Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/92fbd9-b9ee-42fc-aac1-fb97ddd54891/1/hHiGsmfrhsgON9dzVYozxtuCCDg.roa
File: hHiGsmfrhsgON9dzVYozxtuCCDg.roa (raw, json)
Hash identifier: z4ZF0Gqq/BQZKQszFHzmotHi4BZqgEpR8VtVskzydjw=
Subject key identifier: 84:78:86:B2:67:EB:86:C8:0E:37:D7:73:55:8A:33:C6:DB:82:08:38
Certificate issuer: /CN=03d602b9e1da2b568df544bda50e415799bbb1e2
Certificate serial: 01942745BBBE59DED2A340EAF21CE74AE33B
Authority key identifier: 03:D6:02:B9:E1:DA:2B:56:8D:F5:44:BD:A5:0E:41:57:99:BB:B1:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A9YCueHaK1aN9US9pQ5BV5m7seI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/92fbd9-b9ee-42fc-aac1-fb97ddd54891/1/hHiGsmfrhsgON9dzVYozxtuCCDg.roa
Signing time: Thu 02 Jan 2025 13:47:48 +0000
ROA not before: Thu 02 Jan 2025 13:47:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 135391
IP address blocks: 45.10.38.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:45:bb:be:59:de:d2:a3:40:ea:f2:1c:e7:4a:e3:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03d602b9e1da2b568df544bda50e415799bbb1e2
Validity
Not Before: Jan 2 13:47:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=847886b267eb86c80e37d773558a33c6db820838
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:47:f8:e7:f7:5e:7f:d1:04:cc:ed:0d:4f:3d:
ca:c6:e4:d5:58:80:dc:92:3c:7a:10:61:0e:17:50:
00:0b:99:fb:0e:8f:c8:47:24:62:79:e3:17:66:0f:
e4:e9:34:8c:7f:ec:8e:87:b5:90:75:47:25:62:3d:
ee:2e:0e:16:91:27:3e:64:72:80:45:b6:f6:00:d4:
21:1c:27:ce:02:ec:22:dc:70:2e:00:c9:ec:76:10:
9e:35:cc:36:26:bb:c4:b6:0c:9c:18:20:47:0a:7a:
cf:cd:f3:1e:8d:0f:26:85:b0:1b:01:fc:49:ba:cf:
d4:d4:f5:35:57:4b:99:83:77:32:a9:53:09:5f:78:
ea:b0:74:b0:38:d3:c9:a0:24:f6:35:64:b0:8e:a2:
bc:b1:15:9e:4f:25:b2:0c:dd:4e:ae:70:98:a9:66:
bb:53:62:36:fc:11:a1:e3:bb:a8:b1:c5:44:d7:a4:
27:62:bd:aa:9e:50:8f:9d:28:cc:68:52:ed:3f:a1:
f3:96:a5:44:9d:01:ce:22:21:ee:6f:c7:33:d8:10:
1b:ec:66:15:9f:74:8f:3a:17:37:74:21:65:9c:6b:
8b:cf:fa:44:54:66:21:ef:f9:25:ac:66:18:89:21:
83:8a:23:39:29:ea:78:5e:34:08:c3:ef:e0:a3:19:
f0:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:78:86:B2:67:EB:86:C8:0E:37:D7:73:55:8A:33:C6:DB:82:08:38
X509v3 Authority Key Identifier:
keyid:03:D6:02:B9:E1:DA:2B:56:8D:F5:44:BD:A5:0E:41:57:99:BB:B1:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A9YCueHaK1aN9US9pQ5BV5m7seI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/92fbd9-b9ee-42fc-aac1-fb97ddd54891/1/hHiGsmfrhsgON9dzVYozxtuCCDg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/92fbd9-b9ee-42fc-aac1-fb97ddd54891/1/A9YCueHaK1aN9US9pQ5BV5m7seI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.10.38.0/24
