Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/e93f8b-9631-4a16-b22a-00a02a44f1da/1/qeQSpTJ0BLNlKKd6aX3fk1tkLWo.roa
File: qeQSpTJ0BLNlKKd6aX3fk1tkLWo.roa (raw, json)
Hash identifier: NfqOxXhDIFqm6LbQUFTbPCrwgQA+8nSLRF8OqHyjWt4=
Subject key identifier: A9:E4:12:A5:32:74:04:B3:65:28:A7:7A:69:7D:DF:93:5B:64:2D:6A
Certificate issuer: /CN=718ab66ee3a8c1b35accddba57c0c7d148cbe55f
Certificate serial: 0182A1785B06D8CD93EAA9964C054F9AF8D2
Authority key identifier: 71:8A:B6:6E:E3:A8:C1:B3:5A:CC:DD:BA:57:C0:C7:D1:48:CB:E5:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cYq2buOowbNazN26V8DH0UjL5V8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/e93f8b-9631-4a16-b22a-00a02a44f1da/1/qeQSpTJ0BLNlKKd6aX3fk1tkLWo.roa
Signing time: Mon 15 Aug 2022 12:26:35 +0000
ROA not before: Mon 15 Aug 2022 12:26:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8100
IP address blocks: 45.81.38.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:a1:78:5b:06:d8:cd:93:ea:a9:96:4c:05:4f:9a:f8:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=718ab66ee3a8c1b35accddba57c0c7d148cbe55f
Validity
Not Before: Aug 15 12:26:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a9e412a5327404b36528a77a697ddf935b642d6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:14:58:6a:f1:ef:79:4e:f7:52:f9:86:fe:23:
b4:a7:e5:7f:d8:82:82:71:b5:aa:69:55:51:89:b9:
10:2b:69:21:75:77:f8:c1:57:0a:53:26:95:14:ab:
2d:bd:4e:9c:6a:17:b3:9c:49:13:d0:25:dd:38:8b:
37:76:1c:00:46:22:53:5d:a7:31:7c:b8:8b:38:99:
dc:da:82:e5:50:a7:85:5f:ab:1f:0f:46:ea:14:7d:
d9:7d:30:54:c3:f0:f1:04:ea:fe:6c:d3:3e:1c:26:
3d:f4:04:e7:b0:c8:af:31:2a:55:1b:0e:11:63:5d:
c0:f7:c4:a6:4a:01:a7:59:79:e9:11:df:67:89:3e:
28:e6:57:ce:81:7d:8b:17:eb:71:f2:9e:49:3e:d4:
a5:b5:c5:9b:9b:22:38:80:5c:37:fa:32:fb:6d:fe:
5e:7a:d0:90:c9:01:84:d9:98:de:16:3d:61:08:f4:
16:3b:a5:c1:4e:86:53:55:06:00:bf:9f:72:91:bf:
79:d2:be:30:c6:d5:bc:bc:93:8e:1b:69:03:28:65:
16:eb:a9:c1:c4:dd:ed:23:84:53:62:ce:7a:5f:3c:
a1:c4:ec:1c:03:bc:c9:50:fb:b4:c1:e2:ed:fc:cd:
4f:71:f8:50:c0:da:9a:1c:80:9e:cc:92:f9:c2:a6:
9f:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:E4:12:A5:32:74:04:B3:65:28:A7:7A:69:7D:DF:93:5B:64:2D:6A
X509v3 Authority Key Identifier:
keyid:71:8A:B6:6E:E3:A8:C1:B3:5A:CC:DD:BA:57:C0:C7:D1:48:CB:E5:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cYq2buOowbNazN26V8DH0UjL5V8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/e93f8b-9631-4a16-b22a-00a02a44f1da/1/qeQSpTJ0BLNlKKd6aX3fk1tkLWo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/e93f8b-9631-4a16-b22a-00a02a44f1da/1/cYq2buOowbNazN26V8DH0UjL5V8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.38.0/24
