Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/25c95e-7f27-4d69-856d-a38b6795fb24/1/jt3uxkc0nzbTvWbsX7a361YE_o0.roa
File: jt3uxkc0nzbTvWbsX7a361YE_o0.roa (raw, json)
Hash identifier: DdTJIeWIH2giv5XExuVH/S2lYFHAruTpFnXLNoUPjwo=
Subject key identifier: 8E:DD:EE:C6:47:34:9F:36:D3:BD:66:EC:5F:B6:B7:EB:56:04:FE:8D
Certificate issuer: /CN=d5e6733fa239c5fb0c438c82f7c230f55d478cb1
Certificate serial: 0195659DDF85712B663809E60E4868EE6E2D
Authority key identifier: D5:E6:73:3F:A2:39:C5:FB:0C:43:8C:82:F7:C2:30:F5:5D:47:8C:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1eZzP6I5xfsMQ4yC98Iw9V1HjLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/25c95e-7f27-4d69-856d-a38b6795fb24/1/jt3uxkc0nzbTvWbsX7a361YE_o0.roa
Signing time: Wed 05 Mar 2025 09:23:20 +0000
ROA not before: Wed 05 Mar 2025 09:23:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 329007
IP address blocks: 45.81.255.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:65:9d:df:85:71:2b:66:38:09:e6:0e:48:68:ee:6e:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5e6733fa239c5fb0c438c82f7c230f55d478cb1
Validity
Not Before: Mar 5 09:23:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8eddeec647349f36d3bd66ec5fb6b7eb5604fe8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e7:08:05:c6:e7:30:b3:12:f2:82:0d:93:19:
09:6a:88:84:e9:9b:4c:36:dc:36:41:dd:b7:01:c9:
f0:ce:ea:69:36:00:5e:9e:4e:1a:e3:18:7e:b0:b3:
6b:91:f9:21:94:e2:0e:1d:50:60:83:80:30:41:a8:
ef:db:9d:17:85:90:22:bc:e9:2c:ce:24:ee:8c:51:
67:4d:b3:2f:b4:15:71:65:94:9d:cc:fe:97:b1:e6:
57:22:a4:9a:cf:57:1b:b3:e5:c4:03:bd:02:3a:b5:
e4:50:6b:57:97:44:06:c3:f7:3f:d4:54:fd:9e:46:
2a:43:f5:1a:46:1f:94:50:23:70:be:62:80:73:74:
18:3a:e6:c1:95:27:d4:3b:f1:7a:b4:15:e3:cd:74:
b0:38:00:94:dc:49:6c:a7:7a:c7:de:be:94:d4:79:
9c:01:45:15:e4:23:08:18:83:27:a1:f3:7b:9b:19:
3c:18:d4:8a:49:71:43:fd:df:a3:01:49:48:6c:94:
34:50:a5:ef:8b:ad:64:d4:88:d2:80:d5:a1:ad:0c:
11:d6:35:5d:96:70:3c:24:73:93:91:d5:3c:8b:68:
21:92:ff:dd:bc:db:d2:fb:49:79:09:24:8e:6b:28:
03:0c:d8:5d:a5:80:63:99:d7:51:80:8a:18:8e:ef:
1c:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:DD:EE:C6:47:34:9F:36:D3:BD:66:EC:5F:B6:B7:EB:56:04:FE:8D
X509v3 Authority Key Identifier:
keyid:D5:E6:73:3F:A2:39:C5:FB:0C:43:8C:82:F7:C2:30:F5:5D:47:8C:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1eZzP6I5xfsMQ4yC98Iw9V1HjLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/25c95e-7f27-4d69-856d-a38b6795fb24/1/jt3uxkc0nzbTvWbsX7a361YE_o0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/25c95e-7f27-4d69-856d-a38b6795fb24/1/1eZzP6I5xfsMQ4yC98Iw9V1HjLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.255.0/24
