Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/NmY3Cr2hTmLmrJ4cFR4Mbk6O2f8.roa
File: NmY3Cr2hTmLmrJ4cFR4Mbk6O2f8.roa (raw, json)
Hash identifier: 3vnVC3SAIOmJWTDh9HP/nluckKtdf1CaP0omwy3IFuI=
Subject key identifier: 36:66:37:0A:BD:A1:4E:62:E6:AC:9E:1C:15:1E:0C:6E:4E:8E:D9:FF
Certificate issuer: /CN=0d2999042c5e2006bd5aeb7a05de1e96a5e73664
Certificate serial: 01941FFA637C15D13B71D908D3560F8A9D00
Authority key identifier: 0D:29:99:04:2C:5E:20:06:BD:5A:EB:7A:05:DE:1E:96:A5:E7:36:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/NmY3Cr2hTmLmrJ4cFR4Mbk6O2f8.roa
Signing time: Wed 01 Jan 2025 03:48:10 +0000
ROA not before: Wed 01 Jan 2025 03:48:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9335
IP address blocks: 45.150.128.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:63:7c:15:d1:3b:71:d9:08:d3:56:0f:8a:9d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d2999042c5e2006bd5aeb7a05de1e96a5e73664
Validity
Not Before: Jan 1 03:48:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3666370abda14e62e6ac9e1c151e0c6e4e8ed9ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:94:44:4c:6d:c1:7c:a7:16:09:4d:2b:5f:97:
a1:13:81:53:3f:ac:03:80:a5:ae:15:7e:1a:fa:2f:
98:1e:7f:6a:f1:8e:79:9a:87:23:57:c6:97:6f:80:
88:4c:24:39:04:76:37:92:2c:9c:0b:1e:da:f8:93:
2d:57:43:37:cf:84:ed:a6:de:77:96:86:fc:96:f3:
2d:e3:07:72:15:77:c2:b1:95:96:3f:11:29:a7:9b:
01:86:05:13:40:ab:d2:30:b9:2a:b9:ca:b3:d9:60:
89:80:1c:99:82:6b:a2:b4:34:76:62:ce:60:bd:9e:
e0:13:3f:06:59:83:ca:eb:c6:9a:61:1f:bd:70:d9:
60:ec:45:f7:a8:66:65:21:9a:d9:65:9b:3b:56:7c:
54:65:e3:2c:dd:d2:3f:63:a5:e5:92:b2:35:64:94:
23:fa:cd:db:4f:f7:3b:49:25:3d:a8:72:ce:52:f8:
b8:d9:60:99:52:30:23:de:f8:ba:63:d3:bf:be:d8:
0d:f0:cc:7d:af:03:89:9a:68:2a:a3:9b:8e:68:0e:
81:65:35:1d:97:b4:cc:b6:34:58:4e:ce:57:50:af:
0f:a1:39:3b:8a:1e:01:2a:1d:b2:3b:ff:39:e8:48:
22:b9:c6:46:44:04:a9:0c:17:3c:06:3a:08:4b:4f:
64:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:66:37:0A:BD:A1:4E:62:E6:AC:9E:1C:15:1E:0C:6E:4E:8E:D9:FF
X509v3 Authority Key Identifier:
keyid:0D:29:99:04:2C:5E:20:06:BD:5A:EB:7A:05:DE:1E:96:A5:E7:36:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/NmY3Cr2hTmLmrJ4cFR4Mbk6O2f8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.128.0/22
Signature Algorithm: sha256WithRSAEncryption
28:0a:26:52:94:e2:e8:ff:6d:b6:c7:d7:94:f8:8a:a4:91:b0:
92:a2:f1:ef:47:29:e8:4e:76:72:8b:56:3e:a3:c3:13:25:06:
