Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/eadbf8-8e44-4271-a72b-0c756fd248c8/1/12rya0l1zqiGDsgVr3BaNVg8A1U.roa
File: 12rya0l1zqiGDsgVr3BaNVg8A1U.roa (raw, json)
Hash identifier: 9cXUc9FTUrRc0Qlf2tURL77aslIv0rhANBJM6PWpVX4=
Subject key identifier: D7:6A:F2:6B:49:75:CE:A8:86:0E:C8:15:AF:70:5A:35:58:3C:03:55
Certificate issuer: /CN=ee28d94d484033f77e6f9381a02da3e242167dae
Certificate serial: 019590A41FC74C24A9AE0F178517B951DAB7
Authority key identifier: EE:28:D9:4D:48:40:33:F7:7E:6F:93:81:A0:2D:A3:E2:42:16:7D:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7ijZTUhAM_d-b5OBoC2j4kIWfa4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/eadbf8-8e44-4271-a72b-0c756fd248c8/1/12rya0l1zqiGDsgVr3BaNVg8A1U.roa
Signing time: Thu 13 Mar 2025 17:53:49 +0000
ROA not before: Thu 13 Mar 2025 17:53:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 36352
IP address blocks: 45.156.116.0/24 maxlen: 24
45.156.117.0/24 maxlen: 24
45.156.118.0/24 maxlen: 24
45.156.119.0/24 maxlen: 24
91.228.168.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:90:a4:1f:c7:4c:24:a9:ae:0f:17:85:17:b9:51:da:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee28d94d484033f77e6f9381a02da3e242167dae
Validity
Not Before: Mar 13 17:53:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d76af26b4975cea8860ec815af705a35583c0355
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:42:4a:ab:be:28:e0:9b:de:bb:f5:39:81:01:
b6:58:10:bc:ee:4a:2f:39:8d:97:67:69:74:9e:e2:
27:cf:0b:2d:14:42:bf:10:64:06:50:5f:8a:43:1b:
8a:05:69:30:d6:0d:05:c6:87:6b:02:19:bc:a6:24:
f4:ee:1a:de:95:ce:fc:90:7c:dc:31:35:b4:58:15:
89:97:42:4c:49:fc:d9:c2:7a:6c:1c:07:7e:ae:f7:
7c:d6:65:26:36:44:5b:e7:e4:96:63:52:a7:1e:37:
6f:14:bc:b5:15:ec:1b:3c:a2:fa:ff:70:e1:a9:7a:
82:5f:fe:6f:fb:4c:e0:d6:2d:ae:16:40:5f:de:66:
7f:72:1f:68:2d:fb:10:a4:94:86:48:c1:6b:9e:3c:
38:5b:75:ed:9a:4d:2f:69:34:57:73:54:e7:5c:d0:
43:13:13:63:24:e9:09:f7:1d:39:52:85:4a:d1:2d:
e0:6a:51:d2:01:9a:33:0b:11:aa:ab:f8:96:61:c0:
fa:3e:6f:c5:ae:65:e0:16:cc:e3:0b:ae:67:6b:3c:
94:1a:52:06:d8:78:c1:d1:e1:89:cc:07:cb:64:a8:
07:ab:a0:0e:b0:67:f3:71:67:2d:d4:0f:00:a2:ed:
6a:74:a9:4a:2b:87:67:16:fc:37:86:15:ce:d5:4b:
9a:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:6A:F2:6B:49:75:CE:A8:86:0E:C8:15:AF:70:5A:35:58:3C:03:55
X509v3 Authority Key Identifier:
keyid:EE:28:D9:4D:48:40:33:F7:7E:6F:93:81:A0:2D:A3:E2:42:16:7D:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7ijZTUhAM_d-b5OBoC2j4kIWfa4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/eadbf8-8e44-4271-a72b-0c756fd248c8/1/12rya0l1zqiGDsgVr3BaNVg8A1U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/eadbf8-8e44-4271-a72b-0c756fd248c8/1/7ijZTUhAM_d-b5OBoC2j4kIWfa4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.156.116.0/22
