Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/m3UhPvA-SpLG7TShQCiDyPQca9Q.roa
File: m3UhPvA-SpLG7TShQCiDyPQca9Q.roa (raw, json)
Hash identifier: vm1VA5ubKFPB0EH+5D0HkIyAqW2tfvF0amdeGl/jtcY=
Subject key identifier: 9B:75:21:3E:F0:3E:4A:92:C6:ED:34:A1:40:28:83:C8:F4:1C:6B:D4
Certificate issuer: /CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
Certificate serial: 0194236A632EE57AD8AAB4CD532FA0BDB04F
Authority key identifier: 17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/m3UhPvA-SpLG7TShQCiDyPQca9Q.roa
Signing time: Wed 01 Jan 2025 19:49:22 +0000
ROA not before: Wed 01 Jan 2025 19:49:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21286
IP address blocks: 145.15.0.0/22 maxlen: 22
145.15.90.0/24 maxlen: 24
145.15.92.0/22 maxlen: 22
145.15.96.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:63:2e:e5:7a:d8:aa:b4:cd:53:2f:a0:bd:b0:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
Validity
Not Before: Jan 1 19:49:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9b75213ef03e4a92c6ed34a1402883c8f41c6bd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:b1:e3:12:63:f2:7f:10:c6:e4:dc:fe:f3:30:
35:cc:13:3a:cd:b8:b9:39:6f:a5:89:0a:c1:f4:6d:
71:4f:ab:50:db:59:a0:22:65:7e:2b:32:1a:72:21:
a3:5a:a3:56:54:7b:79:ef:f8:59:01:3a:ae:39:04:
bf:df:47:70:7b:ad:fe:ff:9e:74:99:08:f3:24:2b:
53:2f:1c:95:aa:c8:6c:ad:2d:fa:13:a4:97:97:a6:
42:fa:ef:ac:0d:7d:67:bb:0f:55:63:88:62:a2:c2:
f7:9f:6a:0d:85:34:09:69:73:db:b7:de:ea:f5:88:
5b:0b:cc:ac:89:7a:43:51:94:c5:e7:f7:00:66:9b:
7a:01:7e:18:2b:f5:25:72:ee:58:b6:5d:4c:d6:1f:
af:bb:a4:ef:69:d5:6d:66:b8:74:5f:c7:52:8a:49:
11:ef:e2:53:37:f5:c3:2d:79:86:aa:24:52:a1:06:
d9:44:a7:15:67:4e:07:4a:4c:b0:6e:87:4f:3e:4c:
ee:fc:fb:d6:5b:f6:ed:1a:2f:e5:9f:a5:13:e5:cf:
e3:19:d2:72:58:1a:b4:d4:50:1e:8d:ef:00:83:80:
4c:67:53:c4:69:c2:c9:8f:af:c9:d8:63:79:55:3f:
e9:61:d6:8f:7b:3a:94:fb:65:71:f3:3b:e4:bf:0c:
da:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:75:21:3E:F0:3E:4A:92:C6:ED:34:A1:40:28:83:C8:F4:1C:6B:D4
X509v3 Authority Key Identifier:
keyid:17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/m3UhPvA-SpLG7TShQCiDyPQca9Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.15.0.0/22
145.15.90.0/24
145.15.92.0-145.15.99.255
Signature Algorithm: sha256WithRSAEncryption
19:f8:2b:87:66:77:04:d1:2a:1f:90:ca:df:e3:7e:c9:9c:7b:
45:c8:dc:58:6c:02:c1:96:d5:8d:ff:1a:4d:82:94:3e:7a:4f:
