Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/8hx7h20CypxA7vkJ9jt_XI5zBiE.roa
File: 8hx7h20CypxA7vkJ9jt_XI5zBiE.roa (raw, json)
Hash identifier: 57Z+CiJnBEbdJoeB0oDNPmLz4sVbYpuKOcL+nKy3SB8=
Subject key identifier: F2:1C:7B:87:6D:02:CA:9C:40:EE:F9:09:F6:3B:7F:5C:8E:73:06:21
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01942824774C2E2482CF4D2859C6F1FDBCDA
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/8hx7h20CypxA7vkJ9jt_XI5zBiE.roa
Signing time: Thu 02 Jan 2025 17:51:05 +0000
ROA not before: Thu 02 Jan 2025 17:51:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41798
IP address blocks: 45.88.90.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:77:4c:2e:24:82:cf:4d:28:59:c6:f1:fd:bc:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 17:51:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f21c7b876d02ca9c40eef909f63b7f5c8e730621
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:cc:9f:ec:a2:f9:b7:54:aa:f6:12:47:39:cf:
ce:bc:4f:30:1d:c6:81:4b:2d:94:f3:1f:fc:ea:76:
e3:59:1a:66:d7:a1:ea:4e:61:eb:a8:28:3d:98:23:
c3:00:79:a0:13:2b:a6:75:d0:27:66:36:dc:93:6b:
d4:b4:a8:6e:31:ff:96:23:c8:77:d5:ab:18:cd:0d:
9d:c3:81:fd:d0:6d:59:7a:38:46:3a:ab:4e:d5:de:
64:0d:8a:37:27:ae:ab:7e:32:c2:c5:aa:a3:99:07:
80:99:02:d5:b5:be:c4:6f:7a:1e:b2:72:27:70:fc:
3f:45:21:be:8b:dd:c1:7c:b7:1e:b1:99:d9:ef:2a:
d1:59:3d:4d:60:78:56:4c:4a:9b:62:a6:7f:5d:38:
fa:c7:3f:ae:e1:a8:4d:d5:cd:90:af:3b:3f:7b:ac:
fa:6d:d5:1a:fd:b7:78:68:e4:28:23:b3:e1:f5:ca:
4b:5b:02:8b:52:ca:75:99:8f:fd:86:33:7e:15:47:
45:cf:1b:b9:26:6e:ac:3e:e9:3a:9b:00:86:36:cd:
cb:06:cd:37:5b:8a:e4:44:fb:0d:c4:19:40:86:6d:
b9:46:3a:44:1b:2a:f1:55:6a:44:4b:d5:0a:5e:19:
59:11:22:35:27:05:f0:eb:4c:2f:e3:d5:01:18:8d:
17:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:1C:7B:87:6D:02:CA:9C:40:EE:F9:09:F6:3B:7F:5C:8E:73:06:21
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/8hx7h20CypxA7vkJ9jt_XI5zBiE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.90.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:b6:14:31:38:68:ce:40:43:4f:28:b8:6e:0c:80:01:58:de:
03:7f:8b:02:8e:05:b5:65:37:da:14:58:34:8a:f8:ec:07:43:
1e:88:c5:bc:92:04:7e:4d:b1:3c:6f:e6:45:e9:86:06:03:e8:
89:9c:29:57:bc:d6:8f:3f:31:cc:53:83:e2:7f:47:8b:aa:c8:
53:7b:95:45:b6:42:ee:be:6c:9f:08:61:60:0f:0d:db:63:ec:
28:4c:36:0f:2c:ef:b6:aa:0c:c2:f6:80:4c:e7:ae:27:4d:5b:
17:1e:ef:f5:5f:d7:6f:32:7c:46:25:32:66:a4:30:0a:85:b9:
84:dd:50:f6:29:bf:d5:b0:f2:45:a5:02:8e:cf:95:70:b2:03:
18:c0:90:05:ea:32:75:65:f5:62:92:6a:14:c9:4c:3f:f4:c4:
7a:11:a4:64:bb:d5:99:e5:e0:51:34:6c:3e:f1:9d:1f:c1:a8:
ad:79:fb:61:e8:f1:56:29:81:35:7d:69:40:f7:66:4b:0f:ff:
3f:c5:5c:4b:70:31:16:8a:8a:dd:29:c5:3c:91:e8:69:94:54:
5a:4d:13:28:ed:83:f9:44:7f:67:8c:9b:1c:6e:ad:b4:c9:84:
23:97:69:98:cc:db:59:cf:0b:13:13:59:6d:ef:9c:fc:ea:94:
dc:ef:80:06
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQoJHdMLiSCz00oWcbx/bzaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjUwMTAyMTc1MTA1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMjFjN2I4NzZkMDJjYTljNDBlZWY5MDlmNjNiN2Y1YzhlNzMwNjIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxcyf7KL5t1Sq9hJHOc/OvE8wHcaB
Sy2U8x/86nbjWRpm16HqTmHrqCg9mCPDAHmgEyumddAnZjbck2vUtKhuMf+WI8h3
1asYzQ2dw4H90G1ZejhGOqtO1d5kDYo3J66rfjLCxaqjmQeAmQLVtb7Eb3oesnIn
cPw/RSG+i93BfLcesZnZ7yrRWT1NYHhWTEqbYqZ/XTj6xz+u4ahN1c2Qrzs/e6z6
bdUa/bd4aOQoI7Ph9cpLWwKLUsp1mY/9hjN+FUdFzxu5Jm6sPuk6mwCGNs3LBs03
W4rkRPsNxBlAhm25RjpEGyrxVWpES9UKXhlZESI1JwXw60wv49UBGI0XTwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPIce4dtAsqcQO75CfY7f1yOcwYhMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvOGh4N2gyMEN5cHhBN3ZrSjlqdF9YSTV6QmlFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALVhaMA0G
CSqGSIb3DQEBCwUAA4IBAQB+thQxOGjOQENPKLhuDIABWN4Df4sCjgW1ZTfaFFg0
ivjsB0MeiMW8kgR+TbE8b+ZF6YYGA+iJnClXvNaPPzHMU4Pif0eLqshTe5VFtkLu
vmyfCGFgDw3bY+woTDYPLO+2qgzC9oBM564nTVsXHu/1X9dvMnxGJTJmpDAKhbmE
3VD2Kb/VsPJFpQKOz5VwsgMYwJAF6jJ1ZfVikmoUyUw/9MR6EaRku9WZ5eBRNGw+
8Z0fwaitefth6PFWKYE1fWlA92ZLD/8/xVxLcDEWiordKcU8kehplFRaTRMo7YP5
RH9njJscbq20yYQjl2mYzNtZzwsTE1lt75z86pTc74AG
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:17:00 2025 by rpki-client