Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/293a2f-3997-497f-9ef1-4852c8ff8af2/1/vUVcdpzXr2JQGsu1xtXoOvW_LHU.roa
File: vUVcdpzXr2JQGsu1xtXoOvW_LHU.roa (raw, json)
Hash identifier: 2iN03nQJUllsMqRJ1fP7+P4h4U6MeEk1ERszIuxQ8MY=
Subject key identifier: BD:45:5C:76:9C:D7:AF:62:50:1A:CB:B5:C6:D5:E8:3A:F5:BF:2C:75
Certificate issuer: /CN=91d0c78c309a3e99dc9ab74f2cdc0484859e7530
Certificate serial: 01942067EB0081C788AD87FE0C9BC5A28184
Authority key identifier: 91:D0:C7:8C:30:9A:3E:99:DC:9A:B7:4F:2C:DC:04:84:85:9E:75:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kdDHjDCaPpncmrdPLNwEhIWedTA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/293a2f-3997-497f-9ef1-4852c8ff8af2/1/vUVcdpzXr2JQGsu1xtXoOvW_LHU.roa
Signing time: Wed 01 Jan 2025 05:47:48 +0000
ROA not before: Wed 01 Jan 2025 05:47:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214339
IP address blocks: 45.142.181.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:eb:00:81:c7:88:ad:87:fe:0c:9b:c5:a2:81:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91d0c78c309a3e99dc9ab74f2cdc0484859e7530
Validity
Not Before: Jan 1 05:47:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bd455c769cd7af62501acbb5c6d5e83af5bf2c75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c1:5e:4f:e4:eb:d0:f7:9a:45:d4:73:4e:10:
33:57:c8:05:12:dc:a0:f4:99:bf:83:36:2a:58:51:
0a:a6:d6:be:c5:ad:e3:e9:0e:78:a7:9b:44:22:fd:
4b:a6:0f:c3:6c:9b:1d:5e:79:ed:06:8e:d6:0c:14:
32:13:d0:3a:25:0e:c3:14:e8:b8:25:f5:c4:28:2c:
e5:2c:29:dd:74:b9:82:bb:6e:cf:3d:7e:83:91:80:
0f:76:e2:f4:40:f3:50:39:a4:03:76:da:40:83:2e:
11:04:1a:88:d9:f4:2d:be:04:2c:bf:ed:ea:4e:8e:
1f:8b:6c:c8:4a:90:ee:8a:cc:ee:18:89:d6:c9:41:
02:bc:cb:73:2f:c3:25:11:2c:ff:54:1f:bc:44:13:
73:82:a1:9d:34:7b:d1:4a:f0:a9:c3:8f:31:08:47:
f6:e4:55:9d:bd:08:47:6d:a5:9c:21:0f:be:e3:9f:
5f:1e:14:28:2c:ef:d5:b0:6f:c7:bc:61:50:94:5c:
47:7f:3a:63:53:53:49:60:94:af:82:99:00:e2:e7:
e0:66:5c:c5:38:21:f5:cd:c3:de:d2:37:fe:5e:da:
b1:4a:d0:ef:4f:d7:ab:a8:6e:9e:f3:ce:a3:38:58:
e2:28:a0:de:df:dd:4b:bb:5e:05:30:f5:c9:59:9c:
dd:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:45:5C:76:9C:D7:AF:62:50:1A:CB:B5:C6:D5:E8:3A:F5:BF:2C:75
X509v3 Authority Key Identifier:
keyid:91:D0:C7:8C:30:9A:3E:99:DC:9A:B7:4F:2C:DC:04:84:85:9E:75:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kdDHjDCaPpncmrdPLNwEhIWedTA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/293a2f-3997-497f-9ef1-4852c8ff8af2/1/vUVcdpzXr2JQGsu1xtXoOvW_LHU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/293a2f-3997-497f-9ef1-4852c8ff8af2/1/kdDHjDCaPpncmrdPLNwEhIWedTA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.181.0/24
