Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/a67996-54f1-4f1e-a760-8e0d5293aac8/1/RMOXROhDrgAe5MAWwvr0Ljwh2lM.roa
File: RMOXROhDrgAe5MAWwvr0Ljwh2lM.roa (raw, json)
Hash identifier: 9pnGOlNXQsh+rfwEm+hH4Cu03EBbu1kKLFcU5F3j2HY=
Subject key identifier: 44:C3:97:44:E8:43:AE:00:1E:E4:C0:16:C2:FA:F4:2E:3C:21:DA:53
Certificate issuer: /CN=d2ba2618ab4b6042ee25c4679e0775e4306d71c6
Certificate serial: 0115E54A
Authority key identifier: D2:BA:26:18:AB:4B:60:42:EE:25:C4:67:9E:07:75:E4:30:6D:71:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0romGKtLYELuJcRnngd15DBtccY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/a67996-54f1-4f1e-a760-8e0d5293aac8/1/RMOXROhDrgAe5MAWwvr0Ljwh2lM.roa
Signing time: Sat 01 Jan 2022 06:56:21 +0000
ROA not before: Sat 01 Jan 2022 06:56:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 45.145.176.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18212170 (0x115e54a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2ba2618ab4b6042ee25c4679e0775e4306d71c6
Validity
Not Before: Jan 1 06:56:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=44c39744e843ae001ee4c016c2faf42e3c21da53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b7:59:75:a0:23:d1:8a:24:2d:5c:35:3d:47:
c2:96:71:99:0a:ab:89:ca:09:ef:25:29:0d:51:27:
13:4b:17:86:4c:86:3e:6d:1c:9b:36:29:b5:1f:9f:
d9:a0:d9:ec:f0:8b:51:3f:8d:1c:25:58:86:2f:d2:
b7:8a:7c:b4:39:86:3f:e7:d3:53:d2:b1:73:59:97:
1e:bd:f5:d4:3a:fa:27:30:42:d4:9b:96:44:4b:fe:
e5:10:45:a8:04:cb:3f:cc:a1:f3:70:54:d2:3f:8f:
57:1f:9c:ac:44:fe:6c:63:cc:cf:f1:72:b5:bd:ca:
01:c1:30:93:09:fe:05:16:7e:cc:59:6f:c1:a4:1e:
95:17:d2:6e:c5:98:af:eb:ba:7e:9b:c0:cf:91:0b:
6e:56:d9:5f:cd:d3:1b:6d:16:22:7f:bf:a0:d4:37:
e8:a5:b5:90:94:e0:5c:6b:75:c1:0b:57:7a:b7:ab:
f8:18:76:fe:6b:8a:a1:67:ea:a9:27:96:e3:85:4e:
e5:5a:34:ad:ce:3a:70:6d:58:2f:5e:1b:49:e4:8f:
e2:40:3b:5b:62:76:ca:5d:39:e2:4d:bd:db:de:8b:
63:48:30:21:ba:5d:4e:d7:7f:00:56:4c:d6:ed:3a:
c7:44:df:a9:b3:92:58:f1:48:1f:da:ea:a5:0b:4a:
29:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:C3:97:44:E8:43:AE:00:1E:E4:C0:16:C2:FA:F4:2E:3C:21:DA:53
X509v3 Authority Key Identifier:
keyid:D2:BA:26:18:AB:4B:60:42:EE:25:C4:67:9E:07:75:E4:30:6D:71:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0romGKtLYELuJcRnngd15DBtccY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/a67996-54f1-4f1e-a760-8e0d5293aac8/1/RMOXROhDrgAe5MAWwvr0Ljwh2lM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/a67996-54f1-4f1e-a760-8e0d5293aac8/1/0romGKtLYELuJcRnngd15DBtccY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.145.176.0/22
