Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/S8X2wdQZ-s8sP_O4JHRW3qOdgHo.roa
File: S8X2wdQZ-s8sP_O4JHRW3qOdgHo.roa (raw, json)
Hash identifier: UynaYmKcs5mhzGSa9bG4ZH+SrZaxl1sEK6MS2F1PH6w=
Subject key identifier: 4B:C5:F6:C1:D4:19:FA:CF:2C:3F:F3:B8:24:74:56:DE:A3:9D:80:7A
Certificate issuer: /CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Certificate serial: 0193F404F4AE2DB42511E6BDBA8B9A54FFBB
Authority key identifier: A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/S8X2wdQZ-s8sP_O4JHRW3qOdgHo.roa
Signing time: Mon 23 Dec 2024 14:56:25 +0000
ROA not before: Mon 23 Dec 2024 14:56:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 55933
IP address blocks: 45.89.232.0/23 maxlen: 24
45.92.158.0/23 maxlen: 23
45.92.158.0/24 maxlen: 24
45.92.159.0/24 maxlen: 24
45.94.43.0/24 maxlen: 24
185.207.152.0/22 maxlen: 22
185.207.152.0/24 maxlen: 24
185.207.154.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:f4:04:f4:ae:2d:b4:25:11:e6:bd:ba:8b:9a:54:ff:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Validity
Not Before: Dec 23 14:56:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4bc5f6c1d419facf2c3ff3b8247456dea39d807a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:46:86:9c:36:69:95:c0:b3:d0:a4:d4:65:f3:
bf:3d:60:8e:75:f3:f7:c6:cc:40:9d:1b:29:d7:5d:
93:32:f7:74:50:b2:6f:6d:78:93:ba:0c:8f:f1:10:
24:43:d0:fb:bb:e5:b0:1a:47:eb:e5:2f:73:15:fa:
a5:4e:18:97:da:08:2d:ce:18:62:11:b7:50:23:34:
ce:89:da:29:27:09:4e:e5:50:fc:6d:6a:29:eb:d4:
2a:86:75:bc:60:00:4f:1c:8e:50:09:7f:c9:19:3d:
a4:6e:64:3f:0a:56:35:ce:d6:13:d1:52:9c:c5:15:
0b:b7:3b:2d:58:e5:68:97:3d:28:3d:1d:05:4f:d3:
73:2d:26:16:e8:ad:e5:7b:3d:00:3a:38:1c:ab:14:
a2:bd:34:d5:f6:e5:6a:21:eb:f0:d6:31:21:dd:a7:
0b:24:7b:10:f9:4d:b8:de:f6:c5:b3:d6:7a:e6:45:
bb:0f:8e:2c:50:36:da:fc:45:0e:97:82:16:79:2c:
57:59:d3:26:0d:1e:09:5f:9f:5b:76:f7:85:49:d6:
09:51:ef:76:32:fe:c9:e5:03:87:bc:5f:30:68:1c:
bc:0a:8c:9b:34:8a:c2:58:14:af:dc:6a:1d:57:f6:
e7:2a:29:c4:53:26:00:c8:80:96:db:31:76:66:5c:
7d:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:C5:F6:C1:D4:19:FA:CF:2C:3F:F3:B8:24:74:56:DE:A3:9D:80:7A
X509v3 Authority Key Identifier:
keyid:A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/S8X2wdQZ-s8sP_O4JHRW3qOdgHo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.89.232.0/23
45.92.158.0/23
45.94.43.0/24
185.207.152.0/22
Signature Algorithm: sha256WithRSAEncryption
41:c7:54:3e:5b:f3:8f:9f:4b:e5:4c:ff:ac:e2:58:5f:82:e3:
