Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/14b58d-a1a3-46c1-ac62-8eefb952d8c1/1/c3njCbUkCCL3mnp4u_KCanHzP7M.roa
File: c3njCbUkCCL3mnp4u_KCanHzP7M.roa (raw, json)
Hash identifier: vVs8Ror537sKvCZah39iYsDHQqQgVb1rydMRu4BJ5YQ=
Subject key identifier: 73:79:E3:09:B5:24:08:22:F7:9A:7A:78:BB:F2:82:6A:71:F3:3F:B3
Certificate issuer: /CN=96124f25246a5409fbee11b5372dd8be24c6e9eb
Certificate serial: 019421B1B745F871EC4E062014C9F56A4AFB
Authority key identifier: 96:12:4F:25:24:6A:54:09:FB:EE:11:B5:37:2D:D8:BE:24:C6:E9:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lhJPJSRqVAn77hG1Ny3YviTG6es.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/14b58d-a1a3-46c1-ac62-8eefb952d8c1/1/c3njCbUkCCL3mnp4u_KCanHzP7M.roa
Signing time: Wed 01 Jan 2025 11:48:02 +0000
ROA not before: Wed 01 Jan 2025 11:48:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209326
IP address blocks: 45.150.228.0/24 maxlen: 24
45.150.229.0/24 maxlen: 24
45.150.230.0/24 maxlen: 24
45.150.231.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:b7:45:f8:71:ec:4e:06:20:14:c9:f5:6a:4a:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96124f25246a5409fbee11b5372dd8be24c6e9eb
Validity
Not Before: Jan 1 11:48:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7379e309b5240822f79a7a78bbf2826a71f33fb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:79:64:8a:e3:5f:85:6c:f9:2c:cc:c5:44:0a:
6e:8a:3f:26:86:c7:c8:65:dc:f6:f2:4b:5b:ee:f2:
03:d0:be:ad:51:07:7a:5a:f9:4e:1d:04:f9:91:65:
39:9c:ec:08:cb:fd:6a:f9:22:d8:6e:c3:2c:09:0d:
4e:17:00:82:af:eb:06:f3:cd:e3:4a:a5:a4:2b:5a:
85:30:83:62:9b:77:e4:f6:65:5c:10:86:bb:e8:7d:
62:40:ee:8c:3c:fb:a8:16:e8:0e:e8:1f:cb:a3:16:
ad:69:f1:7a:fe:23:f2:dc:1b:75:4c:b5:97:4d:94:
81:dc:70:1c:b5:61:a4:53:01:e9:28:33:27:a0:ac:
6c:00:c2:b7:a7:a8:a9:f2:86:2c:08:ec:db:87:89:
86:1a:9f:fe:57:6a:11:b2:f3:ed:0c:0c:80:f7:b5:
c7:4b:07:86:91:96:9f:53:23:a3:68:41:74:22:18:
26:19:46:70:ae:83:18:cf:59:48:da:c7:14:a3:a9:
01:52:3b:0f:6f:3e:64:58:5a:87:63:02:78:11:68:
36:da:e1:ce:94:a8:8f:7a:bb:43:cb:da:60:e7:8e:
7e:7e:72:0f:49:23:79:81:1d:4f:6e:8f:a6:df:d9:
b2:16:57:de:c8:45:a8:fa:cb:35:40:c2:3a:d6:1d:
72:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:79:E3:09:B5:24:08:22:F7:9A:7A:78:BB:F2:82:6A:71:F3:3F:B3
X509v3 Authority Key Identifier:
keyid:96:12:4F:25:24:6A:54:09:FB:EE:11:B5:37:2D:D8:BE:24:C6:E9:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lhJPJSRqVAn77hG1Ny3YviTG6es.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/14b58d-a1a3-46c1-ac62-8eefb952d8c1/1/c3njCbUkCCL3mnp4u_KCanHzP7M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/14b58d-a1a3-46c1-ac62-8eefb952d8c1/1/lhJPJSRqVAn77hG1Ny3YviTG6es.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.228.0/22
