Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/ctQQYxWVr_j8WKDN8UT0vKxY-s0.roa
File: ctQQYxWVr_j8WKDN8UT0vKxY-s0.roa (raw, json)
Hash identifier: ZBmDm7oX1JInpZz8HLWhHb63ycTzc0+Hnx2KGII3eA8=
Subject key identifier: 72:D4:10:63:15:95:AF:F8:FC:58:A0:CD:F1:44:F4:BC:AC:58:FA:CD
Certificate issuer: /CN=28107ab6921ef8cb2deca3eb766478cff3e5fc6d
Certificate serial: 01944243ADC08C7B4815244C0029B66B9F72
Authority key identifier: 28:10:7A:B6:92:1E:F8:CB:2D:EC:A3:EB:76:64:78:CF:F3:E5:FC:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/ctQQYxWVr_j8WKDN8UT0vKxY-s0.roa
Signing time: Tue 07 Jan 2025 19:35:19 +0000
ROA not before: Tue 07 Jan 2025 19:35:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 45.150.173.0/24 maxlen: 24
45.150.175.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:42:43:ad:c0:8c:7b:48:15:24:4c:00:29:b6:6b:9f:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28107ab6921ef8cb2deca3eb766478cff3e5fc6d
Validity
Not Before: Jan 7 19:35:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=72d410631595aff8fc58a0cdf144f4bcac58facd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:12:3e:03:04:25:5a:cb:7f:42:c8:4a:f9:ef:
6a:6b:ca:6b:a5:c0:14:d4:79:52:5c:bb:0e:de:10:
9a:6b:90:e2:fc:91:b3:00:9c:14:c2:af:b1:55:6d:
fe:42:2c:df:57:18:f7:99:5c:ad:f7:66:ab:8e:05:
c4:3a:6e:14:4f:7f:30:11:ec:56:d4:76:12:4e:a8:
14:ae:03:9a:5a:24:7f:81:b5:7f:03:21:06:0d:6b:
61:e8:f5:82:69:cc:42:52:7d:d0:95:fb:cd:e0:e3:
92:9a:4d:3f:52:0e:2f:e3:a1:e8:18:34:64:9f:69:
c2:34:56:c4:67:7c:b0:7c:a3:86:b3:97:60:c1:e6:
4a:84:12:ce:32:8b:2d:5b:8e:27:0a:18:ab:b8:b6:
96:52:4b:63:40:1b:df:2d:05:e6:ac:26:d5:67:36:
60:9a:25:b6:a9:7e:cc:cf:bd:95:d1:60:02:17:03:
7e:ff:f5:0b:c9:a7:c3:48:40:e5:27:dd:99:8c:33:
86:68:90:e2:41:82:10:d5:27:73:d2:66:f3:e3:cf:
b5:31:82:2c:d6:82:d3:11:e6:43:90:2a:8f:0e:60:
94:dc:aa:14:cd:de:83:01:ff:4f:25:da:67:87:a8:
de:98:84:d1:5b:5f:8d:a2:a7:7a:90:a9:6f:8b:54:
aa:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:D4:10:63:15:95:AF:F8:FC:58:A0:CD:F1:44:F4:BC:AC:58:FA:CD
X509v3 Authority Key Identifier:
keyid:28:10:7A:B6:92:1E:F8:CB:2D:EC:A3:EB:76:64:78:CF:F3:E5:FC:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/ctQQYxWVr_j8WKDN8UT0vKxY-s0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.173.0/24
45.150.175.0/24
Signature Algorithm: sha256WithRSAEncryption
79:48:49:0b:2d:15:72:8f:e5:7b:94:82:69:97:e3:63:86:bf:
6b:e3:f4:f7:8d:30:a7:78:3c:77:f2:f6:6f:25:93:c2:ff:88:
