Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/c6e972-4ed1-4526-a320-3b7c126725d5/1/75LK0aL52naimh1x42NbpBoOy-w.roa
File: 75LK0aL52naimh1x42NbpBoOy-w.roa (raw, json)
Hash identifier: +e/KEGbv2gq7/ZZoiVRRifw/ABGsD3UfOMxXZbs5gMo=
Subject key identifier: EF:92:CA:D1:A2:F9:DA:76:A2:9A:1D:71:E3:63:5B:A4:1A:0E:CB:EC
Certificate issuer: /CN=a3020ae96b5f0c5b7339e6154dcec6f16cb63f5a
Certificate serial: 0194266C1142AA707B2C32D9EC11840083C5
Authority key identifier: A3:02:0A:E9:6B:5F:0C:5B:73:39:E6:15:4D:CE:C6:F1:6C:B6:3F:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/owIK6WtfDFtzOeYVTc7G8Wy2P1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/c6e972-4ed1-4526-a320-3b7c126725d5/1/75LK0aL52naimh1x42NbpBoOy-w.roa
Signing time: Thu 02 Jan 2025 09:50:04 +0000
ROA not before: Thu 02 Jan 2025 09:50:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208873
IP address blocks: 45.81.156.0/23 maxlen: 23
45.81.158.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:11:42:aa:70:7b:2c:32:d9:ec:11:84:00:83:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3020ae96b5f0c5b7339e6154dcec6f16cb63f5a
Validity
Not Before: Jan 2 09:50:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ef92cad1a2f9da76a29a1d71e3635ba41a0ecbec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:29:a8:02:9f:11:47:7a:09:54:72:05:90:47:
56:22:da:bf:a0:da:02:66:1b:1e:83:20:f6:15:3e:
5d:a8:01:ed:ac:86:85:46:03:97:f8:bc:6b:bc:06:
20:cf:bb:8c:33:3e:61:f4:a5:71:04:c8:81:f7:9b:
22:2d:8e:1e:58:2f:4d:57:5b:a0:ee:f8:5b:aa:34:
93:d3:0b:f7:fa:d5:9c:89:b1:c9:65:15:91:0c:78:
2e:b3:7b:49:17:c1:68:e3:13:05:a2:f0:e9:47:29:
6a:f6:eb:b0:03:2b:a8:7a:0f:f8:4f:59:0d:62:cb:
a7:09:aa:c4:ed:0d:b7:88:ad:d0:b3:d6:7b:cf:81:
7f:f5:22:a6:c0:d3:62:9f:cf:d1:31:e9:e3:bf:6b:
8e:db:07:fb:8a:03:01:43:d4:55:b4:02:d2:e6:ef:
c0:5c:60:f5:7e:00:17:45:d8:04:83:37:8a:c0:d4:
39:82:50:83:74:8c:7c:44:fe:31:82:09:c5:c8:bb:
86:7b:8f:3f:bb:8e:fc:a1:ef:cf:84:e6:7c:45:85:
b2:d4:60:36:f6:1c:95:22:b1:35:6c:67:5e:0c:f6:
26:07:fe:9d:39:4e:9c:d6:75:b2:9a:ae:02:52:82:
3b:ff:6c:e2:33:dd:0c:8c:31:3b:f2:80:7f:d7:dc:
9b:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:92:CA:D1:A2:F9:DA:76:A2:9A:1D:71:E3:63:5B:A4:1A:0E:CB:EC
X509v3 Authority Key Identifier:
keyid:A3:02:0A:E9:6B:5F:0C:5B:73:39:E6:15:4D:CE:C6:F1:6C:B6:3F:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/owIK6WtfDFtzOeYVTc7G8Wy2P1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/c6e972-4ed1-4526-a320-3b7c126725d5/1/75LK0aL52naimh1x42NbpBoOy-w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/c6e972-4ed1-4526-a320-3b7c126725d5/1/owIK6WtfDFtzOeYVTc7G8Wy2P1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.156.0/22
