Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/ziFeWtyl-a2xVwNuAduBHpaGzaY.roa
File: ziFeWtyl-a2xVwNuAduBHpaGzaY.roa (raw, json)
Hash identifier: WaR/w6ceA+XLR6uvK92LvgWyOC5O5lrjdns/Om4/A/M=
Subject key identifier: CE:21:5E:5A:DC:A5:F9:AD:B1:57:03:6E:01:DB:81:1E:96:86:CD:A6
Certificate issuer: /CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
Certificate serial: 0195A8CB98005A213CC1736FDF7735BF5CA7
Authority key identifier: 17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/ziFeWtyl-a2xVwNuAduBHpaGzaY.roa
Signing time: Tue 18 Mar 2025 10:27:49 +0000
ROA not before: Tue 18 Mar 2025 10:27:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 1136
IP address blocks: 145.4.224.0/20 maxlen: 20
145.15.108.0/22 maxlen: 22
145.15.108.0/24 maxlen: 24
145.15.109.0/24 maxlen: 24
145.15.110.0/24 maxlen: 24
145.15.111.0/24 maxlen: 24
145.15.114.0/24 maxlen: 24
145.15.115.0/24 maxlen: 24
145.15.208.0/21 maxlen: 21
145.78.0.0/16 maxlen: 16
145.119.0.0/18 maxlen: 21
145.119.64.0/18 maxlen: 18
145.119.64.0/19 maxlen: 19
145.119.128.0/18 maxlen: 18
145.119.160.0/19 maxlen: 19
145.119.192.0/18 maxlen: 21
145.119.199.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:a8:cb:98:00:5a:21:3c:c1:73:6f:df:77:35:bf:5c:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
Validity
Not Before: Mar 18 10:27:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ce215e5adca5f9adb157036e01db811e9686cda6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:6e:7d:96:5f:87:c7:7d:c1:36:a8:49:7f:39:
43:9a:39:06:7b:f7:96:f2:01:f1:69:8a:0a:c8:f9:
6b:c4:62:ee:59:3c:63:14:a7:ab:34:e3:d2:c5:70:
e8:d9:f7:7f:e2:c7:a6:da:af:bb:c3:c6:ff:ba:6d:
36:a5:5d:63:66:f2:2c:86:cf:77:2b:e4:6c:70:92:
c9:58:bb:9f:49:68:46:22:ec:13:51:50:17:de:29:
41:dd:f2:f5:d2:9d:94:45:9e:a0:71:d9:00:c6:08:
c6:65:8a:2a:39:9a:27:a4:13:fb:8e:2c:c6:2b:cc:
cb:f7:b0:b4:b4:da:1e:eb:9b:cb:2d:d2:ea:8b:8d:
2f:6d:7f:ab:ca:9e:b6:45:5c:62:2d:b9:32:3e:85:
a8:60:e6:30:9b:f5:3f:a3:48:de:59:58:0b:de:c9:
74:1f:46:c2:8e:40:be:ed:71:9c:ac:7c:61:5a:e2:
c4:39:2d:01:d2:e4:6e:ea:6f:89:f6:95:1d:2d:27:
5a:bb:83:26:16:f3:9b:2c:7e:55:d1:ba:cd:79:9b:
d7:50:3f:61:70:10:58:c5:1f:d9:e7:4c:66:35:76:
c2:ea:43:e0:ab:a4:02:3b:c2:87:c9:13:51:e1:0f:
5a:a3:1a:0c:6d:28:b4:ca:cd:3e:fe:0e:12:6f:69:
08:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:21:5E:5A:DC:A5:F9:AD:B1:57:03:6E:01:DB:81:1E:96:86:CD:A6
X509v3 Authority Key Identifier:
keyid:17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/ziFeWtyl-a2xVwNuAduBHpaGzaY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.4.224.0/20
145.15.108.0/22
145.15.114.0/23
145.15.208.0/21
145.78.0.0/16
145.119.0.0/16
