Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/877e40-6ca1-4a2b-89a5-8abf5ee6c4ad/1/2Oc3FqLDZOIsZ3-ChpBNgzAI1qA.roa
File: 2Oc3FqLDZOIsZ3-ChpBNgzAI1qA.roa (raw, json)
Hash identifier: ngieeqkZH2PetACTisY+FlZAWILVipXJYp8vJQiZ9t4=
Subject key identifier: D8:E7:37:16:A2:C3:64:E2:2C:67:7F:82:86:90:4D:83:30:08:D6:A0
Certificate issuer: /CN=cac21641bdbcfac24c54b6a4859483c5e41640b6
Certificate serial: 019426D9CE44C013463DD8830678F372BB8A
Authority key identifier: CA:C2:16:41:BD:BC:FA:C2:4C:54:B6:A4:85:94:83:C5:E4:16:40:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ysIWQb28-sJMVLakhZSDxeQWQLY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/877e40-6ca1-4a2b-89a5-8abf5ee6c4ad/1/2Oc3FqLDZOIsZ3-ChpBNgzAI1qA.roa
Signing time: Thu 02 Jan 2025 11:49:55 +0000
ROA not before: Thu 02 Jan 2025 11:49:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 45.56.224.0/21 maxlen: 21
45.56.236.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:ce:44:c0:13:46:3d:d8:83:06:78:f3:72:bb:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cac21641bdbcfac24c54b6a4859483c5e41640b6
Validity
Not Before: Jan 2 11:49:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d8e73716a2c364e22c677f8286904d833008d6a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:9b:27:a1:14:07:32:c5:d4:06:55:6e:20:68:
6e:66:a9:91:27:a5:09:52:f9:17:cb:dd:47:2d:c0:
0a:34:3c:48:3d:d3:3e:7f:2b:25:1c:f3:1b:af:d9:
fa:06:1f:bc:21:20:76:77:50:21:df:91:05:f3:2b:
a6:41:ea:4e:dc:6e:97:f4:5b:0d:f0:f2:1e:99:e7:
84:8e:8f:07:c5:e2:f9:a7:41:5c:4d:23:61:ee:a3:
68:e6:e6:40:fc:b6:24:ac:a0:cd:c5:d4:89:1a:2a:
9d:3b:47:45:1e:06:d4:5e:59:1a:e7:a6:6f:61:9a:
e4:fe:f4:69:85:f5:3d:65:2c:b4:65:d3:61:37:c2:
da:a0:6a:68:55:46:d3:08:50:f2:c8:dc:ca:b0:0f:
9d:42:ff:4d:c9:da:87:d9:8f:af:d2:d3:fa:97:5a:
26:13:83:82:7f:cd:f0:d3:13:9f:4a:40:16:fe:f6:
20:db:de:ad:6b:dd:71:b3:a3:62:df:3e:fe:de:18:
31:d2:d3:d4:07:af:a4:02:1b:50:c6:26:0c:77:40:
5c:71:a7:63:b0:34:34:92:cc:43:88:06:7d:7c:6b:
53:50:89:9a:82:eb:e7:b5:5f:d4:ca:fd:5c:32:13:
1a:d8:cf:9a:ba:02:a6:50:f6:ac:67:ad:ff:80:6b:
d9:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:E7:37:16:A2:C3:64:E2:2C:67:7F:82:86:90:4D:83:30:08:D6:A0
X509v3 Authority Key Identifier:
keyid:CA:C2:16:41:BD:BC:FA:C2:4C:54:B6:A4:85:94:83:C5:E4:16:40:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ysIWQb28-sJMVLakhZSDxeQWQLY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/877e40-6ca1-4a2b-89a5-8abf5ee6c4ad/1/2Oc3FqLDZOIsZ3-ChpBNgzAI1qA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/877e40-6ca1-4a2b-89a5-8abf5ee6c4ad/1/ysIWQb28-sJMVLakhZSDxeQWQLY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.56.224.0/21
