Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tb3kec3C_AdEd3PbwhtotVTRyPE.roa
File: tb3kec3C_AdEd3PbwhtotVTRyPE.roa (raw, json)
Hash identifier: 4jjavH36yHIelt71HPqT5lLNi8LGIY/f55sh9UE2dJM=
Subject key identifier: B5:BD:E4:79:CD:C2:FC:07:44:77:73:DB:C2:1B:68:B5:54:D1:C8:F1
Certificate issuer: /CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Certificate serial: 0194206807D973344A880066AAA7DACA8997
Authority key identifier: B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tb3kec3C_AdEd3PbwhtotVTRyPE.roa
Signing time: Wed 01 Jan 2025 05:47:55 +0000
ROA not before: Wed 01 Jan 2025 05:47:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199033
IP address blocks: 45.154.237.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:07:d9:73:34:4a:88:00:66:aa:a7:da:ca:89:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Validity
Not Before: Jan 1 05:47:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b5bde479cdc2fc07447773dbc21b68b554d1c8f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:e7:63:4a:3c:2d:fe:f5:b7:30:4c:ca:a1:68:
c7:31:d2:2c:b8:0f:0d:cb:9e:5c:75:71:99:a1:ae:
f4:37:c5:cf:f1:d9:64:af:57:16:70:dd:5c:84:40:
b1:40:cb:48:10:a1:d0:94:e0:68:03:dd:65:40:62:
0b:02:8c:ba:2d:06:4a:06:70:d2:43:13:73:83:19:
f4:d3:35:9f:ab:47:f4:e6:ef:a5:86:c2:2a:2d:05:
05:78:d4:9d:b7:95:7a:8f:96:c6:ea:50:16:c1:73:
4e:22:c1:c7:cd:ac:22:bf:55:3c:2c:b8:23:45:9d:
e7:8f:60:af:6b:62:16:ef:82:4d:69:c3:b9:00:c4:
ad:57:d5:91:9a:66:88:21:7c:fc:a3:39:7a:32:2e:
b5:46:ef:8f:df:90:d0:7e:27:18:d2:b0:e1:cc:15:
ab:4a:c1:71:64:5f:d9:82:e7:51:d6:06:b5:d7:34:
d4:40:8f:5a:7f:6a:15:d2:49:d3:28:2f:9d:e2:1c:
9c:ef:88:ef:30:ea:10:de:92:fa:da:a1:10:f4:75:
d1:73:a0:cb:2b:7e:89:89:6c:c8:4a:0b:1e:df:d4:
61:bc:db:63:86:17:17:b0:85:1e:99:4c:9f:28:86:
24:8b:c9:9d:56:8f:cb:b6:ee:d8:73:b8:8f:c8:b9:
84:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:BD:E4:79:CD:C2:FC:07:44:77:73:DB:C2:1B:68:B5:54:D1:C8:F1
X509v3 Authority Key Identifier:
keyid:B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tb3kec3C_AdEd3PbwhtotVTRyPE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.154.237.0/24
Signature Algorithm: sha256WithRSAEncryption
55:4c:cc:dc:79:57:10:2e:5a:2a:5e:79:41:21:1f:2b:bd:44:
e6:f2:20:24:81:4b:c8:c1:00:0e:44:f7:e8:39:4c:32:06:89:
02:79:bc:13:82:45:cf:97:80:06:70:14:94:9e:0e:3b:87:84:
22:66:a1:0a:8b:22:35:d3:ff:67:6b:a6:86:61:69:27:2f:4a:
c9:9e:99:ca:d5:fa:fd:a4:a0:af:47:75:54:0f:cf:eb:45:4b:
11:13:7f:71:1f:4f:9d:69:a5:fd:9d:24:b4:ef:56:86:2a:76:
36:0c:20:6b:42:3b:d4:98:a9:18:a8:f2:f6:8f:0b:4a:67:82:
a9:c8:2f:d8:60:b9:5c:47:8b:60:9b:f0:bb:64:61:2e:6f:33:
f0:a1:20:91:83:a3:5d:a7:64:1b:7f:c3:e5:12:f0:8a:1e:4b:
78:8f:cf:91:90:80:ec:e0:8c:05:f3:03:b4:95:a2:0b:f0:d6:
1a:7a:d5:a7:67:01:be:d4:33:7f:20:b1:70:35:1e:6f:13:75:
13:b8:f4:ae:64:6b:fc:be:12:c5:61:82:b7:4d:73:cb:6c:48:
98:0b:99:8c:6e:af:ef:5a:64:24:9f:b7:b8:d8:f1:b3:02:7b:
78:28:a0:62:eb:c2:29:fd:12:b1:d6:2c:68:fd:3a:44:e6:cb:
12:16:67:b8
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQgaAfZczRKiABmqqfayomXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1NTdjY2Q0M2FmZTgxNmU0OTUzMjI4YmYxNGE3NWRjMjkw
MTRiOGQwHhcNMjUwMTAxMDU0NzU1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNWJkZTQ3OWNkYzJmYzA3NDQ3NzczZGJjMjFiNjhiNTU0ZDFjOGYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1OdjSjwt/vW3MEzKoWjHMdIsuA8N
y55cdXGZoa70N8XP8dlkr1cWcN1chECxQMtIEKHQlOBoA91lQGILAoy6LQZKBnDS
QxNzgxn00zWfq0f05u+lhsIqLQUFeNSdt5V6j5bG6lAWwXNOIsHHzawiv1U8LLgj
RZ3nj2Cva2IW74JNacO5AMStV9WRmmaIIXz8ozl6Mi61Ru+P35DQficY0rDhzBWr
SsFxZF/ZgudR1ga11zTUQI9af2oV0knTKC+d4hyc74jvMOoQ3pL62qEQ9HXRc6DL
K36JiWzISgse39RhvNtjhhcXsIUemUyfKIYki8mdVo/Ltu7Yc7iPyLmEhQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLW95HnNwvwHRHdz28IbaLVU0cjxMB8GA1UdIwQY
MBaAFLVXzNQ6/oFuSVMii/FKddwpAUuNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFZmTTFEci1nVzVKVXlLTDhVcDEzQ2tCUzQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi8xOTA4NDMtMTgwMy00NDYyLWE3OTUt
NmJjNzU1NzhiNGMzLzEvdGIza2VjM0NfQWRFZDNQYndodG90VlRSeVBFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi8xOTA4NDMtMTgwMy00NDYyLWE3OTUtNmJjNzU1NzhiNGMz
LzEvdFZmTTFEci1nVzVKVXlLTDhVcDEzQ2tCUzQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZrtMA0G
CSqGSIb3DQEBCwUAA4IBAQBVTMzceVcQLloqXnlBIR8rvUTm8iAkgUvIwQAORPfo
OUwyBokCebwTgkXPl4AGcBSUng47h4QiZqEKiyI10/9na6aGYWknL0rJnpnK1fr9
pKCvR3VUD8/rRUsRE39xH0+daaX9nSS071aGKnY2DCBrQjvUmKkYqPL2jwtKZ4Kp
yC/YYLlcR4tgm/C7ZGEubzPwoSCRg6Ndp2Qbf8PlEvCKHkt4j8+RkIDs4IwF8wO0
laIL8NYaetWnZwG+1DN/ILFwNR5vE3UTuPSuZGv8vhLFYYK3TXPLbEiYC5mMbq/v
WmQkn7e42PGzAnt4KKBi68Ip/RKx1ixo/TpE5ssSFme4
-----END CERTIFICATE-----
Generated at Sun Apr 6 06:05:25 2025 by rpki-client