Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/5da375-99a9-4329-9d29-cec8931ce631/1/NTKDdALBTRm2WTEgZsxcregayPI.roa
File: NTKDdALBTRm2WTEgZsxcregayPI.roa (raw, json)
Hash identifier: sWYCO5qPeurAAE3MfSHRTq8EaqmEYvvJmtWBKYriueU=
Subject key identifier: 35:32:83:74:02:C1:4D:19:B6:59:31:20:66:CC:5C:AD:E8:1A:C8:F2
Certificate issuer: /CN=ad5c2e74c6d46cc73c98a4c16087a8a3b3a6f759
Certificate serial: 01955BEDB5F816741E412C8C5D546BE89DA3
Authority key identifier: AD:5C:2E:74:C6:D4:6C:C7:3C:98:A4:C1:60:87:A8:A3:B3:A6:F7:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rVwudMbUbMc8mKTBYIeoo7Om91k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/5da375-99a9-4329-9d29-cec8931ce631/1/NTKDdALBTRm2WTEgZsxcregayPI.roa
Signing time: Mon 03 Mar 2025 12:14:20 +0000
ROA not before: Mon 03 Mar 2025 12:14:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211439
IP address blocks: 45.94.237.0/24 maxlen: 24
45.133.56.0/22 maxlen: 22
185.180.147.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:5b:ed:b5:f8:16:74:1e:41:2c:8c:5d:54:6b:e8:9d:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad5c2e74c6d46cc73c98a4c16087a8a3b3a6f759
Validity
Not Before: Mar 3 12:14:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3532837402c14d19b659312066cc5cade81ac8f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:f3:14:ab:4d:4c:80:4c:63:90:7b:27:28:2c:
51:9c:94:64:c0:e7:e4:0a:d8:15:64:99:2f:ed:97:
66:13:12:ad:bc:28:a1:b3:1e:88:e1:82:53:38:2d:
dd:64:bc:aa:c8:70:db:8c:57:46:ec:a1:08:21:b6:
22:2c:4e:79:af:f1:9f:75:26:91:c1:21:8c:07:19:
28:e4:c3:f7:c8:53:69:2d:91:8d:58:3f:b8:4b:87:
b1:5a:ca:7f:e2:e4:f0:fa:3e:7c:17:e9:7e:4b:3e:
09:c2:51:e8:8b:ae:2d:30:d8:79:ba:a8:3f:7d:e9:
73:4c:86:7e:01:8b:11:84:6c:a8:f5:14:3c:55:d1:
97:82:90:e2:18:82:af:8d:0e:1a:a7:fb:4a:9d:2d:
dc:eb:a9:fd:55:ec:a6:28:ed:90:70:41:4f:8d:3c:
b8:25:46:a2:d0:23:9a:34:7e:25:24:48:39:3a:2b:
57:6d:6b:ed:df:62:94:45:08:96:45:b2:84:7a:2e:
4c:56:23:06:50:a0:d5:25:46:6c:fe:d4:82:99:ab:
8a:d5:a1:d1:ef:aa:6d:51:0a:c4:41:18:cc:61:7b:
06:9e:2f:55:2c:34:7e:58:5b:5f:48:b0:20:21:47:
66:c9:9b:05:b2:33:de:fa:d6:fb:54:fd:92:c9:ed:
05:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:32:83:74:02:C1:4D:19:B6:59:31:20:66:CC:5C:AD:E8:1A:C8:F2
X509v3 Authority Key Identifier:
keyid:AD:5C:2E:74:C6:D4:6C:C7:3C:98:A4:C1:60:87:A8:A3:B3:A6:F7:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rVwudMbUbMc8mKTBYIeoo7Om91k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5da375-99a9-4329-9d29-cec8931ce631/1/NTKDdALBTRm2WTEgZsxcregayPI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5da375-99a9-4329-9d29-cec8931ce631/1/rVwudMbUbMc8mKTBYIeoo7Om91k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.237.0/24
