Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/8fbc7e-1f47-487c-8292-e5a77f7a7aa2/1/K_3LG8OaW8IFtRNbLO4GRdIs5Vc.roa
File: K_3LG8OaW8IFtRNbLO4GRdIs5Vc.roa (raw, json)
Hash identifier: xg+Bjx4DC/FY08PaKoFJJvP5HHj4DB2L0enoWEQOn+Y=
Subject key identifier: 2B:FD:CB:1B:C3:9A:5B:C2:05:B5:13:5B:2C:EE:06:45:D2:2C:E5:57
Certificate issuer: /CN=b09fff8e8ffd8f8e7d9a7b66d1cc73dc39281ef6
Certificate serial: 019425214EAA0CEBF8767DB8EAF1E699FA4F
Authority key identifier: B0:9F:FF:8E:8F:FD:8F:8E:7D:9A:7B:66:D1:CC:73:DC:39:28:1E:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sJ__jo_9j459mntm0cxz3DkoHvY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/8fbc7e-1f47-487c-8292-e5a77f7a7aa2/1/K_3LG8OaW8IFtRNbLO4GRdIs5Vc.roa
Signing time: Thu 02 Jan 2025 03:48:47 +0000
ROA not before: Thu 02 Jan 2025 03:48:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205516
IP address blocks: 45.8.116.0/24 maxlen: 24
45.8.117.0/24 maxlen: 24
45.8.118.0/24 maxlen: 24
45.8.119.0/24 maxlen: 24
82.115.63.0/24 maxlen: 24
193.43.250.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:4e:aa:0c:eb:f8:76:7d:b8:ea:f1:e6:99:fa:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b09fff8e8ffd8f8e7d9a7b66d1cc73dc39281ef6
Validity
Not Before: Jan 2 03:48:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2bfdcb1bc39a5bc205b5135b2cee0645d22ce557
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:48:88:67:b4:56:d9:e1:33:b8:e6:d3:b8:b2:
90:15:20:b6:1a:06:fe:13:94:3d:b0:d2:de:6f:e5:
ff:da:a4:5d:0d:02:6c:76:f3:85:84:04:6c:57:fb:
50:ea:92:1a:7a:a2:eb:79:9a:04:87:4c:4e:47:ad:
ff:9d:0a:30:54:c5:2b:31:89:62:8a:df:aa:04:18:
76:cd:63:92:d2:0f:5c:ee:04:de:85:59:38:f8:a7:
6f:2e:00:ab:eb:d6:58:b4:91:94:aa:4e:c3:40:cf:
c6:09:e3:37:30:70:7f:44:9b:10:55:b8:79:87:4d:
a2:2d:d6:0e:4e:63:dc:02:33:fb:ab:df:18:34:4d:
b2:ac:b0:80:12:51:be:a0:8b:dd:9b:4b:89:5f:54:
9d:a4:03:1e:b8:bf:b6:d5:6d:36:d9:66:e6:97:89:
04:e3:a8:2f:d0:2c:33:98:6a:4e:03:cd:cf:00:fa:
6e:ae:20:43:d6:77:e7:b5:cb:68:a7:73:ae:2c:5b:
ba:e2:fc:72:f0:dc:7a:5e:5a:f8:ea:3a:09:eb:fc:
7c:34:4a:f0:9e:b2:0c:04:6c:c2:26:8d:fa:21:18:
ec:80:c3:1a:16:50:6e:3c:d5:29:d5:4c:0f:d7:3c:
3d:f1:7c:16:25:32:38:36:8b:44:6d:df:08:59:10:
5d:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:FD:CB:1B:C3:9A:5B:C2:05:B5:13:5B:2C:EE:06:45:D2:2C:E5:57
X509v3 Authority Key Identifier:
keyid:B0:9F:FF:8E:8F:FD:8F:8E:7D:9A:7B:66:D1:CC:73:DC:39:28:1E:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sJ__jo_9j459mntm0cxz3DkoHvY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/8fbc7e-1f47-487c-8292-e5a77f7a7aa2/1/K_3LG8OaW8IFtRNbLO4GRdIs5Vc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/8fbc7e-1f47-487c-8292-e5a77f7a7aa2/1/sJ__jo_9j459mntm0cxz3DkoHvY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.116.0/22
