Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/b8e323-9349-4449-b954-0de796a4a332/1/zC0DwQFXhSD9GmfEt7gqZels6ME.roa
File: zC0DwQFXhSD9GmfEt7gqZels6ME.roa (raw, json)
Hash identifier: Cq4uPzMv6jZuo+s6z3yPpwudom0heKSg9U70MId82ts=
Subject key identifier: CC:2D:03:C1:01:57:85:20:FD:1A:67:C4:B7:B8:2A:65:E9:6C:E8:C1
Certificate issuer: /CN=4426d9b3a78543b6964335ee1941ca2971c5694e
Certificate serial: 019422FB69690BA048014E2A1EBC71DFFD0D
Authority key identifier: 44:26:D9:B3:A7:85:43:B6:96:43:35:EE:19:41:CA:29:71:C5:69:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/b8e323-9349-4449-b954-0de796a4a332/1/zC0DwQFXhSD9GmfEt7gqZels6ME.roa
Signing time: Wed 01 Jan 2025 17:48:09 +0000
ROA not before: Wed 01 Jan 2025 17:48:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9051
IP address blocks: 45.155.132.0/22 maxlen: 22
45.155.133.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:69:69:0b:a0:48:01:4e:2a:1e:bc:71:df:fd:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4426d9b3a78543b6964335ee1941ca2971c5694e
Validity
Not Before: Jan 1 17:48:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cc2d03c101578520fd1a67c4b7b82a65e96ce8c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:0d:5f:f9:79:0a:93:97:33:fb:0e:b8:8b:63:
83:09:fe:a3:54:e7:34:6e:d8:c2:52:a9:bb:89:2e:
1e:5f:83:50:50:29:47:cc:1b:1c:1d:e2:09:7e:61:
ba:5d:22:40:8d:66:79:cb:aa:0d:14:d4:ef:82:66:
26:74:1c:5a:71:51:ec:77:73:55:1b:95:91:49:34:
ab:3e:1a:90:b8:1c:2e:53:fe:9a:88:be:67:ff:f9:
c3:97:86:ef:ec:43:ce:bd:e9:c3:f4:f3:54:3a:30:
65:8f:f0:43:23:5f:a6:05:ea:ad:b0:7f:08:7b:9f:
48:1a:d2:2e:d4:23:e8:ff:fc:90:8b:2c:43:a7:86:
47:ab:4d:3e:8c:2b:ab:09:a4:f7:63:a0:c1:53:99:
41:2e:b0:cb:94:0a:bd:94:03:96:0e:d5:64:57:52:
11:d1:57:9f:e3:c4:ba:cf:9c:92:7b:b3:00:48:94:
46:99:ab:25:9f:53:1c:14:8c:fc:90:54:2c:f7:37:
f9:a6:61:27:41:cc:6a:64:ee:45:c9:cf:dc:c7:97:
55:8c:77:77:f2:67:db:42:73:a3:3e:4b:e1:84:82:
ac:98:c4:38:2c:d5:5e:a0:32:71:9b:bd:b1:99:e6:
2b:3d:4a:24:62:03:54:d7:28:84:58:f0:0b:ea:95:
a8:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:2D:03:C1:01:57:85:20:FD:1A:67:C4:B7:B8:2A:65:E9:6C:E8:C1
X509v3 Authority Key Identifier:
keyid:44:26:D9:B3:A7:85:43:B6:96:43:35:EE:19:41:CA:29:71:C5:69:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/b8e323-9349-4449-b954-0de796a4a332/1/zC0DwQFXhSD9GmfEt7gqZels6ME.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/b8e323-9349-4449-b954-0de796a4a332/1/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.132.0/22
Signature Algorithm: sha256WithRSAEncryption
