Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/NOwFhWm932ceAr06p54B7tMm6G4.roa
File: NOwFhWm932ceAr06p54B7tMm6G4.roa (raw, json)
Hash identifier: DlOrI7zqCt0bpzlzuJEYueFDlrq04KRyBU/5L0n9UsU=
Subject key identifier: 34:EC:05:85:69:BD:DF:67:1E:02:BD:3A:A7:9E:01:EE:D3:26:E8:6E
Certificate issuer: /CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
Certificate serial: 0194236A54C487A1E1D965D3E286CCE53AA0
Authority key identifier: 17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/NOwFhWm932ceAr06p54B7tMm6G4.roa
Signing time: Wed 01 Jan 2025 19:49:18 +0000
ROA not before: Wed 01 Jan 2025 19:49:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 1124
IP address blocks: 145.18.0.0/16 maxlen: 16
145.109.0.0/17 maxlen: 17
145.109.128.0/17 maxlen: 17
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:54:c4:87:a1:e1:d9:65:d3:e2:86:cc:e5:3a:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
Validity
Not Before: Jan 1 19:49:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=34ec058569bddf671e02bd3aa79e01eed326e86e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:64:7b:6f:9a:08:34:5f:32:ff:7c:ee:a3:a5:
e0:1a:9f:ab:ca:d1:d9:6e:52:7d:09:22:3b:10:5a:
88:42:8a:a8:c8:3f:c8:e6:f6:2b:e1:ed:20:5a:6d:
12:0c:0d:1f:d4:6b:ab:0b:d7:35:1d:85:d2:b4:7b:
03:59:13:31:c9:50:29:df:1a:0a:c5:da:35:3c:70:
31:f8:8e:ac:4b:ea:c9:e2:8b:93:38:d2:b9:d8:f4:
57:40:f6:b0:fa:30:cc:84:d8:fa:75:0b:62:10:a3:
50:41:cb:37:bb:cf:b1:17:4c:a2:97:0b:d3:25:a7:
65:d0:19:cf:90:90:78:91:38:ae:66:37:b0:24:63:
cb:8e:fe:a4:1e:e1:dc:c1:72:48:91:2e:e8:8f:75:
c4:1c:a6:15:03:de:97:e6:72:3a:2e:8f:b5:88:9b:
0d:48:7f:d8:6a:8d:6d:24:7f:84:f6:6f:53:de:a2:
08:2d:27:03:e1:56:07:ef:8a:db:42:27:b2:a4:c5:
41:91:ea:db:a8:58:22:9b:00:3e:05:da:11:0f:e5:
f5:1a:76:75:65:37:64:ab:09:2a:29:a0:5a:8d:2d:
ec:0d:71:f3:7f:09:2a:05:4b:59:7a:3e:b7:4e:6a:
0c:ff:4e:4e:e5:57:58:c7:bd:19:13:a1:b8:34:35:
33:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:EC:05:85:69:BD:DF:67:1E:02:BD:3A:A7:9E:01:EE:D3:26:E8:6E
X509v3 Authority Key Identifier:
keyid:17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/NOwFhWm932ceAr06p54B7tMm6G4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.18.0.0/16
145.109.0.0/16
Signature Algorithm: sha256WithRSAEncryption
6a:8c:3a:75:60:00:a4:23:20:ad:30:1c:0c:8d:c7:3d:0e:d9:
20:bd:75:6a:0c:98:bc:22:89:96:41:17:82:cc:37:b7:fa:33:
a8:5a:54:20:5a:4a:aa:bc:76:8b:6e:24:0a:f4:27:f4:9c:16:
