Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/upIz99cCsXRz5scxXwGx2DhgA8o.roa
File: upIz99cCsXRz5scxXwGx2DhgA8o.roa (raw, json)
Hash identifier: +2h7GUSsdyzCx+CvaAvoNSEqiEYoGRsnqktaCkk73O4=
Subject key identifier: BA:92:33:F7:D7:02:B1:74:73:E6:C7:31:5F:01:B1:D8:38:60:03:CA
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0195CC84CDCCE83A679AAEE8F72533387A73
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/upIz99cCsXRz5scxXwGx2DhgA8o.roa
Signing time: Tue 25 Mar 2025 08:56:50 +0000
ROA not before: Tue 25 Mar 2025 08:56:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200019
IP address blocks: 45.131.184.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:cc:84:cd:cc:e8:3a:67:9a:ae:e8:f7:25:33:38:7a:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Mar 25 08:56:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ba9233f7d702b17473e6c7315f01b1d8386003ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:03:58:c9:1b:67:c6:9a:70:6b:4c:26:62:71:
a1:a1:09:c8:b7:de:3e:9e:33:5b:0a:56:b4:29:7f:
3f:61:70:a9:49:c8:b5:a2:76:64:f4:d3:61:a0:f4:
d1:e2:5f:3d:26:43:05:d7:8a:15:06:4a:15:f4:47:
35:5c:98:cc:17:3d:0c:a5:46:f0:e4:7d:74:b4:64:
53:ac:a3:7c:3a:3a:c2:73:aa:20:93:29:79:49:43:
87:82:f5:45:e1:8e:0d:0d:e7:16:f8:ab:ba:1a:55:
c6:2b:94:c6:6c:53:29:fa:70:ad:39:93:ac:47:2f:
53:3a:d6:df:e8:b7:19:d6:cf:fd:e3:e0:8f:68:eb:
25:98:bb:3a:58:37:07:bc:3d:58:a5:2f:15:22:85:
84:d6:75:3c:0e:ed:ee:1d:0f:9e:49:f9:80:18:a8:
aa:de:42:30:4b:ee:01:1d:6c:99:22:f4:e2:49:27:
41:08:e3:2e:94:1e:e1:e7:ec:53:86:55:8b:46:d9:
88:78:ab:8a:24:cd:27:f2:89:c6:3a:ff:14:6a:76:
a4:c9:c4:a0:03:70:a3:ad:4d:9e:28:d1:d9:f6:57:
55:8f:6a:4f:4d:16:5e:3c:1b:c0:f2:f1:5e:52:a3:
b6:80:8e:17:f7:46:dd:c1:50:60:ec:31:22:6e:34:
46:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:92:33:F7:D7:02:B1:74:73:E6:C7:31:5F:01:B1:D8:38:60:03:CA
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/upIz99cCsXRz5scxXwGx2DhgA8o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.131.184.0/24
Signature Algorithm: sha256WithRSAEncryption
37:2e:5a:0e:8e:c2:56:7f:00:10:24:ff:f0:3c:59:f5:a8:37:
fb:76:a0:c4:de:6e:56:9d:e5:6c:3b:a0:da:7d:fe:24:59:0d:
aa:8b:98:f9:10:5d:e5:b9:ac:5e:f5:93:6c:57:4b:e2:12:05:
4c:ec:19:85:f8:3c:7c:ca:2d:1e:05:54:7f:5e:1d:79:ef:4a:
52:c7:86:ee:b7:9b:97:32:c3:b1:dc:18:1f:8e:e0:a2:55:c2:
97:e1:6a:a1:25:20:ef:0a:de:47:04:01:49:5b:d9:99:5a:d3:
62:e8:b7:70:a4:56:b8:6b:e3:0b:4a:ca:a3:9c:cc:5f:3b:d4:
a8:50:7d:d9:41:c6:3e:68:b0:ce:0e:c5:4f:d0:bd:16:7e:bd:
7a:cc:49:41:9a:51:83:6e:94:82:7d:42:21:d8:1a:87:b6:da:
05:5f:e2:3e:ab:a2:82:40:c5:f2:21:82:4b:d5:35:f4:91:d6:
92:0d:25:6e:ee:54:0d:6b:3a:c4:0a:e7:54:d0:8e:ca:7a:41:
43:4d:c0:8b:02:fb:23:44:c4:22:ac:b8:69:15:a2:75:f8:a0:
ee:22:2a:74:25:31:49:09:bf:78:cb:f3:17:a5:9c:4f:72:3b:
7f:6a:28:d2:d9:f9:52:30:c0:fb:f3:6b:7b:7e:00:20:98:30:
0d:9f:27:5e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZXMhM3M6Dpnmq7o9yUzOHpzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjUwMzI1MDg1NjUwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYTkyMzNmN2Q3MDJiMTc0NzNlNmM3MzE1ZjAxYjFkODM4NjAwM2NhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8QNYyRtnxppwa0wmYnGhoQnIt94+
njNbCla0KX8/YXCpSci1onZk9NNhoPTR4l89JkMF14oVBkoV9Ec1XJjMFz0MpUbw
5H10tGRTrKN8OjrCc6ogkyl5SUOHgvVF4Y4NDecW+Ku6GlXGK5TGbFMp+nCtOZOs
Ry9TOtbf6LcZ1s/94+CPaOslmLs6WDcHvD1YpS8VIoWE1nU8Du3uHQ+eSfmAGKiq
3kIwS+4BHWyZIvTiSSdBCOMulB7h5+xThlWLRtmIeKuKJM0n8onGOv8UanakycSg
A3CjrU2eKNHZ9ldVj2pPTRZePBvA8vFeUqO2gI4X90bdwVBg7DEibjRGCwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLqSM/fXArF0c+bHMV8Bsdg4YAPKMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvdXBJejk5Y0NzWFJ6NXNjeFh3R3gyRGhnQThvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYO4MA0G
CSqGSIb3DQEBCwUAA4IBAQA3LloOjsJWfwAQJP/wPFn1qDf7dqDE3m5WneVsO6Da
ff4kWQ2qi5j5EF3luaxe9ZNsV0viEgVM7BmF+Dx8yi0eBVR/Xh1570pSx4but5uX
MsOx3BgfjuCiVcKX4WqhJSDvCt5HBAFJW9mZWtNi6LdwpFa4a+MLSsqjnMxfO9So
UH3ZQcY+aLDODsVP0L0Wfr16zElBmlGDbpSCfUIh2BqHttoFX+I+q6KCQMXyIYJL
1TX0kdaSDSVu7lQNazrECudU0I7KekFDTcCLAvsjRMQirLhpFaJ1+KDuIip0JTFJ
Cb94y/MXpZxPcjt/aijS2flSMMD782t7fgAgmDANnyde
-----END CERTIFICATE-----
Generated at Sat Apr 5 21:18:54 2025 by rpki-client