Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/bV7wiXISBEG2SHcG3dNKC6Wy_3Y.roa
File: bV7wiXISBEG2SHcG3dNKC6Wy_3Y.roa (raw, json)
Hash identifier: nmxCRUNayEJiwBjnfgLQZj2sJPp5WltkD5SdU2gQZ9k=
Subject key identifier: 6D:5E:F0:89:72:12:04:41:B6:48:77:06:DD:D3:4A:0B:A5:B2:FF:76
Certificate issuer: /CN=cd108c225f2478cd4230179890d07284be1636cd
Certificate serial: 019428255344AF15983DA6AAF8F37FB603E3
Authority key identifier: CD:10:8C:22:5F:24:78:CD:42:30:17:98:90:D0:72:84:BE:16:36:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zRCMIl8keM1CMBeYkNByhL4WNs0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/bV7wiXISBEG2SHcG3dNKC6Wy_3Y.roa
Signing time: Thu 02 Jan 2025 17:52:02 +0000
ROA not before: Thu 02 Jan 2025 17:52:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214743
IP address blocks: 45.91.224.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:25:53:44:af:15:98:3d:a6:aa:f8:f3:7f:b6:03:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd108c225f2478cd4230179890d07284be1636cd
Validity
Not Before: Jan 2 17:52:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6d5ef08972120441b6487706ddd34a0ba5b2ff76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:5e:65:d3:b8:b2:b0:a1:9a:bf:04:d0:b4:ef:
c8:ef:aa:93:76:17:9c:2e:00:72:73:7d:a1:7a:40:
d0:28:b1:42:13:3b:38:c1:99:53:ef:62:ac:d1:56:
fc:45:ae:31:97:eb:af:dc:b3:36:28:35:fd:02:d1:
f0:dd:b1:68:5e:ea:8e:bd:83:34:82:9d:1d:be:34:
19:69:6d:65:ab:ec:08:5b:85:de:c1:30:de:aa:c4:
78:4d:0d:d2:50:47:6a:e6:dd:b1:9d:9d:90:06:92:
ea:90:c0:09:ec:1d:da:78:0d:34:4c:24:03:b8:d3:
18:7d:dd:3f:7f:7a:7e:d1:37:a8:c6:dd:6b:e5:9a:
2b:73:b1:46:49:e1:c0:d0:99:32:6a:57:7c:1b:6f:
7d:45:3f:ca:97:92:df:ee:89:fc:5d:03:11:a3:fd:
8d:d8:f8:ea:03:3f:c9:de:2b:a9:b1:73:dd:7f:6a:
57:1b:c8:16:7c:3b:6f:7d:d7:0b:6f:5b:c9:34:32:
e0:7f:cd:07:00:aa:37:07:47:42:f3:67:81:66:78:
2a:4c:6c:7d:cf:a8:4f:99:d5:a2:2d:de:88:4a:2f:
f5:79:72:af:f2:0a:e2:2f:62:1c:67:5d:dc:ca:04:
22:c2:85:2d:0e:45:46:ae:6f:72:12:20:6c:d5:bd:
38:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:5E:F0:89:72:12:04:41:B6:48:77:06:DD:D3:4A:0B:A5:B2:FF:76
X509v3 Authority Key Identifier:
keyid:CD:10:8C:22:5F:24:78:CD:42:30:17:98:90:D0:72:84:BE:16:36:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zRCMIl8keM1CMBeYkNByhL4WNs0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/bV7wiXISBEG2SHcG3dNKC6Wy_3Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.91.224.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:30:5a:ef:36:b5:61:53:fc:8c:04:16:19:33:b7:90:2d:d2:
