Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/0n-PBpDa7s83D47WBoyUxCiwEBQ.roa
File: 0n-PBpDa7s83D47WBoyUxCiwEBQ.roa (raw, json)
Hash identifier: 7HYYacLnUsm++twIHBxkSU9BblYZcQCTjS+TVrVxHQg=
Subject key identifier: D2:7F:8F:06:90:DA:EE:CF:37:0F:8E:D6:06:8C:94:C4:28:B0:10:14
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 019422FC0AF05A0BD4446A8AC3C5C309611B
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/0n-PBpDa7s83D47WBoyUxCiwEBQ.roa
Signing time: Wed 01 Jan 2025 17:48:50 +0000
ROA not before: Wed 01 Jan 2025 17:48:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42881
IP address blocks: 45.145.176.0/22 maxlen: 22
185.115.92.0/22 maxlen: 22
195.88.146.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:0a:f0:5a:0b:d4:44:6a:8a:c3:c5:c3:09:61:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Jan 1 17:48:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d27f8f0690daeecf370f8ed6068c94c428b01014
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:a0:65:01:28:8c:41:86:82:b1:02:83:54:d4:
82:f1:c9:c4:54:2e:5e:2e:58:d3:bd:bc:c6:a3:d3:
41:ca:a2:8f:5e:48:0d:d7:78:23:b2:71:e0:06:8e:
01:5d:e4:75:77:85:67:96:bf:d7:73:83:59:88:bd:
56:da:83:d1:b1:3c:d4:76:30:f7:77:f6:b5:de:5b:
ee:b4:2d:49:9e:cc:6f:1c:72:60:0f:da:df:f9:8c:
5a:79:ca:95:b2:47:f8:fb:7a:cd:a1:57:6e:22:b6:
2d:34:73:ac:32:1d:06:7f:3a:6b:0b:74:eb:71:03:
c6:bf:7a:c7:77:fc:87:a1:0a:fc:0c:5c:fb:a6:d3:
6d:07:7e:ad:0e:16:9e:33:1e:8e:d1:49:00:c2:f7:
1e:1b:57:72:e1:f5:02:14:79:d4:58:a9:92:f5:e8:
b9:1a:38:c7:1b:55:5e:70:62:fd:22:f9:4a:f9:e7:
11:21:35:48:aa:5f:fe:93:f3:c7:00:37:14:f8:c1:
6a:c8:30:06:a9:d5:4e:83:3b:ec:25:fa:d3:aa:dd:
23:9f:bc:f5:bd:75:6d:8d:c0:b2:15:63:9a:07:7f:
3b:3d:73:57:fc:30:2d:7e:b9:85:48:cd:80:c8:36:
20:17:f6:0b:b9:48:ac:05:8b:a9:a7:41:60:60:1b:
b8:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:7F:8F:06:90:DA:EE:CF:37:0F:8E:D6:06:8C:94:C4:28:B0:10:14
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/0n-PBpDa7s83D47WBoyUxCiwEBQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.145.176.0/22
185.115.92.0/22
195.88.146.0/23
Signature Algorithm: sha256WithRSAEncryption
9b:d3:c5:96:1e:89:5e:7f:b8:0b:fc:aa:a3:b7:45:fe:31:9f:
06:06:c8:f7:41:b1:40:5b:c6:ff:e7:50:da:3b:90:cb:d1:ca:
1e:c3:0c:d5:82:d2:f7:e9:29:65:d8:1b:4e:e8:fc:6d:b3:74:
88:db:58:6a:3d:50:14:01:2c:34:f9:84:43:37:06:c5:5c:70:
84:97:4d:39:85:3a:49:62:61:9d:6f:59:85:e3:cf:53:4f:a7:
ce:e3:cc:01:02:e5:11:f1:28:e7:0e:e0:08:d2:c8:65:67:0f:
c1:68:21:ee:b8:eb:97:e4:dd:a9:0f:2f:53:40:85:e5:6b:4a:
6e:de:6d:7b:5c:9f:ef:d1:d4:b8:00:c4:34:81:7e:9b:f0:2a:
b5:e8:17:5c:09:91:41:f8:58:77:80:a0:be:ab:54:88:35:97:
4a:09:c5:4e:d1:53:0f:2b:08:6a:73:11:08:59:67:de:aa:ef:
48:07:5a:88:e1:48:ae:07:a7:05:40:38:f7:ee:ae:53:13:69:
23:a7:9e:0a:d1:bd:c4:80:0e:47:b0:b6:2d:dc:9d:8e:6a:f1:
83:89:eb:1c:bc:fa:51:c2:54:ae:f3:ac:cf:78:d2:e3:47:72:
e9:f8:b7:36:f9:d5:7b:32:c7:e0:ab:35:bc:fd:d0:5e:38:9e:
48:aa:71:a8
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZQi/ArwWgvURGqKw8XDCWEbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiYWIzMDY4Mzg1OWVjN2UwMjA2ZmU5MjY1MzYzZThlMzk3
MWE5YTgwHhcNMjUwMTAxMTc0ODUwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMjdmOGYwNjkwZGFlZWNmMzcwZjhlZDYwNjhjOTRjNDI4YjAxMDE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo6BlASiMQYaCsQKDVNSC8cnEVC5e
LljTvbzGo9NByqKPXkgN13gjsnHgBo4BXeR1d4Vnlr/Xc4NZiL1W2oPRsTzUdjD3
d/a13lvutC1JnsxvHHJgD9rf+YxaecqVskf4+3rNoVduIrYtNHOsMh0GfzprC3Tr
cQPGv3rHd/yHoQr8DFz7ptNtB36tDhaeMx6O0UkAwvceG1dy4fUCFHnUWKmS9ei5
GjjHG1VecGL9IvlK+ecRITVIql/+k/PHADcU+MFqyDAGqdVOgzvsJfrTqt0jn7z1
vXVtjcCyFWOaB387PXNX/DAtfrmFSM2AyDYgF/YLuUisBYupp0FgYBu4rwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFNJ/jwaQ2u7PNw+O1gaMlMQosBAUMB8GA1UdIwQY
MBaAFIurMGg4Wex+Agb+kmU2Po45camoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTZzd2FEaFo3SDRDQnY2U1pUWS1qamx4cWFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi84MWZkMWEtNDdhNy00NWQ4LWJlNzQt
M2FjOWU1NmMzMDg5LzEvMG4tUEJwRGE3czgzRDQ3V0JveVV4Q2l3RUJRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi84MWZkMWEtNDdhNy00NWQ4LWJlNzQtM2FjOWU1NmMzMDg5
LzEvaTZzd2FEaFo3SDRDQnY2U1pUWS1qamx4cWFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCLZGwAwQC
uXNcAwQBw1iSMA0GCSqGSIb3DQEBCwUAA4IBAQCb08WWHolef7gL/Kqjt0X+MZ8G
Bsj3QbFAW8b/51DaO5DL0coewwzVgtL36Sll2BtO6Pxts3SI21hqPVAUASw0+YRD
NwbFXHCEl005hTpJYmGdb1mF489TT6fO48wBAuUR8SjnDuAI0shlZw/BaCHuuOuX
5N2pDy9TQIXla0pu3m17XJ/v0dS4AMQ0gX6b8Cq16BdcCZFB+Fh3gKC+q1SINZdK
CcVO0VMPKwhqcxEIWWfequ9IB1qI4UiuB6cFQDj37q5TE2kjp54K0b3EgA5HsLYt
3J2OavGDiescvPpRwlSu86zPeNLjR3Lp+Lc2+dV7MsfgqzW8/dBeOJ5IqnGo
-----END CERTIFICATE-----
Generated at Sat Apr 5 12:33:11 2025 by rpki-client