Signature Algorithm: sha256WithRSAEncryption
95:85:c6:06:06:4b:2a:0e:a0:3d:cc:89:95:fa:70:28:ba:c4:
d8:67:ba:26:dd:fc:93:f4:6a:2c:ca:a5:eb:8b:9d:9f:22:be:
b2:a9:6e:72:a1:01:b0:56:1e:f8:f0:5b:fb:e8:c0:71:f6:82:
6e:8b:a9:ad:3e:b3:2a:52:36:69:06:1f:b4:0b:65:06:d7:be:
5d:ba:2e:7c:9e:8c:17:9d:f2:59:12:4c:3f:15:52:c7:d3:3d:
32:d3:12:93:9e:04:13:e7:5e:f7:11:04:84:5c:22:51:38:39:
9a:51:29:bf:9e:69:2a:a3:02:bc:1d:5b:0a:b0:49:a2:18:9a:
58:d3:2a:9c:9d:39:84:7e:10:fa:c0:d4:10:2c:ec:55:7c:85:
43:d2:43:83:28:00:9a:e4:1c:cb:06:9c:b5:c9:50:ca:cd:3d:
94:d2:cf:e8:ba:a8:81:9e:1f:91:56:0e:aa:62:b1:83:cf:a6:
89:18:6e:c4:aa:09:57:71:e2:be:5e:27:5b:af:86:e7:e1:e2:
53:b8:d8:12:0b:bd:86:d1:2e:7e:f2:c2:0e:e0:e7:c3:ba:63:
fe:7e:7e:55:11:9e:b5:91:ab:27:ea:98:bd:c4:c2:ce:17:55:
43:1a:13:16:43:a4:3b:87:45:0d:ec:24:26:3a:0d:ea:5b:e0:
b2:57:cd:a8
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQhsbdF+HHsTgYgFMn1akr7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2MTI0ZjI1MjQ2YTU0MDlmYmVlMTFiNTM3MmRkOGJlMjRj
NmU5ZWIwHhcNMjUwMTAxMTE0ODAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3Mzc5ZTMwOWI1MjQwODIyZjc5YTdhNzhiYmYyODI2YTcxZjMzZmIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxnlkiuNfhWz5LMzFRApuij8mhsfI
Zdz28ktb7vID0L6tUQd6WvlOHQT5kWU5nOwIy/1q+SLYbsMsCQ1OFwCCr+sG883j
SqWkK1qFMINim3fk9mVcEIa76H1iQO6MPPuoFugO6B/LoxatafF6/iPy3Bt1TLWX
TZSB3HActWGkUwHpKDMnoKxsAMK3p6ip8oYsCOzbh4mGGp/+V2oRsvPtDAyA97XH
SweGkZafUyOjaEF0IhgmGUZwroMYz1lI2scUo6kBUjsPbz5kWFqHYwJ4EWg22uHO
lKiPertDy9pg545+fnIPSSN5gR1Pbo+m39myFlfeyEWo+ss1QMI61h1ydwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHN54wm1JAgi95p6eLvygmpx8z+zMB8GA1UdIwQY
MBaAFJYSTyUkalQJ++4RtTct2L4kxunrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbGhKUEpTUnFWQW43N2hHMU55M1l2aVRHNmVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS8xNGI1OGQtYTFhMy00NmMxLWFjNjIt
OGVlZmI5NTJkOGMxLzEvYzNuakNiVWtDQ0wzbW5wNHVfS0Nhbkh6UDdNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS8xNGI1OGQtYTFhMy00NmMxLWFjNjItOGVlZmI5NTJkOGMx
LzEvbGhKUEpTUnFWQW43N2hHMU55M1l2aVRHNmVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLZbkMA0G
CSqGSIb3DQEBCwUAA4IBAQCVhcYGBksqDqA9zImV+nAousTYZ7om3fyT9GosyqXr
i52fIr6yqW5yoQGwVh748Fv76MBx9oJui6mtPrMqUjZpBh+0C2UG175dui58nowX
nfJZEkw/FVLH0z0y0xKTngQT5173EQSEXCJRODmaUSm/nmkqowK8HVsKsEmiGJpY
0yqcnTmEfhD6wNQQLOxVfIVD0kODKACa5BzLBpy1yVDKzT2U0s/ouqiBnh+RVg6q
YrGDz6aJGG7EqglXceK+Xidbr4bn4eJTuNgSC72G0S5+8sIO4OfDumP+fn5VEZ61
kasn6pi9xMLOF1VDGhMWQ6Q7h0UN7CQmOg3qW+CyV82o
-----END CERTIFICATE-----
Generated at Fri Apr 11 21:25:00 2025 by rpki-client