Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/iljIDHO91MoRxB4kjkPLboK1qyo.roa
File: iljIDHO91MoRxB4kjkPLboK1qyo.roa (raw, json)
Hash identifier: rK2ZpZgretajbaujwvsVzzu6cD7WUNZaM6EmlR2CxS8=
Subject key identifier: 8A:58:C8:0C:73:BD:D4:CA:11:C4:1E:24:8E:43:CB:6E:82:B5:AB:2A
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 019427489F6CECBD36F7A682769C0727BD86
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/iljIDHO91MoRxB4kjkPLboK1qyo.roa
Signing time: Thu 02 Jan 2025 13:50:58 +0000
ROA not before: Thu 02 Jan 2025 13:50:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213850
IP address blocks: 45.142.104.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:9f:6c:ec:bd:36:f7:a6:82:76:9c:07:27:bd:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Jan 2 13:50:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8a58c80c73bdd4ca11c41e248e43cb6e82b5ab2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:3b:ab:ba:b3:15:45:23:5e:fb:6e:40:64:3f:
60:42:83:a9:b4:62:fc:38:8c:cc:ec:4b:45:97:4e:
76:09:fb:a6:26:26:3d:7a:ec:f7:3c:21:02:ff:f9:
8f:44:93:a3:14:73:a1:d1:bd:a1:23:5c:a4:26:e2:
e6:f2:28:f1:b9:63:6e:4d:0e:b4:02:ac:b9:67:75:
0c:ec:37:fe:4d:ad:ad:4e:43:13:81:1e:9d:7f:b8:
79:0a:09:ae:5a:6c:fb:af:50:33:a7:98:ad:89:7d:
a8:de:24:fe:7f:9a:01:6c:dc:c2:dc:2c:27:f1:9c:
67:25:4d:5d:f5:e8:8c:a6:5f:02:f3:30:25:36:fb:
28:78:54:36:06:48:dc:6f:7f:83:bf:ec:65:d6:b9:
33:5e:e1:c2:28:d9:95:ae:13:9b:31:e2:b9:32:b1:
48:ef:a1:40:95:92:ef:8c:7a:b4:a2:97:0c:80:74:
fa:78:09:34:9c:96:31:92:ba:f8:27:3d:2d:64:d0:
9a:da:50:8e:df:79:13:cc:99:c1:d9:c0:6c:94:12:
1a:42:b5:b6:d3:b6:1b:c0:83:8f:56:d5:3a:84:6b:
af:8e:1a:64:68:2c:59:87:29:a5:14:8c:ab:50:53:
4a:bb:9a:7c:de:09:49:f7:bc:f7:f0:73:3a:33:56:
bc:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:58:C8:0C:73:BD:D4:CA:11:C4:1E:24:8E:43:CB:6E:82:B5:AB:2A
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/iljIDHO91MoRxB4kjkPLboK1qyo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.104.0/24
Signature Algorithm: sha256WithRSAEncryption
74:4e:e2:40:d8:b2:cd:76:c1:2d:02:5e:12:d0:da:e5:2e:24:
d5:56:83:7c:93:a9:63:90:06:e5:47:54:34:27:82:95:13:96:
c4:01:15:b3:ce:36:2b:6d:7f:2f:41:5e:b3:b8:17:73:2e:cc:
9e:e8:c2:f8:db:c7:41:62:4e:72:66:74:56:19:79:e9:91:34:
81:61:ee:3d:c3:52:02:75:a7:b3:79:c6:51:fb:f0:b1:9d:4e:
14:cc:7d:32:63:30:45:eb:5a:50:8c:16:0e:50:93:b7:49:f1:
3b:08:b4:bb:db:19:dd:e0:d0:b2:db:75:d8:b8:1b:bc:6d:0f:
f5:ec:09:3a:56:dc:71:a4:30:c3:2f:32:28:68:d2:f2:8c:c9:
74:9e:4f:2b:3c:3c:94:1c:fc:87:00:d0:64:bb:28:92:ad:51:
3e:92:5d:7a:00:8d:01:b5:7e:f0:34:d5:86:3f:31:e6:e5:88:
52:90:9f:6d:23:cd:a1:f3:44:9c:69:f4:1c:60:c0:a4:cf:4f:
36:3b:36:51:4b:ad:af:87:64:ef:67:38:30:d6:8f:ac:dd:60:
b5:cb:ce:33:ab:92:43:9c:e6:df:9b:e4:cc:7c:f1:95:fe:c8:
9f:d4:37:d8:23:84:02:6f:f2:72:41:b7:8f:1e:2f:a5:ea:c0:
b4:fc:6d:ad
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQnSJ9s7L0296aCdpwHJ72GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiMDQxNWJmYzQzYjM4ZTljZmQxYTEyOTk1MjAyZTg3NjM3
NTJmZGUwHhcNMjUwMTAyMTM1MDU4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YTU4YzgwYzczYmRkNGNhMTFjNDFlMjQ4ZTQzY2I2ZTgyYjVhYjJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArDururMVRSNe+25AZD9gQoOptGL8
OIzM7EtFl052CfumJiY9euz3PCEC//mPRJOjFHOh0b2hI1ykJuLm8ijxuWNuTQ60
Aqy5Z3UM7Df+Ta2tTkMTgR6df7h5CgmuWmz7r1Azp5itiX2o3iT+f5oBbNzC3Cwn
8ZxnJU1d9eiMpl8C8zAlNvsoeFQ2Bkjcb3+Dv+xl1rkzXuHCKNmVrhObMeK5MrFI
76FAlZLvjHq0opcMgHT6eAk0nJYxkrr4Jz0tZNCa2lCO33kTzJnB2cBslBIaQrW2
07YbwIOPVtU6hGuvjhpkaCxZhymlFIyrUFNKu5p83glJ97z38HM6M1a8JQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIpYyAxzvdTKEcQeJI5Dy26CtasqMB8GA1UdIwQY
MBaAFBsEFb/EOzjpz9GhKZUgLodjdS/eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3dRVnY4UTdPT25QMGFFcGxTQXVoMk4xTDk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi8wOTQwODEtOGFlYi00MmJmLWE1Nzgt
YTNjYTBkYjgzMjU0LzEvaWxqSURITzkxTW9SeEI0a2prUExib0sxcXlvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi8wOTQwODEtOGFlYi00MmJmLWE1NzgtYTNjYTBkYjgzMjU0
LzEvR3dRVnY4UTdPT25QMGFFcGxTQXVoMk4xTDk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALY5oMA0G
CSqGSIb3DQEBCwUAA4IBAQB0TuJA2LLNdsEtAl4S0NrlLiTVVoN8k6ljkAblR1Q0
J4KVE5bEARWzzjYrbX8vQV6zuBdzLsye6ML428dBYk5yZnRWGXnpkTSBYe49w1IC
daezecZR+/CxnU4UzH0yYzBF61pQjBYOUJO3SfE7CLS72xnd4NCy23XYuBu8bQ/1
7Ak6VtxxpDDDLzIoaNLyjMl0nk8rPDyUHPyHANBkuyiSrVE+kl16AI0BtX7wNNWG
PzHm5YhSkJ9tI82h80ScafQcYMCkz082OzZRS62vh2TvZzgw1o+s3WC1y84zq5JD
nObfm+TMfPGV/sif1DfYI4QCb/JyQbePHi+l6sC0/G2t
-----END CERTIFICATE-----
Generated at Sun Apr 6 06:07:48 2025 by rpki-client