Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/7656db-94a5-45be-9435-7061356bef1b/1/C8QSMz8GNoIQm4uSFWS26QwX4TU.roa
File: C8QSMz8GNoIQm4uSFWS26QwX4TU.roa (raw, json)
Hash identifier: NCS38C69vxkOze1iM8evBR20KFQKimFCiPTQOaoZSEg=
Subject key identifier: 0B:C4:12:33:3F:06:36:82:10:9B:8B:92:15:64:B6:E9:0C:17:E1:35
Certificate issuer: /CN=a1d71853324eb060fbafc988233860499c96c53a
Certificate serial: 019425213D96CBADC9BB5D8A2B1D93930B73
Authority key identifier: A1:D7:18:53:32:4E:B0:60:FB:AF:C9:88:23:38:60:49:9C:96:C5:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/odcYUzJOsGD7r8mIIzhgSZyWxTo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/7656db-94a5-45be-9435-7061356bef1b/1/C8QSMz8GNoIQm4uSFWS26QwX4TU.roa
Signing time: Thu 02 Jan 2025 03:48:42 +0000
ROA not before: Thu 02 Jan 2025 03:48:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209642
IP address blocks: 45.148.133.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:3d:96:cb:ad:c9:bb:5d:8a:2b:1d:93:93:0b:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1d71853324eb060fbafc988233860499c96c53a
Validity
Not Before: Jan 2 03:48:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0bc412333f063682109b8b921564b6e90c17e135
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:42:1b:15:7d:21:eb:a0:9d:cd:9f:c1:9b:c9:
66:f3:ee:68:51:3d:c0:d8:83:c5:2e:ca:9e:19:72:
94:34:75:c1:98:8d:94:ae:24:c0:ce:69:a3:32:ed:
05:aa:6a:98:3c:3c:16:07:69:58:a4:97:c5:65:ac:
cd:76:79:28:e6:52:20:e4:95:65:55:8f:c2:26:a3:
55:80:60:ae:d9:74:9c:0a:10:ce:aa:21:78:52:6b:
99:13:5f:13:4f:36:f5:a3:63:46:ad:3e:fc:20:87:
29:dc:0a:dc:a1:37:48:0b:08:39:ef:a6:7d:c2:17:
89:30:d5:b6:20:5b:05:be:3c:b0:33:6a:b3:1c:5b:
22:d8:6e:2c:52:13:6f:c8:b7:b8:f9:1e:60:1b:d8:
91:41:62:38:9a:61:ae:cb:29:eb:b9:9d:91:3d:fd:
b3:8e:cc:e8:1c:f7:da:c9:d6:c7:b9:fd:7e:6a:8a:
98:5a:75:44:b3:c7:b1:e2:87:48:84:74:6f:06:5c:
c3:0f:27:3a:af:cd:a8:03:f3:08:50:e9:82:5b:8a:
0c:51:33:f5:98:28:ae:93:3f:ab:29:f7:26:07:50:
77:8b:19:40:e1:f2:f6:54:d8:9b:94:fd:cc:af:7e:
a0:a2:3c:8e:42:db:c0:0e:14:97:17:f2:ba:91:1b:
3d:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:C4:12:33:3F:06:36:82:10:9B:8B:92:15:64:B6:E9:0C:17:E1:35
X509v3 Authority Key Identifier:
keyid:A1:D7:18:53:32:4E:B0:60:FB:AF:C9:88:23:38:60:49:9C:96:C5:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/odcYUzJOsGD7r8mIIzhgSZyWxTo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/7656db-94a5-45be-9435-7061356bef1b/1/C8QSMz8GNoIQm4uSFWS26QwX4TU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/7656db-94a5-45be-9435-7061356bef1b/1/odcYUzJOsGD7r8mIIzhgSZyWxTo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.148.133.0/24
