Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/c68d8d-484a-44cb-a433-79fb1dd14f62/1/YID5bDk62pCn6QLobak5Nwd6UAw.roa
File: YID5bDk62pCn6QLobak5Nwd6UAw.roa (raw, json)
Hash identifier: 3lgMn666UAIIa6xpvEg0zZcB4ChTi1MuKoeM/PxqnEw=
Subject key identifier: 60:80:F9:6C:39:3A:DA:90:A7:E9:02:E8:6D:A9:39:37:07:7A:50:0C
Certificate issuer: /CN=64301525ae08507041da7da8f3a3dd118979fb47
Certificate serial: 0718EBF3
Authority key identifier: 64:30:15:25:AE:08:50:70:41:DA:7D:A8:F3:A3:DD:11:89:79:FB:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZDAVJa4IUHBB2n2o86PdEYl5-0c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/c68d8d-484a-44cb-a433-79fb1dd14f62/1/YID5bDk62pCn6QLobak5Nwd6UAw.roa
Signing time: Sat 01 Jan 2022 07:02:10 +0000
ROA not before: Sat 01 Jan 2022 07:02:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208183
IP address blocks: 45.152.228.0/22 maxlen: 22
45.152.228.0/24 maxlen: 24
2a0f:6500:2000::/36 maxlen: 36
2a0f:6500::/36 maxlen: 36
2a0f:6500:1000::/36 maxlen: 36
2a0f:6500::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119073779 (0x718ebf3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64301525ae08507041da7da8f3a3dd118979fb47
Validity
Not Before: Jan 1 07:02:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6080f96c393ada90a7e902e86da93937077a500c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:7c:04:94:63:e2:12:a9:0a:3c:23:dd:ae:f8:
c7:4b:90:ae:17:4e:f0:a8:40:11:25:54:c9:8e:78:
d0:a0:2b:5c:d8:c0:1c:6e:bc:2f:05:8c:63:9b:9d:
32:73:63:4e:ee:d2:22:90:38:7d:27:57:8a:2d:ea:
bd:79:2b:f5:f4:49:e2:dc:b1:d7:1e:93:06:8e:b8:
eb:a5:2a:23:85:45:7c:a3:31:06:d7:1f:b4:e8:01:
fb:cd:fe:f7:28:81:47:ac:cc:60:e3:7c:17:8e:75:
c6:50:08:93:ce:95:ac:7f:cd:03:b5:b1:a1:54:8d:
a9:f7:c1:5e:91:b5:79:1f:a8:47:97:7f:e2:c6:69:
12:f6:fa:17:47:a4:a4:52:57:c1:f7:06:3e:d6:f3:
26:a3:a4:c8:52:75:60:69:33:fa:23:cb:c0:bb:76:
85:91:15:9e:ee:9f:75:30:d9:24:4d:8d:4c:2f:7e:
23:d8:d4:df:dc:3a:85:91:88:a9:00:b4:1d:66:6e:
c8:e9:b1:ab:b2:83:4a:e2:36:6d:5d:01:6a:84:c9:
45:59:65:7a:e3:0c:28:60:60:9e:fd:6b:f7:da:26:
ae:e0:81:15:ac:0f:b9:03:6c:29:8b:1f:cb:5b:84:
65:b2:da:32:32:48:b2:d3:78:d1:68:c8:2f:11:01:
28:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:80:F9:6C:39:3A:DA:90:A7:E9:02:E8:6D:A9:39:37:07:7A:50:0C
X509v3 Authority Key Identifier:
keyid:64:30:15:25:AE:08:50:70:41:DA:7D:A8:F3:A3:DD:11:89:79:FB:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZDAVJa4IUHBB2n2o86PdEYl5-0c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c68d8d-484a-44cb-a433-79fb1dd14f62/1/YID5bDk62pCn6QLobak5Nwd6UAw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c68d8d-484a-44cb-a433-79fb1dd14f62/1/ZDAVJa4IUHBB2n2o86PdEYl5-0c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.152.228.0/22
