Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/AuOqSBFQao1XdeScaH_pzc2oidA.roa
File: AuOqSBFQao1XdeScaH_pzc2oidA.roa (raw, json)
Hash identifier: KCgCD5VjXUJcoI9zPUC+HgqfHioM6+FN7vkkVzOcdHA=
Subject key identifier: 02:E3:AA:48:11:50:6A:8D:57:75:E4:9C:68:7F:E9:CD:CD:A8:89:D0
Certificate issuer: /CN=5c892aed3833e6100f5e0cf12271fd80b755c361
Certificate serial: 01941F8C4204D77C07CDEEA4177C9672B9A9
Authority key identifier: 5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/AuOqSBFQao1XdeScaH_pzc2oidA.roa
Signing time: Wed 01 Jan 2025 01:47:53 +0000
ROA not before: Wed 01 Jan 2025 01:47:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211407
IP address blocks: 45.151.70.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:42:04:d7:7c:07:cd:ee:a4:17:7c:96:72:b9:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c892aed3833e6100f5e0cf12271fd80b755c361
Validity
Not Before: Jan 1 01:47:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=02e3aa4811506a8d5775e49c687fe9cdcda889d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:22:09:15:3f:d7:2a:e8:4d:ac:71:60:53:7d:
58:5b:af:4f:72:5b:a1:47:71:ea:28:2c:18:5a:23:
8b:d0:bf:a4:c8:2a:c4:e8:9c:99:15:e6:c3:20:df:
87:fc:3e:2d:ba:5e:b8:82:81:6d:62:3e:cc:79:74:
b0:2f:15:7e:7f:6b:73:50:d0:65:f6:d8:f5:56:b4:
06:68:73:40:4a:6c:4e:47:3f:38:fb:35:fb:02:fd:
3d:98:08:b0:7e:51:d1:46:95:ca:8c:3f:07:2d:cc:
bd:ea:f3:da:8f:0c:dc:6c:c8:73:64:70:ab:68:4a:
0c:b5:2b:19:ea:8d:ff:40:a1:80:83:04:db:c5:a9:
27:0e:51:c8:2a:6b:61:48:7d:d3:24:e8:9a:f3:2c:
62:bc:f2:53:9d:50:ab:6f:db:19:00:d2:fd:fe:5b:
79:d1:33:fe:d9:a9:73:0a:56:57:33:19:f7:57:0b:
f4:b2:f5:53:32:12:25:5b:00:70:e1:91:b2:66:d4:
53:3f:91:d4:cf:1a:c1:d4:75:6e:3c:28:92:d9:28:
f5:33:ef:96:b6:82:05:1c:b7:91:88:96:08:bd:d3:
80:82:89:92:05:8e:03:e9:e1:c0:7c:dd:93:d5:ee:
d1:2b:41:be:81:95:17:9a:29:ab:b8:c2:ff:54:7f:
75:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:E3:AA:48:11:50:6A:8D:57:75:E4:9C:68:7F:E9:CD:CD:A8:89:D0
X509v3 Authority Key Identifier:
keyid:5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/AuOqSBFQao1XdeScaH_pzc2oidA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/XIkq7Tgz5hAPXgzxInH9gLdVw2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.70.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:17:df:8f:7f:a3:7e:f6:6c:86:42:f1:d3:2e:6b:d6:2e:ba:
8f:b2:59:6f:20:0a:e5:e4:1b:97:d6:28:d5:87:67:13:a5:9d:
23:fd:5e:de:61:53:c7:84:6b:c8:dd:30:2d:fc:8c:96:46:aa:
93:7b:46:81:ff:77:ad:77:82:16:59:e2:ab:95:b8:1b:e9:f3:
e4:bf:51:1c:c1:74:f6:39:b4:65:9a:fe:22:87:ed:ac:38:6c:
eb:55:3d:3e:32:d2:91:a1:ec:1f:d9:a5:ae:f2:78:79:29:37:
90:ee:11:2c:88:ba:87:19:48:bc:d8:cb:ad:18:29:6d:1c:6b:
26:61:d4:2b:6c:36:36:6f:32:94:85:24:94:68:e8:21:05:49:
d1:97:10:82:d8:39:db:14:74:91:b7:7c:cd:80:bd:39:6c:d7:
5e:60:96:bc:05:96:fd:9a:81:6a:23:75:0c:c6:50:68:9e:c8:
06:30:bd:6a:eb:67:83:12:b2:eb:38:b2:8e:41:4f:12:6c:e7:
28:65:0b:4e:35:ff:5e:90:2a:e1:d9:39:31:6f:10:a4:5b:77:
d2:7f:a7:0a:48:3f:23:01:d3:df:cf:9e:e2:21:74:d8:42:17:
63:2d:a3:52:06:ec:3c:ba:14:06:64:e3:3f:0a:1a:95:8c:b3:
a0:4f:fa:75
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQfjEIE13wHze6kF3yWcrmpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjODkyYWVkMzgzM2U2MTAwZjVlMGNmMTIyNzFmZDgwYjc1
NWMzNjEwHhcNMjUwMTAxMDE0NzUzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMmUzYWE0ODExNTA2YThkNTc3NWU0OWM2ODdmZTljZGNkYTg4OWQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtyIJFT/XKuhNrHFgU31YW69Pcluh
R3HqKCwYWiOL0L+kyCrE6JyZFebDIN+H/D4tul64goFtYj7MeXSwLxV+f2tzUNBl
9tj1VrQGaHNASmxORz84+zX7Av09mAiwflHRRpXKjD8HLcy96vPajwzcbMhzZHCr
aEoMtSsZ6o3/QKGAgwTbxaknDlHIKmthSH3TJOia8yxivPJTnVCrb9sZANL9/lt5
0TP+2alzClZXMxn3Vwv0svVTMhIlWwBw4ZGyZtRTP5HUzxrB1HVuPCiS2Sj1M++W
toIFHLeRiJYIvdOAgomSBY4D6eHAfN2T1e7RK0G+gZUXmimruML/VH915QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFALjqkgRUGqNV3XknGh/6c3NqInQMB8GA1UdIwQY
MBaAFFyJKu04M+YQD14M8SJx/YC3VcNhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWElrcTdUZ3o1aEFQWGd6eEluSDlnTGRWdzJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi84NmZiNDYtZDcxMi00NjAyLTljY2Ut
M2FhN2RhYTlkM2VjLzEvQXVPcVNCRlFhbzFYZGVTY2FIX3B6YzJvaWRBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi84NmZiNDYtZDcxMi00NjAyLTljY2UtM2FhN2RhYTlkM2Vj
LzEvWElrcTdUZ3o1aEFQWGd6eEluSDlnTGRWdzJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZdGMA0G
CSqGSIb3DQEBCwUAA4IBAQAfF9+Pf6N+9myGQvHTLmvWLrqPsllvIArl5BuX1ijV
h2cTpZ0j/V7eYVPHhGvI3TAt/IyWRqqTe0aB/3etd4IWWeKrlbgb6fPkv1EcwXT2
ObRlmv4ih+2sOGzrVT0+MtKRoewf2aWu8nh5KTeQ7hEsiLqHGUi82MutGCltHGsm
YdQrbDY2bzKUhSSUaOghBUnRlxCC2DnbFHSRt3zNgL05bNdeYJa8BZb9moFqI3UM
xlBonsgGML1q62eDErLrOLKOQU8SbOcoZQtONf9ekCrh2TkxbxCkW3fSf6cKSD8j
AdPfz57iIXTYQhdjLaNSBuw8uhQGZOM/ChqVjLOgT/p1
-----END CERTIFICATE-----
Generated at Sun Apr 6 03:47:29 2025 by rpki-client