a5:d4:70:a8:28:1c:dd:1a:a6:e1:24:c2:dc:1b:d6:39:c7:7c:
47:d1:f4:b2:04:ef:9a:2e:33:16:ea:e6:e9:87:c3:4c:b9:fa:
d8:20:f8:6b:09:71:25:d8:1c:5f:e1:1b:a1:cd:5d:01:9a:32:
5b:ed:31:6a:3d:29:59:72:c2:89:70:ad:41:44:12:61:e9:46:
d3:4a:47:99:b8:9f:45:79:92:46:7e:23:72:69:b1:61:f3:02:
61:c3:fe:6d:e1:fe:fb:2d:47:2b:cb:a7:6a:e1:99:85:f2:5a:
61:46:6c:29:7a:ca:e2:8b:e5:8b:36:97:f1:e9:5e:9a:c5:55:
e2:75:6e:0e:0b:4d:0e:9e:2a:fa:c9:85:f8:5d:45:23:00:5e:
e9:25:72:6a:cc:d2:71:4a:f5:54:2b:62:38:5d:b2:16:fd:a9:
62:fe:85:1d:f2:3d:74:fb:38:25:c8:dc:1c:d6:65:15:91:f2:
66:a5:db:3d:bc:77:4e:85:76:2d:64:15:ae:e3:6e:a1:71:1a:
26:a2:43:74:3f:92:d6:fe:f8:d7:8e:cd:43:97:c1:5e:f7:a7:
a0:b6:bc:6d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQf+mN8FdE7cdkI01YPip0AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkMjk5OTA0MmM1ZTIwMDZiZDVhZWI3YTA1ZGUxZTk2YTVl
NzM2NjQwHhcNMjUwMTAxMDM0ODEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNjY2MzcwYWJkYTE0ZTYyZTZhYzllMWMxNTFlMGM2ZTRlOGVkOWZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt5RETG3BfKcWCU0rX5ehE4FTP6wD
gKWuFX4a+i+YHn9q8Y55mocjV8aXb4CITCQ5BHY3kiycCx7a+JMtV0M3z4Ttpt53
lob8lvMt4wdyFXfCsZWWPxEpp5sBhgUTQKvSMLkqucqz2WCJgByZgmuitDR2Ys5g
vZ7gEz8GWYPK68aaYR+9cNlg7EX3qGZlIZrZZZs7VnxUZeMs3dI/Y6XlkrI1ZJQj
+s3bT/c7SSU9qHLOUvi42WCZUjAj3vi6Y9O/vtgN8Mx9rwOJmmgqo5uOaA6BZTUd
l7TMtjRYTs5XUK8PoTk7ih4BKh2yO/856EgiucZGRASpDBc8BjoIS09knQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDZmNwq9oU5i5qyeHBUeDG5Ojtn/MB8GA1UdIwQY
MBaAFA0pmQQsXiAGvVrregXeHpal5zZkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFNtWkJDeGVJQWE5V3V0NkJkNGVscVhuTm1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8yYzMzMTYtZWZjNy00OTUyLTllZmUt
OGMxNTM5NjViYWM5LzEvTm1ZM0NyMmhUbUxtcko0Y0ZSNE1iazZPMmY4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC8yYzMzMTYtZWZjNy00OTUyLTllZmUtOGMxNTM5NjViYWM5
LzEvRFNtWkJDeGVJQWE5V3V0NkJkNGVscVhuTm1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLZaAMA0G
CSqGSIb3DQEBCwUAA4IBAQAoCiZSlOLo/222x9eU+IqkkbCSovHvRynoTnZyi1Y+
o8MTJQal1HCoKBzdGqbhJMLcG9Y5x3xH0fSyBO+aLjMW6ubph8NMufrYIPhrCXEl
2Bxf4RuhzV0BmjJb7TFqPSlZcsKJcK1BRBJh6UbTSkeZuJ9FeZJGfiNyabFh8wJh
w/5t4f77LUcry6dq4ZmF8lphRmwpesrii+WLNpfx6V6axVXidW4OC00Onir6yYX4
XUUjAF7pJXJqzNJxSvVUK2I4XbIW/ali/oUd8j10+zglyNwc1mUVkfJmpds9vHdO
hXYtZBWu426hcRomokN0P5LW/vjXjs1Dl8Fe96egtrxt
-----END CERTIFICATE-----
Generated at Thu Apr 10 15:28:43 2025 by rpki-client