Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/1-6x9jHZ3cw39179HQd4O3fAvnpk.roa
File: 1-6x9jHZ3cw39179HQd4O3fAvnpk.roa (raw, json)
Hash identifier: PgXhvVg0YUToc07oyC3isPahNyz6852StHcO0CF7qN8=
Subject key identifier: FB:AC:7D:8C:76:77:73:0D:FD:D7:BF:47:41:DE:0E:DD:F0:2F:9E:99
Certificate issuer: /CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9
Certificate serial: 01942521B5F3BFCD08256EEBA9123FF865D0
Authority key identifier: 1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/1-6x9jHZ3cw39179HQd4O3fAvnpk.roa
Signing time: Thu 02 Jan 2025 03:49:13 +0000
ROA not before: Thu 02 Jan 2025 03:49:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 967
IP address blocks: 45.10.68.0/24 maxlen: 24
91.216.169.0/24 maxlen: 24
91.216.190.0/24 maxlen: 24
91.217.135.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:b5:f3:bf:cd:08:25:6e:eb:a9:12:3f:f8:65:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9
Validity
Not Before: Jan 2 03:49:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fbac7d8c7677730dfdd7bf4741de0eddf02f9e99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:90:00:fa:09:14:8f:97:85:40:f0:cd:d6:12:
a4:68:b5:d5:2d:60:db:a2:23:10:f4:f9:db:12:f1:
4c:4a:78:52:3c:bd:fd:b3:5b:0d:23:ea:9e:2d:38:
a8:cd:e0:d8:00:74:1f:0a:71:3d:ec:50:f3:cc:56:
67:c3:a7:44:1a:90:46:3d:ab:8b:6b:4b:59:ef:10:
fa:25:48:08:d9:96:e5:52:1f:48:e2:ce:0e:14:b1:
4b:98:cd:6b:41:42:b1:d5:3c:cd:d8:a4:c4:56:ff:
06:6e:98:20:d0:31:74:34:e1:74:b2:76:35:77:c8:
7b:3e:4c:4d:8a:d1:53:94:48:88:d2:42:48:fc:7b:
e3:10:40:2c:3a:f6:85:00:02:87:6a:88:a0:29:12:
12:61:b7:f8:dc:cb:70:01:e3:30:e3:9c:97:fc:e2:
14:cd:c6:38:e8:a5:3c:f9:84:24:7e:3f:c6:96:7b:
ab:ca:9e:f8:bd:bb:bb:6e:6e:24:1b:8a:af:c6:8e:
01:de:cf:9c:eb:08:16:ec:fc:f5:0d:30:9c:7d:d0:
0a:2b:ad:83:40:72:b1:5a:39:f2:10:ed:c5:f7:4c:
3a:92:11:1b:40:84:6c:95:fe:14:71:10:e3:00:bc:
b2:a0:98:30:21:ff:be:d0:e4:7b:46:a5:2b:ae:38:
8f:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:AC:7D:8C:76:77:73:0D:FD:D7:BF:47:41:DE:0E:DD:F0:2F:9E:99
X509v3 Authority Key Identifier:
keyid:1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/1-6x9jHZ3cw39179HQd4O3fAvnpk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.10.68.0/24
91.216.169.0/24
91.216.190.0/24
91.217.135.0/24
Signature Algorithm: sha256WithRSAEncryption
82:56:43:56:2b:80:10:ca:ae:fc:5c:ad:79:44:24:ae:32:29:
54:d5:9c:70:ef:97:d4:bd:7b:66:a6:cb:f6:5c:68:88:27:f8:
84:78:82:1c:06:09:a1:18:a4:52:7b:45:67:11:9a:7d:07:2b:
bf:bb:25:db:53:82:ca:bc:f7:19:84:6d:bd:be:f0:29:43:3b:
5c:21:5e:4b:4f:aa:45:5d:bd:37:c5:9a:e5:dd:8b:a3:1c:cf:
94:05:14:2f:5e:5c:4b:39:95:e7:d7:23:d3:37:bd:85:3f:9f:
43:ff:5d:2c:f5:bb:27:8d:47:4f:2f:73:14:41:b9:53:cf:54:
c5:a0:2d:46:ee:89:9d:e7:82:a8:51:93:d0:ce:c8:c4:e9:af:
7a:08:d9:d1:52:9c:e9:c5:bf:d3:19:4e:06:b5:dc:16:7e:76:
39:56:16:9d:a8:30:49:5d:85:17:58:35:16:66:a2:99:c5:29:
af:e9:bc:ba:77:40:ca:6c:f5:d1:76:b4:83:ef:7f:f8:44:2c:
b0:8a:7a:61:d2:9a:68:5c:33:74:04:5e:c9:11:27:3c:63:72:
d1:25:ba:00:fd:e9:cd:d1:b4:7e:84:af:82:b3:16:05:3e:8e:
86:02:cd:55:14:df:a2:84:28:8c:bd:9d:22:c0:2e:4f:95:79:
96:26:07:b9
-----BEGIN CERTIFICATE-----
MIIFEDCCA/igAwIBAgISAZQlIbXzv80IJW7rqRI/+GXQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmNDczODM4OWNiM2I5OThlYzRmYTZkNDI3MmY4ZGQ3OTlm
YmM0YTkwHhcNMjUwMTAyMDM0OTEzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYmFjN2Q4Yzc2Nzc3MzBkZmRkN2JmNDc0MWRlMGVkZGYwMmY5ZTk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzZAA+gkUj5eFQPDN1hKkaLXVLWDb
oiMQ9PnbEvFMSnhSPL39s1sNI+qeLTiozeDYAHQfCnE97FDzzFZnw6dEGpBGPauL
a0tZ7xD6JUgI2ZblUh9I4s4OFLFLmM1rQUKx1TzN2KTEVv8Gbpgg0DF0NOF0snY1
d8h7PkxNitFTlEiI0kJI/HvjEEAsOvaFAAKHaoigKRISYbf43MtwAeMw45yX/OIU
zcY46KU8+YQkfj/Glnuryp74vbu7bm4kG4qvxo4B3s+c6wgW7Pz1DTCcfdAKK62D
QHKxWjnyEO3F90w6khEbQIRslf4UcRDjALyyoJgwIf++0OR7RqUrrjiPPwIDAQAB
o4ICHDCCAhgwHQYDVR0OBBYEFPusfYx2d3MN/de/R0HeDt3wL56ZMB8GA1UdIwQY
MBaAFB9HODics7mY7E+m1CcvjdeZ+8SpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSDBjNE9KeXp1WmpzVDZiVUp5LU4xNW43eEtrLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS81MTc2OTQtYzhhMS00NThiLTljZjIt
NmM3ZTU2ODU4OTBjLzEvMS02eDlqSFozY3czOTE3OUhRZDRPM2ZBdm5way5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNzUvNTE3Njk0LWM4YTEtNDU4Yi05Y2YyLTZjN2U1Njg1ODkw
Yy8xL0gwYzRPSnl6dVpqc1Q2YlVKeS1OMTVuN3hLay5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAxBggrBgEFBQcBBwEB/wQiMCAwHgQCAAEwGAMEAC0KRAME
AFvYqQMEAFvYvgMEAFvZhzANBgkqhkiG9w0BAQsFAAOCAQEAglZDViuAEMqu/Fyt
eUQkrjIpVNWccO+X1L17ZqbL9lxoiCf4hHiCHAYJoRikUntFZxGafQcrv7sl21OC
yrz3GYRtvb7wKUM7XCFeS0+qRV29N8Wa5d2LoxzPlAUUL15cSzmV59cj0ze9hT+f
Q/9dLPW7J41HTy9zFEG5U89UxaAtRu6JneeCqFGT0M7IxOmvegjZ0VKc6cW/0xlO
BrXcFn52OVYWnagwSV2FF1g1FmaimcUpr+m8undAymz10Xa0g+9/+EQssIp6YdKa
aFwzdAReyREnPGNy0SW6AP3pzdG0foSvgrMWBT6OhgLNVRTfooQojL2dIsAuT5V5
liYHuQ==
-----END CERTIFICATE-----
Generated at Sun Apr 6 11:05:53 2025 by rpki-client