5a:2c:70:8f:24:19:27:56:85:aa:63:6b:5f:5e:67:37:ad:86:
94:e6:69:77:b7:dd:7e:6f:ca:67:4a:eb:e7:09:8a:ac:83:6c:
4e:75:6e:e0:af:ad:ae:f9:2a:4c:8d:6e:27:44:71:97:49:e6:
ae:43:13:66:48:be:4f:05:67:84:66:3c:ca:8a:04:dc:fe:f1:
61:21:91:c9:c0:71:de:08:88:a4:9f:b5:a5:d5:c2:18:f6:ad:
88:92:d5:ac:da:e7:13:c2:40:dc:ab:8b:bb:67:6b:ff:be:06:
9e:79:ca:cd:5d:f4:37:11:af:33:e5:13:a8:1e:d7:c4:64:62:
c7:ac:5c:60:ae:e0:20:92:c9:44:4f:99:ee:6e:7a:1f:28:e5:
e6:67:0f:f2:64:1e:ff:9d:a1:24:73:3b:7c:25:56:f2:06:1d:
b1:96:67:c4:5d:3a:2a:a2:53:24:08:c8:89:9d:c4:29:d1:a4:
8f:f8:83:df:fb:78:72:09:4f:a7:94:fb:b3:57:12:91:ae:21:
36:a1:80:56:dc:91:31:c1:11:92:35:c1:1a:e1:95:40:24:2a:
c7:19:29:16:ff:30:ff:69:9a:48:dd:ae:0a:1f:7e:bf:0f:7e:
8e:ac:6f:b5:12:83:36:2c:0b:d3:8e:dc:e1:5c:05:01:70:15:
6e:e8:29:11
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQi+2lpC6BIAU4qHrxx3/0NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0MjZkOWIzYTc4NTQzYjY5NjQzMzVlZTE5NDFjYTI5NzFj
NTY5NGUwHhcNMjUwMTAxMTc0ODA5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYzJkMDNjMTAxNTc4NTIwZmQxYTY3YzRiN2I4MmE2NWU5NmNlOGMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtw1f+XkKk5cz+w64i2ODCf6jVOc0
btjCUqm7iS4eX4NQUClHzBscHeIJfmG6XSJAjWZ5y6oNFNTvgmYmdBxacVHsd3NV
G5WRSTSrPhqQuBwuU/6aiL5n//nDl4bv7EPOvenD9PNUOjBlj/BDI1+mBeqtsH8I
e59IGtIu1CPo//yQiyxDp4ZHq00+jCurCaT3Y6DBU5lBLrDLlAq9lAOWDtVkV1IR
0Vef48S6z5ySe7MASJRGmasln1McFIz8kFQs9zf5pmEnQcxqZO5Fyc/cx5dVjHd3
8mfbQnOjPkvhhIKsmMQ4LNVeoDJxm72xmeYrPUokYgNU1yiEWPAL6pWo7QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMwtA8EBV4Ug/RpnxLe4KmXpbOjBMB8GA1UdIwQY
MBaAFEQm2bOnhUO2lkM17hlByilxxWlOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUkNiWnM2ZUZRN2FXUXpYdUdVSEtLWEhGYVU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9iOGUzMjMtOTM0OS00NDQ5LWI5NTQt
MGRlNzk2YTRhMzMyLzEvekMwRHdRRlhoU0Q5R21mRXQ3Z3FaZWxzNk1FLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC9iOGUzMjMtOTM0OS00NDQ5LWI5NTQtMGRlNzk2YTRhMzMy
LzEvUkNiWnM2ZUZRN2FXUXpYdUdVSEtLWEhGYVU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLZuEMA0G
CSqGSIb3DQEBCwUAA4IBAQBaLHCPJBknVoWqY2tfXmc3rYaU5ml3t91+b8pnSuvn
CYqsg2xOdW7gr62u+SpMjW4nRHGXSeauQxNmSL5PBWeEZjzKigTc/vFhIZHJwHHe
CIikn7Wl1cIY9q2IktWs2ucTwkDcq4u7Z2v/vgaeecrNXfQ3Ea8z5ROoHtfEZGLH
rFxgruAgkslET5nubnofKOXmZw/yZB7/naEkczt8JVbyBh2xlmfEXToqolMkCMiJ
ncQp0aSP+IPf+3hyCU+nlPuzVxKRriE2oYBW3JExwRGSNcEa4ZVAJCrHGSkW/zD/
aZpI3a4KH36/D36OrG+1EoM2LAvTjtzhXAUBcBVu6CkR
-----END CERTIFICATE-----
Generated at Thu Feb 20 03:14:13 2025 by rpki-client