Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/edZi5UIYEJVOugJqNvZCnkJACaA.roa
File: edZi5UIYEJVOugJqNvZCnkJACaA.roa (raw, json)
Hash identifier: kUt/bAauI5Yo+wpppGm4BPNoqU5jkjEhpAPdHStMPLo=
Subject key identifier: 79:D6:62:E5:42:18:10:95:4E:BA:02:6A:36:F6:42:9E:42:40:09:A0
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019428249A8AE3F8B5AC0B6F580F4BF6A225
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/edZi5UIYEJVOugJqNvZCnkJACaA.roa
Signing time: Thu 02 Jan 2025 17:51:15 +0000
ROA not before: Thu 02 Jan 2025 17:51:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 147186
IP address blocks: 45.129.86.0/23 maxlen: 24
185.252.176.0/24 maxlen: 24
193.35.19.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:9a:8a:e3:f8:b5:ac:0b:6f:58:0f:4b:f6:a2:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 17:51:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=79d662e5421810954eba026a36f6429e424009a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:0b:2c:87:56:1f:b6:8e:6b:8b:c7:a2:0e:ca:
b0:39:51:ab:eb:be:f5:60:4e:44:8d:46:8a:ad:be:
ea:05:90:3d:4d:3c:26:8d:8d:1e:53:f0:dd:f0:2f:
f9:62:2e:60:5f:11:94:6d:99:37:5f:b0:c4:2b:9e:
ac:ce:7c:c5:a7:ea:b3:30:0b:7e:94:7e:63:5f:07:
89:de:a6:f8:50:04:16:80:5b:d8:40:0b:78:af:1b:
91:32:4f:dd:7b:a2:3b:f6:fb:d7:3e:2c:7e:6d:b1:
68:9f:ae:5b:94:92:a7:66:91:77:a4:f0:78:5a:11:
75:dc:a5:7b:32:20:a0:42:61:54:e5:07:33:df:a5:
ff:2f:32:5c:33:a9:ea:a7:56:b5:4a:42:74:17:04:
e4:c6:2c:02:ce:80:7d:9c:cd:39:03:d2:ab:58:b1:
71:96:a7:48:df:ba:ba:a1:4c:41:24:f5:75:21:94:
7f:46:3c:da:84:0a:cd:0e:98:5c:71:7c:be:7c:c7:
62:53:c0:00:5f:f6:de:59:9c:77:1d:c2:47:5d:77:
8d:ae:5f:b6:da:92:49:9a:e4:84:be:f4:9e:f2:cb:
b7:c1:bc:29:b4:c8:68:20:32:38:55:e3:56:ff:11:
e6:af:f7:7f:a3:5c:0b:c5:bd:63:0f:fc:97:dc:a8:
36:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:D6:62:E5:42:18:10:95:4E:BA:02:6A:36:F6:42:9E:42:40:09:A0
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/edZi5UIYEJVOugJqNvZCnkJACaA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.86.0/23
185.252.176.0/24
193.35.19.0/24
Signature Algorithm: sha256WithRSAEncryption
80:85:aa:f3:3b:9c:bd:56:70:06:ab:9b:22:73:bc:9c:5c:4b:
2b:7a:bb:74:6c:c5:c8:2d:49:9c:63:3f:6b:d3:d5:8d:57:8b:
98:0b:d8:fb:14:40:2b:85:27:8f:7c:96:2d:7b:e1:13:1b:18:
d5:b3:e0:dd:fd:c9:77:d4:50:a1:80:f6:18:43:bc:71:1d:11:
16:b8:2e:7d:be:c8:c0:fe:be:27:d3:4c:fc:67:cc:f5:27:6a:
18:46:c4:57:a4:f2:59:0d:8d:9f:f2:f1:a8:1b:67:21:b6:e4:
b1:b7:59:19:4e:2f:01:69:8d:39:a5:f0:91:51:ee:44:f1:11:
19:1c:78:de:e2:ef:40:c1:b0:c4:69:ba:31:ee:2f:80:83:7c:
30:4c:2c:cc:bd:2b:1a:29:a3:89:03:ff:6f:5a:60:6f:46:2c:
d5:15:b1:a9:df:14:56:05:3a:f3:07:1c:4b:5c:b2:a2:e1:d1:
46:fa:56:8d:85:ab:93:54:88:c5:b9:9c:31:9b:5c:71:d0:18:
40:5d:37:26:57:48:2d:64:ba:4e:89:ea:a3:78:3a:75:15:2c:
c5:11:88:c1:19:f2:89:22:d9:1b:84:99:8b:36:78:2f:33:be:
47:c4:b8:0e:e5:c1:46:b6:be:a7:e1:71:b7:cc:8c:5e:4b:94:
6a:75:af:ed
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZQoJJqK4/i1rAtvWA9L9qIlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjUwMTAyMTc1MTE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3OWQ2NjJlNTQyMTgxMDk1NGViYTAyNmEzNmY2NDI5ZTQyNDAwOWEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2wssh1Yfto5ri8eiDsqwOVGr6771
YE5EjUaKrb7qBZA9TTwmjY0eU/Dd8C/5Yi5gXxGUbZk3X7DEK56sznzFp+qzMAt+
lH5jXweJ3qb4UAQWgFvYQAt4rxuRMk/de6I79vvXPix+bbFon65blJKnZpF3pPB4
WhF13KV7MiCgQmFU5Qcz36X/LzJcM6nqp1a1SkJ0FwTkxiwCzoB9nM05A9KrWLFx
lqdI37q6oUxBJPV1IZR/RjzahArNDphccXy+fMdiU8AAX/beWZx3HcJHXXeNrl+2
2pJJmuSEvvSe8su3wbwptMhoIDI4VeNW/xHmr/d/o1wLxb1jD/yX3Kg22QIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFHnWYuVCGBCVTroCajb2Qp5CQAmgMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvZWRaaTVVSVlFSlZPdWdKcU52WkNua0pBQ2FBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBLYFWAwQA
ufywAwQAwSMTMA0GCSqGSIb3DQEBCwUAA4IBAQCAharzO5y9VnAGq5sic7ycXEsr
ert0bMXILUmcYz9r09WNV4uYC9j7FEArhSePfJYte+ETGxjVs+Dd/cl31FChgPYY
Q7xxHREWuC59vsjA/r4n00z8Z8z1J2oYRsRXpPJZDY2f8vGoG2chtuSxt1kZTi8B
aY05pfCRUe5E8REZHHje4u9AwbDEabox7i+Ag3wwTCzMvSsaKaOJA/9vWmBvRizV
FbGp3xRWBTrzBxxLXLKi4dFG+laNhauTVIjFuZwxm1xx0BhAXTcmV0gtZLpOieqj
eDp1FSzFEYjBGfKJItkbhJmLNngvM75HxLgO5cFGtr6n4XG3zIxeS5Rqda/t
-----END CERTIFICATE-----
Generated at Sat Apr 5 08:58:46 2025 by rpki-client