Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/pp9HRbSEXg1Djpwq9U2x1ut0P3A.roa
File: pp9HRbSEXg1Djpwq9U2x1ut0P3A.roa (raw, json)
Hash identifier: eLTqAfDKOrIieHKE4CKftQ8WCB5K7yV6FjmVMCdNg0c=
Subject key identifier: A6:9F:47:45:B4:84:5E:0D:43:8E:9C:2A:F5:4D:B1:D6:EB:74:3F:70
Certificate issuer: /CN=edf54be1b5ed5fd592faca468df1110095f3ea0a
Certificate serial: 019426D998E4B77D5BE110671BA1A658FCB3
Authority key identifier: ED:F5:4B:E1:B5:ED:5F:D5:92:FA:CA:46:8D:F1:11:00:95:F3:EA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7fVL4bXtX9WS-spGjfERAJXz6go.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/pp9HRbSEXg1Djpwq9U2x1ut0P3A.roa
Signing time: Thu 02 Jan 2025 11:49:42 +0000
ROA not before: Thu 02 Jan 2025 11:49:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 45.129.52.0/24 maxlen: 32
45.129.53.0/24 maxlen: 32
45.129.54.0/24 maxlen: 32
45.129.55.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:98:e4:b7:7d:5b:e1:10:67:1b:a1:a6:58:fc:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edf54be1b5ed5fd592faca468df1110095f3ea0a
Validity
Not Before: Jan 2 11:49:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a69f4745b4845e0d438e9c2af54db1d6eb743f70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:bd:6b:43:79:0a:6c:7e:cb:b6:a7:2b:2b:75:
8f:88:cf:2a:04:1a:11:b6:b2:24:8a:13:91:48:ab:
7f:b1:15:8d:fc:3b:3d:40:51:16:ed:b7:9a:31:c5:
2f:b4:ff:dc:98:ce:a2:17:b5:64:18:ce:a9:b0:e6:
64:d4:44:b0:12:02:15:21:36:99:8b:5d:75:34:da:
93:19:48:eb:56:4f:eb:6b:0d:a3:14:78:07:6e:64:
a6:33:e1:c4:b1:7a:5e:0e:ac:02:23:5c:c5:43:c3:
71:ef:88:0b:24:05:33:7f:0d:b3:82:42:da:19:d3:
c8:6f:57:38:12:df:f7:f0:7f:42:8f:1f:23:c6:23:
1a:9b:4f:c3:7c:08:1d:5b:b3:eb:d1:8b:96:e3:01:
db:2d:bf:87:b3:3f:f5:ed:ea:91:f6:2a:cd:41:3f:
2b:2e:91:27:64:25:db:01:29:72:cb:31:ee:0c:e2:
70:17:fb:00:bc:38:11:47:ed:32:9e:1e:49:42:e0:
91:7e:64:9f:7d:aa:35:6e:79:b5:f4:f0:03:18:83:
1c:e5:9b:32:08:00:d4:12:2e:84:7f:6b:68:4b:52:
fc:1a:29:ab:82:92:7d:7f:2f:e6:b1:4d:9c:9c:25:
73:60:2c:26:b7:2b:e4:69:8c:34:b2:64:3f:84:91:
49:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:9F:47:45:B4:84:5E:0D:43:8E:9C:2A:F5:4D:B1:D6:EB:74:3F:70
X509v3 Authority Key Identifier:
keyid:ED:F5:4B:E1:B5:ED:5F:D5:92:FA:CA:46:8D:F1:11:00:95:F3:EA:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7fVL4bXtX9WS-spGjfERAJXz6go.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/pp9HRbSEXg1Djpwq9U2x1ut0P3A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/7fVL4bXtX9WS-spGjfERAJXz6go.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.52.0/22
