Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/kRNNEOs6Jm0bGt09u3a0bGPKoxo.roa
File: kRNNEOs6Jm0bGt09u3a0bGPKoxo.roa (raw, json)
Hash identifier: SvesE+a73pNS0SLuB8gLSd3oLxax0ZTCt98cQYtQE80=
Subject key identifier: 91:13:4D:10:EB:3A:26:6D:1B:1A:DD:3D:BB:76:B4:6C:63:CA:A3:1A
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 0194244518BF65A1DFD080E81B3707A28B11
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/kRNNEOs6Jm0bGt09u3a0bGPKoxo.roa
Signing time: Wed 01 Jan 2025 23:48:15 +0000
ROA not before: Wed 01 Jan 2025 23:48:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44477
IP address blocks: 45.138.157.0/24 maxlen: 24
193.201.126.0/24 maxlen: 24
194.61.9.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:18:bf:65:a1:df:d0:80:e8:1b:37:07:a2:8b:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: Jan 1 23:48:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=91134d10eb3a266d1b1add3dbb76b46c63caa31a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:5f:97:f6:a1:74:8d:94:10:11:f9:1e:8b:a7:
f2:30:a6:c8:a1:04:3b:ba:6d:bc:58:9e:6f:31:f8:
dc:17:18:97:2d:24:00:f1:9d:8d:57:39:70:17:4b:
ed:21:f2:cd:48:f9:59:0e:7f:bb:cd:ac:d7:dc:7e:
3a:0e:61:50:70:48:f0:22:48:86:24:e6:6a:f1:ea:
72:80:29:fd:76:d4:19:dc:60:d1:e2:f4:d1:5f:0c:
7e:a5:6c:8f:4a:7b:15:36:e3:e6:f1:36:a7:e2:18:
ac:aa:5b:a1:35:83:75:72:cc:2e:6f:d6:9c:a8:0a:
08:ff:29:5b:2f:34:3f:d5:3a:ad:55:d3:aa:dd:0e:
a8:a4:01:89:4b:88:d2:13:b7:88:13:2e:7e:d0:4f:
c3:40:4c:dd:cd:6a:10:f3:af:b5:59:15:e7:3e:ee:
dc:aa:f4:cf:d6:46:7c:01:34:d4:ac:11:c8:ca:6c:
80:89:cd:51:33:ae:f8:f5:0d:82:de:6b:af:a3:a3:
c0:7d:66:9e:51:3b:6b:9e:4b:5f:8c:10:65:52:b1:
30:5a:46:8a:e8:22:87:d3:22:6f:e8:17:00:36:64:
79:ee:09:3c:00:8c:10:8d:b1:cc:4b:83:16:5b:92:
4b:79:5a:92:dd:61:fe:12:0a:68:08:14:ef:a0:38:
80:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:13:4D:10:EB:3A:26:6D:1B:1A:DD:3D:BB:76:B4:6C:63:CA:A3:1A
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/kRNNEOs6Jm0bGt09u3a0bGPKoxo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.138.157.0/24
193.201.126.0/24
194.61.9.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:ef:5e:71:e5:01:cf:40:99:de:ff:0d:aa:2b:e5:f4:20:fb:
e4:d5:16:2e:e1:b3:19:c8:fa:8e:23:22:bb:f8:6e:4c:88:40:
ab:a7:62:f1:dc:41:4c:09:10:ea:84:08:c8:87:90:7a:1d:22:
b8:44:c3:cc:7d:cb:c7:6d:52:81:4d:3f:30:36:2d:ba:bd:0d:
de:e4:4f:7e:e5:a6:77:56:58:8c:e0:ff:93:76:c3:9d:7a:ec:
c9:c7:ab:7b:fa:fd:23:b4:52:26:e0:a6:ce:bc:ff:ac:b2:e2:
21:57:d5:bb:46:06:68:a4:36:e7:d0:6e:41:33:fc:5e:07:41:
1c:23:77:d7:fc:b6:29:bc:5e:d9:cb:3f:5c:0b:26:4a:1d:89:
57:24:9f:e9:e5:13:70:3c:9d:11:57:94:37:10:78:cc:cd:81:
fe:9b:1f:f3:ac:28:7c:a5:68:fe:5e:01:47:02:94:14:78:a4:
6c:79:18:0e:dc:5a:44:96:c7:b7:16:9d:0d:78:1f:95:8d:56:
65:d8:e2:34:47:cc:32:5f:f8:42:40:27:fa:d6:62:b6:ae:e6:
e0:0c:39:7f:3b:05:e6:4f:b7:61:e2:18:c4:2f:42:aa:c2:b5:
6e:97:bc:8d:40:c2:2f:c4:92:dd:cd:4d:ab:58:34:9a:95:4b:
68:fa:8a:d8
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZQkRRi/ZaHf0IDoGzcHoosRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3NmJiNDhlOTNlOGEwMDU4YzVjNzJhODFhODc5OTQ1NTMw
N2VlNTYwHhcNMjUwMTAxMjM0ODE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MTEzNGQxMGViM2EyNjZkMWIxYWRkM2RiYjc2YjQ2YzYzY2FhMzFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw1+X9qF0jZQQEfkei6fyMKbIoQQ7
um28WJ5vMfjcFxiXLSQA8Z2NVzlwF0vtIfLNSPlZDn+7zazX3H46DmFQcEjwIkiG
JOZq8epygCn9dtQZ3GDR4vTRXwx+pWyPSnsVNuPm8Tan4hisqluhNYN1cswub9ac
qAoI/ylbLzQ/1TqtVdOq3Q6opAGJS4jSE7eIEy5+0E/DQEzdzWoQ86+1WRXnPu7c
qvTP1kZ8ATTUrBHIymyAic1RM6749Q2C3muvo6PAfWaeUTtrnktfjBBlUrEwWkaK
6CKH0yJv6BcANmR57gk8AIwQjbHMS4MWW5JLeVqS3WH+EgpoCBTvoDiAzwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFJETTRDrOiZtGxrdPbt2tGxjyqMaMB8GA1UdIwQY
MBaAFNdrtI6T6KAFjFxyqBqHmUVTB+5WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTJ1MGpwUG9vQVdNWEhLb0dvZVpSVk1IN2xZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9hNWJmYjYtNmExMC00ZmJjLWFmNDgt
OGJmYmRkNDVjYjYyLzEva1JOTkVPczZKbTBiR3QwOXUzYTBiR1BLb3hvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9hNWJmYjYtNmExMC00ZmJjLWFmNDgtOGJmYmRkNDVjYjYy
LzEvMTJ1MGpwUG9vQVdNWEhLb0dvZVpSVk1IN2xZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQALYqdAwQA
wcl+AwQAwj0JMA0GCSqGSIb3DQEBCwUAA4IBAQBd715x5QHPQJne/w2qK+X0IPvk
1RYu4bMZyPqOIyK7+G5MiECrp2Lx3EFMCRDqhAjIh5B6HSK4RMPMfcvHbVKBTT8w
Ni26vQ3e5E9+5aZ3VliM4P+TdsOdeuzJx6t7+v0jtFIm4KbOvP+ssuIhV9W7RgZo
pDbn0G5BM/xeB0EcI3fX/LYpvF7Zyz9cCyZKHYlXJJ/p5RNwPJ0RV5Q3EHjMzYH+
mx/zrCh8pWj+XgFHApQUeKRseRgO3FpElse3Fp0NeB+VjVZl2OI0R8wyX/hCQCf6
1mK2rubgDDl/OwXmT7dh4hjEL0KqwrVul7yNQMIvxJLdzU2rWDSalUto+orY
-----END CERTIFICATE-----
Generated at Wed Apr 9 13:10:58 2025 by rpki-client