Signature Algorithm: sha256WithRSAEncryption
5f:76:ea:a2:fb:9a:b2:26:1a:df:88:f4:3c:9e:d6:7b:de:88:
e6:a5:25:09:d0:ac:5e:74:dd:82:9d:95:1a:ab:7f:0b:79:28:
61:cd:ac:6d:77:2f:6c:11:91:70:79:61:a0:7e:76:99:31:85:
e2:20:f3:06:bf:6f:bb:57:49:a6:bc:ca:71:61:cf:a3:d4:ce:
4d:f2:91:b9:8c:61:79:2c:49:fb:82:1f:0a:2a:b5:f7:11:08:
0e:b3:78:33:7a:2c:70:57:6d:14:22:4c:85:0c:7d:29:8a:f2:
d8:a5:d9:2e:34:46:fb:02:20:bb:cc:3d:a5:31:6a:28:cb:df:
2a:9a:35:cb:c7:91:dc:f5:f4:fd:d1:c5:3d:51:c7:21:b1:30:
7d:27:e2:5f:8e:8d:ea:68:31:ef:cc:d3:00:a1:28:c7:b4:e6:
6d:62:f4:1e:3f:2b:a0:57:29:9b:e0:ed:93:35:93:46:64:73:
fc:6a:09:be:08:a8:f4:31:c6:ba:12:fa:72:28:a3:5a:75:50:
ed:e1:fc:0e:06:9a:5e:ec:1c:c1:38:1e:c0:25:fd:d4:0b:53:
16:49:ca:7d:a5:5b:53:cf:c6:0d:46:92:1f:a6:80:73:6e:3a:
31:dd:81:21:62:bf:26:c2:40:75:8f:6b:c5:e6:cb:55:81:e0:
e5:2a:4d:e3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQmbBFCqnB7LDLZ7BGEAIPFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzMDIwYWU5NmI1ZjBjNWI3MzM5ZTYxNTRkY2VjNmYxNmNi
NjNmNWEwHhcNMjUwMTAyMDk1MDA0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZjkyY2FkMWEyZjlkYTc2YTI5YTFkNzFlMzYzNWJhNDFhMGVjYmVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuimoAp8RR3oJVHIFkEdWItq/oNoC
ZhsegyD2FT5dqAHtrIaFRgOX+LxrvAYgz7uMMz5h9KVxBMiB95siLY4eWC9NV1ug
7vhbqjST0wv3+tWcibHJZRWRDHgus3tJF8Fo4xMFovDpRylq9uuwAyuoeg/4T1kN
YsunCarE7Q23iK3Qs9Z7z4F/9SKmwNNin8/RMenjv2uO2wf7igMBQ9RVtALS5u/A
XGD1fgAXRdgEgzeKwNQ5glCDdIx8RP4xggnFyLuGe48/u478oe/PhOZ8RYWy1GA2
9hyVIrE1bGdeDPYmB/6dOU6c1nWymq4CUoI7/2ziM90MjDE78oB/19yb9wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFO+SytGi+dp2opodceNjW6QaDsvsMB8GA1UdIwQY
MBaAFKMCCulrXwxbcznmFU3OxvFstj9aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb3dJSzZXdGZERnR6T2VZVlRjN0c4V3kyUDFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS9jNmU5NzItNGVkMS00NTI2LWEzMjAt
M2I3YzEyNjcyNWQ1LzEvNzVMSzBhTDUybmFpbWgxeDQyTmJwQm9PeS13LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS9jNmU5NzItNGVkMS00NTI2LWEzMjAtM2I3YzEyNjcyNWQ1
LzEvb3dJSzZXdGZERnR6T2VZVlRjN0c4V3kyUDFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLVGcMA0G
CSqGSIb3DQEBCwUAA4IBAQBfduqi+5qyJhrfiPQ8ntZ73ojmpSUJ0KxedN2CnZUa
q38LeShhzaxtdy9sEZFweWGgfnaZMYXiIPMGv2+7V0mmvMpxYc+j1M5N8pG5jGF5
LEn7gh8KKrX3EQgOs3gzeixwV20UIkyFDH0pivLYpdkuNEb7AiC7zD2lMWooy98q
mjXLx5Hc9fT90cU9UcchsTB9J+Jfjo3qaDHvzNMAoSjHtOZtYvQePyugVymb4O2T
NZNGZHP8agm+CKj0Mca6EvpyKKNadVDt4fwOBppe7BzBOB7AJf3UC1MWScp9pVtT
z8YNRpIfpoBzbjox3YEhYr8mwkB1j2vF5stVgeDlKk3j
-----END CERTIFICATE-----
Generated at Thu Feb 20 03:17:09 2025 by rpki-client