Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/hy4v6nmx08TFfkjPFuQwlPCqf2c.roa
File: hy4v6nmx08TFfkjPFuQwlPCqf2c.roa (raw, json)
Hash identifier: x2ntkZx4gY9xnKvYfPaCRyh9NxHiAahf6wxiOM5lsXA=
Subject key identifier: 87:2E:2F:EA:79:B1:D3:C4:C5:7E:48:CF:16:E4:30:94:F0:AA:7F:67
Certificate issuer: /CN=28107ab6921ef8cb2deca3eb766478cff3e5fc6d
Certificate serial: 01943A09F6C06A77F2A5D7F6852167AEF455
Authority key identifier: 28:10:7A:B6:92:1E:F8:CB:2D:EC:A3:EB:76:64:78:CF:F3:E5:FC:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/hy4v6nmx08TFfkjPFuQwlPCqf2c.roa
Signing time: Mon 06 Jan 2025 05:15:19 +0000
ROA not before: Mon 06 Jan 2025 05:15:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 45.150.173.0/24 maxlen: 24
45.150.175.0/24 maxlen: 24
95.214.181.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:3a:09:f6:c0:6a:77:f2:a5:d7:f6:85:21:67:ae:f4:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28107ab6921ef8cb2deca3eb766478cff3e5fc6d
Validity
Not Before: Jan 6 05:15:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=872e2fea79b1d3c4c57e48cf16e43094f0aa7f67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e3:55:38:18:16:3d:b5:78:42:55:5f:7b:c5:
20:32:43:e5:00:08:fa:3d:a9:45:43:30:0a:67:ca:
af:ee:92:04:31:b1:ec:61:42:eb:8e:c0:4c:49:65:
3c:f1:76:f6:a2:7d:ab:f4:8b:e1:a4:93:40:48:4f:
d7:25:18:cd:0d:8c:5f:f0:0c:96:36:f3:ab:bc:35:
7b:79:d8:62:82:b3:16:e5:da:3c:19:97:49:4f:4e:
23:e2:b2:90:15:b9:b7:0b:08:db:e7:83:c6:7f:b5:
93:95:57:50:02:de:3d:94:96:f5:94:74:56:b6:f0:
3b:f7:ae:9c:13:7b:bd:bf:7c:48:64:7c:a4:46:70:
6b:8a:db:53:0b:83:6f:6e:ab:c9:6c:8a:7d:6d:17:
c2:8c:90:0d:23:1d:ac:b1:83:96:80:e9:16:4c:b5:
ca:d8:6a:66:06:79:4f:0e:05:b3:67:ea:1a:05:85:
93:72:51:93:49:7c:95:f3:82:86:c2:dd:12:84:41:
27:17:a2:dc:63:1a:e9:60:3c:3f:20:fc:8c:6b:32:
9a:66:20:eb:40:16:df:8b:6e:61:b2:b8:23:11:70:
a0:58:73:0f:87:95:8a:c0:d1:63:6c:72:a2:b8:68:
6b:ad:21:b2:a0:ed:26:46:70:35:85:54:7b:85:74:
6c:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:2E:2F:EA:79:B1:D3:C4:C5:7E:48:CF:16:E4:30:94:F0:AA:7F:67
X509v3 Authority Key Identifier:
keyid:28:10:7A:B6:92:1E:F8:CB:2D:EC:A3:EB:76:64:78:CF:F3:E5:FC:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/hy4v6nmx08TFfkjPFuQwlPCqf2c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.173.0/24
45.150.175.0/24
95.214.181.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:c1:e6:80:19:f7:ff:76:87:34:9f:b5:a2:57:f7:51:5a:74:
