Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/2J2zD3rTOO4ekhA-SPW7MGnbxGQ.roa
File: 2J2zD3rTOO4ekhA-SPW7MGnbxGQ.roa (raw, json)
Hash identifier: ZDpaopgvjDrdBtYEwGx6CMJY/HeEIsJZYVpJsQWQQUY=
Subject key identifier: D8:9D:B3:0F:7A:D3:38:EE:1E:92:10:3E:48:F5:BB:30:69:DB:C4:64
Certificate issuer: /CN=aedaeea9117a1d5ccc320222955a09faa0798fd9
Certificate serial: 019423D716ED639F45CE9F053B41080F47BE
Authority key identifier: AE:DA:EE:A9:11:7A:1D:5C:CC:32:02:22:95:5A:09:FA:A0:79:8F:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rtruqRF6HVzMMgIilVoJ-qB5j9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/2J2zD3rTOO4ekhA-SPW7MGnbxGQ.roa
Signing time: Wed 01 Jan 2025 21:48:06 +0000
ROA not before: Wed 01 Jan 2025 21:48:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 1828
IP address blocks: 45.15.192.0/22 maxlen: 22
45.15.192.0/24 maxlen: 24
45.15.193.0/24 maxlen: 24
45.15.194.0/24 maxlen: 24
45.15.195.0/24 maxlen: 24
45.133.80.0/22 maxlen: 22
45.133.80.0/24 maxlen: 24
45.133.81.0/24 maxlen: 24
45.133.82.0/24 maxlen: 24
185.92.120.0/24 maxlen: 24
185.92.121.0/24 maxlen: 24
185.92.122.0/24 maxlen: 24
185.92.123.0/24 maxlen: 24
185.175.12.0/24 maxlen: 24
185.175.13.0/24 maxlen: 24
2a05:f240::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:16:ed:63:9f:45:ce:9f:05:3b:41:08:0f:47:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aedaeea9117a1d5ccc320222955a09faa0798fd9
Validity
Not Before: Jan 1 21:48:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d89db30f7ad338ee1e92103e48f5bb3069dbc464
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:05:1f:7b:c2:7b:64:82:a2:56:6e:88:d6:04:
26:e4:2e:f9:27:7e:9b:dc:0b:0a:54:fa:9e:cb:12:
70:c8:41:a2:8e:62:1f:e3:cc:b5:87:d6:bc:62:5d:
48:93:93:88:a8:ac:cb:f4:99:40:c3:d2:7a:92:0a:
f1:5b:2b:1d:45:87:ab:d7:dc:bb:0a:fd:fb:c4:81:
c8:30:b9:22:c0:57:90:84:72:c0:4d:20:47:39:e8:
34:27:3a:47:b3:3e:2c:cd:25:cc:d5:1f:a1:ca:e5:
63:76:67:81:2d:e2:41:ca:4f:e1:ac:17:db:28:e8:
b3:24:5e:10:53:b0:31:00:82:d8:85:5a:2c:09:bf:
de:82:83:a7:8c:ad:ac:b3:ee:ee:75:a6:3b:b7:ca:
8d:33:29:49:2e:8b:73:ab:b5:77:9b:99:f8:89:4f:
bf:8b:8a:78:91:08:ef:37:55:01:f7:63:90:1c:15:
31:90:b3:73:b7:0e:64:18:ec:02:ea:67:82:39:5b:
fe:b5:5e:03:43:0f:ce:5c:bf:11:6e:38:8f:a2:5a:
2c:88:f0:3e:4e:9c:29:6f:3e:e0:ff:bb:57:17:85:
d9:35:dd:78:dc:64:1d:34:ce:1f:52:e0:f2:84:18:
3e:b2:2d:54:03:51:68:4d:6f:b9:93:6b:37:a1:f0:
81:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:9D:B3:0F:7A:D3:38:EE:1E:92:10:3E:48:F5:BB:30:69:DB:C4:64
X509v3 Authority Key Identifier:
keyid:AE:DA:EE:A9:11:7A:1D:5C:CC:32:02:22:95:5A:09:FA:A0:79:8F:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rtruqRF6HVzMMgIilVoJ-qB5j9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/2J2zD3rTOO4ekhA-SPW7MGnbxGQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/rtruqRF6HVzMMgIilVoJ-qB5j9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.15.192.0/22