dd:d0:df:d2:04:76:82:8e:bc:fe:5f:f3:7f:e0:e9:76:40:14:
79:a1:35:25:39:7d:66:0e:0c:6d:39:2b:98:61:3c:29:ed:05:
16:b5:35:af:ef:48:e3:4a:a5:4b:3c:b1:14:5e:0c:df:4c:75:
98:63:44:92:60:9f:fb:74:a7:c1:cf:b2:43:ee:23:fd:cb:a9:
0b:f3:8e:27:2f:3c:3e:4e:a5:3f:ec:62:01:8d:ed:3e:3b:53:
e7:94:2f:c2:c4:02:6c:c1:30:f1:ca:f8:04:a2:cb:c5:54:2b:
13:24:87:72:d9:6c:14:85:10:fb:0e:b7:90:12:95:68:e5:0d:
de:e8:5e:5c:19:ef:90:7f:45:24:58:53:7d:79:5d:92:a6:e6:
13:26:30:46:5f:91:6b:be:40:ef:18:43:9a:82:f8:98:3b:ff:
c1:26:c1:71:08:80:a7:df:17:1b:a3:a6:b1:84:c9:a2:85:bf:
20:5a:ba:1a:de:9d:f7:15:fc:58:d4:62:0b:e9:cf:40:76:a0:
e3:68:cb:38:ef:f7:d2:61:aa:ae:49:2b:90:a7:2d:48:7c:af:
85:7b:7f:4f
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgISAZQjamMu5XrYqrTNUy+gvbBPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3NzNkYjE3Nzk1ZDJiZjFiNGI1MzQ1YzViMjkzOTBkYmFm
NDUyM2UwHhcNMjUwMTAxMTk0OTIyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5Yjc1MjEzZWYwM2U0YTkyYzZlZDM0YTE0MDI4ODNjOGY0MWM2YmQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2rHjEmPyfxDG5Nz+8zA1zBM6zbi5
OW+liQrB9G1xT6tQ21mgImV+KzIaciGjWqNWVHt57/hZATquOQS/30dwe63+/550
mQjzJCtTLxyVqshsrS36E6SXl6ZC+u+sDX1nuw9VY4hiosL3n2oNhTQJaXPbt97q
9YhbC8ysiXpDUZTF5/cAZpt6AX4YK/Ulcu5Ytl1M1h+vu6TvadVtZrh0X8dSikkR
7+JTN/XDLXmGqiRSoQbZRKcVZ04HSkywbodPPkzu/PvWW/btGi/ln6UT5c/jGdJy
WBq01FAeje8Ag4BMZ1PEacLJj6/J2GN5VT/pYdaPezqU+2Vx8zvkvwzavQIDAQAB
o4ICHTCCAhkwHQYDVR0OBBYEFJt1IT7wPkqSxu00oUAog8j0HGvUMB8GA1UdIwQY
MBaAFBdz2xd5XSvxtLU0XFspOQ269FI+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjNQYkYzbGRLX0cwdFRSY1d5azVEYnIwVWo0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC9mNzdjYmQtODkzYi00NjE2LTlkNzYt
NTQ4NjFmMjMyNDlkLzEvbTNVaFB2QS1TcExHN1RTaFFDaUR5UFFjYTlRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC9mNzdjYmQtODkzYi00NjE2LTlkNzYtNTQ4NjFmMjMyNDlk
LzEvRjNQYkYzbGRLX0cwdFRSY1d5azVEYnIwVWo0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQCkQ8AAwQA
kQ9aMAwDBAKRD1wDBAKRD2AwDQYJKoZIhvcNAQELBQADggEBABn4K4dmdwTRKh+Q
yt/jfsmce0XI3FhsAsGW1Y3/Gk2ClD56T93Q39IEdoKOvP5f83/g6XZAFHmhNSU5
fWYODG05K5hhPCntBRa1Na/vSONKpUs8sRReDN9MdZhjRJJgn/t0p8HPskPuI/3L
qQvzjicvPD5OpT/sYgGN7T47U+eUL8LEAmzBMPHK+ASiy8VUKxMkh3LZbBSFEPsO
t5ASlWjlDd7oXlwZ75B/RSRYU315XZKm5hMmMEZfkWu+QO8YQ5qC+Jg7/8EmwXEI
gKffFxujprGEyaKFvyBauhrenfcV/FjUYgvpz0B2oONoyzjv99Jhqq5JK5CnLUh8
r4V7f08=
-----END CERTIFICATE-----
Generated at Sun Apr 6 13:26:42 2025 by rpki-client