Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/655080-a488-4ebe-a471-288fcdf0cd0b/1/kgy9uroMpZcNrgZQHiOHzstivPY.roa
File: kgy9uroMpZcNrgZQHiOHzstivPY.roa (raw, json)
Hash identifier: Xv6NaivYBEvpPSpEf7smylfVsD4m8uMWLcQBfecPM1Q=
Subject key identifier: 92:0C:BD:BA:BA:0C:A5:97:0D:AE:06:50:1E:23:87:CE:CB:62:BC:F6
Certificate issuer: /CN=53324ea7bb9ed58d8d7b85d5d1cdc0fe43bce236
Certificate serial: 01942143EBE063E7C2D0C45392CAF75AAE0E
Authority key identifier: 53:32:4E:A7:BB:9E:D5:8D:8D:7B:85:D5:D1:CD:C0:FE:43:BC:E2:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UzJOp7ue1Y2Ne4XV0c3A_kO84jY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/655080-a488-4ebe-a471-288fcdf0cd0b/1/kgy9uroMpZcNrgZQHiOHzstivPY.roa
Signing time: Wed 01 Jan 2025 09:48:06 +0000
ROA not before: Wed 01 Jan 2025 09:48:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12571
IP address blocks: 45.128.100.0/22 maxlen: 22
212.76.192.0/19 maxlen: 19
212.76.208.0/24 maxlen: 24
2a00:1d48::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:eb:e0:63:e7:c2:d0:c4:53:92:ca:f7:5a:ae:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53324ea7bb9ed58d8d7b85d5d1cdc0fe43bce236
Validity
Not Before: Jan 1 09:48:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=920cbdbaba0ca5970dae06501e2387cecb62bcf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:3e:fb:0c:40:ea:53:35:d4:dc:00:47:33:71:
6a:7c:33:37:2e:98:7c:3e:a4:8f:4f:b9:e3:ac:d9:
b6:94:82:d0:30:90:88:8e:d2:e6:ec:21:3f:35:17:
96:28:51:c4:e9:20:f9:08:19:4b:15:93:ef:c6:2f:
98:09:05:38:7a:47:aa:1d:b2:94:4b:f7:41:f4:0c:
af:a0:2c:05:b8:c5:80:99:f7:47:92:1f:a7:d3:cf:
2b:ea:d2:8c:95:4e:5e:e4:fb:95:58:89:1e:09:5d:
fc:e6:8b:b7:77:24:2a:1e:2f:b5:f6:ef:a6:80:db:
d2:86:21:84:bb:b8:70:11:17:00:9f:4f:60:ff:51:
bc:b1:4c:14:2a:0f:1d:35:14:0a:5a:6c:61:c7:aa:
d7:d9:22:97:bd:98:c9:6c:a4:ec:b7:cb:e9:3f:c5:
e1:f3:8d:1c:a3:41:22:03:dc:27:de:30:6e:93:b2:
d5:36:52:65:d8:98:a7:eb:c6:9d:83:ca:32:34:ca:
59:a4:7c:9d:4c:6b:18:0e:8b:58:10:42:45:7b:5c:
53:17:f4:8c:2d:bd:4b:ad:cf:44:a2:28:41:6d:4c:
d6:0b:8c:16:cd:db:bf:b9:cb:e5:04:33:0c:9a:09:
2a:52:f4:a8:f5:d8:9a:fd:be:c3:42:2d:75:1d:3d:
5b:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:0C:BD:BA:BA:0C:A5:97:0D:AE:06:50:1E:23:87:CE:CB:62:BC:F6
X509v3 Authority Key Identifier:
keyid:53:32:4E:A7:BB:9E:D5:8D:8D:7B:85:D5:D1:CD:C0:FE:43:BC:E2:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UzJOp7ue1Y2Ne4XV0c3A_kO84jY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/655080-a488-4ebe-a471-288fcdf0cd0b/1/kgy9uroMpZcNrgZQHiOHzstivPY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/655080-a488-4ebe-a471-288fcdf0cd0b/1/UzJOp7ue1Y2Ne4XV0c3A_kO84jY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.100.0/22
