Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/ElR1tFIaY2PsVDpiTByrXvXqpxo.roa
File: ElR1tFIaY2PsVDpiTByrXvXqpxo.roa (raw, json)
Hash identifier: iq5gGlEdNdHsXyZVWv/MPVHohphUvsytP0Ty+022UbU=
Subject key identifier: 12:54:75:B4:52:1A:63:63:EC:54:3A:62:4C:1C:AB:5E:F5:EA:A7:1A
Certificate issuer: /CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Certificate serial: 019420680B7A45AC2BEDC0EEB99B625B900A
Authority key identifier: B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/ElR1tFIaY2PsVDpiTByrXvXqpxo.roa
Signing time: Wed 01 Jan 2025 05:47:56 +0000
ROA not before: Wed 01 Jan 2025 05:47:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207273
IP address blocks: 45.148.50.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:0b:7a:45:ac:2b:ed:c0:ee:b9:9b:62:5b:90:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Validity
Not Before: Jan 1 05:47:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=125475b4521a6363ec543a624c1cab5ef5eaa71a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:0a:2f:fb:de:53:9e:35:75:4b:81:0e:6a:2a:
4b:d6:ec:26:5e:48:2b:31:9d:43:d4:33:4a:63:c5:
ca:97:7b:ba:4e:5e:21:bb:2c:05:62:77:15:26:cf:
7d:70:3b:7d:e1:0c:21:86:66:63:6a:dd:2a:1d:df:
ed:32:2b:11:19:c1:ad:60:ca:46:f3:20:d8:04:0b:
c7:68:75:c3:d2:0d:00:39:3b:ae:20:62:2f:68:c2:
a4:fd:0a:9e:fe:64:8e:0a:51:66:87:1e:de:61:a3:
a5:c1:7d:fb:2d:3e:c2:0d:5d:04:6f:bf:42:b0:41:
e3:25:4e:a6:4f:a2:23:93:16:4b:78:8f:06:3d:f5:
3b:85:9f:20:72:5b:ee:f6:26:37:56:97:70:62:68:
c2:45:f1:bd:eb:7e:00:b4:86:fa:e8:58:2f:2d:ef:
d3:45:9b:00:58:de:d0:4f:63:db:a9:74:10:94:ac:
be:68:31:11:c4:be:2f:96:ca:b0:b7:11:ab:b6:36:
5d:1a:e7:ae:a2:04:5d:b5:4c:2c:24:fe:96:9b:31:
06:e6:5c:21:e8:e0:7d:9a:a8:78:6a:6b:bb:db:a2:
0a:53:18:fc:ff:cb:1f:c7:30:90:b9:9a:93:8f:4b:
8f:fa:24:47:0f:0f:4f:2c:48:cd:63:4a:b3:6b:78:
10:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:54:75:B4:52:1A:63:63:EC:54:3A:62:4C:1C:AB:5E:F5:EA:A7:1A
X509v3 Authority Key Identifier:
keyid:B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/ElR1tFIaY2PsVDpiTByrXvXqpxo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.148.50.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:32:3e:b9:08:0f:fb:43:78:98:11:fd:76:4e:ed:a3:38:5a:
fa:8c:a7:72:4c:2b:20:6c:d8:fa:52:ab:1e:05:ad:ad:be:1d:
fd:ad:18:d5:42:24:ad:1e:84:33:05:b5:c0:60:7d:44:2f:30:
df:5e:cb:d8:08:b6:bc:6f:23:c1:38:a1:62:88:91:4e:dd:b8:
a7:dc:ce:2c:a1:c3:4b:11:bb:03:0a:d8:04:1b:d9:4e:8f:94:
d1:2b:a5:b9:a2:43:dc:7d:0b:23:1a:ab:2e:d7:d3:54:28:31:
42:95:69:8f:ec:d7:72:fa:fd:ec:ed:e7:f9:d2:e3:6c:5c:48:
b8:4f:b0:e5:7d:d6:65:cc:2d:1e:d5:a2:c2:62:35:5d:a8:cf:
00:c7:3b:64:28:7d:ca:79:af:b7:53:bd:b5:3a:92:19:24:49:
83:ef:d0:43:d2:71:8c:a9:c9:60:2f:0a:8d:b2:05:99:8b:7e:
87:38:60:34:24:80:af:d6:f2:83:fa:8b:29:73:34:67:cc:60:
78:fb:5f:c3:c8:a4:5d:56:6a:17:22:fd:bb:d6:a1:bf:30:9f:
d5:8f:f8:34:55:18:be:84:9a:b9:ca:4d:fd:18:ac:e0:0f:45:
98:12:45:9f:4c:d2:81:a1:a4:d4:d8:8e:70:77:7a:7b:9f:87:
9b:6b:3a:af
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQgaAt6Rawr7cDuuZtiW5AKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1NTdjY2Q0M2FmZTgxNmU0OTUzMjI4YmYxNGE3NWRjMjkw
MTRiOGQwHhcNMjUwMTAxMDU0NzU2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMjU0NzViNDUyMWE2MzYzZWM1NDNhNjI0YzFjYWI1ZWY1ZWFhNzFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAswov+95TnjV1S4EOaipL1uwmXkgr
MZ1D1DNKY8XKl3u6Tl4huywFYncVJs99cDt94QwhhmZjat0qHd/tMisRGcGtYMpG
8yDYBAvHaHXD0g0AOTuuIGIvaMKk/Qqe/mSOClFmhx7eYaOlwX37LT7CDV0Eb79C
sEHjJU6mT6IjkxZLeI8GPfU7hZ8gclvu9iY3VpdwYmjCRfG9634AtIb66FgvLe/T
RZsAWN7QT2PbqXQQlKy+aDERxL4vlsqwtxGrtjZdGueuogRdtUwsJP6WmzEG5lwh
6OB9mqh4amu726IKUxj8/8sfxzCQuZqTj0uP+iRHDw9PLEjNY0qza3gQIQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBJUdbRSGmNj7FQ6Ykwcq1716qcaMB8GA1UdIwQY
MBaAFLVXzNQ6/oFuSVMii/FKddwpAUuNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFZmTTFEci1nVzVKVXlLTDhVcDEzQ2tCUzQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi8xOTA4NDMtMTgwMy00NDYyLWE3OTUt
NmJjNzU1NzhiNGMzLzEvRWxSMXRGSWFZMlBzVkRwaVRCeXJYdlhxcHhvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi8xOTA4NDMtMTgwMy00NDYyLWE3OTUtNmJjNzU1NzhiNGMz
LzEvdFZmTTFEci1nVzVKVXlLTDhVcDEzQ2tCUzQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZQyMA0G
CSqGSIb3DQEBCwUAA4IBAQAcMj65CA/7Q3iYEf12Tu2jOFr6jKdyTCsgbNj6Uqse
Ba2tvh39rRjVQiStHoQzBbXAYH1ELzDfXsvYCLa8byPBOKFiiJFO3bin3M4socNL
EbsDCtgEG9lOj5TRK6W5okPcfQsjGqsu19NUKDFClWmP7Ndy+v3s7ef50uNsXEi4
T7DlfdZlzC0e1aLCYjVdqM8AxztkKH3Kea+3U721OpIZJEmD79BD0nGMqclgLwqN
sgWZi36HOGA0JICv1vKD+ospczRnzGB4+1/DyKRdVmoXIv271qG/MJ/Vj/g0VRi+
hJq5yk39GKzgD0WYEkWfTNKBoaTU2I5wd3p7n4ebazqv
-----END CERTIFICATE-----
Generated at Sat Apr 5 19:38:28 2025 by rpki-client