Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/ZMi0VeynDmn-lol4b8TaoX9Kxrg.roa
File: ZMi0VeynDmn-lol4b8TaoX9Kxrg.roa (raw, json)
Hash identifier: vb5T32hh7Fe5GmbAfB2D7KSBs3p9Omf5kMCde97YrqI=
Subject key identifier: 64:C8:B4:55:EC:A7:0E:69:FE:96:89:78:6F:C4:DA:A1:7F:4A:C6:B8
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 01942143F9C2B4418BB952960B7A164A975F
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/ZMi0VeynDmn-lol4b8TaoX9Kxrg.roa
Signing time: Wed 01 Jan 2025 09:48:10 +0000
ROA not before: Wed 01 Jan 2025 09:48:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35751
IP address blocks: 45.10.248.0/22 maxlen: 22
45.94.228.0/22 maxlen: 22
45.95.148.0/22 maxlen: 22
45.129.4.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:f9:c2:b4:41:8b:b9:52:96:0b:7a:16:4a:97:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Jan 1 09:48:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=64c8b455eca70e69fe9689786fc4daa17f4ac6b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:cb:69:6f:2b:e8:be:25:51:39:67:d3:9b:29:
78:00:60:cb:6b:20:09:c4:85:b5:99:4c:53:f5:38:
98:d2:41:e9:b3:af:b6:b4:50:52:d7:17:bf:41:66:
9f:c7:be:4d:bd:e6:27:14:9a:f1:0f:b1:95:1a:ec:
36:4b:e4:15:19:b4:8d:7d:a2:f4:7a:f4:a1:4c:0d:
0a:26:bf:a4:50:91:44:fe:11:be:50:2d:06:7c:b5:
47:d3:f2:34:0e:52:68:bc:45:8b:2d:67:c2:bb:a5:
43:70:66:56:84:80:4f:61:d8:64:c2:61:07:22:a8:
6f:d9:0b:8f:f8:fa:04:e3:bb:c1:17:19:a8:76:d2:
35:04:07:a5:cc:53:bf:c9:e9:e4:a2:bf:06:26:b3:
9b:d5:9f:01:57:6f:60:2a:ef:32:a6:08:8f:13:85:
7f:2f:d3:79:b6:08:d0:ec:a6:2d:35:9d:85:33:12:
83:8a:6e:0e:dc:60:43:2a:f3:ab:ff:de:56:48:f7:
24:1e:d2:61:92:78:4e:78:32:0b:5e:3d:81:db:1d:
f4:d1:cb:11:eb:43:32:d9:7f:14:83:c0:eb:0b:06:
09:56:66:71:8c:ee:1a:ea:b9:38:f6:2a:6b:78:19:
5d:67:b2:ce:e3:d2:20:18:d8:f8:3b:3b:b7:42:3b:
b8:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:C8:B4:55:EC:A7:0E:69:FE:96:89:78:6F:C4:DA:A1:7F:4A:C6:B8
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/ZMi0VeynDmn-lol4b8TaoX9Kxrg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.10.248.0/22
45.94.228.0/22
45.95.148.0/22
45.129.4.0/22
Signature Algorithm: sha256WithRSAEncryption
35:24:cb:ba:d7:7a:42:c0:91:2a:7f:d9:b7:51:9d:1b:da:13:
f1:5c:2d:74:65:86:36:96:9b:5e:04:fc:ad:92:f6:88:3c:68:
28:3c:c5:d3:70:90:42:1c:16:02:21:de:b9:b1:8f:c9:ea:37:
a3:a8:13:a5:1d:ff:32:68:a0:31:48:34:f3:16:8e:ff:5a:4b:
5d:b9:79:b1:4d:5e:8c:fb:91:f0:ca:96:1c:56:92:b4:2a:d2:
9a:2f:23:89:37:6d:5f:9d:0f:5f:2e:4d:f8:1b:99:77:57:ef:
b0:f6:7f:ab:55:ad:68:8e:80:c8:7a:03:33:d1:8f:9f:e8:ab:
1b:20:8d:ae:66:2f:3b:bb:e0:ea:4b:41:cb:6a:b2:79:72:7c:
db:a3:83:d5:b3:c8:8c:c0:93:08:e4:fa:36:5f:c4:ae:2a:a1:
36:ce:ed:72:75:f0:7e:0c:a2:12:a4:0d:06:0c:99:af:24:4e:
b4:0c:05:51:66:46:6f:5a:60:26:48:48:77:2c:43:c3:83:32:
ae:0d:a4:d2:e4:be:c2:95:6f:98:f5:44:ed:b0:45:b7:fb:88:
e0:48:90:db:2b:51:7a:31:00:ca:88:da:33:64:a7:27:83:ce:
1c:41:f1:09:a0:fc:9c:ed:ea:26:3d:3a:43:56:63:e0:f6:9d:
42:36:16:c7
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZQhQ/nCtEGLuVKWC3oWSpdfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5MzM1M2MxZmFiZTg5NmFmOGI4NWZlNzYwMGU0NjM0OTY4
ZmNjNGMwHhcNMjUwMTAxMDk0ODEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NGM4YjQ1NWVjYTcwZTY5ZmU5Njg5Nzg2ZmM0ZGFhMTdmNGFjNmI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjstpbyvoviVROWfTmyl4AGDLayAJ
xIW1mUxT9TiY0kHps6+2tFBS1xe/QWafx75NveYnFJrxD7GVGuw2S+QVGbSNfaL0
evShTA0KJr+kUJFE/hG+UC0GfLVH0/I0DlJovEWLLWfCu6VDcGZWhIBPYdhkwmEH
Iqhv2QuP+PoE47vBFxmodtI1BAelzFO/yenkor8GJrOb1Z8BV29gKu8ypgiPE4V/
L9N5tgjQ7KYtNZ2FMxKDim4O3GBDKvOr/95WSPckHtJhknhOeDILXj2B2x300csR
60My2X8Ug8DrCwYJVmZxjO4a6rk49ipreBldZ7LO49IgGNj4Ozu3Qju4/QIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFGTItFXspw5p/paJeG/E2qF/Ssa4MB8GA1UdIwQY
MBaAFAkzU8H6volq+Lhf52AORjSWj8xMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGIt
MjM5ZDJmZTM5OGIxLzEvWk1pMFZleW5EbW4tbG9sNGI4VGFvWDlLeHJnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGItMjM5ZDJmZTM5OGIx
LzEvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQCLQr4AwQC
LV7kAwQCLV+UAwQCLYEEMA0GCSqGSIb3DQEBCwUAA4IBAQA1JMu613pCwJEqf9m3
UZ0b2hPxXC10ZYY2lpteBPytkvaIPGgoPMXTcJBCHBYCId65sY/J6jejqBOlHf8y
aKAxSDTzFo7/WktduXmxTV6M+5HwypYcVpK0KtKaLyOJN21fnQ9fLk34G5l3V++w
9n+rVa1ojoDIegMz0Y+f6KsbII2uZi87u+DqS0HLarJ5cnzbo4PVs8iMwJMI5Po2
X8SuKqE2zu1ydfB+DKISpA0GDJmvJE60DAVRZkZvWmAmSEh3LEPDgzKuDaTS5L7C
lW+Y9UTtsEW3+4jgSJDbK1F6MQDKiNozZKcng84cQfEJoPyc7eomPTpDVmPg9p1C
NhbH
-----END CERTIFICATE-----
Generated at Sun Apr 6 13:51:32 2025 by rpki-client