38:11:ff:92:81:3d:a0:fa:dd:b0:c4:d6:8f:ec:e9:77:4f:3c:
18:ea:74:98:e2:bb:d2:4d:13:cb:3a:97:65:2d:07:e9:78:fb:
b4:44:ce:06:0e:70:0a:a6:69:83:61:0d:4e:ec:6f:94:f0:21:
1b:f7:81:20:92:cc:6d:5f:64:ed:b2:89:36:24:e3:38:fc:8c:
96:0f:22:7b:b0:54:0e:a1:f1:50:0f:9e:c7:0c:e4:aa:1c:7e:
d2:77:22:ad:d1:15:c0:93:53:e3:1b:9c:8f:7f:b0:4f:6d:37:
f7:e8:59:5c:ef:49:e0:0f:6c:c7:9f:8a:4f:8f:96:c6:83:7c:
4c:10:8a:49:49:a7:44:77:5f:33:da:63:56:7b:eb:f2:54:fa:
32:c6:c3:db:cb:0c:86:6a:bc:d6:dd:d1:1a:23:98:66:3a:fd:
69:75:65:66:e7:5b:8f:2a:75:0f:98:3e:87:c9:9c:38:d9:af:
f7:dd:83:b0:d1:b6:62:49:d1:e1:70:61:58:d0:b2:f8:67:8e:
f5:8b:7e:f0:53:f5:99:77:b0:be:1b:6e:dc:c3:a5:22:a9:a9:
a8:f3:7e:68:13:28:86:cd:25:9b:5c:6a:fa:95:f7:99:be:de:
64:26:7d:de
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZP0BPSuLbQlEea9uouaVP+7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1NzZlYjJjYzQ2MmU2ZTRiZjBkZTY5YjlmNjM0ODc1ZGVi
YmFhZTIwHhcNMjQxMjIzMTQ1NjI1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YmM1ZjZjMWQ0MTlmYWNmMmMzZmYzYjgyNDc0NTZkZWEzOWQ4MDdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvUaGnDZplcCz0KTUZfO/PWCOdfP3
xsxAnRsp112TMvd0ULJvbXiTugyP8RAkQ9D7u+WwGkfr5S9zFfqlThiX2ggtzhhi
EbdQIzTOidopJwlO5VD8bWop69QqhnW8YABPHI5QCX/JGT2kbmQ/ClY1ztYT0VKc
xRULtzstWOVolz0oPR0FT9NzLSYW6K3lez0AOjgcqxSivTTV9uVqIevw1jEh3acL
JHsQ+U243vbFs9Z65kW7D44sUDba/EUOl4IWeSxXWdMmDR4JX59bdveFSdYJUe92
Mv7J5QOHvF8waBy8CoybNIrCWBSv3GodV/bnKinEUyYAyICW2zF2Zlx9DwIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFEvF9sHUGfrPLD/zuCR0Vt6jnYB6MB8GA1UdIwQY
MBaAFKV26yzEYubkvw3mm59jSHXeu6riMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcFhickxNUmk1dVNfRGVhYm4yTklkZDY3cXVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny85MzE5MjctOWYzOC00MWI2LTg3ZmEt
MjU0YWNkOTJiNGUxLzEvUzhYMndkUVotczhzUF9PNEpIUlczcU9kZ0hvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny85MzE5MjctOWYzOC00MWI2LTg3ZmEtMjU0YWNkOTJiNGUx
LzEvcFhickxNUmk1dVNfRGVhYm4yTklkZDY3cXVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQBLVnoAwQB
LVyeAwQALV4rAwQCuc+YMA0GCSqGSIb3DQEBCwUAA4IBAQBBx1Q+W/OPn0vlTP+s
4lhfguM4Ef+SgT2g+t2wxNaP7Ol3TzwY6nSY4rvSTRPLOpdlLQfpePu0RM4GDnAK
pmmDYQ1O7G+U8CEb94EgksxtX2Ttsok2JOM4/IyWDyJ7sFQOofFQD57HDOSqHH7S
dyKt0RXAk1PjG5yPf7BPbTf36Flc70ngD2zHn4pPj5bGg3xMEIpJSadEd18z2mNW
e+vyVPoyxsPbywyGarzW3dEaI5hmOv1pdWVm51uPKnUPmD6HyZw42a/33YOw0bZi
SdHhcGFY0LL4Z471i37wU/WZd7C+G27cw6Uiqamo835oEyiGzSWbXGr6lfeZvt5k
Jn3e
-----END CERTIFICATE-----
Generated at Sat Apr 5 22:40:42 2025 by rpki-client