Signature Algorithm: sha256WithRSAEncryption
d9:58:1b:eb:fe:2a:f3:dd:d0:09:59:ed:f5:5a:27:93:b7:d7:
05:e8:70:4b:b6:42:f7:07:8b:68:b9:50:fe:9f:62:8f:81:0e:
1d:d7:46:a0:2e:13:fc:81:95:e2:06:87:10:93:10:7b:9a:f8:
b7:c5:ab:7a:9e:b7:b4:7a:57:a1:75:46:5d:0b:e4:a9:c8:a8:
05:93:eb:1a:14:da:64:10:e5:3d:f6:d7:73:b0:65:5e:f0:83:
81:f8:0c:9d:93:98:11:f4:5c:a4:4f:65:69:51:c4:ad:97:3a:
eb:94:44:b1:34:81:ab:93:04:b1:2b:4a:2c:2c:2d:04:5c:24:
11:7e:0c:2e:33:0e:cf:17:a9:f2:f8:00:ca:78:08:69:78:98:
b4:d4:60:b8:2c:f9:ef:99:64:28:3d:77:e0:a8:58:64:95:57:
cc:b9:c2:8f:84:c3:c9:57:52:11:12:1e:1e:93:02:f4:82:e3:
40:21:ab:2a:46:5a:89:6d:8b:1e:0d:da:02:56:80:ba:35:20:
c0:76:60:9c:c9:1f:03:9c:f1:c5:af:9a:bb:fc:8f:a8:55:cb:
05:f8:52:e5:30:4d:e0:77:27:43:28:a1:da:e2:5c:da:8b:5d:
4b:b1:4e:dd:81:cb:20:63:d0:08:15:8e:53:a3:4a:0a:6d:07:
92:c7:b6:16
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQnRbu+Wd7So0Dq8hznSuM7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzZDYwMmI5ZTFkYTJiNTY4ZGY1NDRiZGE1MGU0MTU3OTli
YmIxZTIwHhcNMjUwMTAyMTM0NzQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NDc4ODZiMjY3ZWI4NmM4MGUzN2Q3NzM1NThhMzNjNmRiODIwODM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp0f45/def9EEzO0NTz3KxuTVWIDc
kjx6EGEOF1AAC5n7Do/IRyRieeMXZg/k6TSMf+yOh7WQdUclYj3uLg4WkSc+ZHKA
Rbb2ANQhHCfOAuwi3HAuAMnsdhCeNcw2JrvEtgycGCBHCnrPzfMejQ8mhbAbAfxJ
us/U1PU1V0uZg3cyqVMJX3jqsHSwONPJoCT2NWSwjqK8sRWeTyWyDN1OrnCYqWa7
U2I2/BGh47uoscVE16QnYr2qnlCPnSjMaFLtP6HzlqVEnQHOIiHub8cz2BAb7GYV
n3SPOhc3dCFlnGuLz/pEVGYh7/klrGYYiSGDiiM5Kep4XjQIw+/goxnwzwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIR4hrJn64bIDjfXc1WKM8bbggg4MB8GA1UdIwQY
MBaAFAPWArnh2itWjfVEvaUOQVeZu7HiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQTlZQ3VlSGFLMWFOOVVTOXBRNUJWNW03c2VJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy85MmZiZDktYjllZS00MmZjLWFhYzEt
ZmI5N2RkZDU0ODkxLzEvaEhpR3NtZnJoc2dPTjlkelZZb3p4dHVDQ0RnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy85MmZiZDktYjllZS00MmZjLWFhYzEtZmI5N2RkZDU0ODkx
LzEvQTlZQ3VlSGFLMWFOOVVTOXBRNUJWNW03c2VJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALQomMA0G
CSqGSIb3DQEBCwUAA4IBAQDZWBvr/irz3dAJWe31WieTt9cF6HBLtkL3B4touVD+
n2KPgQ4d10agLhP8gZXiBocQkxB7mvi3xat6nre0elehdUZdC+SpyKgFk+saFNpk
EOU99tdzsGVe8IOB+Aydk5gR9FykT2VpUcStlzrrlESxNIGrkwSxK0osLC0EXCQR
fgwuMw7PF6ny+ADKeAhpeJi01GC4LPnvmWQoPXfgqFhklVfMucKPhMPJV1IREh4e
kwL0guNAIasqRlqJbYseDdoCVoC6NSDAdmCcyR8DnPHFr5q7/I+oVcsF+FLlME3g
dydDKKHa4lzai11LsU7dgcsgY9AIFY5To0oKbQeSx7YW
-----END CERTIFICATE-----
Generated at Wed Feb 19 20:59:23 2025 by rpki-client