Signature Algorithm: sha256WithRSAEncryption
91:c3:9a:1f:15:0e:bf:a6:bf:a5:cf:cb:6a:ed:91:cf:f6:3b:
dd:56:bf:c5:b2:0f:8c:b1:95:05:8a:4e:5d:e2:ee:3c:2d:d3:
ab:e2:75:f5:b5:ed:5a:95:52:34:37:32:39:d1:9f:41:0e:e9:
fa:0a:83:2f:72:13:94:7f:ad:8d:76:83:f1:52:29:3d:d3:e3:
e2:c4:3d:2d:70:9d:03:eb:18:c3:20:66:d7:0b:13:42:bc:98:
01:92:0a:b6:27:18:6c:f6:a2:47:ad:8d:a0:9f:fd:c1:1c:3d:
27:b7:72:e9:c3:be:63:49:9e:0f:0b:f7:62:46:b3:a1:cf:18:
19:28:de:8f:84:2a:7c:89:0b:76:6f:1c:6a:8e:8a:b9:44:9d:
7f:5d:21:17:37:fa:62:7e:c1:88:57:ab:5a:e0:90:0e:20:fa:
93:38:80:0f:2c:4e:38:cd:ac:d9:50:dc:f4:55:40:d3:20:a4:
00:6f:dd:b8:6d:9e:01:f2:f1:84:9d:f0:62:e3:3b:89:64:80:
a1:4e:f9:27:98:77:0a:c9:04:9c:e3:1b:ff:d1:a0:30:a7:ab:
05:ff:8c:ad:f6:10:96:47:c5:5d:14:37:b5:46:68:3c:67:7e:
a1:7a:0b:27:a7:49:41:64:f5:53:eb:cf:fe:49:cf:83:29:78:
53:c3:15:01
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZWoy5gAWiE8wXNv33c1v1ynMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3NzNkYjE3Nzk1ZDJiZjFiNGI1MzQ1YzViMjkzOTBkYmFm
NDUyM2UwHhcNMjUwMzE4MTAyNzQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZTIxNWU1YWRjYTVmOWFkYjE1NzAzNmUwMWRiODExZTk2ODZjZGE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsG59ll+Hx33BNqhJfzlDmjkGe/eW
8gHxaYoKyPlrxGLuWTxjFKerNOPSxXDo2fd/4sem2q+7w8b/um02pV1jZvIshs93
K+RscJLJWLufSWhGIuwTUVAX3ilB3fL10p2URZ6gcdkAxgjGZYoqOZonpBP7jizG
K8zL97C0tNoe65vLLdLqi40vbX+ryp62RVxiLbkyPoWoYOYwm/U/o0jeWVgL3sl0
H0bCjkC+7XGcrHxhWuLEOS0B0uRu6m+J9pUdLSdau4MmFvObLH5V0brNeZvXUD9h
cBBYxR/Z50xmNXbC6kPgq6QCO8KHyRNR4Q9aoxoMbSi0ys0+/g4Sb2kI2QIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFM4hXlrcpfmtsVcDbgHbgR6Whs2mMB8GA1UdIwQY
MBaAFBdz2xd5XSvxtLU0XFspOQ269FI+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjNQYkYzbGRLX0cwdFRSY1d5azVEYnIwVWo0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC9mNzdjYmQtODkzYi00NjE2LTlkNzYt
NTQ4NjFmMjMyNDlkLzEvemlGZVd0eWwtYTJ4VndOdUFkdUJIcGFHemFZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC9mNzdjYmQtODkzYi00NjE2LTlkNzYtNTQ4NjFmMjMyNDlk
LzEvRjNQYkYzbGRLX0cwdFRSY1d5azVEYnIwVWo0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEHAQH/BCwwKjAoBAIAATAiAwQEkQTgAwQC
kQ9sAwQBkQ9yAwQDkQ/QAwMAkU4DAwCRdzANBgkqhkiG9w0BAQsFAAOCAQEAkcOa
HxUOv6a/pc/Lau2Rz/Y73Va/xbIPjLGVBYpOXeLuPC3Tq+J19bXtWpVSNDcyOdGf
QQ7p+gqDL3ITlH+tjXaD8VIpPdPj4sQ9LXCdA+sYwyBm1wsTQryYAZIKticYbPai
R62NoJ/9wRw9J7dy6cO+Y0meDwv3Ykazoc8YGSjej4QqfIkLdm8cao6KuUSdf10h
Fzf6Yn7BiFerWuCQDiD6kziADyxOOM2s2VDc9FVA0yCkAG/duG2eAfLxhJ3wYuM7
iWSAoU75J5h3CskEnOMb/9GgMKerBf+MrfYQlkfFXRQ3tUZoPGd+oXoLJ6dJQWT1
U+vP/knPgyl4U8MVAQ==
-----END CERTIFICATE-----
Generated at Sun Apr 6 15:08:24 2025 by rpki-client