f4:74:5e:40:c5:fe:88:5e:cf:3d:2c:91:ac:db:db:88:a6:d7:
11:7c:de:9f:e3:f0:c5:93:b5:70:17:41:b1:d5:5d:5e:a2:43:
40:ff:cd:e6:18:9a:0a:d7:8b:73:18:a2:f0:5a:a1:e6:9e:ee:
a3:45:a3:c6:56:b5:e4:ff:4d:de:48:1e:ab:0d:5c:9f:b4:31:
f8:25:01:fd:70:d5:e1:8b:b8:f4:45:e6:8a:61:62:ac:f2:4e:
3c:66:d5:98:77:7b:d9:7c:25:11:2d:99:bc:77:cc:e0:02:fc:
a2:be:c1:bf:08:08:15:11:b5:68:20:48:6c:bb:d3:6e:23:77:
f3:e1:91:b6:62:ae:cc:70:b7:29:51:cb:06:54:4c:4f:e6:f3:
e7:fc:76:23:57:5b:04:d3:43:9f:3c:f1:f9:b7:80:93:3a:61:
8c:63:77:e1:cd:c2:bc:ec:80:8d:32:8e:dd:68:63:4b:cc:c7:
db:b3:c6:ab:8a:2d:54:df:23:1f:22:e9:a0:2f:65:3b:c0:9d:
ea:8a:8c:f1:ad:79:42:08:df:15:c0:38:20:ec:20:f7:1d:41:
58:1f:3d:9c:cf:07:a6:6b:d7:c2:81:df:0c:f2:21:5b:34:ca:
ca:03:14:7b
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZQ6CfbAanfypdf2hSFnrvRVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4MTA3YWI2OTIxZWY4Y2IyZGVjYTNlYjc2NjQ3OGNmZjNl
NWZjNmQwHhcNMjUwMTA2MDUxNTE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NzJlMmZlYTc5YjFkM2M0YzU3ZTQ4Y2YxNmU0MzA5NGYwYWE3ZjY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtONVOBgWPbV4QlVfe8UgMkPlAAj6
PalFQzAKZ8qv7pIEMbHsYULrjsBMSWU88Xb2on2r9IvhpJNASE/XJRjNDYxf8AyW
NvOrvDV7edhigrMW5do8GZdJT04j4rKQFbm3Cwjb54PGf7WTlVdQAt49lJb1lHRW
tvA7966cE3u9v3xIZHykRnBrittTC4NvbqvJbIp9bRfCjJANIx2ssYOWgOkWTLXK
2GpmBnlPDgWzZ+oaBYWTclGTSXyV84KGwt0ShEEnF6LcYxrpYDw/IPyMazKaZiDr
QBbfi25hsrgjEXCgWHMPh5WKwNFjbHKiuGhrrSGyoO0mRnA1hVR7hXRsQwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFIcuL+p5sdPExX5IzxbkMJTwqn9nMB8GA1UdIwQY
MBaAFCgQeraSHvjLLeyj63ZkeM/z5fxtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS0JCNnRwSWUtTXN0N0tQcmRtUjR6X1BsX0cwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi8wODgyNmUtNzdkMC00MzdiLWExYzIt
YzBmYjNlZjc2NDBlLzEvaHk0djZubXgwOFRGZmtqUEZ1UXdsUENxZjJjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi8wODgyNmUtNzdkMC00MzdiLWExYzItYzBmYjNlZjc2NDBl
LzEvS0JCNnRwSWUtTXN0N0tQcmRtUjR6X1BsX0cwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQALZatAwQA
LZavAwQAX9a1MA0GCSqGSIb3DQEBCwUAA4IBAQC0weaAGff/doc0n7WiV/dRWnT0
dF5Axf6IXs89LJGs29uIptcRfN6f4/DFk7VwF0Gx1V1eokNA/83mGJoK14tzGKLw
WqHmnu6jRaPGVrXk/03eSB6rDVyftDH4JQH9cNXhi7j0ReaKYWKs8k48ZtWYd3vZ
fCURLZm8d8zgAvyivsG/CAgVEbVoIEhsu9NuI3fz4ZG2Yq7McLcpUcsGVExP5vPn
/HYjV1sE00OfPPH5t4CTOmGMY3fhzcK87ICNMo7daGNLzMfbs8arii1U3yMfIumg
L2U7wJ3qiozxrXlCCN8VwDgg7CD3HUFYHz2czwema9fCgd8M8iFbNMrKAxR7
-----END CERTIFICATE-----
Generated at Tue Apr 8 21:01:06 2025 by rpki-client