45.56.236.0/23
Signature Algorithm: sha256WithRSAEncryption
6c:2f:4c:b7:e0:0d:af:29:56:74:2b:92:5a:77:34:55:72:44:
98:38:71:44:4c:38:d3:2f:17:24:ec:9d:69:43:a9:a4:07:98:
80:c4:2b:47:c9:1c:ac:bf:04:2c:80:ec:d2:c2:fb:14:46:10:
9d:5c:90:5e:f4:77:05:87:d4:99:ad:6e:5a:69:27:12:96:48:
fd:5b:95:27:4b:89:83:31:c6:3c:54:97:bb:39:8d:45:2f:ba:
35:8d:82:7e:bf:73:a4:51:9b:6c:a3:92:fc:06:8d:43:16:6a:
a6:85:28:d0:f2:ee:30:c8:24:3a:34:1d:49:aa:e3:df:4a:80:
f1:40:c1:a6:b7:21:b6:80:58:cf:d7:81:c5:06:30:7e:ef:1d:
63:fa:8f:27:0f:b0:cd:48:d6:da:bc:1a:89:27:13:17:be:d2:
c5:78:a5:7e:6d:4a:ae:f3:a3:53:c6:a8:d4:46:82:ae:4a:69:
c9:0c:bc:9b:5c:6f:cf:25:89:b3:e1:c5:a9:9a:6d:3d:d2:39:
b5:09:e2:93:fe:ac:e1:9f:0c:dc:b4:84:45:71:02:98:10:98:
97:b3:8c:5b:74:8f:77:96:81:7d:bf:00:3a:93:51:d1:9c:97:
f6:34:52:c1:31:f1:2e:e4:30:0f:3c:8a:c1:62:3a:85:4d:19:
07:6f:54:67
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQm2c5EwBNGPdiDBnjzcruKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhYzIxNjQxYmRiY2ZhYzI0YzU0YjZhNDg1OTQ4M2M1ZTQx
NjQwYjYwHhcNMjUwMTAyMTE0OTU1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkOGU3MzcxNmEyYzM2NGUyMmM2NzdmODI4NjkwNGQ4MzMwMDhkNmEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmJsnoRQHMsXUBlVuIGhuZqmRJ6UJ
UvkXy91HLcAKNDxIPdM+fyslHPMbr9n6Bh+8ISB2d1Ah35EF8yumQepO3G6X9FsN
8PIemeeEjo8HxeL5p0FcTSNh7qNo5uZA/LYkrKDNxdSJGiqdO0dFHgbUXlka56Zv
YZrk/vRphfU9ZSy0ZdNhN8LaoGpoVUbTCFDyyNzKsA+dQv9NydqH2Y+v0tP6l1om
E4OCf83w0xOfSkAW/vYg296ta91xs6Ni3z7+3hgx0tPUB6+kAhtQxiYMd0Bccadj
sDQ0ksxDiAZ9fGtTUImaguvntV/Uyv1cMhMa2M+augKmUPasZ63/gGvZzQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFNjnNxaiw2TiLGd/goaQTYMwCNagMB8GA1UdIwQY
MBaAFMrCFkG9vPrCTFS2pIWUg8XkFkC2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveXNJV1FiMjgtc0pNVkxha2haU0R4ZVFXUUxZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi84NzdlNDAtNmNhMS00YTJiLTg5YTUt
OGFiZjVlZTZjNGFkLzEvMk9jM0ZxTERaT0lzWjMtQ2hwQk5nekFJMXFBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi84NzdlNDAtNmNhMS00YTJiLTg5YTUtOGFiZjVlZTZjNGFk
LzEveXNJV1FiMjgtc0pNVkxha2haU0R4ZVFXUUxZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDLTjgAwQB
LTjsMA0GCSqGSIb3DQEBCwUAA4IBAQBsL0y34A2vKVZ0K5JadzRVckSYOHFETDjT
Lxck7J1pQ6mkB5iAxCtHyRysvwQsgOzSwvsURhCdXJBe9HcFh9SZrW5aaScSlkj9
W5UnS4mDMcY8VJe7OY1FL7o1jYJ+v3OkUZtso5L8Bo1DFmqmhSjQ8u4wyCQ6NB1J
quPfSoDxQMGmtyG2gFjP14HFBjB+7x1j+o8nD7DNSNbavBqJJxMXvtLFeKV+bUqu
86NTxqjURoKuSmnJDLybXG/PJYmz4cWpmm090jm1CeKT/qzhnwzctIRFcQKYEJiX
s4xbdI93loF9vwA6k1HRnJf2NFLBMfEu5DAPPIrBYjqFTRkHb1Rn
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:05:29 2025 by rpki-client