Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/krDummGLxPx5SVTG9J-hi-bPJDU.roa
File: krDummGLxPx5SVTG9J-hi-bPJDU.roa (raw, json)
Hash identifier: l5uV/MDHXp1AnDKAhMwvujAII38wnM/kfNX13xIPhMw=
Subject key identifier: 92:B0:EE:9A:61:8B:C4:FC:79:49:54:C6:F4:9F:A1:8B:E6:CF:24:35
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 019459E733D13B0752E21EDE334BC281FEDC
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/krDummGLxPx5SVTG9J-hi-bPJDU.roa
Signing time: Sun 12 Jan 2025 09:45:11 +0000
ROA not before: Sun 12 Jan 2025 09:45:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214025
IP address blocks: 45.92.218.0/23 maxlen: 23
45.134.38.0/24 maxlen: 24
45.152.162.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:59:e7:33:d1:3b:07:52:e2:1e:de:33:4b:c2:81:fe:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Jan 12 09:45:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=92b0ee9a618bc4fc794954c6f49fa18be6cf2435
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:18:46:37:e6:b6:ce:a1:14:cb:1c:08:d9:50:
df:4e:97:5c:ba:11:d6:31:5d:b4:25:73:52:29:22:
f6:cf:a6:6a:33:18:61:4b:75:4b:65:1f:ff:4e:ac:
38:89:ef:e2:c8:5e:f0:ac:b2:68:ad:05:f8:54:f6:
85:9a:f1:b0:a1:b9:58:52:50:31:fe:6a:e4:d5:1c:
84:e2:6c:47:35:13:36:bc:49:47:d1:f2:c3:76:70:
2e:e4:c3:1a:04:21:60:9b:a6:71:52:be:4b:d1:b3:
0e:19:4a:be:9e:b0:c9:c8:29:0a:b0:15:64:99:88:
9e:4d:89:43:ed:07:f0:3e:5b:41:1f:f7:4a:05:8e:
b7:a3:27:4d:3d:d7:c3:36:bd:ea:2b:79:eb:95:cb:
94:a7:74:07:55:09:0d:6b:b4:b9:ce:58:00:6f:36:
7e:f6:08:e9:2d:7d:db:5f:d0:82:e0:e2:0c:12:cf:
c0:c9:08:2b:ea:cf:87:77:e8:2b:0a:ee:a0:6e:fa:
9a:84:49:01:a6:60:6a:48:4b:51:fe:b0:8f:71:d5:
97:98:bd:47:f4:28:76:f1:ca:58:0a:7f:21:53:4d:
62:f5:01:db:16:68:c4:3b:23:55:5d:e3:87:95:69:
08:29:30:b0:bd:78:de:ff:66:e8:79:30:51:cc:4d:
97:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:B0:EE:9A:61:8B:C4:FC:79:49:54:C6:F4:9F:A1:8B:E6:CF:24:35
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/krDummGLxPx5SVTG9J-hi-bPJDU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.92.218.0/23
45.134.38.0/24
45.152.162.0/23
Signature Algorithm: sha256WithRSAEncryption
51:34:bc:4c:8b:b2:e7:38:2b:a6:4a:7a:e9:79:d7:d3:9d:c0:
65:a2:35:e1:4c:4c:6d:ef:c4:49:74:1b:a3:ab:3c:8f:be:48:
6a:d3:a8:78:2f:6b:d8:5a:79:6f:da:87:dc:a9:05:43:3e:cc:
24:e9:70:9b:db:05:07:77:1e:78:08:9f:13:85:01:ba:eb:0f:
