Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/ulWrN8B49xiwZPwEKCaOI8HCxCc.roa
File: ulWrN8B49xiwZPwEKCaOI8HCxCc.roa (raw, json)
Hash identifier: os2jAnx+ef3NMgf5O54Z/rj72e/tyiY1EIFsRZNeLxY=
Subject key identifier: BA:55:AB:37:C0:78:F7:18:B0:64:FC:04:28:26:8E:23:C1:C2:C4:27
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 019425FC7AE0B7E15D5FC7D07F0C12E69C50
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/ulWrN8B49xiwZPwEKCaOI8HCxCc.roa
Signing time: Thu 02 Jan 2025 07:48:11 +0000
ROA not before: Thu 02 Jan 2025 07:48:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 137409
IP address blocks: 45.139.4.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:7a:e0:b7:e1:5d:5f:c7:d0:7f:0c:12:e6:9c:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Jan 2 07:48:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ba55ab37c078f718b064fc0428268e23c1c2c427
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c6:5f:b2:9d:a7:15:20:4f:64:dd:32:26:1f:
da:dd:63:21:fd:c2:83:44:b9:aa:90:b3:5f:17:4d:
f1:29:82:6f:48:fd:32:1f:07:dc:53:12:70:95:c5:
4c:3c:89:39:7d:f4:dd:ba:84:76:5b:6e:a1:18:e8:
26:9a:ff:1d:4d:7e:d8:e7:89:50:ca:f3:bb:e4:b5:
a7:4e:ae:43:4d:cb:31:f4:02:b4:cb:f0:be:6e:7e:
da:cc:03:e9:09:32:0f:db:8d:29:0c:2b:15:84:07:
88:de:79:33:7b:f2:81:25:ec:44:17:f7:da:77:ca:
dc:c7:7f:c5:f1:94:81:7d:05:34:1c:61:bb:a6:db:
76:a7:4a:71:74:8c:a4:3a:3c:21:43:c3:6b:6c:dd:
67:c0:41:43:5f:a1:35:57:d0:98:85:8b:b6:99:70:
5e:59:08:4f:01:73:09:63:bb:c4:c1:08:0d:b1:3c:
55:9b:4d:fa:65:06:80:19:e6:b7:5e:88:26:ee:ee:
7b:26:80:e5:af:80:8e:0d:cc:59:b4:b6:f5:8d:a7:
fe:24:c8:10:8f:64:a2:5d:7c:36:97:d4:76:8a:0b:
73:20:4d:ef:18:78:57:0c:ae:29:28:68:ef:7f:eb:
70:28:31:84:26:f9:63:7d:2e:cf:89:5d:e9:f4:b8:
ae:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:55:AB:37:C0:78:F7:18:B0:64:FC:04:28:26:8E:23:C1:C2:C4:27
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/ulWrN8B49xiwZPwEKCaOI8HCxCc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.139.4.0/23
Signature Algorithm: sha256WithRSAEncryption
c1:31:2f:14:b1:68:8f:a2:06:07:06:78:b3:d9:4f:5b:08:a0:
47:ca:fb:5f:c9:8e:92:d3:10:db:71:3c:fb:23:c8:a1:2f:a7:
38:a4:a9:09:82:6e:2d:f9:c8:57:85:24:40:d3:e5:f7:ec:bc:
f6:bc:63:ca:de:bc:49:8a:61:e9:f5:71:b6:18:f8:89:0c:b6:
6b:3a:f9:51:db:9b:e9:f3:39:d2:28:e8:88:dd:35:8d:17:82:
b2:c1:ff:36:fa:84:c3:6c:99:60:12:81:57:c5:a0:60:91:62:
24:45:23:a2:80:4a:e4:34:91:bb:7a:f6:81:4d:a8:0c:02:fc:
5d:f2:21:81:98:dd:2c:a2:56:11:2a:0e:ca:c9:b9:c6:f6:02:
5c:dc:1a:2f:0f:14:5f:e5:2f:dd:38:f6:7d:e6:67:72:e7:0f:
7b:1c:3d:2a:f1:53:70:19:63:72:29:c9:5c:22:d9:3c:29:c6:
1c:74:7d:d9:f4:21:eb:49:f8:90:3d:42:1a:2d:0a:26:cf:eb:
e5:42:a5:0f:ff:7b:b3:67:26:36:e7:15:1d:aa:c6:00:e8:7e:
49:e2:67:bf:ed:40:cc:53:7a:c5:9a:f2:1d:e5:51:ca:9c:b7:
54:a5:b1:da:d5:81:49:54:f1:e2:6d:27:fb:27:07:bb:f1:3a:
d0:46:32:97
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQl/Hrgt+FdX8fQfwwS5pxQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhYzNkYWExYjE0ODUwZjJlNjFjNTkyYjIxOTE5MTVhNWU2
NWE0NzgwHhcNMjUwMTAyMDc0ODExWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYTU1YWIzN2MwNzhmNzE4YjA2NGZjMDQyODI2OGUyM2MxYzJjNDI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn8Zfsp2nFSBPZN0yJh/a3WMh/cKD
RLmqkLNfF03xKYJvSP0yHwfcUxJwlcVMPIk5ffTduoR2W26hGOgmmv8dTX7Y54lQ
yvO75LWnTq5DTcsx9AK0y/C+bn7azAPpCTIP240pDCsVhAeI3nkze/KBJexEF/fa
d8rcx3/F8ZSBfQU0HGG7ptt2p0pxdIykOjwhQ8NrbN1nwEFDX6E1V9CYhYu2mXBe
WQhPAXMJY7vEwQgNsTxVm036ZQaAGea3Xogm7u57JoDlr4CODcxZtLb1jaf+JMgQ
j2SiXXw2l9R2igtzIE3vGHhXDK4pKGjvf+twKDGEJvljfS7PiV3p9LiuxQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLpVqzfAePcYsGT8BCgmjiPBwsQnMB8GA1UdIwQY
MBaAFCrD2qGxSFDy5hxZKyGRkVpeZaR4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3NQYW9iRklVUExtSEZrcklaR1JXbDVscEhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC80MDViYmQtNTkxMy00ZTk1LThlNzUt
ZmUwNjU5MTc2YTU2LzEvdWxXck44QjQ5eGl3WlB3RUtDYU9JOEhDeENjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC80MDViYmQtNTkxMy00ZTk1LThlNzUtZmUwNjU5MTc2YTU2
LzEvS3NQYW9iRklVUExtSEZrcklaR1JXbDVscEhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLYsEMA0G
CSqGSIb3DQEBCwUAA4IBAQDBMS8UsWiPogYHBniz2U9bCKBHyvtfyY6S0xDbcTz7
I8ihL6c4pKkJgm4t+chXhSRA0+X37Lz2vGPK3rxJimHp9XG2GPiJDLZrOvlR25vp
8znSKOiI3TWNF4Kywf82+oTDbJlgEoFXxaBgkWIkRSOigErkNJG7evaBTagMAvxd
8iGBmN0solYRKg7KybnG9gJc3BovDxRf5S/dOPZ95mdy5w97HD0q8VNwGWNyKclc
Itk8KcYcdH3Z9CHrSfiQPUIaLQomz+vlQqUP/3uzZyY25xUdqsYA6H5J4me/7UDM
U3rFmvId5VHKnLdUpbHa1YFJVPHibSf7Jwe78TrQRjKX
-----END CERTIFICATE-----
Generated at Tue Apr 8 16:45:55 2025 by rpki-client