Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/SKahOuz63VxzF7gsfLLtP4-dwsQ.roa
File: SKahOuz63VxzF7gsfLLtP4-dwsQ.roa (raw, json)
Hash identifier: tgpfEWxbjIJhXJgvlYzjtjMs+efIHb2DWjDR4Pl22YM=
Subject key identifier: 48:A6:A1:3A:EC:FA:DD:5C:73:17:B8:2C:7C:B2:ED:3F:8F:9D:C2:C4
Certificate issuer: /CN=706d3abbb478b74ef2adef9bb7c4336e34111d51
Certificate serial: 0194221FA26DCC19D2975D568CF3ECD96617
Authority key identifier: 70:6D:3A:BB:B4:78:B7:4E:F2:AD:EF:9B:B7:C4:33:6E:34:11:1D:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cG06u7R4t07yre-bt8QzbjQRHVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/SKahOuz63VxzF7gsfLLtP4-dwsQ.roa
Signing time: Wed 01 Jan 2025 13:48:06 +0000
ROA not before: Wed 01 Jan 2025 13:48:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212238
IP address blocks: 45.157.139.0/24 maxlen: 24
178.211.136.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:a2:6d:cc:19:d2:97:5d:56:8c:f3:ec:d9:66:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=706d3abbb478b74ef2adef9bb7c4336e34111d51
Validity
Not Before: Jan 1 13:48:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=48a6a13aecfadd5c7317b82c7cb2ed3f8f9dc2c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:53:28:4c:4b:52:b9:e4:8f:e1:d9:b0:60:39:
4a:c5:27:38:a7:e4:6e:46:09:ab:2a:a2:36:36:59:
51:27:fd:f2:80:aa:a4:71:14:9d:30:4c:bd:25:f3:
00:93:42:09:ec:a4:40:7a:d4:6e:50:f7:3c:6c:49:
76:ab:f2:b1:1a:69:46:9f:50:c5:9e:0d:a8:83:17:
0e:a2:93:5a:a0:de:bd:36:03:6e:64:16:4e:48:8b:
31:be:19:e0:5f:99:fb:77:8b:94:95:b0:eb:99:75:
3a:13:68:9c:63:d7:13:71:86:c4:4c:de:5e:d2:9c:
ae:af:67:36:82:d6:08:75:1d:15:a5:a5:ba:26:49:
87:1f:a8:52:f5:f3:4a:24:8d:f3:73:6b:c5:5c:32:
fa:96:2d:5a:3e:9b:39:2d:27:19:09:e4:9e:93:71:
a6:70:2d:b2:2d:29:5a:e5:91:eb:86:51:6e:87:be:
68:f2:17:d0:fd:99:5c:00:2a:c8:3a:ed:1b:6d:63:
bf:1e:07:74:40:c1:2b:e4:3e:11:f9:9c:65:7b:68:
49:32:b4:26:38:c8:6c:33:65:aa:96:d8:e3:54:9b:
8f:98:3e:7c:bb:c1:79:b6:84:6b:0e:e6:b4:53:b2:
04:e7:0c:71:79:f1:b1:69:84:6d:5b:63:34:29:71:
77:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:A6:A1:3A:EC:FA:DD:5C:73:17:B8:2C:7C:B2:ED:3F:8F:9D:C2:C4
X509v3 Authority Key Identifier:
keyid:70:6D:3A:BB:B4:78:B7:4E:F2:AD:EF:9B:B7:C4:33:6E:34:11:1D:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cG06u7R4t07yre-bt8QzbjQRHVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/SKahOuz63VxzF7gsfLLtP4-dwsQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/cG06u7R4t07yre-bt8QzbjQRHVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.157.139.0/24
178.211.136.0/24
