Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/346a23-1181-4a80-9f55-dd7d47cf5c18/1/ijYRlmNl6uA744Qux7JZwJCActg.roa
File: ijYRlmNl6uA744Qux7JZwJCActg.roa (raw, json)
Hash identifier: pRc6ysDWq8mR6b4C/2Dfn02VAUo5UWjYvCBDj+PrKhE=
Subject key identifier: 8A:36:11:96:63:65:EA:E0:3B:E3:84:2E:C7:B2:59:C0:90:80:72:D8
Certificate issuer: /CN=c4add5ba7662b731dd08bcf8738f135d93aed451
Certificate serial: 019428214BC94385EC2F6A330D6668C0D783
Authority key identifier: C4:AD:D5:BA:76:62:B7:31:DD:08:BC:F8:73:8F:13:5D:93:AE:D4:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xK3VunZitzHdCLz4c48TXZOu1FE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/346a23-1181-4a80-9f55-dd7d47cf5c18/1/ijYRlmNl6uA744Qux7JZwJCActg.roa
Signing time: Thu 02 Jan 2025 17:47:38 +0000
ROA not before: Thu 02 Jan 2025 17:47:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 45.149.108.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:21:4b:c9:43:85:ec:2f:6a:33:0d:66:68:c0:d7:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4add5ba7662b731dd08bcf8738f135d93aed451
Validity
Not Before: Jan 2 17:47:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8a3611966365eae03be3842ec7b259c0908072d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:cb:8a:6b:7a:4c:27:86:d3:7d:6f:d8:4e:a3:
4e:26:30:3a:e2:e3:c0:8f:16:8b:fa:11:0e:5f:5e:
c1:67:3f:02:8a:b4:cb:cb:c2:b2:7d:4b:a0:e3:44:
dc:d6:78:30:f3:9b:5e:c3:66:1e:d4:ea:de:d8:d3:
2e:02:96:ff:19:65:40:c2:e0:eb:87:d3:8d:b7:d8:
a6:32:2d:a3:cc:80:31:ee:b7:63:19:5e:3a:08:73:
ce:c5:f1:ed:6e:8a:31:d3:32:b4:97:bd:a3:db:11:
0f:6c:b8:59:13:b3:b0:cf:2c:8a:13:48:3c:5d:34:
7d:7d:0b:80:e4:e8:d8:24:ce:7f:39:9b:6c:3a:e3:
90:e4:f2:e2:8e:a2:0e:e0:c4:d8:72:0f:17:52:5c:
71:72:28:88:cc:f3:b7:34:5a:22:42:6f:f8:dd:43:
ea:d7:4f:a6:c4:4b:74:36:ce:f3:e1:32:71:01:bd:
9d:e0:2f:b1:13:68:23:9e:77:d4:5f:24:12:16:e5:
8f:10:4b:9f:eb:2b:2d:bc:db:2f:50:5b:45:97:c9:
0d:fe:de:4d:e3:be:6c:e9:c0:19:27:eb:47:00:90:
0b:34:6d:0b:bd:16:f3:3d:64:94:06:2f:07:5f:ac:
8e:02:1b:e4:40:2c:94:b0:f6:94:44:73:d6:39:f6:
d7:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:36:11:96:63:65:EA:E0:3B:E3:84:2E:C7:B2:59:C0:90:80:72:D8
X509v3 Authority Key Identifier:
keyid:C4:AD:D5:BA:76:62:B7:31:DD:08:BC:F8:73:8F:13:5D:93:AE:D4:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xK3VunZitzHdCLz4c48TXZOu1FE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/346a23-1181-4a80-9f55-dd7d47cf5c18/1/ijYRlmNl6uA744Qux7JZwJCActg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/346a23-1181-4a80-9f55-dd7d47cf5c18/1/xK3VunZitzHdCLz4c48TXZOu1FE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.108.0/22