82.115.63.0/24
193.43.250.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:dd:5e:0e:6b:02:5d:25:3c:75:b8:c5:11:25:56:19:fb:a5:
7b:62:86:08:aa:33:b8:0e:2e:e7:2e:83:16:69:b2:74:77:8a:
62:6a:93:14:d5:26:c0:36:6d:be:57:79:50:d3:c4:23:73:72:
ef:eb:a5:bd:33:1a:31:b7:58:d5:e3:fa:d7:ff:1d:a7:49:aa:
9a:ed:c3:75:8d:06:fe:af:29:1f:03:51:60:f9:a1:a0:df:c7:
6f:8f:1b:dc:75:93:c9:4b:bd:c6:5c:62:e6:f3:9f:b0:e4:94:
d8:27:2e:c2:43:9f:f4:97:f1:ba:6c:fb:20:65:b1:cf:64:37:
b0:2a:06:19:ee:78:24:e8:0f:6c:ad:ba:ad:63:82:29:0c:c1:
7c:b5:40:98:70:7f:77:11:c6:ac:0e:58:f5:a4:6b:d9:49:35:
3a:a6:38:2b:8a:a2:59:b2:b1:59:3a:5a:48:45:3e:3e:c0:9e:
c7:0d:bd:e7:e7:9f:61:4d:f3:31:69:f9:27:f5:23:4f:5f:5a:
14:b9:67:e6:58:8b:9c:cf:46:8c:92:83:7c:65:7e:df:e1:fb:
9a:ae:78:59:19:2e:a2:cd:4f:e2:49:bf:13:25:fd:06:29:01:
77:bd:ac:10:bc:10:b0:d3:7d:22:72:b2:1c:77:26:1a:76:43:
b1:c7:05:12
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZQlIU6qDOv4dn246vHmmfpPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwOWZmZjhlOGZmZDhmOGU3ZDlhN2I2NmQxY2M3M2RjMzky
ODFlZjYwHhcNMjUwMTAyMDM0ODQ3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYmZkY2IxYmMzOWE1YmMyMDViNTEzNWIyY2VlMDY0NWQyMmNlNTU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzEiIZ7RW2eEzuObTuLKQFSC2Ggb+
E5Q9sNLeb+X/2qRdDQJsdvOFhARsV/tQ6pIaeqLreZoEh0xOR63/nQowVMUrMYli
it+qBBh2zWOS0g9c7gTehVk4+KdvLgCr69ZYtJGUqk7DQM/GCeM3MHB/RJsQVbh5
h02iLdYOTmPcAjP7q98YNE2yrLCAElG+oIvdm0uJX1SdpAMeuL+21W022Wbml4kE
46gv0CwzmGpOA83PAPpuriBD1nfntctop3OuLFu64vxy8Nx6Xlr46joJ6/x8NErw
nrIMBGzCJo36IRjsgMMaFlBuPNUp1UwP1zw98XwWJTI4NotEbd8IWRBdHQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFCv9yxvDmlvCBbUTWyzuBkXSLOVXMB8GA1UdIwQY
MBaAFLCf/46P/Y+OfZp7ZtHMc9w5KB72MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc0pfX2pvXzlqNDU5bW50bTBjeHozRGtvSHZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy84ZmJjN2UtMWY0Ny00ODdjLTgyOTIt
ZTVhNzdmN2E3YWEyLzEvS18zTEc4T2FXOElGdFJOYkxPNEdSZElzNVZjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy84ZmJjN2UtMWY0Ny00ODdjLTgyOTItZTVhNzdmN2E3YWEy
LzEvc0pfX2pvXzlqNDU5bW50bTBjeHozRGtvSHZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCLQh0AwQA
UnM/AwQAwSv6MA0GCSqGSIb3DQEBCwUAA4IBAQBK3V4OawJdJTx1uMURJVYZ+6V7
YoYIqjO4Di7nLoMWabJ0d4piapMU1SbANm2+V3lQ08Qjc3Lv66W9Mxoxt1jV4/rX
/x2nSaqa7cN1jQb+rykfA1Fg+aGg38dvjxvcdZPJS73GXGLm85+w5JTYJy7CQ5/0
l/G6bPsgZbHPZDewKgYZ7ngk6A9srbqtY4IpDMF8tUCYcH93EcasDlj1pGvZSTU6
pjgriqJZsrFZOlpIRT4+wJ7HDb3n559hTfMxafkn9SNPX1oUuWfmWIucz0aMkoN8
ZX7f4fuarnhZGS6izU/iSb8TJf0GKQF3vawQvBCw030icrIcdyYadkOxxwUS
-----END CERTIFICATE-----
Generated at Mon Apr 7 15:24:05 2025 by rpki-client