91.228.168.0/24
Signature Algorithm: sha256WithRSAEncryption
83:53:6b:27:7c:d8:a3:0b:37:75:b6:b1:74:ec:51:0b:bb:67:
e7:99:a7:52:ee:a7:cf:b7:e8:4e:e0:9a:08:ba:4c:95:a6:bd:
6a:a5:d6:13:eb:ce:56:02:5a:19:b5:f6:fa:de:44:b3:7c:57:
e4:9b:05:92:76:b3:de:17:7f:aa:71:7c:f1:c7:60:ce:0c:5a:
48:c8:8d:e1:ac:30:46:07:e5:95:1c:0a:b4:33:f6:32:87:68:
4f:51:0f:27:11:54:f5:c0:73:6c:05:c6:4f:a8:12:fa:7c:77:
f1:bc:a3:b3:c7:7f:da:b1:6e:84:e8:44:8d:b0:06:fa:e8:69:
49:4a:a8:65:78:61:48:fd:74:24:6e:54:3d:21:15:d2:7a:1d:
23:cc:7b:25:87:5f:97:39:83:87:ac:4a:e6:83:09:46:a7:a0:
32:ad:d4:92:41:c9:1e:1a:0f:8b:ab:ae:68:f2:54:2e:21:46:
7f:56:9b:2a:1a:d7:aa:cd:9d:17:06:75:df:36:ba:cb:02:b9:
6a:51:f3:5b:3e:15:df:48:25:15:8e:63:d0:2b:25:a2:31:1d:
b6:d8:eb:82:8b:9f:38:9e:88:e5:0b:b3:3a:78:36:db:4f:ec:
bf:53:ca:f1:fa:ff:9b:13:f7:0c:3f:62:af:d9:21:d7:ce:7f:
05:6f:04:95
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZWQpB/HTCSprg8XhRe5Udq3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlMjhkOTRkNDg0MDMzZjc3ZTZmOTM4MWEwMmRhM2UyNDIx
NjdkYWUwHhcNMjUwMzEzMTc1MzQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNzZhZjI2YjQ5NzVjZWE4ODYwZWM4MTVhZjcwNWEzNTU4M2MwMzU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsUJKq74o4Jveu/U5gQG2WBC87kov
OY2XZ2l0nuInzwstFEK/EGQGUF+KQxuKBWkw1g0FxodrAhm8piT07hrelc78kHzc
MTW0WBWJl0JMSfzZwnpsHAd+rvd81mUmNkRb5+SWY1KnHjdvFLy1FewbPKL6/3Dh
qXqCX/5v+0zg1i2uFkBf3mZ/ch9oLfsQpJSGSMFrnjw4W3Xtmk0vaTRXc1TnXNBD
ExNjJOkJ9x05UoVK0S3galHSAZozCxGqq/iWYcD6Pm/FrmXgFszjC65nazyUGlIG
2HjB0eGJzAfLZKgHq6AOsGfzcWct1A8Aou1qdKlKK4dnFvw3hhXO1Uua1wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFNdq8mtJdc6ohg7IFa9wWjVYPANVMB8GA1UdIwQY
MBaAFO4o2U1IQDP3fm+TgaAto+JCFn2uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2lqWlRVaEFNX2QtYjVPQm9DMmo0a0lXZmE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC9lYWRiZjgtOGU0NC00MjcxLWE3MmIt
MGM3NTZmZDI0OGM4LzEvMTJyeWEwbDF6cWlHRHNnVnIzQmFOVmc4QTFVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC9lYWRiZjgtOGU0NC00MjcxLWE3MmItMGM3NTZmZDI0OGM4
LzEvN2lqWlRVaEFNX2QtYjVPQm9DMmo0a0lXZmE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCLZx0AwQA
W+SoMA0GCSqGSIb3DQEBCwUAA4IBAQCDU2snfNijCzd1trF07FELu2fnmadS7qfP
t+hO4JoIukyVpr1qpdYT685WAloZtfb63kSzfFfkmwWSdrPeF3+qcXzxx2DODFpI
yI3hrDBGB+WVHAq0M/Yyh2hPUQ8nEVT1wHNsBcZPqBL6fHfxvKOzx3/asW6E6ESN
sAb66GlJSqhleGFI/XQkblQ9IRXSeh0jzHslh1+XOYOHrErmgwlGp6AyrdSSQcke
Gg+Lq65o8lQuIUZ/VpsqGteqzZ0XBnXfNrrLArlqUfNbPhXfSCUVjmPQKyWiMR22
2OuCi584nojlC7M6eDbbT+y/U8rx+v+bE/cMP2Kv2SHXzn8FbwSV
-----END CERTIFICATE-----
Generated at Sat Apr 5 10:27:54 2025 by rpki-client