Signature Algorithm: sha256WithRSAEncryption
03:b8:b5:a5:18:51:28:85:d9:64:f8:86:0a:de:14:cc:68:81:
07:60:99:40:c9:35:7f:4f:b9:b1:2e:f8:4a:b6:1b:a7:79:1e:
15:0e:ba:38:a0:37:6e:ac:36:47:ae:ca:4f:6c:ca:9a:fa:93:
31:68:59:b7:83:48:26:ac:10:91:a8:05:20:20:9a:c9:62:6c:
f3:4e:2a:b2:77:5d:79:74:28:41:94:71:16:18:f0:40:e7:0c:
b9:8f:c3:78:e6:10:ab:7a:04:e0:8b:f9:28:a4:1f:70:74:eb:
b6:0c:5b:88:ce:f3:60:b6:8f:70:39:be:df:b2:49:7d:a9:15:
87:ec:c6:4f:a7:a3:21:79:f9:fa:99:79:83:6c:1e:01:e7:b4:
44:9f:4e:9b:8e:f8:16:29:b0:5f:59:03:b9:a8:ba:a1:48:12:
49:e1:2a:fb:ec:35:a5:a8:b9:30:6d:ce:27:b7:b7:09:d4:57:
c8:1e:f6:e4:63:12:d2:1a:36:54:09:0b:3e:04:24:bb:76:37:
bd:e6:be:36:b5:e6:5d:55:d9:fe:d6:86:af:ac:68:29:7a:85:
11:00:48:df:0c:02:8b:22:86:f2:86:6f:94:77:b9:0e:c3:e3:
8f:b6:64:b7:de:7a:e9:68:f5:cb:48:23:66:60:6c:92:f0:c7:
c2:56:98:59
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQiH6JtzBnSl11WjPPs2WYXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwNmQzYWJiYjQ3OGI3NGVmMmFkZWY5YmI3YzQzMzZlMzQx
MTFkNTEwHhcNMjUwMTAxMTM0ODA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0OGE2YTEzYWVjZmFkZDVjNzMxN2I4MmM3Y2IyZWQzZjhmOWRjMmM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA81MoTEtSueSP4dmwYDlKxSc4p+Ru
RgmrKqI2NllRJ/3ygKqkcRSdMEy9JfMAk0IJ7KRAetRuUPc8bEl2q/KxGmlGn1DF
ng2ogxcOopNaoN69NgNuZBZOSIsxvhngX5n7d4uUlbDrmXU6E2icY9cTcYbETN5e
0pyur2c2gtYIdR0VpaW6JkmHH6hS9fNKJI3zc2vFXDL6li1aPps5LScZCeSek3Gm
cC2yLSla5ZHrhlFuh75o8hfQ/ZlcACrIOu0bbWO/Hgd0QMEr5D4R+Zxle2hJMrQm
OMhsM2WqltjjVJuPmD58u8F5toRrDua0U7IE5wxxefGxaYRtW2M0KXF3NwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFEimoTrs+t1ccxe4LHyy7T+PncLEMB8GA1UdIwQY
MBaAFHBtOru0eLdO8q3vm7fEM240ER1RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0cwNnU3UjR0MDd5cmUtYnQ4UXpialFSSFZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy8wYzZmNDctNDcxMy00NDcxLWIwOGYt
YTQyMTNjOTNmMWY3LzEvU0thaE91ejYzVnh6Rjdnc2ZMTHRQNC1kd3NRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy8wYzZmNDctNDcxMy00NDcxLWIwOGYtYTQyMTNjOTNmMWY3
LzEvY0cwNnU3UjR0MDd5cmUtYnQ4UXpialFSSFZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALZ2LAwQA
stOIMA0GCSqGSIb3DQEBCwUAA4IBAQADuLWlGFEohdlk+IYK3hTMaIEHYJlAyTV/
T7mxLvhKthuneR4VDro4oDdurDZHrspPbMqa+pMxaFm3g0gmrBCRqAUgIJrJYmzz
Tiqyd115dChBlHEWGPBA5wy5j8N45hCregTgi/kopB9wdOu2DFuIzvNgto9wOb7f
skl9qRWH7MZPp6Mhefn6mXmDbB4B57REn06bjvgWKbBfWQO5qLqhSBJJ4Sr77DWl
qLkwbc4nt7cJ1FfIHvbkYxLSGjZUCQs+BCS7dje95r42teZdVdn+1oavrGgpeoUR
AEjfDAKLIobyhm+Ud7kOw+OPtmS33nrpaPXLSCNmYGyS8MfCVphZ
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:36:25 2025 by rpki-client