Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/ktY0ZVKLVZ2-9f5VvidiSkAw1N8.roa
File: ktY0ZVKLVZ2-9f5VvidiSkAw1N8.roa (raw, json)
Hash identifier: /OxD1jMUUoFP547t19rFpdiFhM+fqd8IyqwhJNcn7vE=
Subject key identifier: 92:D6:34:65:52:8B:55:9D:BE:F5:FE:55:BE:27:62:4A:40:30:D4:DF
Certificate issuer: /CN=2e1164a9b5013d62f051344f6df91f13bc7ecb0f
Certificate serial: 01941F8C89B5196E835D36CCAB8B910652E1
Authority key identifier: 2E:11:64:A9:B5:01:3D:62:F0:51:34:4F:6D:F9:1F:13:BC:7E:CB:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LhFkqbUBPWLwUTRPbfkfE7x-yw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/ktY0ZVKLVZ2-9f5VvidiSkAw1N8.roa
Signing time: Wed 01 Jan 2025 01:48:11 +0000
ROA not before: Wed 01 Jan 2025 01:48:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202656
IP address blocks: 45.82.83.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:89:b5:19:6e:83:5d:36:cc:ab:8b:91:06:52:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e1164a9b5013d62f051344f6df91f13bc7ecb0f
Validity
Not Before: Jan 1 01:48:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=92d63465528b559dbef5fe55be27624a4030d4df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ab:44:25:19:96:6f:88:4c:80:5a:d5:36:30:
1e:32:76:7c:1f:d7:5a:65:1f:56:7b:90:ca:5d:2b:
66:73:53:99:42:75:78:80:eb:19:4d:b3:81:f7:83:
83:17:f7:a0:88:c9:3d:4d:72:3c:eb:6b:2a:07:74:
7f:8a:ef:eb:60:6d:01:3b:76:93:1f:0c:f3:c6:9f:
34:11:31:70:fc:0f:10:b8:03:96:d8:55:63:23:24:
23:b5:cc:c6:93:72:e6:ae:cc:01:b4:58:e5:83:f1:
44:13:9c:0d:95:7a:8e:9a:f5:01:fb:14:f2:ee:c6:
a6:5e:fe:2e:fd:27:a3:42:6c:10:65:2b:fb:c9:d2:
4b:82:08:36:32:64:91:a2:5b:b1:1e:2b:62:11:68:
0c:71:4b:e7:81:d7:d2:4e:bc:7a:8e:38:59:81:68:
ab:87:d0:ac:fa:24:fa:66:4a:aa:fb:49:52:dc:a2:
3b:66:a5:8b:66:d5:b6:f4:50:c9:51:fa:ac:ff:66:
4c:99:f0:c1:81:5c:93:a3:3d:12:4e:32:24:6a:6f:
c1:a0:82:4b:df:51:74:d5:54:fc:1f:45:37:86:0b:
fd:27:76:59:0a:08:3d:13:b3:9d:b0:63:de:65:0b:
6e:00:51:bb:4a:55:35:8e:e2:c4:08:5f:b1:67:d3:
b3:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:D6:34:65:52:8B:55:9D:BE:F5:FE:55:BE:27:62:4A:40:30:D4:DF
X509v3 Authority Key Identifier:
keyid:2E:11:64:A9:B5:01:3D:62:F0:51:34:4F:6D:F9:1F:13:BC:7E:CB:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LhFkqbUBPWLwUTRPbfkfE7x-yw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/ktY0ZVKLVZ2-9f5VvidiSkAw1N8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/LhFkqbUBPWLwUTRPbfkfE7x-yw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.82.83.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:fd:fa:db:9c:82:61:03:49:01:1e:74:c1:73:66:0f:da:65:
b4:21:09:1d:51:3f:ed:58:2c:d4:a8:ac:3b:2b:21:c6:3f:09:
ad:66:91:2d:a0:4b:f9:47:7e:7c:38:11:64:9e:6d:48:e8:8d:
b3:32:38:9f:04:16:fb:9f:6b:6a:6d:77:76:e9:36:a7:06:7c:
34:ae:36:cc:21:ca:97:2e:93:b6:92:2a:86:e7:08:a7:03:4b:
c9:eb:1d:05:03:ac:6e:4c:8a:66:0a:73:2d:58:a8:1e:88:d8:
5a:c0:c7:0f:ab:ac:45:8f:f5:9d:19:3f:be:ac:48:da:ce:eb:
45:a3:67:06:19:01:90:e8:4a:f4:2c:06:4d:cf:45:de:3f:3e:
2f:9c:db:b8:66:85:3d:f7:f6:69:57:e5:ed:4c:a6:f8:22:a3:
6a:c5:09:ad:73:73:c6:f6:a5:73:60:5e:79:c2:a9:fb:61:30:
2f:9d:62:0a:36:3b:47:11:c7:f3:b7:99:c6:fd:3f:90:d6:83:
99:52:c1:93:c6:24:27:b0:24:b9:a1:b0:ae:c9:f7:9b:08:c9:
8f:db:6d:a6:b6:85:a9:b0:fe:c6:7e:96:c5:3c:9a:5f:01:66:
8c:b0:b6:e8:13:de:2b:4c:21:c8:af:24:78:45:40:8e:16:5d:
59:b4:ae:bb
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQfjIm1GW6DXTbMq4uRBlLhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlMTE2NGE5YjUwMTNkNjJmMDUxMzQ0ZjZkZjkxZjEzYmM3
ZWNiMGYwHhcNMjUwMTAxMDE0ODExWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MmQ2MzQ2NTUyOGI1NTlkYmVmNWZlNTViZTI3NjI0YTQwMzBkNGRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwqtEJRmWb4hMgFrVNjAeMnZ8H9da
ZR9We5DKXStmc1OZQnV4gOsZTbOB94ODF/egiMk9TXI862sqB3R/iu/rYG0BO3aT
Hwzzxp80ETFw/A8QuAOW2FVjIyQjtczGk3LmrswBtFjlg/FEE5wNlXqOmvUB+xTy
7samXv4u/SejQmwQZSv7ydJLggg2MmSRoluxHitiEWgMcUvngdfSTrx6jjhZgWir
h9Cs+iT6Zkqq+0lS3KI7ZqWLZtW29FDJUfqs/2ZMmfDBgVyToz0STjIkam/BoIJL
31F01VT8H0U3hgv9J3ZZCgg9E7OdsGPeZQtuAFG7SlU1juLECF+xZ9OzKwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJLWNGVSi1WdvvX+Vb4nYkpAMNTfMB8GA1UdIwQY
MBaAFC4RZKm1AT1i8FE0T235HxO8fssPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTGhGa3FiVUJQV0x3VVRSUGJma2ZFN3gteXc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9mYjQ2OTYtNjc4Zi00ZDQ1LWEwOTEt
ZmQ3ZjE3YmIxYTVjLzEva3RZMFpWS0xWWjItOWY1VnZpZGlTa0F3MU44LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC9mYjQ2OTYtNjc4Zi00ZDQ1LWEwOTEtZmQ3ZjE3YmIxYTVj
LzEvTGhGa3FiVUJQV0x3VVRSUGJma2ZFN3gteXc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALVJTMA0G
CSqGSIb3DQEBCwUAA4IBAQCb/frbnIJhA0kBHnTBc2YP2mW0IQkdUT/tWCzUqKw7
KyHGPwmtZpEtoEv5R358OBFknm1I6I2zMjifBBb7n2tqbXd26TanBnw0rjbMIcqX
LpO2kiqG5winA0vJ6x0FA6xuTIpmCnMtWKgeiNhawMcPq6xFj/WdGT++rEjazutF
o2cGGQGQ6Er0LAZNz0XePz4vnNu4ZoU99/ZpV+XtTKb4IqNqxQmtc3PG9qVzYF55
wqn7YTAvnWIKNjtHEcfzt5nG/T+Q1oOZUsGTxiQnsCS5obCuyfebCMmP222mtoWp
sP7GfpbFPJpfAWaMsLboE94rTCHIryR4RUCOFl1ZtK67
-----END CERTIFICATE-----
Generated at Sun Apr 6 07:42:25 2025 by rpki-client