Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/G2rfW51Kwt65u5kEbNDlX7JyDys.roa
File: G2rfW51Kwt65u5kEbNDlX7JyDys.roa (raw, json)
Hash identifier: HNao705fQzmkc3rjfBlN20xewLP74M4y5k6C83jeQ0Y=
Subject key identifier: 1B:6A:DF:5B:9D:4A:C2:DE:B9:BB:99:04:6C:D0:E5:5F:B2:72:0F:2B
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 01942748A055AD1CDBAEF313E36E9E8DB38D
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/G2rfW51Kwt65u5kEbNDlX7JyDys.roa
Signing time: Thu 02 Jan 2025 13:50:58 +0000
ROA not before: Thu 02 Jan 2025 13:50:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214654
IP address blocks: 45.152.162.0/23 maxlen: 23
45.152.162.0/24 maxlen: 24
45.152.163.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:a0:55:ad:1c:db:ae:f3:13:e3:6e:9e:8d:b3:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Jan 2 13:50:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1b6adf5b9d4ac2deb9bb99046cd0e55fb2720f2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:7a:b4:d2:dd:17:d2:13:a3:09:d8:31:49:15:
a9:ff:e3:cb:a1:d8:94:6b:25:2d:49:27:7b:03:95:
c3:0f:a0:5f:c5:e0:db:28:03:54:a6:2b:34:62:a2:
1b:e6:d4:39:52:30:2c:8a:22:40:17:e0:e3:9f:cb:
63:be:f1:c2:16:ae:a2:66:a9:e0:06:a3:b2:50:8f:
06:61:54:54:75:6f:aa:bc:24:95:35:28:80:62:97:
d6:6e:b5:0e:4e:5a:b4:a5:d9:80:90:a1:08:e3:10:
2f:69:1b:67:55:d8:d8:b8:72:49:49:96:06:5b:c8:
e0:a0:db:f3:b9:0b:c3:7c:c4:25:1b:96:98:c6:ae:
38:84:7b:d7:a6:c5:67:66:e0:9a:87:32:84:35:68:
69:24:20:a9:25:15:eb:eb:37:bf:8e:50:3e:48:74:
3d:84:e0:59:73:b6:79:c2:7d:af:57:70:1d:c7:ea:
8b:9e:94:f3:83:b6:c4:7e:c9:6b:1b:89:c4:5a:64:
fd:33:da:f7:01:5a:29:d1:94:fb:f9:15:b3:0e:1c:
27:ad:9b:ea:70:07:6d:4e:f6:9a:b1:bb:7f:28:fb:
7c:39:29:35:c9:b4:d2:b4:93:75:f3:ef:0a:6c:5f:
d3:99:65:c8:5e:de:9f:fd:47:48:2d:d5:b2:e6:37:
b5:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:6A:DF:5B:9D:4A:C2:DE:B9:BB:99:04:6C:D0:E5:5F:B2:72:0F:2B
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/G2rfW51Kwt65u5kEbNDlX7JyDys.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.152.162.0/23
Signature Algorithm: sha256WithRSAEncryption
81:c2:18:3d:8c:ea:2b:cb:6d:c1:20:74:63:72:ff:9c:9c:1c:
11:93:c7:73:23:5f:7d:ea:e5:2b:5b:cd:83:b6:01:19:dd:c3:
03:19:c9:b4:bc:a5:7a:58:72:8f:dc:29:12:25:a9:8b:e7:06:
03:b2:56:1e:2b:2b:81:4c:c1:c2:41:70:19:43:53:a9:3a:54:
85:b7:e3:cd:7b:84:6d:49:34:56:2f:ff:57:69:19:68:33:77:
7a:d7:e9:6e:81:e0:0a:27:c6:3a:89:ca:5a:61:b1:19:c5:48:
47:7c:1d:b5:ea:76:3d:fc:00:bb:be:00:a1:5f:94:74:f0:50:
55:cb:9b:0e:75:70:f5:55:6e:9f:87:ec:cd:85:b3:d0:57:88:
39:66:7e:69:72:c6:82:8f:f3:4b:8a:9e:10:de:29:cd:8e:aa:
0e:df:c4:af:a1:d9:f5:e0:c4:a6:33:d8:f8:81:38:71:c8:b4:
3a:d6:68:f3:c3:fb:8a:84:e5:f2:e7:72:c1:e7:e6:f9:43:fc:
e6:7e:52:24:00:6c:a2:fc:5c:de:2e:9b:0a:5d:16:4b:84:a9:
3a:17:e5:15:e4:09:7c:2d:91:f9:ea:e7:42:93:df:37:a1:e8:
d8:c7:ce:b5:2b:06:1c:a6:33:8d:48:1b:3a:62:46:a1:71:3d:
d3:51:8d:0c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQnSKBVrRzbrvMT426ejbONMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiMDQxNWJmYzQzYjM4ZTljZmQxYTEyOTk1MjAyZTg3NjM3
NTJmZGUwHhcNMjUwMTAyMTM1MDU4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYjZhZGY1YjlkNGFjMmRlYjliYjk5MDQ2Y2QwZTU1ZmIyNzIwZjJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwnq00t0X0hOjCdgxSRWp/+PLodiU
ayUtSSd7A5XDD6BfxeDbKANUpis0YqIb5tQ5UjAsiiJAF+Djn8tjvvHCFq6iZqng
BqOyUI8GYVRUdW+qvCSVNSiAYpfWbrUOTlq0pdmAkKEI4xAvaRtnVdjYuHJJSZYG
W8jgoNvzuQvDfMQlG5aYxq44hHvXpsVnZuCahzKENWhpJCCpJRXr6ze/jlA+SHQ9
hOBZc7Z5wn2vV3Adx+qLnpTzg7bEfslrG4nEWmT9M9r3AVop0ZT7+RWzDhwnrZvq
cAdtTvaasbt/KPt8OSk1ybTStJN18+8KbF/TmWXIXt6f/UdILdWy5je19QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBtq31udSsLeubuZBGzQ5V+ycg8rMB8GA1UdIwQY
MBaAFBsEFb/EOzjpz9GhKZUgLodjdS/eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3dRVnY4UTdPT25QMGFFcGxTQXVoMk4xTDk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi8wOTQwODEtOGFlYi00MmJmLWE1Nzgt
YTNjYTBkYjgzMjU0LzEvRzJyZlc1MUt3dDY1dTVrRWJORGxYN0p5RHlzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi8wOTQwODEtOGFlYi00MmJmLWE1NzgtYTNjYTBkYjgzMjU0
LzEvR3dRVnY4UTdPT25QMGFFcGxTQXVoMk4xTDk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLZiiMA0G
CSqGSIb3DQEBCwUAA4IBAQCBwhg9jOory23BIHRjcv+cnBwRk8dzI1996uUrW82D
tgEZ3cMDGcm0vKV6WHKP3CkSJamL5wYDslYeKyuBTMHCQXAZQ1OpOlSFt+PNe4Rt
STRWL/9XaRloM3d61+lugeAKJ8Y6icpaYbEZxUhHfB216nY9/AC7vgChX5R08FBV
y5sOdXD1VW6fh+zNhbPQV4g5Zn5pcsaCj/NLip4Q3inNjqoO38Svodn14MSmM9j4
gThxyLQ61mjzw/uKhOXy53LB5+b5Q/zmflIkAGyi/FzeLpsKXRZLhKk6F+UV5Al8
LZH56udCk983oejYx861KwYcpjONSBs6YkahcT3TUY0M
-----END CERTIFICATE-----
Generated at Sun Apr 6 11:10:50 2025 by rpki-client