Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/K1LFccM8NI3-fXSKpZ4XeFurnZM.roa
File: K1LFccM8NI3-fXSKpZ4XeFurnZM.roa (raw, json)
Hash identifier: z1BPIREYwrDCirm+IK+9dT+atfPp6QrAckL2aqGrtA4=
Subject key identifier: 2B:52:C5:71:C3:3C:34:8D:FE:7D:74:8A:A5:9E:17:78:5B:AB:9D:93
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 0195A62D6D447735E16CF78099E3013E73EB
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/K1LFccM8NI3-fXSKpZ4XeFurnZM.roa
Signing time: Mon 17 Mar 2025 22:15:49 +0000
ROA not before: Mon 17 Mar 2025 22:15:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2914
IP address blocks: 45.155.64.0/24 maxlen: 24
212.46.37.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:a6:2d:6d:44:77:35:e1:6c:f7:80:99:e3:01:3e:73:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Mar 17 22:15:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2b52c571c33c348dfe7d748aa59e17785bab9d93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:59:3f:15:94:86:5c:05:47:97:9d:ea:e3:38:
26:ea:2a:ce:59:34:ee:aa:5d:b7:97:d4:0c:11:b2:
da:ff:19:12:2e:58:5f:a3:1e:53:b6:f4:ac:28:7b:
7b:68:29:02:0d:03:7d:79:18:a4:fa:a9:26:6d:84:
16:c2:e5:89:ae:f4:aa:f8:d2:ea:88:cb:3b:9d:d0:
b8:ba:0e:ee:0d:7d:07:ef:05:3b:58:d6:f8:b4:ff:
63:ce:a2:b9:d6:aa:ec:f6:6d:7f:4f:9f:c2:7f:fa:
6c:b5:47:d0:60:02:fd:26:9c:32:af:8a:27:87:19:
02:ef:31:c0:61:45:8c:54:0e:91:cb:01:45:18:57:
ef:f7:38:27:d8:7c:dc:3e:61:43:d5:a2:f6:f2:e0:
b4:f8:04:45:1d:93:af:b2:38:dc:b7:a9:78:c0:01:
c4:ec:8e:7d:0b:21:bf:50:b6:6c:3a:33:5f:4a:a9:
da:8e:fb:5f:f1:1a:58:61:c3:da:2f:c3:ad:54:b5:
23:5d:6e:9b:82:73:3f:98:42:8c:9f:db:72:67:46:
80:9b:ed:4d:fc:e0:b0:88:94:65:31:43:7d:56:bf:
f6:3e:19:43:85:73:4b:1d:92:c2:eb:cc:4e:65:37:
f2:dc:b8:43:86:f2:36:2a:3e:7c:fd:43:f3:8b:47:
65:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:52:C5:71:C3:3C:34:8D:FE:7D:74:8A:A5:9E:17:78:5B:AB:9D:93
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/K1LFccM8NI3-fXSKpZ4XeFurnZM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.64.0/24
212.46.37.0/24
Signature Algorithm: sha256WithRSAEncryption
06:b3:65:65:97:eb:96:e1:25:66:4d:f5:69:c3:79:ac:4e:46:
3b:70:27:4f:9b:6f:c1:ed:55:d5:f7:ca:b2:50:94:ea:41:76:
f4:70:f7:d5:52:39:91:be:4a:05:88:00:a5:7a:04:8a:f9:7d:
e4:4d:45:ed:b3:f5:db:93:84:e9:fd:52:dc:78:5f:dd:8b:fb:
60:4a:33:38:a2:a9:ba:ac:cb:56:68:6f:60:b8:e7:e3:7c:47:
30:50:1e:93:25:74:13:7e:02:ab:bf:2d:01:e6:87:b1:05:8a:
74:c4:ad:ee:2a:00:d1:3b:39:35:23:cb:fc:df:ed:9c:fa:5d:
d6:0e:16:71:5d:f7:ed:36:44:b9:65:7c:c1:2b:3c:a1:be:9f:
95:6e:ac:ee:d6:d3:36:6b:23:d9:29:57:35:d2:b7:cb:6a:cd:
5f:b0:63:fd:9a:fe:89:45:9e:ca:d9:98:bc:53:c5:20:cc:0c:
79:be:3f:b8:d6:7b:07:15:f8:88:30:23:08:d1:f3:fb:79:b9:
c0:19:75:6e:55:bf:3b:8a:74:22:06:98:56:00:3f:72:8e:01:
f7:59:ad:31:c5:ac:fe:22:b2:16:76:e2:30:31:b0:de:ed:d3:
b1:ef:09:6b:66:fe:d6:6e:09:af:3f:0f:6d:33:b2:48:8c:e7:
c0:a3:11:48
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZWmLW1EdzXhbPeAmeMBPnPrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMTQxMTJkMDVlOWQ4NzYxNDlkMjc3OGQ0OGVkYWFhMzI0
ZGIwYTUwHhcNMjUwMzE3MjIxNTQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYjUyYzU3MWMzM2MzNDhkZmU3ZDc0OGFhNTllMTc3ODViYWI5ZDkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs1k/FZSGXAVHl53q4zgm6irOWTTu
ql23l9QMEbLa/xkSLlhfox5TtvSsKHt7aCkCDQN9eRik+qkmbYQWwuWJrvSq+NLq
iMs7ndC4ug7uDX0H7wU7WNb4tP9jzqK51qrs9m1/T5/Cf/pstUfQYAL9Jpwyr4on
hxkC7zHAYUWMVA6RywFFGFfv9zgn2HzcPmFD1aL28uC0+ARFHZOvsjjct6l4wAHE
7I59CyG/ULZsOjNfSqnajvtf8RpYYcPaL8OtVLUjXW6bgnM/mEKMn9tyZ0aAm+1N
/OCwiJRlMUN9Vr/2PhlDhXNLHZLC68xOZTfy3LhDhvI2Kj58/UPzi0dl0wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFCtSxXHDPDSN/n10iqWeF3hbq52TMB8GA1UdIwQY
MBaAFE8UES0F6dh2FJ0neNSO2qoyTbClMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhRUkxRWHAySFlVblNkNDFJN2FxakpOc0tVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8zY2FhNTEtN2EyMS00OTlkLWE1NDUt
YmFmYmRmYzgxMzJhLzEvSzFMRmNjTThOSTMtZlhTS3BaNFhlRnVyblpNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS8zY2FhNTEtN2EyMS00OTlkLWE1NDUtYmFmYmRmYzgxMzJh
LzEvVHhRUkxRWHAySFlVblNkNDFJN2FxakpOc0tVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALZtAAwQA
1C4lMA0GCSqGSIb3DQEBCwUAA4IBAQAGs2Vll+uW4SVmTfVpw3msTkY7cCdPm2/B
7VXV98qyUJTqQXb0cPfVUjmRvkoFiAClegSK+X3kTUXts/Xbk4Tp/VLceF/di/tg
SjM4oqm6rMtWaG9guOfjfEcwUB6TJXQTfgKrvy0B5oexBYp0xK3uKgDROzk1I8v8
3+2c+l3WDhZxXfftNkS5ZXzBKzyhvp+Vbqzu1tM2ayPZKVc10rfLas1fsGP9mv6J
RZ7K2Zi8U8UgzAx5vj+41nsHFfiIMCMI0fP7ebnAGXVuVb87inQiBphWAD9yjgH3
Wa0xxaz+IrIWduIwMbDe7dOx7wlrZv7WbgmvPw9tM7JIjOfAoxFI
-----END CERTIFICATE-----
Generated at Mon Apr 7 04:12:59 2025 by rpki-client