Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/Y_OSDC6dL3ulSXKnvsPirDmWLjs.roa
File: Y_OSDC6dL3ulSXKnvsPirDmWLjs.roa (raw, json)
Hash identifier: 7jGs4dXZrBEuSabyxgox1cRSvog6w9MoX5oXwT67HCo=
Subject key identifier: 63:F3:92:0C:2E:9D:2F:7B:A5:49:72:A7:BE:C3:E2:AC:39:96:2E:3B
Certificate issuer: /CN=3718b734349bf327d9453b96501e44b192e55142
Certificate serial: 019395C6BD6A1285B3C42B70D2A6AC0487E7
Authority key identifier: 37:18:B7:34:34:9B:F3:27:D9:45:3B:96:50:1E:44:B1:92:E5:51:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/Y_OSDC6dL3ulSXKnvsPirDmWLjs.roa
Signing time: Thu 05 Dec 2024 07:44:09 +0000
ROA not before: Thu 05 Dec 2024 07:44:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214143
IP address blocks: 45.132.27.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:95:c6:bd:6a:12:85:b3:c4:2b:70:d2:a6:ac:04:87:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3718b734349bf327d9453b96501e44b192e55142
Validity
Not Before: Dec 5 07:44:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=63f3920c2e9d2f7ba54972a7bec3e2ac39962e3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b1:72:e2:fa:0f:64:ab:db:ae:91:4a:1a:08:
22:1a:cf:5d:b0:ee:c1:a0:2b:c0:f8:bf:fa:e6:20:
a3:67:d8:8e:05:39:1e:56:3f:9f:4a:06:e5:df:3a:
b0:45:40:cf:7e:b7:5e:63:22:67:58:c9:79:2e:8a:
2b:48:31:4e:4e:17:83:aa:07:4d:79:d5:49:f4:c4:
35:7c:19:05:81:11:28:c2:08:d5:2a:f6:d6:85:ec:
62:f1:e1:7e:c0:ca:55:c1:7c:e9:5c:37:b0:fc:64:
ad:95:03:dd:db:41:17:d1:89:0d:d5:c2:05:43:55:
20:94:0b:89:c7:c1:14:38:5f:7c:dc:30:2f:e7:04:
ac:4d:16:d0:41:0c:1e:6f:50:be:da:df:a6:9b:86:
e7:51:f0:23:6e:d2:e2:54:61:d0:35:92:7d:b6:2f:
0a:ab:61:54:d8:cc:22:06:7f:6f:1a:b9:1b:b8:fd:
b6:3c:1a:b3:dd:0c:9f:29:8d:1f:ec:b5:f0:58:0b:
2a:32:d9:55:b8:7a:94:d2:03:be:68:2b:84:42:bd:
aa:18:c8:8a:37:0d:57:99:9c:7f:77:55:3c:9c:dd:
aa:4c:81:ff:d3:86:82:16:65:42:3c:f4:c2:0b:ac:
b8:5b:82:f3:c1:02:eb:26:47:6a:5c:5d:b4:6f:2b:
bd:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:F3:92:0C:2E:9D:2F:7B:A5:49:72:A7:BE:C3:E2:AC:39:96:2E:3B
X509v3 Authority Key Identifier:
keyid:37:18:B7:34:34:9B:F3:27:D9:45:3B:96:50:1E:44:B1:92:E5:51:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/Y_OSDC6dL3ulSXKnvsPirDmWLjs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.27.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:dd:69:89:66:98:0f:02:fe:2b:48:bd:92:74:17:5b:91:c1:
b3:a7:97:2e:91:02:d5:a5:4b:89:2b:d6:28:cd:2e:d0:4a:0d:
e1:7c:a3:fe:41:c6:f7:74:57:80:f0:0a:db:b5:6a:d8:d3:6b:
e8:e4:8f:33:3b:36:35:b8:fb:f0:b2:42:5e:f6:84:d7:c4:44:
ef:63:e4:98:b0:5d:2a:a7:c4:48:54:ee:b2:35:64:62:ab:b5:
bb:22:4c:d9:fb:49:5b:91:0b:2b:25:51:10:1e:74:a8:2f:6c:
fc:b2:33:77:c0:10:7e:72:48:bd:55:2a:ea:a5:cc:e2:94:51:
6a:fd:0c:ff:e8:bf:1b:fc:f5:0c:f6:f7:d2:88:fa:3d:4f:81:
c5:e2:76:df:d8:7e:20:34:da:1c:1e:86:c8:6d:92:82:15:c7:
c3:30:55:17:b2:a4:26:93:e4:5a:74:1f:cd:60:24:52:37:01:
5b:7b:cd:b2:fe:2e:72:68:52:a5:7b:e6:13:84:b8:e0:95:f5:
8d:0f:94:9f:98:1b:38:bf:dc:02:41:54:09:bc:bb:ec:d2:27:
3f:6b:09:14:db:a5:56:ef:c4:ab:b2:0c:22:b2:e2:08:ed:f0:
08:b2:a0:0a:b4:81:75:a6:e5:2b:72:5a:0b:64:d2:aa:72:0b:
8d:1b:8a:e2
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZOVxr1qEoWzxCtw0qasBIfnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3MThiNzM0MzQ5YmYzMjdkOTQ1M2I5NjUwMWU0NGIxOTJl
NTUxNDIwHhcNMjQxMjA1MDc0NDA5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2M2YzOTIwYzJlOWQyZjdiYTU0OTcyYTdiZWMzZTJhYzM5OTYyZTNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqrFy4voPZKvbrpFKGggiGs9dsO7B
oCvA+L/65iCjZ9iOBTkeVj+fSgbl3zqwRUDPfrdeYyJnWMl5LoorSDFOTheDqgdN
edVJ9MQ1fBkFgREowgjVKvbWhexi8eF+wMpVwXzpXDew/GStlQPd20EX0YkN1cIF
Q1UglAuJx8EUOF983DAv5wSsTRbQQQweb1C+2t+mm4bnUfAjbtLiVGHQNZJ9ti8K
q2FU2MwiBn9vGrkbuP22PBqz3QyfKY0f7LXwWAsqMtlVuHqU0gO+aCuEQr2qGMiK
Nw1XmZx/d1U8nN2qTIH/04aCFmVCPPTCC6y4W4LzwQLrJkdqXF20byu97QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGPzkgwunS97pUlyp77D4qw5li47MB8GA1UdIwQY
MBaAFDcYtzQ0m/Mn2UU7llAeRLGS5VFCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnhpM05EU2I4eWZaUlR1V1VCNUVzWkxsVVVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My83YmY4YTgtZTQ5Yy00MDZlLThlYjct
YzgyM2NjOGYzODM3LzEvWV9PU0RDNmRMM3VsU1hLbnZzUGlyRG1XTGpzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My83YmY4YTgtZTQ5Yy00MDZlLThlYjctYzgyM2NjOGYzODM3
LzEvTnhpM05EU2I4eWZaUlR1V1VCNUVzWkxsVVVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYQbMA0G
CSqGSIb3DQEBCwUAA4IBAQCb3WmJZpgPAv4rSL2SdBdbkcGzp5cukQLVpUuJK9Yo
zS7QSg3hfKP+Qcb3dFeA8ArbtWrY02vo5I8zOzY1uPvwskJe9oTXxETvY+SYsF0q
p8RIVO6yNWRiq7W7IkzZ+0lbkQsrJVEQHnSoL2z8sjN3wBB+cki9VSrqpczilFFq
/Qz/6L8b/PUM9vfSiPo9T4HF4nbf2H4gNNocHobIbZKCFcfDMFUXsqQmk+RadB/N
YCRSNwFbe82y/i5yaFKle+YThLjglfWND5SfmBs4v9wCQVQJvLvs0ic/awkU26VW
78SrsgwisuII7fAIsqAKtIF1puUrcloLZNKqcguNG4ri
-----END CERTIFICATE-----
Generated at Sat Apr 5 10:51:16 2025 by rpki-client