Signature Algorithm: sha256WithRSAEncryption
a0:80:d8:56:41:d2:38:29:6b:34:20:9b:71:fe:12:52:6c:a4:
7a:36:85:fc:ab:3b:3c:3f:eb:91:df:c9:d5:93:c8:b6:a6:04:
b5:9a:94:a0:d1:c2:cb:66:26:e8:9f:0c:48:5f:46:26:98:a3:
d1:74:be:fc:7a:6f:84:84:6d:ea:30:f0:9b:da:df:84:b4:f1:
31:23:cb:de:4d:b6:81:b8:e6:84:05:fc:3c:cc:e1:a2:88:46:
50:94:fd:5c:e4:d7:4b:2e:92:2d:64:02:5e:6a:c5:18:17:ad:
09:18:a1:d6:5b:2c:f2:c7:cb:6b:ec:29:a6:35:ed:c9:65:04:
96:8d:bc:d0:d9:f2:58:b4:e2:f0:6a:b1:72:5b:7a:45:dd:3a:
5f:7f:2e:a1:a5:6d:f6:89:63:89:ec:34:9d:f5:a3:a5:e4:d5:
d7:f4:a1:e3:a4:54:50:3c:ca:76:9f:13:3c:3b:b3:64:24:b8:
cf:2f:c4:d5:b8:7a:9d:94:ee:26:be:24:cb:c7:df:46:c0:43:
e2:35:b2:9f:a5:71:65:a9:17:c7:d8:a3:64:6d:0b:52:bb:b6:
9d:57:17:50:5d:67:7b:f0:b8:38:76:d1:e2:88:6b:c9:2e:0b:
c0:6a:d6:9c:1c:f8:f6:32:7c:19:ef:57:ca:76:ba:b6:73:d1:
57:b3:07:33
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEARXlSjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhk
MmJhMjYxOGFiNGI2MDQyZWUyNWM0Njc5ZTA3NzVlNDMwNmQ3MWM2MB4XDTIyMDEw
MTA2NTYyMVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNDRjMzk3NDRlODQz
YWUwMDFlZTRjMDE2YzJmYWY0MmUzYzIxZGE1MzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKG3WXWgI9GKJC1cNT1HwpZxmQqricoJ7yUpDVEnE0sXhkyG
Pm0cmzYptR+f2aDZ7PCLUT+NHCVYhi/St4p8tDmGP+fTU9Kxc1mXHr311Dr6JzBC
1JuWREv+5RBFqATLP8yh83BU0j+PVx+crET+bGPMz/Fytb3KAcEwkwn+BRZ+zFlv
waQelRfSbsWYr+u6fpvAz5ELblbZX83TG20WIn+/oNQ36KW1kJTgXGt1wQtXerer
+Bh2/muKoWfqqSeW44VO5Vo0rc46cG1YL14bSeSP4kA7W2J2yl054k29296LY0gw
IbpdTtd/AFZM1u06x0TfqbOSWPFIH9rqpQtKKdECAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBREw5dE6EOuAB7kwBbC+vQuPCHaUzAfBgNVHSMEGDAWgBTSuiYYq0tgQu4l
xGeeB3XkMG1xxjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzByb21HS3RMWUVMdUpjUm5uZ2QxNURCdGNjWS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMjkvYTY3OTk2LTU0ZjEtNGYxZS1hNzYwLThlMGQ1MjkzYWFjOC8x
L1JNT1hST2hEcmdBZTVNQVd3dnIwTGp3aDJsTS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjkv
YTY3OTk2LTU0ZjEtNGYxZS1hNzYwLThlMGQ1MjkzYWFjOC8xLzByb21HS3RMWUVM
dUpjUm5uZ2QxNURCdGNjWS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAi2RsDANBgkqhkiG9w0BAQsFAAOC
AQEAoIDYVkHSOClrNCCbcf4SUmykejaF/Ks7PD/rkd/J1ZPItqYEtZqUoNHCy2Ym
6J8MSF9GJpij0XS+/HpvhIRt6jDwm9rfhLTxMSPL3k22gbjmhAX8PMzhoohGUJT9
XOTXSy6SLWQCXmrFGBetCRih1lss8sfLa+wppjXtyWUElo280NnyWLTi8Gqxclt6
Rd06X38uoaVt9oljiew0nfWjpeTV1/Sh46RUUDzKdp8TPDuzZCS4zy/E1bh6nZTu
Jr4ky8ffRsBD4jWyn6VxZakXx9ijZG0LUru2nVcXUF1ne/C4OHbR4ohryS4LwGrW
nBz49jJ8Ge9Xyna6tnPRV7MHMw==
-----END CERTIFICATE-----
Generated at Fri Apr 18 20:19:27 2025 by rpki-client