212.76.192.0/19
IPv6:
2a00:1d48::/32
Signature Algorithm: sha256WithRSAEncryption
01:af:50:72:8d:25:27:43:5a:a6:8f:5d:ad:be:68:f9:91:77:
43:d0:3d:f5:40:02:51:0e:2c:d2:71:c7:fc:f2:c1:8c:f4:3e:
6f:bf:90:68:9c:fd:25:30:a0:2e:a7:25:0b:c1:45:43:40:7e:
3f:dc:6d:0d:85:db:d6:ef:68:7a:19:8c:0f:33:e7:18:84:da:
96:3b:3a:59:a6:45:c4:e3:da:b7:2f:84:5f:51:e6:35:57:08:
11:1c:ed:4a:9e:71:c7:a8:bb:05:7f:85:cf:e1:d8:0f:b8:15:
6e:7d:d2:79:02:aa:7f:99:4b:ff:0a:87:19:67:e1:3d:dd:6d:
1c:1c:cb:03:5d:5a:77:21:bf:08:8d:ef:cd:f6:5b:70:66:6e:
21:e0:c1:5c:d4:89:4f:d4:cf:3d:81:8a:74:2a:3c:78:a6:1d:
98:1d:c6:65:4a:ee:b1:52:bf:40:a1:1a:cb:c6:b7:84:2c:fd:
88:5d:3c:bc:75:98:b4:3b:a6:81:fd:07:85:e0:59:a3:99:34:
6d:48:46:51:fe:c2:f5:bf:d8:8e:36:2b:4f:17:90:73:27:cb:
c7:10:76:74:4c:d1:78:5d:79:e9:19:c9:c4:4f:9b:f1:cd:39:
8f:28:73:b2:88:35:8c:45:6e:31:77:fa:8e:8f:d3:db:31:49:
04:a5:47:06
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAZQhQ+vgY+fC0MRTksr3Wq4OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzMzI0ZWE3YmI5ZWQ1OGQ4ZDdiODVkNWQxY2RjMGZlNDNi
Y2UyMzYwHhcNMjUwMTAxMDk0ODA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MjBjYmRiYWJhMGNhNTk3MGRhZTA2NTAxZTIzODdjZWNiNjJiY2Y2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqj77DEDqUzXU3ABHM3FqfDM3Lph8
PqSPT7njrNm2lILQMJCIjtLm7CE/NReWKFHE6SD5CBlLFZPvxi+YCQU4ekeqHbKU
S/dB9AyvoCwFuMWAmfdHkh+n088r6tKMlU5e5PuVWIkeCV385ou3dyQqHi+19u+m
gNvShiGEu7hwERcAn09g/1G8sUwUKg8dNRQKWmxhx6rX2SKXvZjJbKTst8vpP8Xh
840co0EiA9wn3jBuk7LVNlJl2Jin68adg8oyNMpZpHydTGsYDotYEEJFe1xTF/SM
Lb1Lrc9EoihBbUzWC4wWzdu/ucvlBDMMmgkqUvSo9dia/b7DQi11HT1bAwIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFJIMvbq6DKWXDa4GUB4jh87LYrz2MB8GA1UdIwQY
MBaAFFMyTqe7ntWNjXuF1dHNwP5DvOI2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVXpKT3A3dWUxWTJOZTRYVjBjM0Ffa084NGpZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS82NTUwODAtYTQ4OC00ZWJlLWE0NzEt
Mjg4ZmNkZjBjZDBiLzEva2d5OXVyb01wWmNOcmdaUUhpT0h6c3RpdlBZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS82NTUwODAtYTQ4OC00ZWJlLWE0NzEtMjg4ZmNkZjBjZDBi
LzEvVXpKT3A3dWUxWTJOZTRYVjBjM0Ffa084NGpZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCLYBkAwQF
1EzAMA0EAgACMAcDBQAqAB1IMA0GCSqGSIb3DQEBCwUAA4IBAQABr1ByjSUnQ1qm
j12tvmj5kXdD0D31QAJRDizSccf88sGM9D5vv5BonP0lMKAupyULwUVDQH4/3G0N
hdvW72h6GYwPM+cYhNqWOzpZpkXE49q3L4RfUeY1VwgRHO1KnnHHqLsFf4XP4dgP
uBVufdJ5Aqp/mUv/CocZZ+E93W0cHMsDXVp3Ib8Ije/N9ltwZm4h4MFc1IlP1M89
gYp0Kjx4ph2YHcZlSu6xUr9AoRrLxreELP2IXTy8dZi0O6aB/QeF4FmjmTRtSEZR
/sL1v9iONitPF5BzJ8vHEHZ0TNF4XXnpGcnET5vxzTmPKHOyiDWMRW4xd/qOj9Pb
MUkEpUcG
-----END CERTIFICATE-----
Generated at Thu Feb 20 03:14:34 2025 by rpki-client