5b:91:7d:76:5a:3d:69:5f:7b:8a:8b:33:ec:12:02:cb:9b:6a:
15:14:50:24:f0:a5:a0:e7:61:65:2d:b5:a7:b2:c4:e1:ab:b4:
5f:ca:15:83:35:44:df:9e:04:a6:2d:e6:43:27:16:e6:5f:23:
a3:7c:ab:84:f1:ba:4b:dd:8a:73:13:e3:7a:0b:22:1b:11:7e:
86:33:2d:00:e8:91:c6:dc:93:68:94:95:99:45:a9:40:ef:2e:
87:92:9a:b6:f1:82:40:55:e3:a4:fe:a5:02:48:94:75:35:3c:
11:50:17:89:11:78:f3:da:5e:bd:f8:e6:a2:58:71:86:3b:7e:
c2:5d:8f:7d:7e:28:82:6e:3c:a3:d7:66:52:ec:f2:dc:28:e9:
7a:95:ee:a8:33:8b:50:d4:7b:ee:0c:d9:f7:11:eb:e9:77:f4:
31:33:f3:a7:b3:77:5d:4d:f7:14:78:48:56:60:f2:56:fc:92:
97:f0:a9:bf
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZRZ5zPROwdS4h7eM0vCgf7cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiMDQxNWJmYzQzYjM4ZTljZmQxYTEyOTk1MjAyZTg3NjM3
NTJmZGUwHhcNMjUwMTEyMDk0NTExWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MmIwZWU5YTYxOGJjNGZjNzk0OTU0YzZmNDlmYTE4YmU2Y2YyNDM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyxhGN+a2zqEUyxwI2VDfTpdcuhHW
MV20JXNSKSL2z6ZqMxhhS3VLZR//Tqw4ie/iyF7wrLJorQX4VPaFmvGwoblYUlAx
/mrk1RyE4mxHNRM2vElH0fLDdnAu5MMaBCFgm6ZxUr5L0bMOGUq+nrDJyCkKsBVk
mYieTYlD7QfwPltBH/dKBY63oydNPdfDNr3qK3nrlcuUp3QHVQkNa7S5zlgAbzZ+
9gjpLX3bX9CC4OIMEs/AyQgr6s+Hd+grCu6gbvqahEkBpmBqSEtR/rCPcdWXmL1H
9Ch28cpYCn8hU01i9QHbFmjEOyNVXeOHlWkIKTCwvXje/2boeTBRzE2XLQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFJKw7pphi8T8eUlUxvSfoYvmzyQ1MB8GA1UdIwQY
MBaAFBsEFb/EOzjpz9GhKZUgLodjdS/eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3dRVnY4UTdPT25QMGFFcGxTQXVoMk4xTDk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi8wOTQwODEtOGFlYi00MmJmLWE1Nzgt
YTNjYTBkYjgzMjU0LzEva3JEdW1tR0x4UHg1U1ZURzlKLWhpLWJQSkRVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi8wOTQwODEtOGFlYi00MmJmLWE1NzgtYTNjYTBkYjgzMjU0
LzEvR3dRVnY4UTdPT25QMGFFcGxTQXVoMk4xTDk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBLVzaAwQA
LYYmAwQBLZiiMA0GCSqGSIb3DQEBCwUAA4IBAQBRNLxMi7LnOCumSnrpedfTncBl
ojXhTExt78RJdBujqzyPvkhq06h4L2vYWnlv2ofcqQVDPswk6XCb2wUHdx54CJ8T
hQG66w9bkX12Wj1pX3uKizPsEgLLm2oVFFAk8KWg52FlLbWnssThq7RfyhWDNUTf
ngSmLeZDJxbmXyOjfKuE8bpL3YpzE+N6CyIbEX6GMy0A6JHG3JNolJWZRalA7y6H
kpq28YJAVeOk/qUCSJR1NTwRUBeJEXjz2l69+OaiWHGGO37CXY99fiiCbjyj12ZS
7PLcKOl6le6oM4tQ1HvuDNn3Eevpd/QxM/Ons3ddTfcUeEhWYPJW/JKX8Km/
-----END CERTIFICATE-----
Generated at Sat Apr 5 21:34:00 2025 by rpki-client