Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/673b1d-6d14-4df5-99ad-2ee2b7295dff/1/sAtItIdVW20mI2NFNh8XtGHWZOE.roa
File: sAtItIdVW20mI2NFNh8XtGHWZOE.roa (raw, json)
Hash identifier: dKze9gkE7+w/iOUYyZPsFpG7X/XK0rolO2v25V1/rGM=
Subject key identifier: B0:0B:48:B4:87:55:5B:6D:26:23:63:45:36:1F:17:B4:61:D6:64:E1
Certificate issuer: /CN=46d9a0a4b57a0eec7c4e52a119db4b1c656f4db4
Certificate serial: 01942445076F44BA759B7D1E8C3C0DB5909E
Authority key identifier: 46:D9:A0:A4:B5:7A:0E:EC:7C:4E:52:A1:19:DB:4B:1C:65:6F:4D:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RtmgpLV6Dux8TlKhGdtLHGVvTbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/673b1d-6d14-4df5-99ad-2ee2b7295dff/1/sAtItIdVW20mI2NFNh8XtGHWZOE.roa
Signing time: Wed 01 Jan 2025 23:48:11 +0000
ROA not before: Wed 01 Jan 2025 23:48:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 83.137.245.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:07:6f:44:ba:75:9b:7d:1e:8c:3c:0d:b5:90:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46d9a0a4b57a0eec7c4e52a119db4b1c656f4db4
Validity
Not Before: Jan 1 23:48:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b00b48b487555b6d26236345361f17b461d664e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:ac:5a:05:ae:4c:76:b9:70:97:c7:34:8c:8a:
ab:e9:5f:31:c8:a3:53:3a:d3:48:7f:ca:70:25:e7:
23:6a:fd:8b:d9:7c:64:44:b9:8d:59:e9:9e:72:61:
34:1f:14:79:b7:27:7d:ad:5e:5a:57:4a:6b:8a:68:
e7:c9:70:ef:2f:85:91:e1:f5:0f:24:39:3b:7c:c0:
f6:e0:bc:8a:d5:07:e2:12:36:ea:8d:96:f7:bd:2b:
54:a5:56:0f:7f:19:2d:24:c3:7a:43:60:18:d8:a8:
a0:e8:b6:fe:7d:1b:97:22:91:95:e5:c2:a2:e4:78:
06:86:06:b7:5f:45:6d:e2:26:0e:c6:8b:77:cd:76:
72:3d:f9:9f:d3:d9:dc:b5:b2:46:f5:4c:fc:51:d5:
db:7d:a4:10:1f:6d:05:60:1f:67:b2:43:80:ab:86:
df:95:ac:59:92:9f:ca:e0:86:21:5e:90:19:c3:f4:
a3:a4:2f:f0:14:7d:9d:6d:aa:ef:9d:a0:a2:e5:17:
02:fe:3e:17:a1:eb:3e:bd:37:bb:34:ce:23:e8:c6:
c8:a5:62:7c:23:22:83:c0:e0:13:9d:17:1c:17:92:
c4:45:21:c6:5a:11:59:8b:8c:d9:9f:ab:55:0f:18:
b9:e0:7a:7c:e0:0f:03:22:25:9e:72:90:10:6c:89:
41:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:0B:48:B4:87:55:5B:6D:26:23:63:45:36:1F:17:B4:61:D6:64:E1
X509v3 Authority Key Identifier:
keyid:46:D9:A0:A4:B5:7A:0E:EC:7C:4E:52:A1:19:DB:4B:1C:65:6F:4D:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RtmgpLV6Dux8TlKhGdtLHGVvTbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/673b1d-6d14-4df5-99ad-2ee2b7295dff/1/sAtItIdVW20mI2NFNh8XtGHWZOE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/673b1d-6d14-4df5-99ad-2ee2b7295dff/1/RtmgpLV6Dux8TlKhGdtLHGVvTbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.137.245.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:2b:48:f6:0a:ef:c4:7d:ca:fd:45:6d:29:de:be:8d:dd:13:
