Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/ppLoxUxyivEc3yWndu-pke-HgJs.roa
File: ppLoxUxyivEc3yWndu-pke-HgJs.roa (raw, json)
Hash identifier: xxTEUKme3aRveqdKSvTxmEaxTjRGb/uS7Dl8YoJIW9c=
Subject key identifier: A6:92:E8:C5:4C:72:8A:F1:1C:DF:25:A7:76:EF:A9:91:EF:87:80:9B
Certificate issuer: /CN=cec5afe769b94346e1cd362eb85f875b23b17277
Certificate serial: 01942825A757C6555F33D02F2562E341EDEB
Authority key identifier: CE:C5:AF:E7:69:B9:43:46:E1:CD:36:2E:B8:5F:87:5B:23:B1:72:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zsWv52m5Q0bhzTYuuF-HWyOxcnc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/ppLoxUxyivEc3yWndu-pke-HgJs.roa
Signing time: Thu 02 Jan 2025 17:52:23 +0000
ROA not before: Thu 02 Jan 2025 17:52:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 45.145.154.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:25:a7:57:c6:55:5f:33:d0:2f:25:62:e3:41:ed:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec5afe769b94346e1cd362eb85f875b23b17277
Validity
Not Before: Jan 2 17:52:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a692e8c54c728af11cdf25a776efa991ef87809b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ab:87:0e:51:25:73:cd:8f:97:0b:cf:f4:39:
f0:af:d3:4c:58:9c:d8:56:07:79:12:7b:dc:6f:0c:
5f:51:e2:39:9a:a7:0c:f2:c0:18:b2:4a:b5:b7:ee:
8b:b8:96:4e:13:48:a2:49:e8:df:10:35:51:9f:14:
33:33:0b:42:21:57:98:26:f2:d8:42:b7:00:b8:d8:
99:5a:f9:a6:bd:70:49:8a:82:69:c6:0d:a5:58:48:
06:75:4f:f1:0d:e4:a5:b9:8b:0b:e6:ad:30:02:bd:
0d:be:8d:6b:8f:d4:86:7e:c8:03:48:b9:68:55:12:
28:25:f8:16:d1:5d:79:de:95:81:98:de:aa:0f:b4:
46:2e:f6:c0:0e:58:69:8c:37:a4:d2:42:a8:14:f0:
1f:81:8c:96:40:62:93:d2:50:c0:8f:da:c2:43:14:
8f:bf:55:7d:1d:ce:a1:44:23:04:8b:35:89:df:1c:
c9:bf:7a:8d:3a:cd:93:86:a7:04:06:80:78:06:f9:
22:77:0a:c9:82:e3:62:01:3d:9e:32:65:2a:99:9f:
9e:b0:a7:4a:ce:6b:a9:36:26:ef:d9:3f:61:81:96:
cb:db:36:95:1a:4a:99:73:82:b5:05:2a:64:36:1d:
83:07:13:f4:c3:76:a0:1a:b8:ea:aa:54:5f:08:d9:
ae:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:92:E8:C5:4C:72:8A:F1:1C:DF:25:A7:76:EF:A9:91:EF:87:80:9B
X509v3 Authority Key Identifier:
keyid:CE:C5:AF:E7:69:B9:43:46:E1:CD:36:2E:B8:5F:87:5B:23:B1:72:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zsWv52m5Q0bhzTYuuF-HWyOxcnc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/ppLoxUxyivEc3yWndu-pke-HgJs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.145.154.0/23
Signature Algorithm: sha256WithRSAEncryption
4f:1c:d5:f6:82:a9:15:43:07:8d:15:89:75:9c:56:c0:91:c9:
6c:36:e9:49:f0:b6:bb:a0:11:da:55:0a:f8:5e:49:0c:07:6a:
6a:e6:44:32:5b:0c:ad:a4:92:16:09:19:d6:7c:dc:bd:4f:8d:
1c:0b:f3:b7:41:9e:d5:b4:57:72:8b:24:64:43:95:2b:eb:1a:
a5:31:f9:2f:d3:fd:62:1c:53:17:20:bf:bd:78:92:d6:26:45:
fb:43:71:33:a8:3e:b5:2f:c1:0b:c1:3b:ae:e1:a4:d9:20:7c:
64:43:51:43:0c:1b:b4:09:7b:02:36:7c:e2:6b:d4:f5:a7:c4:
8b:f3:68:35:f6:aa:5d:f1:92:0c:ea:07:68:ba:89:ca:a1:e7:
63:9a:e7:dc:ed:e8:82:e3:37:98:a1:92:c4:f3:5b:b3:e5:ed:
77:c8:6a:e6:09:7b:17:24:2b:5a:ac:27:5a:95:0c:5a:bd:b8:
aa:6c:a2:8c:b5:90:ed:92:3d:f7:a8:48:55:53:e0:00:34:e5:
51:a3:6e:ab:fd:32:97:35:bf:e6:09:6f:32:bb:84:45:ce:cc:
ef:18:7a:8d:6b:eb:03:3c:91:85:f9:dd:54:f0:d2:27:f8:cc:
06:d1:cc:c2:70:8b:1e:20:86:e0:c5:41:d8:8a:88:27:fe:fe:
d4:f1:8f:64
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQoJadXxlVfM9AvJWLjQe3rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlYzVhZmU3NjliOTQzNDZlMWNkMzYyZWI4NWY4NzViMjNi
MTcyNzcwHhcNMjUwMTAyMTc1MjIzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNjkyZThjNTRjNzI4YWYxMWNkZjI1YTc3NmVmYTk5MWVmODc4MDliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuauHDlElc82PlwvP9Dnwr9NMWJzY
Vgd5EnvcbwxfUeI5mqcM8sAYskq1t+6LuJZOE0iiSejfEDVRnxQzMwtCIVeYJvLY
QrcAuNiZWvmmvXBJioJpxg2lWEgGdU/xDeSluYsL5q0wAr0Nvo1rj9SGfsgDSLlo
VRIoJfgW0V153pWBmN6qD7RGLvbADlhpjDek0kKoFPAfgYyWQGKT0lDAj9rCQxSP
v1V9Hc6hRCMEizWJ3xzJv3qNOs2ThqcEBoB4BvkidwrJguNiAT2eMmUqmZ+esKdK
zmupNibv2T9hgZbL2zaVGkqZc4K1BSpkNh2DBxP0w3agGrjqqlRfCNmu3QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKaS6MVMcorxHN8lp3bvqZHvh4CbMB8GA1UdIwQY
MBaAFM7Fr+dpuUNG4c02Lrhfh1sjsXJ3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvenNXdjUybTVRMGJoelRZdXVGLUhXeU94Y25jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi8zZDU2OWMtMTkwNy00ZDJjLWFjZWQt
MzMyNDdjOGUxYzFmLzEvcHBMb3hVeHlpdkVjM3lXbmR1LXBrZS1IZ0pzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi8zZDU2OWMtMTkwNy00ZDJjLWFjZWQtMzMyNDdjOGUxYzFm
LzEvenNXdjUybTVRMGJoelRZdXVGLUhXeU94Y25jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLZGaMA0G
CSqGSIb3DQEBCwUAA4IBAQBPHNX2gqkVQweNFYl1nFbAkclsNulJ8La7oBHaVQr4
XkkMB2pq5kQyWwytpJIWCRnWfNy9T40cC/O3QZ7VtFdyiyRkQ5Ur6xqlMfkv0/1i
HFMXIL+9eJLWJkX7Q3EzqD61L8ELwTuu4aTZIHxkQ1FDDBu0CXsCNnzia9T1p8SL
82g19qpd8ZIM6gdouonKoedjmufc7eiC4zeYoZLE81uz5e13yGrmCXsXJCtarCda
lQxavbiqbKKMtZDtkj33qEhVU+AANOVRo26r/TKXNb/mCW8yu4RFzszvGHqNa+sD
PJGF+d1U8NIn+MwG0czCcIseIIbgxUHYiogn/v7U8Y9k
-----END CERTIFICATE-----
Generated at Fri Apr 4 21:03:50 2025 by rpki-client