Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/HZ4mNpHT0VU5VD6khC8VtYnmNls.roa
File: HZ4mNpHT0VU5VD6khC8VtYnmNls.roa (raw, json)
Hash identifier: WaPWxhlwLUVSOsyCk0cAhFUxMyKZwiBeLMSuMbTVKC0=
Subject key identifier: 1D:9E:26:36:91:D3:D1:55:39:54:3E:A4:84:2F:15:B5:89:E6:36:5B
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 019424453872A81782AC75897F0362035A6C
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/HZ4mNpHT0VU5VD6khC8VtYnmNls.roa
Signing time: Wed 01 Jan 2025 23:48:23 +0000
ROA not before: Wed 01 Jan 2025 23:48:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215540
IP address blocks: 45.83.8.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:38:72:a8:17:82:ac:75:89:7f:03:62:03:5a:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: Jan 1 23:48:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1d9e263691d3d15539543ea4842f15b589e6365b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:a0:29:5a:7e:0a:40:2c:a6:17:a5:9f:f1:df:
5d:48:c8:d1:10:2d:7f:aa:88:89:c9:32:af:e5:b2:
e1:3b:7e:ae:a7:18:cd:5b:17:9e:9e:fa:00:12:cc:
38:56:51:34:95:ea:f0:80:48:db:d0:52:7d:7c:44:
7c:db:08:4e:f9:c6:2c:a2:e1:e5:37:4b:f3:47:de:
e9:59:94:86:0a:67:ec:ed:9b:bf:a3:8e:a6:08:51:
57:fd:83:f2:a2:a3:84:57:f7:60:8e:28:31:c0:1e:
83:dc:60:8b:e2:e3:d1:04:13:2c:3d:71:da:90:c1:
6e:3b:ca:0d:6d:b5:ea:c0:b0:44:61:18:89:c9:a1:
4f:ee:86:50:c5:29:3f:70:5d:91:82:d4:5a:12:f2:
47:95:3e:cb:37:42:75:4f:17:d9:17:d9:39:89:75:
61:3a:29:d7:07:55:da:ab:7e:e6:6b:d0:7e:21:62:
dd:42:c6:8f:90:30:86:84:19:b0:62:b6:e8:e4:72:
c6:33:6f:96:cd:0e:ba:68:ef:e1:e6:36:93:e6:9c:
d6:32:8e:48:52:d8:45:9b:26:d4:73:34:12:09:14:
a6:ab:fa:a2:e7:c8:e3:4a:93:4a:91:50:7d:46:a7:
c4:0d:ba:9d:73:ba:b0:c0:ec:56:50:6a:8c:00:23:
64:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:9E:26:36:91:D3:D1:55:39:54:3E:A4:84:2F:15:B5:89:E6:36:5B
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/HZ4mNpHT0VU5VD6khC8VtYnmNls.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.83.8.0/22
Signature Algorithm: sha256WithRSAEncryption
25:df:18:56:f3:26:82:af:da:60:af:9d:01:fd:cd:b1:e3:7b:
b6:43:99:98:1e:33:d2:4b:48:79:42:db:1b:8f:86:08:01:9b:
08:e0:75:0f:54:f8:cd:4b:dd:28:1e:d6:a6:9c:fa:9f:d4:1b:
99:50:7b:df:30:72:a0:37:0a:df:7e:20:d9:68:97:e9:be:a2:
31:f1:7b:b1:68:d2:20:01:36:ed:09:76:53:49:3e:94:9f:63:
23:21:2f:5f:b4:27:9e:7e:07:35:5d:da:1d:dc:89:5f:af:8a:
13:84:e4:c4:fb:fd:3e:74:45:08:fc:02:b6:06:ef:2f:e2:f7:
48:fa:14:00:c6:12:a1:90:dc:94:58:4c:5c:d6:dd:cb:37:3b:
0e:67:9a:56:ac:78:1b:8d:f8:0f:18:a2:f3:ab:87:7a:90:5f:
df:a0:00:6a:c2:e3:f7:51:fa:eb:1d:0f:b2:53:cf:20:82:94:
ea:20:29:e3:68:ab:7c:10:c7:34:28:60:f8:eb:79:6a:c0:99:
ba:18:49:32:8f:e0:5a:d9:5f:55:44:c6:79:12:97:a4:2c:3e:
7d:57:2f:65:44:9d:e0:74:93:89:66:24:a1:64:b2:13:0c:dc:
de:54:12:dd:48:68:6e:c7:71:b0:08:d6:e7:21:83:2f:58:a2:
48:8f:fe:74
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQkRThyqBeCrHWJfwNiA1psMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3NmJiNDhlOTNlOGEwMDU4YzVjNzJhODFhODc5OTQ1NTMw
N2VlNTYwHhcNMjUwMTAxMjM0ODIzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZDllMjYzNjkxZDNkMTU1Mzk1NDNlYTQ4NDJmMTViNTg5ZTYzNjViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzaApWn4KQCymF6Wf8d9dSMjREC1/
qoiJyTKv5bLhO36upxjNWxeenvoAEsw4VlE0lerwgEjb0FJ9fER82whO+cYsouHl
N0vzR97pWZSGCmfs7Zu/o46mCFFX/YPyoqOEV/dgjigxwB6D3GCL4uPRBBMsPXHa
kMFuO8oNbbXqwLBEYRiJyaFP7oZQxSk/cF2RgtRaEvJHlT7LN0J1TxfZF9k5iXVh
OinXB1Xaq37ma9B+IWLdQsaPkDCGhBmwYrbo5HLGM2+WzQ66aO/h5jaT5pzWMo5I
UthFmybUczQSCRSmq/qi58jjSpNKkVB9RqfEDbqdc7qwwOxWUGqMACNkqQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFB2eJjaR09FVOVQ+pIQvFbWJ5jZbMB8GA1UdIwQY
MBaAFNdrtI6T6KAFjFxyqBqHmUVTB+5WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTJ1MGpwUG9vQVdNWEhLb0dvZVpSVk1IN2xZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9hNWJmYjYtNmExMC00ZmJjLWFmNDgt
OGJmYmRkNDVjYjYyLzEvSFo0bU5wSFQwVlU1VkQ2a2hDOFZ0WW5tTmxzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9hNWJmYjYtNmExMC00ZmJjLWFmNDgtOGJmYmRkNDVjYjYy
LzEvMTJ1MGpwUG9vQVdNWEhLb0dvZVpSVk1IN2xZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLVMIMA0G
CSqGSIb3DQEBCwUAA4IBAQAl3xhW8yaCr9pgr50B/c2x43u2Q5mYHjPSS0h5Qtsb
j4YIAZsI4HUPVPjNS90oHtamnPqf1BuZUHvfMHKgNwrffiDZaJfpvqIx8XuxaNIg
ATbtCXZTST6Un2MjIS9ftCeefgc1Xdod3Ilfr4oThOTE+/0+dEUI/AK2Bu8v4vdI
+hQAxhKhkNyUWExc1t3LNzsOZ5pWrHgbjfgPGKLzq4d6kF/foABqwuP3UfrrHQ+y
U88ggpTqICnjaKt8EMc0KGD463lqwJm6GEkyj+Ba2V9VRMZ5EpekLD59Vy9lRJ3g
dJOJZiShZLITDNzeVBLdSGhux3GwCNbnIYMvWKJIj/50
-----END CERTIFICATE-----
Generated at Fri Apr 4 17:37:59 2025 by rpki-client