IPv6:
2a0f:6500::/32
Signature Algorithm: sha256WithRSAEncryption
1f:57:22:00:bd:52:d4:be:9d:41:82:8e:53:f5:ea:74:0b:cf:
35:01:5c:c5:9e:aa:39:b4:f3:ff:b2:87:ce:80:6a:e2:5e:14:
13:9b:e3:16:c3:b8:9d:be:22:9b:7b:5b:4e:1b:da:d7:ed:f6:
65:2c:4b:b4:cf:81:19:c7:61:23:ba:6c:07:dd:6d:68:26:80:
49:95:ec:e6:06:92:cd:97:ca:2c:f2:e6:5c:32:f0:24:47:6f:
53:21:3a:a1:42:37:2e:05:43:eb:d9:31:33:37:fc:f3:39:42:
ad:8a:28:ef:bf:4f:45:a8:0d:2f:fe:81:1b:11:4c:fe:0d:a6:
b0:20:54:ed:f2:07:75:0e:b6:8f:48:15:3b:14:0d:20:63:b8:
2c:cd:f6:1f:39:9f:06:3f:af:be:35:3c:f1:3b:18:2b:29:1d:
7a:84:10:fe:96:9c:7e:7e:6d:f1:07:04:8b:9d:d8:67:88:6c:
9a:3f:b9:97:f5:e2:48:4a:a6:a3:bb:7c:66:30:3d:b9:e3:40:
ed:35:d1:2d:79:94:39:36:53:01:4f:16:14:0a:55:b7:c6:db:
40:17:e1:87:13:e3:ac:83:46:c4:fa:ab:86:70:ba:d5:45:65:
f6:3a:0e:03:e7:7a:60:1d:e8:3c:0f:41:83:44:8b:b9:5e:cc:
83:4a:47:02
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgIEBxjr8zANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
NDMwMTUyNWFlMDg1MDcwNDFkYTdkYThmM2EzZGQxMTg5NzlmYjQ3MB4XDTIyMDEw
MTA3MDIxMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNjA4MGY5NmMzOTNh
ZGE5MGE3ZTkwMmU4NmRhOTM5MzcwNzdhNTAwYzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKd8BJRj4hKpCjwj3a74x0uQrhdO8KhAESVUyY540KArXNjA
HG68LwWMY5udMnNjTu7SIpA4fSdXii3qvXkr9fRJ4tyx1x6TBo6466UqI4VFfKMx
BtcftOgB+83+9yiBR6zMYON8F451xlAIk86VrH/NA7WxoVSNqffBXpG1eR+oR5d/
4sZpEvb6F0ekpFJXwfcGPtbzJqOkyFJ1YGkz+iPLwLt2hZEVnu6fdTDZJE2NTC9+
I9jU39w6hZGIqQC0HWZuyOmxq7KDSuI2bV0BaoTJRVlleuMMKGBgnv1r99omruCB
FawPuQNsKYsfy1uEZbLaMjJIstN40WjILxEBKJcCAwEAAaOCAhgwggIUMB0GA1Ud
DgQWBBRggPlsOTrakKfpAuhtqTk3B3pQDDAfBgNVHSMEGDAWgBRkMBUlrghQcEHa
fajzo90RiXn7RzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1pEQVZKYTRJVUhCQjJuMm84NlBkRVlsNS0wYy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNmYvYzY4ZDhkLTQ4NGEtNDRjYi1hNDMzLTc5ZmIxZGQxNGY2Mi8x
L1lJRDViRGs2MnBDbjZRTG9iYWs1TndkNlVBdy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmYv
YzY4ZDhkLTQ4NGEtNDRjYi1hNDMzLTc5ZmIxZGQxNGY2Mi8xL1pEQVZKYTRJVUhC
QjJuMm84NlBkRVlsNS0wYy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAi2Y5DANBAIAAjAHAwUAKg9lADAN
BgkqhkiG9w0BAQsFAAOCAQEAH1ciAL1S1L6dQYKOU/XqdAvPNQFcxZ6qObTz/7KH
zoBq4l4UE5vjFsO4nb4im3tbThva1+32ZSxLtM+BGcdhI7psB91taCaASZXs5gaS
zZfKLPLmXDLwJEdvUyE6oUI3LgVD69kxMzf88zlCrYoo779PRagNL/6BGxFM/g2m
sCBU7fIHdQ62j0gVOxQNIGO4LM32HzmfBj+vvjU88TsYKykdeoQQ/pacfn5t8QcE
i53YZ4hsmj+5l/XiSEqmo7t8ZjA9ueNA7TXRLXmUOTZTAU8WFApVt8bbQBfhhxPj
rINGxPqrhnC61UVl9joOA+d6YB3oPA9Bg0SLuV7Mg0pHAg==
-----END CERTIFICATE-----
Generated at Wed May 14 09:11:11 2025 by rpki-client