4d:13:f9:3d:65:41:57:24:21:67:35:75:25:a4:20:0d:a7:b1:
17:a7:0d:f6:2f:82:54:4c:90:5e:7f:f8:1a:c7:04:4d:fe:fa:
37:a4:0e:1f:bf:29:ef:88:06:68:48:6b:3c:77:d6:64:e1:77:
bd:cd:39:97:91:d8:74:75:ac:0a:3f:ae:86:4b:be:46:b0:0d:
90:30:12:93:8b:39:ee:3d:68:63:8c:11:4d:88:e3:85:02:83:
9f:cb:c7:69:f5:09:d5:f9:5a:39:08:13:81:27:1f:ec:3a:17:
84:eb:03:f4:ec:eb:ab:0a:7c:15:d3:e6:bd:aa:56:78:07:61:
65:bc:ee:ba:e7:7a:5b:db:08:73:37:ec:1c:ef:0b:52:46:c5:
b9:c2:82:8a:1e:da:cd:55:d2:22:9c:48:2d:97:0d:09:e3:73:
d4:78:04:37:46:35:cc:3b:91:20:1f:63:ef:4b:c4:18:30:19:
6b:04:52:92:c9:80:66:6c:eb:57:ee:0d:eb:b0:4b:4c:90:9d:
ef:38:a9:cb:4b:08:b2:c6:67:90:ad:79:70:2d:50:fb:18:3d:
15:2b:a5:ac:28:39:bd:f6:37:aa:fe:aa:a9:61:18:6f:3d:6b:
67:10:3b:a6
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQoJVNErxWYPaaq+PN/tgPjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkMTA4YzIyNWYyNDc4Y2Q0MjMwMTc5ODkwZDA3Mjg0YmUx
NjM2Y2QwHhcNMjUwMTAyMTc1MjAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZDVlZjA4OTcyMTIwNDQxYjY0ODc3MDZkZGQzNGEwYmE1YjJmZjc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApV5l07iysKGavwTQtO/I76qTdhec
LgByc32hekDQKLFCEzs4wZlT72Ks0Vb8Ra4xl+uv3LM2KDX9AtHw3bFoXuqOvYM0
gp0dvjQZaW1lq+wIW4XewTDeqsR4TQ3SUEdq5t2xnZ2QBpLqkMAJ7B3aeA00TCQD
uNMYfd0/f3p+0Teoxt1r5Zorc7FGSeHA0Jkyald8G299RT/Kl5Lf7on8XQMRo/2N
2PjqAz/J3iupsXPdf2pXG8gWfDtvfdcLb1vJNDLgf80HAKo3B0dC82eBZngqTGx9
z6hPmdWiLd6ISi/1eXKv8griL2IcZ13cygQiwoUtDkVGrm9yEiBs1b04mQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFG1e8IlyEgRBtkh3Bt3TSgulsv92MB8GA1UdIwQY
MBaAFM0QjCJfJHjNQjAXmJDQcoS+FjbNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvelJDTUlsOGtlTTFDTUJlWWtOQnloTDRXTnMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy8zNDhjZTUtY2EyMC00ODQ4LTg4NDQt
YWU1MDI3MzY4MWE3LzEvYlY3d2lYSVNCRUcyU0hjRzNkTktDNld5XzNZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy8zNDhjZTUtY2EyMC00ODQ4LTg4NDQtYWU1MDI3MzY4MWE3
LzEvelJDTUlsOGtlTTFDTUJlWWtOQnloTDRXTnMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALVvgMA0G
CSqGSIb3DQEBCwUAA4IBAQB+MFrvNrVhU/yMBBYZM7eQLdJNE/k9ZUFXJCFnNXUl
pCANp7EXpw32L4JUTJBef/gaxwRN/vo3pA4fvynviAZoSGs8d9Zk4Xe9zTmXkdh0
dawKP66GS75GsA2QMBKTiznuPWhjjBFNiOOFAoOfy8dp9QnV+Vo5CBOBJx/sOheE
6wP07OurCnwV0+a9qlZ4B2FlvO6653pb2whzN+wc7wtSRsW5woKKHtrNVdIinEgt
lw0J43PUeAQ3RjXMO5EgH2PvS8QYMBlrBFKSyYBmbOtX7g3rsEtMkJ3vOKnLSwiy
xmeQrXlwLVD7GD0VK6WsKDm99jeq/qqpYRhvPWtnEDum
-----END CERTIFICATE-----
Generated at Tue Apr 8 13:48:30 2025 by rpki-client