Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/1erCGEwwvuyXHF-XH5pLlXI19Xk.roa
File: 1erCGEwwvuyXHF-XH5pLlXI19Xk.roa (raw, json)
Hash identifier: MqLD+eDF7X/w8GA0kSIbExfwynRJ90zAvTLg+8DzTHY=
Subject key identifier: D5:EA:C2:18:4C:30:BE:EC:97:1C:5F:97:1F:9A:4B:95:72:35:F5:79
Certificate issuer: /CN=051f29462e7a7da7eb5f45da7873f14e403fe3ab
Certificate serial: 019570B6C151455AF3ACCC2F5314FAED4C39
Authority key identifier: 05:1F:29:46:2E:7A:7D:A7:EB:5F:45:DA:78:73:F1:4E:40:3F:E3:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/1erCGEwwvuyXHF-XH5pLlXI19Xk.roa
Signing time: Fri 07 Mar 2025 13:06:20 +0000
ROA not before: Fri 07 Mar 2025 13:06:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29802
IP address blocks: 45.11.188.0/24 maxlen: 24
188.209.131.0/24 maxlen: 24
194.15.98.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:70:b6:c1:51:45:5a:f3:ac:cc:2f:53:14:fa:ed:4c:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=051f29462e7a7da7eb5f45da7873f14e403fe3ab
Validity
Not Before: Mar 7 13:06:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d5eac2184c30beec971c5f971f9a4b957235f579
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:bb:3a:3b:8b:1d:4c:f2:1c:b0:c4:64:fe:c9:
a1:e9:57:78:2c:06:73:dc:ec:81:58:69:65:3a:42:
8a:a4:7a:d1:ad:9a:43:df:b8:42:69:00:46:83:71:
9c:7f:55:90:cc:1b:36:33:87:8d:5c:45:e6:fd:b0:
f5:8e:cd:12:c2:d8:21:10:21:ba:1b:86:00:f4:b6:
fd:48:56:e8:b8:fd:c5:72:d6:e6:ac:3e:ca:c6:b0:
e7:ec:cf:9c:f3:68:45:c0:8c:0b:33:4f:ab:62:90:
00:ea:1a:f2:85:9b:bf:41:24:21:d3:3c:99:23:78:
62:9a:d9:6c:f1:0c:31:12:95:90:4b:2b:04:a8:16:
5b:e0:3a:2c:c0:64:7e:7e:a7:0a:ae:6c:32:eb:01:
b7:a0:96:4c:c9:f0:d3:a5:8c:48:f6:34:1f:12:29:
c2:d3:d7:97:4c:5c:ff:48:7b:6b:e6:23:3b:f7:85:
d3:e1:42:6c:65:1c:22:4a:78:a3:c3:30:bb:b8:b3:
8e:35:06:65:1a:ef:03:85:69:2b:82:f0:fd:73:21:
74:31:b1:cb:d6:da:6c:2f:00:cf:c0:7e:85:ba:2c:
2b:d7:94:cc:1a:02:62:d4:8b:86:25:50:17:39:90:
e1:b2:e3:b6:fa:70:62:e5:80:1d:0e:d0:66:2a:c6:
e8:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:EA:C2:18:4C:30:BE:EC:97:1C:5F:97:1F:9A:4B:95:72:35:F5:79
X509v3 Authority Key Identifier:
keyid:05:1F:29:46:2E:7A:7D:A7:EB:5F:45:DA:78:73:F1:4E:40:3F:E3:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/1erCGEwwvuyXHF-XH5pLlXI19Xk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.188.0/24
188.209.131.0/24
194.15.98.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:f5:dc:30:6b:a3:7a:ef:d7:37:09:89:bb:28:ac:7f:0e:31:
77:2a:ab:64:e2:de:da:1a:a3:59:fe:58:e0:ad:6f:0e:5d:0c:
45:1f:8f:0b:0d:7b:c0:d5:be:63:48:ad:d6:e6:51:c0:f4:4d:
d6:f2:69:0f:52:52:13:64:e4:68:1e:37:67:f0:76:ca:b7:ed:
c9:9f:f9:4a:63:1c:8e:c6:40:76:25:0e:f1:f4:56:65:bf:b1:
1d:ca:25:52:4e:39:6f:e4:d5:dc:ee:8b:47:48:78:a9:22:9b:
6c:8d:c4:9f:9c:1f:46:b6:06:69:76:ee:6a:f2:86:f3:14:44:
fa:9b:51:0e:fc:80:54:e4:2f:dd:e5:74:4c:24:04:11:54:76:
6f:89:9c:f4:84:19:b7:6d:74:8b:3e:fa:19:e1:f4:b1:a1:00:
87:af:4a:d0:c4:f0:63:66:b6:2f:bb:f2:e8:84:d2:5a:1f:56:
ba:3a:d7:5b:e0:cf:ab:95:22:21:3d:50:ad:a8:a0:ed:ae:c0:
eb:cd:0f:80:c0:79:8b:29:f8:fd:df:2d:96:03:d6:aa:6a:f2:
50:7c:ae:8f:d9:16:9a:73:e0:ee:c6:ac:af:fc:af:7b:df:af:
7a:eb:b1:b2:52:bc:cd:b2:99:13:d5:f1:be:46:f9:6f:1c:80:
7e:8b:e4:19
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZVwtsFRRVrzrMwvUxT67Uw5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1MWYyOTQ2MmU3YTdkYTdlYjVmNDVkYTc4NzNmMTRlNDAz
ZmUzYWIwHhcNMjUwMzA3MTMwNjIwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNWVhYzIxODRjMzBiZWVjOTcxYzVmOTcxZjlhNGI5NTcyMzVmNTc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx7s6O4sdTPIcsMRk/smh6Vd4LAZz
3OyBWGllOkKKpHrRrZpD37hCaQBGg3Gcf1WQzBs2M4eNXEXm/bD1js0SwtghECG6
G4YA9Lb9SFbouP3FctbmrD7KxrDn7M+c82hFwIwLM0+rYpAA6hryhZu/QSQh0zyZ
I3himtls8QwxEpWQSysEqBZb4DoswGR+fqcKrmwy6wG3oJZMyfDTpYxI9jQfEinC
09eXTFz/SHtr5iM794XT4UJsZRwiSnijwzC7uLOONQZlGu8DhWkrgvD9cyF0MbHL
1tpsLwDPwH6Fuiwr15TMGgJi1IuGJVAXOZDhsuO2+nBi5YAdDtBmKsbovwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFNXqwhhMML7slxxflx+aS5VyNfV5MB8GA1UdIwQY
MBaAFAUfKUYuen2n619F2nhz8U5AP+OrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlI4cFJpNTZmYWZyWDBYYWVIUHhUa0FfNDZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8zOTUzMjgtZjQ2MS00NGI3LWIwMzEt
M2Y4YjU1ZGExYWM0LzEvMWVyQ0dFd3d2dXlYSEYtWEg1cExsWEkxOVhrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC8zOTUzMjgtZjQ2MS00NGI3LWIwMzEtM2Y4YjU1ZGExYWM0
LzEvQlI4cFJpNTZmYWZyWDBYYWVIUHhUa0FfNDZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQALQu8AwQA
vNGDAwQAwg9iMA0GCSqGSIb3DQEBCwUAA4IBAQCl9dwwa6N679c3CYm7KKx/DjF3
Kqtk4t7aGqNZ/ljgrW8OXQxFH48LDXvA1b5jSK3W5lHA9E3W8mkPUlITZORoHjdn
8HbKt+3Jn/lKYxyOxkB2JQ7x9FZlv7EdyiVSTjlv5NXc7otHSHipIptsjcSfnB9G
tgZpdu5q8obzFET6m1EO/IBU5C/d5XRMJAQRVHZviZz0hBm3bXSLPvoZ4fSxoQCH
r0rQxPBjZrYvu/LohNJaH1a6Otdb4M+rlSIhPVCtqKDtrsDrzQ+AwHmLKfj93y2W
A9aqavJQfK6P2Raac+Duxqyv/K97369667GyUrzNspkT1fG+RvlvHIB+i+QZ
-----END CERTIFICATE-----
Generated at Sun Apr 6 01:07:42 2025 by rpki-client