Signature Algorithm: sha256WithRSAEncryption
58:4b:7e:6b:34:50:f6:96:07:8a:0b:c6:f4:fc:43:5f:39:cc:
7e:6e:5c:80:67:a6:a5:84:5e:66:ec:58:ca:03:f0:c8:87:0b:
7f:c7:1b:07:2a:b4:07:75:8c:01:04:b5:f9:c5:65:e6:78:92:
23:ed:e8:a5:b4:d8:10:35:e8:65:99:4a:ad:e6:15:94:f7:25:
c2:f8:0f:41:0c:0f:e5:b1:b8:d8:5d:22:ca:34:c9:ee:29:ee:
6c:f8:cf:5e:3a:4e:38:27:4f:4a:14:27:fb:c7:cd:2b:76:f7:
9a:4f:df:7d:63:9e:98:25:df:99:78:8a:47:0a:85:3f:4d:03:
43:55:ae:a6:a4:0f:4a:bd:9b:32:40:ca:32:97:a7:37:c8:70:
d6:b3:22:90:12:cf:60:d4:28:3a:48:0e:c7:5f:34:a8:f7:80:
d3:16:94:8e:f5:2e:1c:0f:e1:1e:b4:0a:2d:20:88:5a:8f:5c:
a7:f4:e8:e2:8b:91:86:15:a2:9b:a3:0e:cf:61:20:b2:ec:8b:
fa:79:60:c3:31:7f:2c:54:aa:a8:39:e7:57:a7:6c:4e:53:38:
e2:1e:da:8b:63:31:7e:4c:53:85:c4:75:9b:b0:21:24:52:bf:
50:06:a9:d8:6a:88:02:7c:12:5c:d9:20:68:98:87:a3:65:a8:
d4:72:06:90
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQm2Zjkt31b4RBnG6GmWPyzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkZjU0YmUxYjVlZDVmZDU5MmZhY2E0NjhkZjExMTAwOTVm
M2VhMGEwHhcNMjUwMTAyMTE0OTQyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNjlmNDc0NWI0ODQ1ZTBkNDM4ZTljMmFmNTRkYjFkNmViNzQzZjcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm71rQ3kKbH7LtqcrK3WPiM8qBBoR
trIkihORSKt/sRWN/Ds9QFEW7beaMcUvtP/cmM6iF7VkGM6psOZk1ESwEgIVITaZ
i111NNqTGUjrVk/raw2jFHgHbmSmM+HEsXpeDqwCI1zFQ8Nx74gLJAUzfw2zgkLa
GdPIb1c4Et/38H9Cjx8jxiMam0/DfAgdW7Pr0YuW4wHbLb+Hsz/17eqR9irNQT8r
LpEnZCXbASlyyzHuDOJwF/sAvDgRR+0ynh5JQuCRfmSffao1bnm19PADGIMc5Zsy
CADUEi6Ef2toS1L8GimrgpJ9fy/msU2cnCVzYCwmtyvkaYw0smQ/hJFJgQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKafR0W0hF4NQ46cKvVNsdbrdD9wMB8GA1UdIwQY
MBaAFO31S+G17V/VkvrKRo3xEQCV8+oKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2ZWTDRiWHRYOVdTLXNwR2pmRVJBSlh6NmdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy80MGQ4OTMtZTA5OS00MTQ4LWIyOGUt
OWU2MTRmNDQ2NmM1LzEvcHA5SFJiU0VYZzFEanB3cTlVMngxdXQwUDNBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy80MGQ4OTMtZTA5OS00MTQ4LWIyOGUtOWU2MTRmNDQ2NmM1
LzEvN2ZWTDRiWHRYOVdTLXNwR2pmRVJBSlh6NmdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLYE0MA0G
CSqGSIb3DQEBCwUAA4IBAQBYS35rNFD2lgeKC8b0/ENfOcx+blyAZ6alhF5m7FjK
A/DIhwt/xxsHKrQHdYwBBLX5xWXmeJIj7eiltNgQNehlmUqt5hWU9yXC+A9BDA/l
sbjYXSLKNMnuKe5s+M9eOk44J09KFCf7x80rdveaT999Y56YJd+ZeIpHCoU/TQND
Va6mpA9KvZsyQMoyl6c3yHDWsyKQEs9g1Cg6SA7HXzSo94DTFpSO9S4cD+EetAot
IIhaj1yn9Ojii5GGFaKbow7PYSCy7Iv6eWDDMX8sVKqoOedXp2xOUzjiHtqLYzF+
TFOFxHWbsCEkUr9QBqnYaogCfBJc2SBomIejZajUcgaQ
-----END CERTIFICATE-----
Generated at Fri Apr 11 01:30:02 2025 by rpki-client