45.133.80.0/22
185.92.120.0/22
185.175.12.0/23
IPv6:
2a05:f240::/29
Signature Algorithm: sha256WithRSAEncryption
73:be:68:f2:85:af:d9:d3:fb:6d:cd:59:e7:f9:18:d1:d2:b9:
c2:39:7a:2b:41:68:fb:48:88:48:bb:ea:6d:f9:16:dd:55:bc:
fd:45:62:da:e1:02:73:40:0b:d5:ee:ac:fd:4e:74:f2:c8:64:
63:89:65:22:d9:e2:ea:31:79:1e:82:c2:e9:07:39:c5:e2:05:
62:7f:eb:de:29:0e:ea:2b:bb:0b:0b:55:ee:bd:ae:1c:87:47:
4c:b8:f7:4b:bd:40:85:18:a8:dd:e5:00:21:2d:64:4c:cf:f2:
03:8c:5f:22:aa:a2:47:85:2d:10:b9:cf:09:7c:e4:1c:7d:b8:
22:bc:4a:6d:40:64:4c:0b:4b:62:d5:8e:40:dc:5e:90:8a:03:
9b:c2:79:85:c9:2d:28:bf:df:1e:c8:ba:ba:bd:a1:fa:ec:21:
1d:bb:14:c7:53:6a:71:11:09:0a:c3:58:e3:66:3b:37:ae:a9:
f7:f6:fb:96:5e:f4:90:6d:dd:43:d1:b2:7e:96:cd:12:55:c2:
c5:92:55:cc:bc:40:b8:90:c1:2d:bc:10:b6:4a:58:4d:91:16:
24:8d:5a:c6:ce:f9:6e:c7:47:f6:a8:8d:1d:1d:60:12:c9:d4:
bc:25:49:80:d4:ea:3a:83:86:38:24:88:6b:8a:9d:f6:99:6a:
0d:7c:3e:4f
-----BEGIN CERTIFICATE-----
MIIFHjCCBAagAwIBAgISAZQj1xbtY59Fzp8FO0EID0e+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlZGFlZWE5MTE3YTFkNWNjYzMyMDIyMjk1NWEwOWZhYTA3
OThmZDkwHhcNMjUwMTAxMjE0ODA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkODlkYjMwZjdhZDMzOGVlMWU5MjEwM2U0OGY1YmIzMDY5ZGJjNDY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyAUfe8J7ZIKiVm6I1gQm5C75J36b
3AsKVPqeyxJwyEGijmIf48y1h9a8Yl1Ik5OIqKzL9JlAw9J6kgrxWysdRYer19y7
Cv37xIHIMLkiwFeQhHLATSBHOeg0JzpHsz4szSXM1R+hyuVjdmeBLeJByk/hrBfb
KOizJF4QU7AxAILYhVosCb/egoOnjK2ss+7udaY7t8qNMylJLotzq7V3m5n4iU+/
i4p4kQjvN1UB92OQHBUxkLNztw5kGOwC6meCOVv+tV4DQw/OXL8RbjiPolosiPA+
Tpwpbz7g/7tXF4XZNd143GQdNM4fUuDyhBg+si1UA1FoTW+5k2s3ofCBCwIDAQAB
o4ICKjCCAiYwHQYDVR0OBBYEFNidsw960zjuHpIQPkj1uzBp28RkMB8GA1UdIwQY
MBaAFK7a7qkReh1czDICIpVaCfqgeY/ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcnRydXFSRjZIVnpNTWdJaWxWb0otcUI1ajlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi9hMTNiMDEtNDE1My00ZWE1LWJmMjEt
OTk4NjhjNTEzMjlhLzEvMkoyekQzclRPTzRla2hBLVNQVzdNR25ieEdRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi9hMTNiMDEtNDE1My00ZWE1LWJmMjEtOTk4NjhjNTEzMjlh
LzEvcnRydXFSRjZIVnpNTWdJaWxWb0otcUI1ajlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQCLQ/AAwQC
LYVQAwQCuVx4AwQBua8MMA0EAgACMAcDBQMqBfJAMA0GCSqGSIb3DQEBCwUAA4IB
AQBzvmjyha/Z0/ttzVnn+RjR0rnCOXorQWj7SIhIu+pt+RbdVbz9RWLa4QJzQAvV
7qz9TnTyyGRjiWUi2eLqMXkegsLpBznF4gVif+veKQ7qK7sLC1Xuva4ch0dMuPdL
vUCFGKjd5QAhLWRMz/IDjF8iqqJHhS0Quc8JfOQcfbgivEptQGRMC0ti1Y5A3F6Q
igObwnmFyS0ov98eyLq6vaH67CEduxTHU2pxEQkKw1jjZjs3rqn39vuWXvSQbd1D
0bJ+ls0SVcLFklXMvEC4kMEtvBC2SlhNkRYkjVrGzvlux0f2qI0dHWASydS8JUmA
1Oo6g4Y4JIhrip32mWoNfD5P
-----END CERTIFICATE-----
Generated at Fri Apr 11 06:32:26 2025 by rpki-client