Signature Algorithm: sha256WithRSAEncryption
2a:1e:bd:8e:99:c3:c5:de:d7:10:30:a2:21:52:20:94:b0:72:
af:53:c7:8e:a2:a1:a0:b4:dc:d3:41:01:85:62:76:71:d0:2e:
e4:4d:c9:5b:a5:ba:69:d8:72:57:0d:6a:0c:8c:c9:2b:e7:05:
11:a7:c2:c9:13:c6:a7:f8:e8:02:65:6e:4a:62:62:27:74:05:
16:46:14:84:d5:68:71:a3:b5:22:3b:52:1e:d5:6d:e3:f7:6f:
e4:94:df:06:88:40:9c:2a:d2:db:59:9f:b5:dc:44:a3:37:a0:
f9:40:4c:27:84:46:bd:9e:8d:6a:13:f5:94:31:fb:8c:99:12:
b0:59:7b:30:d1:1d:ff:95:f1:16:df:78:b0:ee:2a:9b:af:25:
b0:62:c5:88:d1:b4:ae:25:1a:c5:fd:ca:14:a2:32:87:1c:57:
e2:1b:b9:21:c1:0f:68:64:57:88:77:32:b1:76:89:64:cf:44:
1b:b4:34:6f:d7:55:ec:3c:e4:ed:bc:6b:84:0a:f0:db:6b:b5:
17:90:e5:9d:06:3f:03:f3:8a:9a:09:86:37:ca:e6:e0:65:d7:
08:d7:a2:4e:0c:52:f5:e4:f3:07:f1:27:cc:92:ca:92:bc:68:
08:cc:f8:5c:52:f9:86:71:4c:31:56:78:b7:61:6f:d6:19:71:
69:60:5f:54
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQoIUvJQ4XsL2ozDWZowNeDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0YWRkNWJhNzY2MmI3MzFkZDA4YmNmODczOGYxMzVkOTNh
ZWQ0NTEwHhcNMjUwMTAyMTc0NzM4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YTM2MTE5NjYzNjVlYWUwM2JlMzg0MmVjN2IyNTljMDkwODA3MmQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6MuKa3pMJ4bTfW/YTqNOJjA64uPA
jxaL+hEOX17BZz8CirTLy8KyfUug40Tc1ngw85tew2Ye1Ore2NMuApb/GWVAwuDr
h9ONt9imMi2jzIAx7rdjGV46CHPOxfHtboox0zK0l72j2xEPbLhZE7OwzyyKE0g8
XTR9fQuA5OjYJM5/OZtsOuOQ5PLijqIO4MTYcg8XUlxxciiIzPO3NFoiQm/43UPq
10+mxEt0Ns7z4TJxAb2d4C+xE2gjnnfUXyQSFuWPEEuf6ystvNsvUFtFl8kN/t5N
475s6cAZJ+tHAJALNG0LvRbzPWSUBi8HX6yOAhvkQCyUsPaURHPWOfbXrwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIo2EZZjZergO+OELseyWcCQgHLYMB8GA1UdIwQY
MBaAFMSt1bp2Yrcx3Qi8+HOPE12TrtRRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveEszVnVuWml0ekhkQ0x6NGM0OFRYWk91MUZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS8zNDZhMjMtMTE4MS00YTgwLTlmNTUt
ZGQ3ZDQ3Y2Y1YzE4LzEvaWpZUmxtTmw2dUE3NDRRdXg3Slp3SkNBY3RnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS8zNDZhMjMtMTE4MS00YTgwLTlmNTUtZGQ3ZDQ3Y2Y1YzE4
LzEveEszVnVuWml0ekhkQ0x6NGM0OFRYWk91MUZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLZVsMA0G
CSqGSIb3DQEBCwUAA4IBAQAqHr2OmcPF3tcQMKIhUiCUsHKvU8eOoqGgtNzTQQGF
YnZx0C7kTclbpbpp2HJXDWoMjMkr5wURp8LJE8an+OgCZW5KYmIndAUWRhSE1Whx
o7UiO1Ie1W3j92/klN8GiECcKtLbWZ+13ESjN6D5QEwnhEa9no1qE/WUMfuMmRKw
WXsw0R3/lfEW33iw7iqbryWwYsWI0bSuJRrF/coUojKHHFfiG7khwQ9oZFeIdzKx
dolkz0QbtDRv11XsPOTtvGuECvDba7UXkOWdBj8D84qaCYY3yubgZdcI16JODFL1
5PMH8SfMksqSvGgIzPhcUvmGcUwxVni3YW/WGXFpYF9U
-----END CERTIFICATE-----
Generated at Thu Feb 20 03:11:54 2025 by rpki-client