76:00:23:2e:6b:46:7d:cc:15:d2:f7:50:84:6a:e4:e3:bd:f7:
c1:f6:03:ea:12:84:a6:0b:bb:ad:77:ed:0a:e3:07:0e:fd:c6:
56:e1:ef:c9:45:c1:eb:9e:73:f5:00:75:a9:2f:a8:4d:7a:ba:
0c:ba:e8:0b:9a:40:e6:bc:11:a9:0f:03:2e:83:60:b9:22:df:
3d:6a:80:84:88:80:53:54:98:84:8e:60:ba:5c:3a:12:ca:13:
f0:5f:84:7a:d5:5c:cb:d5:0e:ff:cf:78:a2:a3:fe:61:9d:b3:
6f:59:07:98:9d:1d:3b:ef:02:51:8f:09:4a:3b:ea:7a:5a:df:
c6:c8:3a:c5:47:27:66:ab:46:46:e3:ef:59:a9:27:f7:01:8a:
9e:85:60:39:29:42:87:3e:45:d3:32:94:90:17:12:bb:5b:c3:
6b:f3:e5:4b:94:00:bd:db:e4:88:70:54:13:28:34:e4:2d:15:
a3:c7:92:20:3f:77:f1:c8:aa:48:c5:72:89:22:66:c4:fd:3f:
e2:98:7e:33:7d:60:77:5c:e4:11:2c:6d:e2:b5:dc:34:1e:d3:
7d:dc:40:c1:f4:19:fc:52:c2:5c:a7:99:4e:54:45:c0:0f:a7:
53:84:dc:89
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQkRQdvRLp1m30ejDwNtZCeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2ZDlhMGE0YjU3YTBlZWM3YzRlNTJhMTE5ZGI0YjFjNjU2
ZjRkYjQwHhcNMjUwMTAxMjM0ODExWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMDBiNDhiNDg3NTU1YjZkMjYyMzYzNDUzNjFmMTdiNDYxZDY2NGUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6axaBa5Mdrlwl8c0jIqr6V8xyKNT
OtNIf8pwJecjav2L2XxkRLmNWemecmE0HxR5tyd9rV5aV0primjnyXDvL4WR4fUP
JDk7fMD24LyK1QfiEjbqjZb3vStUpVYPfxktJMN6Q2AY2Kig6Lb+fRuXIpGV5cKi
5HgGhga3X0Vt4iYOxot3zXZyPfmf09nctbJG9Uz8UdXbfaQQH20FYB9nskOAq4bf
laxZkp/K4IYhXpAZw/SjpC/wFH2dbarvnaCi5RcC/j4Xoes+vTe7NM4j6MbIpWJ8
IyKDwOATnRccF5LERSHGWhFZi4zZn6tVDxi54Hp84A8DIiWecpAQbIlBhwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLALSLSHVVttJiNjRTYfF7Rh1mThMB8GA1UdIwQY
MBaAFEbZoKS1eg7sfE5SoRnbSxxlb020MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUnRtZ3BMVjZEdXg4VGxLaEdkdExIR1Z2VGJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS82NzNiMWQtNmQxNC00ZGY1LTk5YWQt
MmVlMmI3Mjk1ZGZmLzEvc0F0SXRJZFZXMjBtSTJORk5oOFh0R0hXWk9FLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS82NzNiMWQtNmQxNC00ZGY1LTk5YWQtMmVlMmI3Mjk1ZGZm
LzEvUnRtZ3BMVjZEdXg4VGxLaEdkdExIR1Z2VGJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAU4n1MA0G
CSqGSIb3DQEBCwUAA4IBAQAvK0j2Cu/Efcr9RW0p3r6N3RN2ACMua0Z9zBXS91CE
auTjvffB9gPqEoSmC7utd+0K4wcO/cZW4e/JRcHrnnP1AHWpL6hNeroMuugLmkDm
vBGpDwMug2C5It89aoCEiIBTVJiEjmC6XDoSyhPwX4R61VzL1Q7/z3iio/5hnbNv
WQeYnR077wJRjwlKO+p6Wt/GyDrFRydmq0ZG4+9ZqSf3AYqehWA5KUKHPkXTMpSQ
FxK7W8Nr8+VLlAC92+SIcFQTKDTkLRWjx5IgP3fxyKpIxXKJImbE/T/imH4zfWB3
XOQRLG3itdw0HtN93EDB9Bn8UsJcp5lOVEXAD6dThNyJ
-----END CERTIFICATE-----
Generated at Thu Apr 10 09:52:23 2025 by rpki-client