ec:44:4d:71:82:54:be:1a:e2:48:60:a7:9c:8e:21:94:34:ac:
7e:5a:4b:a6:81:89:b7:11:d1:14:3c:47:2f:8b:47:e4:04:54:
a5:24:bd:a3:da:43:0f:64:d7:7f:19:18:5f:61:8c:4b:68:6c:
61:95:34:c3:d9:ca:fa:1b:e2:5c:c1:a8:47:aa:93:7d:46:b7:
10:5d:8a:97:7c:b6:7d:90:c1:c6:91:87:b7:2c:4b:bb:89:3d:
ed:73:95:1c:bd:13:53:1f:5e:b7:d9:b5:3f:97:4d:da:36:48:
ed:4c:7b:9e:59:af:51:59:a2:3d:53:2a:65:f7:35:20:ed:60:
b9:cb:12:0f:5c:8b:25:a0:42:2a:bc:a7:5d:e6:a8:36:28:05:
23:90:ab:c9:31:83:4d:b3:0e:26:b5:04:b6:41:ea:d1:d1:e3:
7c:a8:56:0b:ea:14:c7:fb:66:d5:6e:a2:bc:54:93:4a:2b:2c:
9e:b4:eb:54:95:8b:f0:37:92:53:b6:e2:6e:73:f2:aa:63:0b:
6b:ae:e5:b1:56:e6:d5:68:01:dd:08:0c:7c:c9:a5:24:40:ce:
2f:21:d2:3b
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZRCQ63AjHtIFSRMACm2a59yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4MTA3YWI2OTIxZWY4Y2IyZGVjYTNlYjc2NjQ3OGNmZjNl
NWZjNmQwHhcNMjUwMTA3MTkzNTE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MmQ0MTA2MzE1OTVhZmY4ZmM1OGEwY2RmMTQ0ZjRiY2FjNThmYWNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsBI+AwQlWst/QshK+e9qa8prpcAU
1HlSXLsO3hCaa5Di/JGzAJwUwq+xVW3+QizfVxj3mVyt92arjgXEOm4UT38wEexW
1HYSTqgUrgOaWiR/gbV/AyEGDWth6PWCacxCUn3QlfvN4OOSmk0/Ug4v46HoGDRk
n2nCNFbEZ3ywfKOGs5dgweZKhBLOMostW44nChiruLaWUktjQBvfLQXmrCbVZzZg
miW2qX7Mz72V0WACFwN+//ULyafDSEDlJ92ZjDOGaJDiQYIQ1Sdz0mbz48+1MYIs
1oLTEeZDkCqPDmCU3KoUzd6DAf9PJdpnh6jemITRW1+Noqd6kKlvi1Sq/QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFHLUEGMVla/4/FigzfFE9LysWPrNMB8GA1UdIwQY
MBaAFCgQeraSHvjLLeyj63ZkeM/z5fxtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS0JCNnRwSWUtTXN0N0tQcmRtUjR6X1BsX0cwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi8wODgyNmUtNzdkMC00MzdiLWExYzIt
YzBmYjNlZjc2NDBlLzEvY3RRUVl4V1ZyX2o4V0tETjhVVDB2S3hZLXMwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi8wODgyNmUtNzdkMC00MzdiLWExYzItYzBmYjNlZjc2NDBl
LzEvS0JCNnRwSWUtTXN0N0tQcmRtUjR6X1BsX0cwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALZatAwQA
LZavMA0GCSqGSIb3DQEBCwUAA4IBAQB5SEkLLRVyj+V7lIJpl+Njhr9r4/T3jTCn
eDx38vZvJZPC/4jsRE1xglS+GuJIYKecjiGUNKx+WkumgYm3EdEUPEcvi0fkBFSl
JL2j2kMPZNd/GRhfYYxLaGxhlTTD2cr6G+JcwahHqpN9RrcQXYqXfLZ9kMHGkYe3
LEu7iT3tc5UcvRNTH1632bU/l03aNkjtTHueWa9RWaI9Uypl9zUg7WC5yxIPXIsl
oEIqvKdd5qg2KAUjkKvJMYNNsw4mtQS2QerR0eN8qFYL6hTH+2bVbqK8VJNKKyye
tOtUlYvwN5JTtuJuc/KqYwtrruWxVubVaAHdCAx8yaUkQM4vIdI7
-----END CERTIFICATE-----
Generated at Tue Apr 8 20:56:04 2025 by rpki-client