Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/ojuhZssGw5khaDBKybUVRnuG5GA.roa
File: ojuhZssGw5khaDBKybUVRnuG5GA.roa (raw, json)
Hash identifier: PYNmZEorYvxWiqWHAKbAaplpJAQlv6u0YyewePux800=
Subject key identifier: A2:3B:A1:66:CB:06:C3:99:21:68:30:4A:C9:B5:15:46:7B:86:E4:60
Certificate issuer: /CN=e754c347d68d15493de71bb962f0a567e134d603
Certificate serial: 019423D705E5E3B84C12B242C189664BA04E
Authority key identifier: E7:54:C3:47:D6:8D:15:49:3D:E7:1B:B9:62:F0:A5:67:E1:34:D6:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/ojuhZssGw5khaDBKybUVRnuG5GA.roa
Signing time: Wed 01 Jan 2025 21:48:01 +0000
ROA not before: Wed 01 Jan 2025 21:48:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 40028
IP address blocks: 45.43.87.0/24 maxlen: 24
107.181.150.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:05:e5:e3:b8:4c:12:b2:42:c1:89:66:4b:a0:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e754c347d68d15493de71bb962f0a567e134d603
Validity
Not Before: Jan 1 21:48:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a23ba166cb06c3992168304ac9b515467b86e460
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:87:4b:d6:ee:49:d3:37:2e:a0:13:83:72:bb:
ed:ec:a5:8e:de:ea:69:bb:9a:de:3c:2b:66:f3:82:
0b:59:c2:99:25:4f:79:59:47:87:99:21:2d:51:0c:
54:ce:8b:33:30:8d:36:59:8a:3d:2d:47:95:a8:e1:
83:d9:b4:7b:4f:24:38:3b:ed:c2:94:36:ad:87:dc:
cf:46:2f:5d:3f:68:c9:e5:7c:89:82:2e:ad:c7:da:
38:e5:fc:65:f3:3f:04:1a:c8:66:96:a8:ef:d5:1b:
b4:57:a9:24:56:35:7f:18:7a:82:0a:03:e1:0e:6e:
ac:e2:aa:78:4f:30:aa:83:76:77:92:b1:36:ab:f8:
76:de:ea:17:6c:c0:44:8e:c2:9a:ab:50:2d:e0:18:
66:24:fa:06:3f:91:7b:34:29:ef:89:91:d5:3c:d4:
0a:b8:7e:b3:f7:32:7d:ac:dc:2c:40:72:cb:10:cd:
f3:fa:71:2e:ed:fc:96:79:65:f2:22:6a:23:94:a2:
f0:dd:ad:52:be:cf:8f:be:02:43:1b:f1:c0:e9:80:
ec:74:23:4b:19:23:d8:8f:ca:65:37:1e:37:d4:41:
18:db:1d:97:a2:33:41:fa:f8:f9:ca:f1:d8:88:35:
ec:54:7e:33:09:de:8d:78:48:32:69:22:f5:01:59:
74:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:3B:A1:66:CB:06:C3:99:21:68:30:4A:C9:B5:15:46:7B:86:E4:60
X509v3 Authority Key Identifier:
keyid:E7:54:C3:47:D6:8D:15:49:3D:E7:1B:B9:62:F0:A5:67:E1:34:D6:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/ojuhZssGw5khaDBKybUVRnuG5GA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/51TDR9aNFUk95xu5YvClZ-E01gM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.43.87.0/24
107.181.150.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:fe:0c:c7:c0:b5:30:ac:2c:5e:e0:e9:ea:a3:2c:36:91:b6:
2a:0a:19:89:3c:95:38:e9:50:7f:ed:b2:f4:ba:4c:21:75:a7:
1f:76:8f:b7:9a:23:8a:fd:46:e3:bf:9f:5c:2e:01:e3:3b:d6:
45:6e:7c:36:f9:af:4c:23:14:f2:70:6f:5a:b7:a1:4a:27:74:
f6:05:84:65:59:32:73:39:fb:7c:6b:cc:b6:09:a8:d7:ad:ba:
ae:59:1a:19:a5:45:04:7c:5e:5e:c8:52:35:cf:11:9c:2b:d5:
1c:a0:bc:67:fb:37:4d:b3:c0:58:af:b7:5b:ec:f8:6f:92:b9:
94:4e:e2:db:53:65:2b:7f:41:0b:54:ae:23:ba:82:c9:3c:c4:
e0:4a:85:b1:7e:08:0c:7b:26:25:29:a0:9e:37:0a:6e:72:f7:
e3:11:6e:39:d7:14:95:82:43:9e:ab:ed:00:b5:2f:98:ff:f4:
18:74:95:a4:01:eb:46:7c:cc:ab:62:dc:f8:61:65:ea:0c:31:
a3:da:02:21:16:dd:d4:f6:bd:6c:ff:56:e9:01:c9:f1:16:68:
f9:56:5c:f7:8d:4a:4f:f6:39:68:4c:b5:2b:ec:0a:0c:52:b3:
61:84:40:25:c8:60:1c:dc:e5:48:db:f2:fb:8c:d9:db:1b:b6:
52:00:34:63
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQj1wXl47hMErJCwYlmS6BOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3NTRjMzQ3ZDY4ZDE1NDkzZGU3MWJiOTYyZjBhNTY3ZTEz
NGQ2MDMwHhcNMjUwMTAxMjE0ODAxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMjNiYTE2NmNiMDZjMzk5MjE2ODMwNGFjOWI1MTU0NjdiODZlNDYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApIdL1u5J0zcuoBODcrvt7KWO3upp
u5rePCtm84ILWcKZJU95WUeHmSEtUQxUzoszMI02WYo9LUeVqOGD2bR7TyQ4O+3C
lDath9zPRi9dP2jJ5XyJgi6tx9o45fxl8z8EGshmlqjv1Ru0V6kkVjV/GHqCCgPh
Dm6s4qp4TzCqg3Z3krE2q/h23uoXbMBEjsKaq1At4BhmJPoGP5F7NCnviZHVPNQK
uH6z9zJ9rNwsQHLLEM3z+nEu7fyWeWXyImojlKLw3a1Svs+PvgJDG/HA6YDsdCNL
GSPYj8plNx431EEY2x2XojNB+vj5yvHYiDXsVH4zCd6NeEgyaSL1AVl0/QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFKI7oWbLBsOZIWgwSsm1FUZ7huRgMB8GA1UdIwQY
MBaAFOdUw0fWjRVJPecbuWLwpWfhNNYDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNTFURFI5YU5GVWs5NXh1NVl2Q2xaLUUwMWdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC80NmRiM2EtYTU3My00ZjI4LWI0M2It
MzdiNjJkMjIzOTI0LzEvb2p1aFpzc0d3NWtoYURCS3liVVZSbnVHNUdBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC80NmRiM2EtYTU3My00ZjI4LWI0M2ItMzdiNjJkMjIzOTI0
LzEvNTFURFI5YU5GVWs5NXh1NVl2Q2xaLUUwMWdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALStXAwQA
a7WWMA0GCSqGSIb3DQEBCwUAA4IBAQAf/gzHwLUwrCxe4Onqoyw2kbYqChmJPJU4
6VB/7bL0ukwhdacfdo+3miOK/Ubjv59cLgHjO9ZFbnw2+a9MIxTycG9at6FKJ3T2
BYRlWTJzOft8a8y2CajXrbquWRoZpUUEfF5eyFI1zxGcK9UcoLxn+zdNs8BYr7db
7PhvkrmUTuLbU2Urf0ELVK4juoLJPMTgSoWxfggMeyYlKaCeNwpucvfjEW451xSV
gkOeq+0AtS+Y//QYdJWkAetGfMyrYtz4YWXqDDGj2gIhFt3U9r1s/1bpAcnxFmj5
Vlz3jUpP9jloTLUr7AoMUrNhhEAlyGAc3OVI2/L7jNnbG7ZSADRj
-----END CERTIFICATE-----
Generated at Mon Apr 7 06:05:00 2025 by rpki-client