Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/JY0sVxRmdyc5WAgUY19lxnxmM4I.roa
File: JY0sVxRmdyc5WAgUY19lxnxmM4I.roa (raw, json)
Hash identifier: 86gvkJrlTS8XF8/W3CjtN+tW5tBzNGMNDhj7XFXK96U=
Subject key identifier: 25:8D:2C:57:14:66:77:27:39:58:08:14:63:5F:65:C6:7C:66:33:82
Certificate issuer: /CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
Certificate serial: 01942220315B000342E71800B2F26642D4CE
Authority key identifier: 11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/JY0sVxRmdyc5WAgUY19lxnxmM4I.roa
Signing time: Wed 01 Jan 2025 13:48:42 +0000
ROA not before: Wed 01 Jan 2025 13:48:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200590
IP address blocks: 45.159.250.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:31:5b:00:03:42:e7:18:00:b2:f2:66:42:d4:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
Validity
Not Before: Jan 1 13:48:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=258d2c571466772739580814635f65c67c663382
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:cc:8f:2e:77:52:49:07:65:a1:75:1a:36:d1:
37:73:50:b5:5f:b7:a2:14:da:a3:50:13:fc:73:fc:
53:52:6e:0d:5a:7f:5a:50:21:c7:98:d7:a5:95:e1:
e6:f9:da:53:d8:9c:17:e4:f7:40:47:cd:92:c6:c2:
ec:a8:0d:5d:4c:de:09:8a:3d:aa:6c:84:27:89:1a:
9d:95:9d:48:bd:f8:e6:0a:80:bf:87:ca:c8:51:1a:
ed:8d:a8:cd:8d:a7:64:e6:56:0e:74:7d:9e:3a:8f:
d0:51:4d:53:de:7a:1b:3a:97:2d:66:90:16:45:f1:
44:93:df:57:b7:68:6f:e9:74:a9:fe:54:ed:ac:71:
cb:54:7b:28:73:82:e8:bc:a3:76:ae:ca:7c:ac:15:
55:56:ad:1d:bd:8b:da:88:17:2f:c5:2f:aa:f6:50:
d2:e5:60:17:73:17:ef:3a:e7:8f:79:b3:f8:2c:50:
a4:e6:94:08:ac:00:68:7d:ec:a5:c6:c6:f1:a3:c2:
a0:3c:b2:4e:a1:38:d6:aa:29:d9:6e:89:ee:df:93:
37:a7:20:64:b4:84:0e:aa:8b:97:c0:e0:d5:21:69:
07:51:88:ea:69:86:a8:1d:42:4a:dd:d9:bc:36:19:
ec:31:e1:05:2b:05:6d:ee:24:62:eb:29:80:50:1c:
80:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:8D:2C:57:14:66:77:27:39:58:08:14:63:5F:65:C6:7C:66:33:82
X509v3 Authority Key Identifier:
keyid:11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/JY0sVxRmdyc5WAgUY19lxnxmM4I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.159.250.0/24
Signature Algorithm: sha256WithRSAEncryption
98:04:2c:4c:1d:56:d2:42:55:50:d3:66:d6:3f:90:22:dd:dc:
d7:f4:d0:14:69:26:97:1a:80:43:54:b5:1b:61:c9:69:0a:cb:
30:3f:5f:0b:70:a5:45:96:cf:36:cb:88:41:23:25:1a:99:9b:
28:33:b4:f8:c1:b7:13:94:b8:30:e2:3c:03:cd:5a:79:df:03:
28:14:10:e9:1a:28:7e:1c:a7:f5:35:8b:52:f7:6d:58:a2:b9:
f7:2b:ea:25:a6:c6:9b:6a:1a:4c:88:08:15:11:44:80:a1:2b:
82:61:23:ec:db:39:bf:b1:17:93:57:43:d8:c0:f5:af:c8:df:
6d:9d:69:42:50:bf:3b:0b:2d:0a:d5:56:74:64:b2:77:fb:b3:
9e:09:82:ea:f4:0c:6b:04:66:13:e8:97:71:4a:97:c3:8e:05:
93:ce:ce:9a:aa:91:10:79:3c:f9:3b:d2:9c:24:fa:d2:7e:9a:
12:8d:14:c2:c4:de:e2:ce:0d:b3:f1:b7:e8:27:77:a1:f0:4c:
97:94:9e:11:bb:ef:1f:f0:26:44:2e:a7:85:91:74:b4:ec:b2:
a9:17:e3:8e:f2:59:3b:6e:16:c2:85:de:b8:bb:eb:be:74:68:
7a:22:d1:65:d2:a6:e6:cd:4e:52:0c:9a:31:28:53:a3:79:20:
fa:bd:d0:fb
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQiIDFbAANC5xgAsvJmQtTOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExYTAxMGY4N2EwNDliNmUyMWFiZWQ5YjQwOTgzYjA0ZjNm
MWM3ZTgwHhcNMjUwMTAxMTM0ODQyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNThkMmM1NzE0NjY3NzI3Mzk1ODA4MTQ2MzVmNjVjNjdjNjYzMzgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsMyPLndSSQdloXUaNtE3c1C1X7ei
FNqjUBP8c/xTUm4NWn9aUCHHmNelleHm+dpT2JwX5PdAR82SxsLsqA1dTN4Jij2q
bIQniRqdlZ1IvfjmCoC/h8rIURrtjajNjadk5lYOdH2eOo/QUU1T3nobOpctZpAW
RfFEk99Xt2hv6XSp/lTtrHHLVHsoc4LovKN2rsp8rBVVVq0dvYvaiBcvxS+q9lDS
5WAXcxfvOuePebP4LFCk5pQIrABofeylxsbxo8KgPLJOoTjWqinZbonu35M3pyBk
tIQOqouXwODVIWkHUYjqaYaoHUJK3dm8NhnsMeEFKwVt7iRi6ymAUByA/QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCWNLFcUZncnOVgIFGNfZcZ8ZjOCMB8GA1UdIwQY
MBaAFBGgEPh6BJtuIavtm0CYOwTz8cfoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWFBUS1Ib0VtMjRocS0yYlFKZzdCUFB4eC1nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9mMjVkN2MtNjY3Ny00ZmRiLTg5OGUt
ZWU3NDY1NzU0ZmY2LzEvSlkwc1Z4Um1keWM1V0FnVVkxOWx4bnhtTTRJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi9mMjVkN2MtNjY3Ny00ZmRiLTg5OGUtZWU3NDY1NzU0ZmY2
LzEvRWFBUS1Ib0VtMjRocS0yYlFKZzdCUFB4eC1nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZ/6MA0G
CSqGSIb3DQEBCwUAA4IBAQCYBCxMHVbSQlVQ02bWP5Ai3dzX9NAUaSaXGoBDVLUb
YclpCsswP18LcKVFls82y4hBIyUamZsoM7T4wbcTlLgw4jwDzVp53wMoFBDpGih+
HKf1NYtS921Yorn3K+olpsabahpMiAgVEUSAoSuCYSPs2zm/sReTV0PYwPWvyN9t
nWlCUL87Cy0K1VZ0ZLJ3+7OeCYLq9AxrBGYT6JdxSpfDjgWTzs6aqpEQeTz5O9Kc
JPrSfpoSjRTCxN7izg2z8bfoJ3eh8EyXlJ4Ru+8f8CZELqeFkXS07LKpF+OO8lk7
bhbChd64u+u+dGh6ItFl0qbmzU5SDJoxKFOjeSD6vdD7
-----END CERTIFICATE-----
Generated at Tue Apr 8 08:49:22 2025 by rpki-client