++cTd9yksl/pca
TxNPPnPJpB4F4wmLlC/SMBg/jsAx2u1/+5f/JqyktRVqvKGBntf4ODMbxP8XwAjs
LvV5GAYqDMOx0koib80EXDIpVeOTka1AzlKKjlZ9vPoLyWalyIDQgtdobEnq
-----END CERTIFICATE-----
Generated at Mon Apr 7 17:32:36 2025 by rpki-client