Signature Algorithm: sha256WithRSAEncryption
d4:ca:f0:ab:3f:d2:4d:42:33:ba:ea:24:9f:81:bc:92:2c:7a:
65:d0:63:ca:ba:1d:04:a5:5b:4a:9e:3a:2f:f2:a6:12:42:22:
44:f8:c8:2c:05:27:fc:76:04:54:c5:11:b6:35:ca:0e:54:2c:
37:0c:bc:20:30:ad:a2:6a:f2:97:bd:cd:cd:ba:4e:99:a2:b9:
c9:e2:cf:46:72:cb:8f:d1:76:60:81:fa:0d:b4:49:56:cf:82:
ce:e6:7e:03:ee:b1:03:3a:e1:bf:3c:3f:d2:9b:00:8e:4e:77:
50:97:5c:b5:35:a5:d4:f6:aa:5b:c3:f4:f9:8e:66:8a:e8:43:
81:58:cc:a1:8a:d0:90:58:72:35:a2:57:bd:1e:1f:4b:a1:bc:
07:51:25:14:ac:4a:9e:2e:45:b0:c2:be:01:72:23:c9:e8:9b:
6e:a6:38:ec:3a:af:ac:af:ba:0d:14:c3:7d:f6:c3:5b:9d:ba:
50:db:e5:c3:bd:be:9c:16:6c:9e:c8:2b:c3:df:f1:71:7c:6a:
f3:6a:b9:2a:37:05:5d:d4:a5:58:2d:65:dd:5d:5d:97:62:1f:
2d:e8:65:4b:f1:c6:0f:37:f7:86:13:ba:34:12:d3:45:1d:30:
c6:88:e1:90:03:b8:6f:9d:c1:89:fe:61:96:e1:21:3c:51:1e:
3b:7e:64:16
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYKheFsG2M2T6qmWTAVPmvjSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcxOGFiNjZlZTNhOGMxYjM1YWNjZGRiYTU3YzBjN2QxNDhj
YmU1NWYwHhcNMjIwODE1MTIyNjM1WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhOWU0MTJhNTMyNzQwNGIzNjUyOGE3N2E2OTdkZGY5MzViNjQyZDZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnxRYavHveU73UvmG/iO0p+V/2IKC
cbWqaVVRibkQK2khdXf4wVcKUyaVFKstvU6caheznEkT0CXdOIs3dhwARiJTXacx
fLiLOJnc2oLlUKeFX6sfD0bqFH3ZfTBUw/DxBOr+bNM+HCY99ATnsMivMSpVGw4R
Y13A98SmSgGnWXnpEd9niT4o5lfOgX2LF+tx8p5JPtSltcWbmyI4gFw3+jL7bf5e
etCQyQGE2ZjeFj1hCPQWO6XBToZTVQYAv59ykb950r4wxtW8vJOOG2kDKGUW66nB
xN3tI4RTYs56XzyhxOwcA7zJUPu0weLt/M1PcfhQwNqaHICezJL5wqafVwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKnkEqUydASzZSineml935NbZC1qMB8GA1UdIwQY
MBaAFHGKtm7jqMGzWszdulfAx9FIy+VfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY1lxMmJ1T293Yk5hek4yNlY4REgwVWpMNVY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9lOTNmOGItOTYzMS00YTE2LWIyMmEt
MDBhMDJhNDRmMWRhLzEvcWVRU3BUSjBCTE5sS0tkNmFYM2ZrMXRrTFdvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC9lOTNmOGItOTYzMS00YTE2LWIyMmEtMDBhMDJhNDRmMWRh
LzEvY1lxMmJ1T293Yk5hek4yNlY4REgwVWpMNVY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALVEmMA0G
CSqGSIb3DQEBCwUAA4IBAQDUyvCrP9JNQjO66iSfgbySLHpl0GPKuh0EpVtKnjov
8qYSQiJE+MgsBSf8dgRUxRG2NcoOVCw3DLwgMK2iavKXvc3Nuk6ZornJ4s9GcsuP
0XZggfoNtElWz4LO5n4D7rEDOuG/PD/SmwCOTndQl1y1NaXU9qpbw/T5jmaK6EOB
WMyhitCQWHI1ole9Hh9LobwHUSUUrEqeLkWwwr4BciPJ6JtupjjsOq+sr7oNFMN9
9sNbnbpQ2+XDvb6cFmyeyCvD3/FxfGrzarkqNwVd1KVYLWXdXV2XYh8t6GVL8cYP
N/eGE7o0EtNFHTDGiOGQA7hvncGJ/mGW4SE8UR47fmQW
-----END CERTIFICATE-----
Generated at Mon Apr 21 10:45:28 2025 by rpki-client