Signature Algorithm: sha256WithRSAEncryption
57:80:6f:e0:9a:e5:23:55:5f:80:d5:8a:85:30:96:b7:16:c6:
7d:15:31:22:27:5d:56:74:ad:b2:8a:b8:93:38:09:a5:21:b4:
50:96:d9:11:c2:22:6d:3a:84:46:ec:95:88:48:af:b6:60:46:
d4:d9:e9:1c:83:11:44:78:ad:a0:d6:61:f8:56:e2:67:29:e4:
8a:03:63:a1:ad:58:3d:49:59:ca:e6:3d:8f:95:0d:8a:39:93:
d3:02:a7:86:62:a2:0c:64:2c:0f:d6:cc:bd:8b:0d:02:00:c2:
dc:f7:e4:d6:44:e7:89:4f:a5:9d:93:7a:26:8c:96:f0:30:6e:
0d:31:19:34:8f:3e:15:bf:1b:40:f4:6b:d5:3b:da:bc:58:b1:
15:27:fc:01:d4:b0:43:cb:ac:28:31:7c:a5:e5:df:ff:68:32:
6a:71:31:94:99:31:c5:2e:f1:82:6a:11:f0:e4:1a:38:17:49:
27:77:a5:41:f2:2e:75:62:c2:c5:97:c3:a0:8c:a9:42:b4:06:
84:1c:09:8f:7b:87:c6:4f:7e:e4:49:3e:0d:56:56:f2:03:11:
e2:bf:5f:b8:44:28:0e:f7:da:5a:e7:05:6b:d8:88:7f:f7:82:
95:6b:7d:ce:26:80:ec:a0:1d:c1:7a:1a:ba:bc:db:21:fc:ac:
ab:30:c6:5a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQgZ+sAgceIrYf+DJvFooGEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxZDBjNzhjMzA5YTNlOTlkYzlhYjc0ZjJjZGMwNDg0ODU5
ZTc1MzAwHhcNMjUwMTAxMDU0NzQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZDQ1NWM3NjljZDdhZjYyNTAxYWNiYjVjNmQ1ZTgzYWY1YmYyYzc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuMFeT+Tr0PeaRdRzThAzV8gFEtyg
9Jm/gzYqWFEKpta+xa3j6Q54p5tEIv1Lpg/DbJsdXnntBo7WDBQyE9A6JQ7DFOi4
JfXEKCzlLCnddLmCu27PPX6DkYAPduL0QPNQOaQDdtpAgy4RBBqI2fQtvgQsv+3q
To4fi2zISpDuiszuGInWyUECvMtzL8MlESz/VB+8RBNzgqGdNHvRSvCpw48xCEf2
5FWdvQhHbaWcIQ++459fHhQoLO/VsG/HvGFQlFxHfzpjU1NJYJSvgpkA4ufgZlzF
OCH1zcPe0jf+XtqxStDvT9erqG6e886jOFjiKKDe391Lu14FMPXJWZzdawIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFL1FXHac169iUBrLtcbV6Dr1vyx1MB8GA1UdIwQY
MBaAFJHQx4wwmj6Z3Jq3TyzcBISFnnUwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva2RESGpEQ2FQcG5jbXJkUExOd0VoSVdlZFRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS8yOTNhMmYtMzk5Ny00OTdmLTllZjEt
NDg1MmM4ZmY4YWYyLzEvdlVWY2RwelhyMkpRR3N1MXh0WG9PdldfTEhVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS8yOTNhMmYtMzk5Ny00OTdmLTllZjEtNDg1MmM4ZmY4YWYy
LzEva2RESGpEQ2FQcG5jbXJkUExOd0VoSVdlZFRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALY61MA0G
CSqGSIb3DQEBCwUAA4IBAQBXgG/gmuUjVV+A1YqFMJa3FsZ9FTEiJ11WdK2yiriT
OAmlIbRQltkRwiJtOoRG7JWISK+2YEbU2ekcgxFEeK2g1mH4VuJnKeSKA2OhrVg9
SVnK5j2PlQ2KOZPTAqeGYqIMZCwP1sy9iw0CAMLc9+TWROeJT6Wdk3omjJbwMG4N
MRk0jz4VvxtA9GvVO9q8WLEVJ/wB1LBDy6woMXyl5d//aDJqcTGUmTHFLvGCahHw
5Bo4F0knd6VB8i51YsLFl8OgjKlCtAaEHAmPe4fGT37kST4NVlbyAxHiv1+4RCgO
99pa5wVr2Ih/94KVa33OJoDsoB3Behq6vNsh/KyrMMZa
-----END CERTIFICATE-----
Generated at Sun Apr 6 19:36:33 2025 by rpki-client