Signature Algorithm: sha256WithRSAEncryption
04:cd:21:eb:a9:14:e5:09:6b:f8:16:9b:d4:e4:b3:9e:d2:ea:
bd:e1:b6:84:7a:cf:bb:cd:6b:89:a2:27:33:b5:3c:c8:9b:cb:
d1:ea:ba:d7:a4:9e:24:b3:1a:50:aa:67:77:02:5f:78:5c:78:
ff:56:84:60:e3:46:3e:3b:95:7f:a7:31:d5:35:1f:ae:10:c0:
22:29:81:6b:33:f6:3a:85:dd:b9:3d:d1:a9:5b:36:ef:3b:e7:
47:d8:23:37:39:7c:d2:8e:be:91:62:9b:39:8e:49:6a:c9:d9:
bb:dc:de:0e:cb:a5:32:dc:92:0c:b0:1a:6b:13:8e:87:8d:67:
b1:e4:ad:fd:7d:e1:e3:eb:3a:49:49:55:cb:2c:9d:e6:06:9c:
10:ba:d9:f0:2c:aa:34:8a:f5:67:95:a9:e6:4d:51:10:a2:c6:
f0:e6:93:f4:65:27:ea:92:db:d0:1a:2d:ad:40:92:55:95:99:
3d:0a:54:66:d4:d3:6d:1c:ed:a4:29:52:ce:54:cf:c4:6d:12:
55:4a:44:87:55:d2:b4:fa:f2:04:f9:8e:fb:31:a6:e3:b4:da:
0e:d5:f3:8b:1f:56:ba:7f:22:f4:c5:ff:bd:93:39:3f:44:a8:
cf:c6:2f:41:97:9c:bf:4e:65:74:b9:fe:1f:4a:0f:ec:40:d6:
35:03:a8:c9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQlIT2Wy63Ju12KKx2TkwtzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExZDcxODUzMzI0ZWIwNjBmYmFmYzk4ODIzMzg2MDQ5OWM5
NmM1M2EwHhcNMjUwMTAyMDM0ODQyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYmM0MTIzMzNmMDYzNjgyMTA5YjhiOTIxNTY0YjZlOTBjMTdlMTM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6kIbFX0h66CdzZ/Bm8lm8+5oUT3A
2IPFLsqeGXKUNHXBmI2UriTAzmmjMu0FqmqYPDwWB2lYpJfFZazNdnko5lIg5JVl
VY/CJqNVgGCu2XScChDOqiF4UmuZE18TTzb1o2NGrT78IIcp3ArcoTdICwg576Z9
wheJMNW2IFsFvjywM2qzHFsi2G4sUhNvyLe4+R5gG9iRQWI4mmGuyynruZ2RPf2z
jszoHPfaydbHuf1+aoqYWnVEs8ex4odIhHRvBlzDDyc6r82oA/MIUOmCW4oMUTP1
mCiukz+rKfcmB1B3ixlA4fL2VNiblP3Mr36gojyOQtvADhSXF/K6kRs9OQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAvEEjM/BjaCEJuLkhVktukMF+E1MB8GA1UdIwQY
MBaAFKHXGFMyTrBg+6/JiCM4YEmclsU6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2RjWVV6Sk9zR0Q3cjhtSUl6aGdTWnlXeFRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy83NjU2ZGItOTRhNS00NWJlLTk0MzUt
NzA2MTM1NmJlZjFiLzEvQzhRU016OEdOb0lRbTR1U0ZXUzI2UXdYNFRVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy83NjU2ZGItOTRhNS00NWJlLTk0MzUtNzA2MTM1NmJlZjFi
LzEvb2RjWVV6Sk9zR0Q3cjhtSUl6aGdTWnlXeFRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZSFMA0G
CSqGSIb3DQEBCwUAA4IBAQAEzSHrqRTlCWv4FpvU5LOe0uq94baEes+7zWuJoicz
tTzIm8vR6rrXpJ4ksxpQqmd3Al94XHj/VoRg40Y+O5V/pzHVNR+uEMAiKYFrM/Y6
hd25PdGpWzbvO+dH2CM3OXzSjr6RYps5jklqydm73N4Oy6Uy3JIMsBprE46HjWex
5K39feHj6zpJSVXLLJ3mBpwQutnwLKo0ivVnlanmTVEQosbw5pP0ZSfqktvQGi2t
QJJVlZk9ClRm1NNtHO2kKVLOVM/EbRJVSkSHVdK0+vIE+Y77MabjtNoO1fOLH1a6
fyL0xf+9kzk/RKjPxi9Bl5y/TmV0uf4fSg/sQNY1A6jJ
-----END CERTIFICATE-----
Generated at Mon Apr 7 00:02:43 2025 by rpki-client