48:62:b7:5f:12:9c:fe:1e:5a:f9:cb:fc:56:c8:f5:50:a7:cb:
70:45:14:ce:92:34:64:14:ed:8e:e0:de:31:08:7e:12:e1:87:
e3:65:9c:78:29:dd:85:a0:d2:6f:ec:a2:11:23:5b:42:34:84:
ad:02:3b:bc:99:c7:1c:15:13:e3:71:2e:cd:14:bb:6a:6b:29:
db:8f:f5:ab:87:53:d2:d5:8f:4d:8e:2b:f0:17:45:67:a5:3f:
e3:37:ac:f9:f1:e5:fe:e1:e7:99:55:1f:b5:9a:56:11:7b:97:
fc:22:56:52:e3:fe:6d:93:e7:2b:14:95:07:33:93:ce:d2:ce:
8d:42:b2:64:7f:09:28:18:87:46:7e:6c:36:bb:78:25:4d:64:
1a:4c:28:f0:ce:ee:a0:0e:5b:50:14:59:14:35:9a:30:b6:98:
22:c6:72:d9:a5:4f:30:ab:01:fc:7a:87:24:42:2e:cb:56:4f:
b7:89:e3:56:3d:59:e8:e7:24:60:f0:ac:d2:fa:a4:bc:15:23:
bb:ec:67:e9
-----BEGIN CERTIFICATE-----
MIIFATCCA+mgAwIBAgISAZQjalTEh6Hh2WXT4obM5TqgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3NzNkYjE3Nzk1ZDJiZjFiNGI1MzQ1YzViMjkzOTBkYmFm
NDUyM2UwHhcNMjUwMTAxMTk0OTE4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNGVjMDU4NTY5YmRkZjY3MWUwMmJkM2FhNzllMDFlZWQzMjZlODZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuGR7b5oINF8y/3zuo6XgGp+rytHZ
blJ9CSI7EFqIQoqoyD/I5vYr4e0gWm0SDA0f1GurC9c1HYXStHsDWRMxyVAp3xoK
xdo1PHAx+I6sS+rJ4ouTONK52PRXQPaw+jDMhNj6dQtiEKNQQcs3u8+xF0yilwvT
Jadl0BnPkJB4kTiuZjewJGPLjv6kHuHcwXJIkS7oj3XEHKYVA96X5nI6Lo+1iJsN
SH/Yao1tJH+E9m9T3qIILScD4VYH74rbQieypMVBkerbqFgimwA+BdoRD+X1GnZ1
ZTdkqwkqKaBajS3sDXHzfwkqBUtZej63TmoM/05O5VdYx70ZE6G4NDUzRQIDAQAB
o4ICDTCCAgkwHQYDVR0OBBYEFDTsBYVpvd9nHgK9OqeeAe7TJuhuMB8GA1UdIwQY
MBaAFBdz2xd5XSvxtLU0XFspOQ269FI+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjNQYkYzbGRLX0cwdFRSY1d5azVEYnIwVWo0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC9mNzdjYmQtODkzYi00NjE2LTlkNzYt
NTQ4NjFmMjMyNDlkLzEvTk93RmhXbTkzMmNlQXIwNnA1NEI3dE1tNkc0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC9mNzdjYmQtODkzYi00NjE2LTlkNzYtNTQ4NjFmMjMyNDlk
LzEvRjNQYkYzbGRLX0cwdFRSY1d5azVEYnIwVWo0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCMGCCsGAQUFBwEHAQH/BBQwEjAQBAIAATAKAwMAkRIDAwCR
bTANBgkqhkiG9w0BAQsFAAOCAQEAaow6dWAApCMgrTAcDI3HPQ7ZIL11agyYvCKJ
lkEXgsw3t/ozqFpUIFpKqrx2i24kCvQn9JwWSGK3XxKc/h5a+cv8Vsj1UKfLcEUU
zpI0ZBTtjuDeMQh+EuGH42WceCndhaDSb+yiESNbQjSErQI7vJnHHBUT43EuzRS7
amsp24/1q4dT0tWPTY4r8BdFZ6U/4zes+fHl/uHnmVUftZpWEXuX/CJWUuP+bZPn
KxSVBzOTztLOjUKyZH8JKBiHRn5sNrt4JU1kGkwo8M7uoA5bUBRZFDWaMLaYIsZy
2aVPMKsB/HqHJEIuy1ZPt4njVj1Z6OckYPCs0vqkvBUju+xn6Q==
-----END CERTIFICATE-----
Generated at Sun Apr 6 12:04:36 2025 by rpki-client