Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/olOddDwXZifpVeVkhqStcLfb7Eo.roa
File: olOddDwXZifpVeVkhqStcLfb7Eo.roa (raw, json)
Hash identifier: N5oS2Qxz8d7CRSP0W/y/qyoW+IceRyUXoixFOAoQ5T0=
Subject key identifier: A2:53:9D:74:3C:17:66:27:E9:55:E5:64:86:A4:AD:70:B7:DB:EC:4A
Certificate issuer: /CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Certificate serial: 0194266BB0ADDC6389C73F26D242051AF642
Authority key identifier: E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/olOddDwXZifpVeVkhqStcLfb7Eo.roa
Signing time: Thu 02 Jan 2025 09:49:39 +0000
ROA not before: Thu 02 Jan 2025 09:49:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 396426
IP address blocks: 45.141.12.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:b0:ad:dc:63:89:c7:3f:26:d2:42:05:1a:f6:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Validity
Not Before: Jan 2 09:49:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a2539d743c176627e955e56486a4ad70b7dbec4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:50:9f:bb:4a:d5:95:48:1c:d8:62:0b:28:e1:
47:6c:35:72:21:90:4d:0c:cc:d9:17:63:6e:d5:25:
29:08:63:03:1d:e3:f2:30:90:e0:87:6d:dc:63:da:
ef:0c:e3:ca:4e:0d:33:60:da:4a:80:33:2e:39:24:
92:34:c4:ea:d1:34:f7:55:f4:db:4a:b0:3c:67:c5:
83:12:04:e0:56:5c:1f:1b:ef:53:81:83:85:de:93:
8a:e2:f8:7a:08:bc:6c:cd:b4:76:77:76:75:00:5e:
f2:c6:26:57:f4:98:ad:45:cc:90:ad:df:5a:5d:84:
84:9c:ca:d9:8a:33:2d:8d:8e:39:2c:8e:f5:1a:9f:
4a:47:0b:50:86:4d:4e:e9:ca:52:48:f1:03:a8:c2:
e9:cc:a2:76:85:fa:7f:60:ac:9d:6b:d3:6a:b4:c7:
e5:69:99:7d:8a:eb:05:b0:c5:b0:d0:8a:e8:7e:f1:
37:e0:c6:1d:85:41:2c:17:36:f9:31:f9:5a:30:1e:
23:75:80:8c:3c:91:cc:fa:60:fa:9f:d5:c6:ae:ae:
68:04:f0:1c:46:84:30:46:ae:fa:e0:ca:1d:ce:61:
6e:e2:e1:6b:47:b2:65:b2:ee:31:0f:98:93:ba:2d:
f2:91:94:04:eb:d6:08:bc:4c:a6:28:59:a2:6f:fe:
a0:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:53:9D:74:3C:17:66:27:E9:55:E5:64:86:A4:AD:70:B7:DB:EC:4A
X509v3 Authority Key Identifier:
keyid:E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/olOddDwXZifpVeVkhqStcLfb7Eo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.12.0/24
Signature Algorithm: sha256WithRSAEncryption
91:21:b6:57:93:d0:86:dc:50:44:57:c6:89:cb:02:c3:37:2d:
c8:39:db:29:e1:50:ee:e0:31:48:1a:0a:25:e3:cc:32:0b:45:
0a:fd:cc:2b:21:7d:e7:81:f0:24:3a:c2:35:d3:18:9f:e4:c5:
e3:82:95:9d:34:bc:2d:a0:93:3d:16:8e:9c:06:d5:05:cd:e4:
38:69:d4:fd:8b:33:7b:97:d6:28:19:1d:7e:7d:d2:c1:ed:25:
bb:62:e4:d8:34:d9:1c:3a:39:09:7a:c5:41:fe:4d:dd:fb:f6:
50:38:b8:ae:53:d6:01:85:a7:03:f9:84:8c:05:e0:f3:1e:5a:
43:c0:b1:1b:08:c9:0a:b2:87:cd:e5:4b:27:10:09:f4:f5:1a:
46:d1:ea:9e:51:ab:65:e9:0d:37:51:f7:ad:13:d1:6d:c0:6a:
30:07:84:73:73:56:fd:3b:f8:fb:bc:33:c2:4a:65:5c:d0:2a:
d7:92:5e:c9:7b:d3:2a:01:55:1c:de:21:3d:15:8e:4b:93:9f:
9f:00:09:fe:d4:14:25:d2:9a:29:89:07:3c:54:e5:02:8f:6a:
bd:51:6e:ca:88:6f:5e:4f:b8:ea:b7:eb:67:1a:3a:47:f7:5f:
ac:77:5c:44:68:fd:1f:46:50:af:89:60:9d:91:d6:b1:09:3e:
68:a9:4d:4d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQma7Ct3GOJxz8m0kIFGvZCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyYzJiODM0ZmJjOTFhZjBlYzZiMWQzNGZkNjQwNTRkMjI2
OWExZmQwHhcNMjUwMTAyMDk0OTM5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMjUzOWQ3NDNjMTc2NjI3ZTk1NWU1NjQ4NmE0YWQ3MGI3ZGJlYzRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy1Cfu0rVlUgc2GILKOFHbDVyIZBN
DMzZF2Nu1SUpCGMDHePyMJDgh23cY9rvDOPKTg0zYNpKgDMuOSSSNMTq0TT3VfTb
SrA8Z8WDEgTgVlwfG+9TgYOF3pOK4vh6CLxszbR2d3Z1AF7yxiZX9JitRcyQrd9a
XYSEnMrZijMtjY45LI71Gp9KRwtQhk1O6cpSSPEDqMLpzKJ2hfp/YKyda9NqtMfl
aZl9iusFsMWw0IrofvE34MYdhUEsFzb5MflaMB4jdYCMPJHM+mD6n9XGrq5oBPAc
RoQwRq764ModzmFu4uFrR7Jlsu4xD5iTui3ykZQE69YIvEymKFmib/6gbwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKJTnXQ8F2Yn6VXlZIakrXC32+xKMB8GA1UdIwQY
MBaAFOLCuDT7yRrw7GsdNP1kBU0iaaH9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHNLNE5QdkpHdkRzYXgwMF9XUUZUU0pwb2YwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8zZjI0OWItZTgzNi00MWI0LTlhM2Et
OTk0ODA2ZjA4MWYwLzEvb2xPZGREd1haaWZwVmVWa2hxU3RjTGZiN0VvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC8zZjI0OWItZTgzNi00MWI0LTlhM2EtOTk0ODA2ZjA4MWYw
LzEvNHNLNE5QdkpHdkRzYXgwMF9XUUZUU0pwb2YwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALY0MMA0G
CSqGSIb3DQEBCwUAA4IBAQCRIbZXk9CG3FBEV8aJywLDNy3IOdsp4VDu4DFIGgol
48wyC0UK/cwrIX3ngfAkOsI10xif5MXjgpWdNLwtoJM9Fo6cBtUFzeQ4adT9izN7
l9YoGR1+fdLB7SW7YuTYNNkcOjkJesVB/k3d+/ZQOLiuU9YBhacD+YSMBeDzHlpD
wLEbCMkKsofN5UsnEAn09RpG0eqeUatl6Q03UfetE9FtwGowB4Rzc1b9O/j7vDPC
SmVc0CrXkl7Je9MqAVUc3iE9FY5Lk5+fAAn+1BQl0popiQc8VOUCj2q9UW7KiG9e
T7jqt+tnGjpH91+sd1xEaP0fRlCviWCdkdaxCT5oqU1N
-----END CERTIFICATE-----
Generated at Sun Apr 6 11:47:03 2025 by rpki-client