Signature Algorithm: sha256WithRSAEncryption
97:4a:f3:15:79:7b:2f:b1:8c:f2:89:e3:27:41:c2:42:58:9e:
ed:3b:84:ec:49:3d:bd:6a:ea:18:b5:2d:0c:c1:66:f6:e0:a4:
d6:8a:cc:bc:c8:d3:35:06:90:e1:e5:a3:10:66:e8:50:92:93:
be:05:f0:56:7d:90:80:fe:a8:ec:e5:bb:84:c6:3a:84:d4:1b:
e8:70:89:68:b0:bf:97:54:c6:65:a8:90:e3:5b:75:a1:17:80:
b1:6d:d0:f3:98:6b:09:63:6b:42:5e:b7:fb:b8:92:76:24:79:
5a:a4:1f:0d:cd:6d:0c:fa:f7:85:12:0b:b7:e9:6d:f6:b4:ec:
be:43:a7:7b:24:d8:23:93:d1:3c:8c:ca:c7:69:b2:d3:ce:87:
2f:d0:f3:54:18:e5:82:48:de:22:ec:f6:9a:3e:0c:f4:9d:f0:
6b:7d:4a:74:90:fa:ea:a6:9a:5a:dc:ff:c6:3f:49:16:76:fa:
82:57:cf:a9:4b:0f:b1:ab:91:08:54:fe:0f:54:c0:45:e4:bf:
99:a1:29:10:71:f0:89:4e:2d:a8:eb:4a:a8:bc:1f:62:bb:57:
70:7c:9f:eb:39:18:32:98:75:ed:dd:c4:a8:d3:28:4d:e1:81:
5b:7b:08:51:77:a2:d6:99:a3:24:ca:eb:56:08:72:2d:f7:e4:
5b:5b:d5:5b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZVlnd+FcStmOAnmDkho7m4tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1ZTY3MzNmYTIzOWM1ZmIwYzQzOGM4MmY3YzIzMGY1NWQ0
NzhjYjEwHhcNMjUwMzA1MDkyMzIwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZWRkZWVjNjQ3MzQ5ZjM2ZDNiZDY2ZWM1ZmI2YjdlYjU2MDRmZThkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoecIBcbnMLMS8oINkxkJaoiE6ZtM
Ntw2Qd23AcnwzuppNgBenk4a4xh+sLNrkfkhlOIOHVBgg4AwQajv250XhZAivOks
ziTujFFnTbMvtBVxZZSdzP6XseZXIqSaz1cbs+XEA70COrXkUGtXl0QGw/c/1FT9
nkYqQ/UaRh+UUCNwvmKAc3QYOubBlSfUO/F6tBXjzXSwOACU3Elsp3rH3r6U1Hmc
AUUV5CMIGIMnofN7mxk8GNSKSXFD/d+jAUlIbJQ0UKXvi61k1IjSgNWhrQwR1jVd
lnA8JHOTkdU8i2ghkv/dvNvS+0l5CSSOaygDDNhdpYBjmddRgIoYju8cdwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFI7d7sZHNJ82071m7F+2t+tWBP6NMB8GA1UdIwQY
MBaAFNXmcz+iOcX7DEOMgvfCMPVdR4yxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWVaelA2STV4ZnNNUTR5Qzk4SXc5VjFIakxFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS8yNWM5NWUtN2YyNy00ZDY5LTg1NmQt
YTM4YjY3OTVmYjI0LzEvanQzdXhrYzBuemJUdldic1g3YTM2MVlFX28wLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS8yNWM5NWUtN2YyNy00ZDY5LTg1NmQtYTM4YjY3OTVmYjI0
LzEvMWVaelA2STV4ZnNNUTR5Qzk4SXc5VjFIakxFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALVH/MA0G
CSqGSIb3DQEBCwUAA4IBAQCXSvMVeXsvsYzyieMnQcJCWJ7tO4TsST29auoYtS0M
wWb24KTWisy8yNM1BpDh5aMQZuhQkpO+BfBWfZCA/qjs5buExjqE1BvocIlosL+X
VMZlqJDjW3WhF4CxbdDzmGsJY2tCXrf7uJJ2JHlapB8NzW0M+veFEgu36W32tOy+
Q6d7JNgjk9E8jMrHabLTzocv0PNUGOWCSN4i7PaaPgz0nfBrfUp0kPrqpppa3P/G
P0kWdvqCV8+pSw+xq5EIVP4PVMBF5L+ZoSkQcfCJTi2o60qovB9iu1dwfJ/rORgy
mHXt3cSo0yhN4YFbewhRd6LWmaMkyutWCHIt9+RbW9Vb
-----END CERTIFICATE-----
Generated at Sat Apr 12 05:22:38 2025 by rpki-client