45.133.56.0/22
185.180.147.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:29:6e:0f:ac:23:aa:e3:c4:6e:c8:33:17:52:3a:cd:91:af:
68:3d:e7:55:95:73:ad:16:b5:b8:45:ad:91:4d:a5:0b:97:59:
54:8a:d7:ac:24:f0:7f:2d:3c:cc:a7:6e:05:8f:0e:24:db:96:
c1:6f:d4:44:a3:84:9b:c7:c7:58:4c:88:8b:92:8b:80:41:c7:
ce:03:2d:e9:bc:d3:4a:27:56:b9:96:73:f7:81:b6:67:33:cb:
a4:1f:29:57:3d:a6:5f:91:eb:4b:7c:26:57:52:b4:05:bb:09:
3f:0e:ca:2e:40:7f:09:83:c2:1f:52:06:99:81:1e:0b:4f:59:
f8:fd:2f:85:1f:24:06:93:c2:fa:b1:22:76:76:43:26:36:34:
82:00:d6:bd:a5:87:66:2f:b7:bd:ee:42:fa:9a:e2:11:4c:8a:
1b:ea:14:0e:39:d3:ed:fe:d1:d8:bb:d1:03:ab:e8:84:11:bb:
af:25:da:63:21:43:9f:9a:42:55:87:f7:20:6a:67:bb:60:78:
57:7b:9f:e1:ef:6f:a7:85:6e:96:c6:f1:57:38:ff:f3:e8:33:
40:7e:7f:3b:8a:cc:09:c0:ad:5e:b4:0d:03:4e:6c:61:84:99:
a1:52:21:a0:9b:bf:bd:e1:51:a9:5b:7d:43:11:d8:d8:66:13:
a3:b3:d2:ff
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZVb7bX4FnQeQSyMXVRr6J2jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkNWMyZTc0YzZkNDZjYzczYzk4YTRjMTYwODdhOGEzYjNh
NmY3NTkwHhcNMjUwMzAzMTIxNDIwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNTMyODM3NDAyYzE0ZDE5YjY1OTMxMjA2NmNjNWNhZGU4MWFjOGYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoPMUq01MgExjkHsnKCxRnJRkwOfk
CtgVZJkv7ZdmExKtvCihsx6I4YJTOC3dZLyqyHDbjFdG7KEIIbYiLE55r/GfdSaR
wSGMBxko5MP3yFNpLZGNWD+4S4exWsp/4uTw+j58F+l+Sz4JwlHoi64tMNh5uqg/
felzTIZ+AYsRhGyo9RQ8VdGXgpDiGIKvjQ4ap/tKnS3c66n9VeymKO2QcEFPjTy4
JUai0COaNH4lJEg5OitXbWvt32KURQiWRbKEei5MViMGUKDVJUZs/tSCmauK1aHR
76ptUQrEQRjMYXsGni9VLDR+WFtfSLAgIUdmyZsFsjPe+tb7VP2Sye0FPwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFDUyg3QCwU0ZtlkxIGbMXK3oGsjyMB8GA1UdIwQY
MBaAFK1cLnTG1GzHPJikwWCHqKOzpvdZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvclZ3dWRNYlViTWM4bUtUQllJZW9vN09tOTFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC81ZGEzNzUtOTlhOS00MzI5LTlkMjkt
Y2VjODkzMWNlNjMxLzEvTlRLRGRBTEJUUm0yV1RFZ1pzeGNyZWdheVBJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC81ZGEzNzUtOTlhOS00MzI5LTlkMjktY2VjODkzMWNlNjMx
LzEvclZ3dWRNYlViTWM4bUtUQllJZW9vN09tOTFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQALV7tAwQC
LYU4AwQAubSTMA0GCSqGSIb3DQEBCwUAA4IBAQCMKW4PrCOq48RuyDMXUjrNka9o
PedVlXOtFrW4Ra2RTaULl1lUitesJPB/LTzMp24Fjw4k25bBb9REo4Sbx8dYTIiL
kouAQcfOAy3pvNNKJ1a5lnP3gbZnM8ukHylXPaZfketLfCZXUrQFuwk/DsouQH8J
g8IfUgaZgR4LT1n4/S+FHyQGk8L6sSJ2dkMmNjSCANa9pYdmL7e97kL6muIRTIob
6hQOOdPt/tHYu9EDq+iEEbuvJdpjIUOfmkJVh/cgame7YHhXe5/h72+nhW6WxvFX
OP/z6DNAfn87iswJwK1etA0DTmxhhJmhUiGgm7+94VGpW31DEdjYZhOjs9L/
-----END CERTIFICATE-----
Generated at Sun Apr 6 12:47:47 2025 by rpki-client