Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/JN30kUlZb2UdsgE-OutzbLQiERo.roa
File: JN30kUlZb2UdsgE-OutzbLQiERo.roa (raw, json)
Hash identifier: B/Z1tvVR2z8KZUGUWDKLU3ou6I+OjR3sN2Q9pxieTbk=
Subject key identifier: 24:DD:F4:91:49:59:6F:65:1D:B2:01:3E:3A:EB:73:6C:B4:22:11:1A
Certificate issuer: /CN=c2d21e804ab7713ad7877dde603aa7824b31983c
Certificate serial: 019424457629DEF87F990CC9CB7F49DB3FB5
Authority key identifier: C2:D2:1E:80:4A:B7:71:3A:D7:87:7D:DE:60:3A:A7:82:4B:31:98:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wtIegEq3cTrXh33eYDqngksxmDw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/JN30kUlZb2UdsgE-OutzbLQiERo.roa
Signing time: Wed 01 Jan 2025 23:48:39 +0000
ROA not before: Wed 01 Jan 2025 23:48:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15830
IP address blocks: 45.136.140.0/24 maxlen: 24
2a10:5a80::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:76:29:de:f8:7f:99:0c:c9:cb:7f:49:db:3f:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2d21e804ab7713ad7877dde603aa7824b31983c
Validity
Not Before: Jan 1 23:48:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=24ddf49149596f651db2013e3aeb736cb422111a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:8b:e8:ee:07:b5:32:ca:21:bc:7a:dd:09:c2:
f0:5a:2e:e0:52:e8:c6:1d:c4:15:6f:9b:8e:8e:c9:
57:49:9c:da:1a:a4:45:16:ec:b9:0f:67:ad:a0:ed:
f4:ca:9c:d9:38:fe:c1:70:78:09:ba:1b:92:f4:39:
0a:d7:75:d6:15:a1:dd:10:19:4b:3d:8c:a3:0a:3b:
5d:3f:e9:9e:92:77:d8:94:d4:31:1b:aa:a7:34:bb:
9f:04:76:d1:58:05:4b:a9:98:24:7e:43:e2:c7:1e:
6f:fd:c4:84:ca:16:3d:0b:61:f0:d2:df:ff:00:e7:
79:19:60:98:c0:6b:ad:95:db:3a:37:59:d2:8f:8e:
22:07:0f:a8:03:20:b6:d2:55:f4:8c:27:72:8d:11:
1e:51:d9:74:4f:35:0b:c6:f7:0e:b5:ac:5d:64:13:
62:a2:6e:e9:fe:46:85:0f:0c:2b:ac:1d:ad:64:93:
1c:7f:ac:9f:cb:f6:89:18:ea:23:09:a2:eb:ff:f9:
6a:81:85:f8:e4:6a:e2:14:59:2a:5c:ac:94:d5:ea:
c9:69:4f:7e:e8:3a:46:76:69:7d:a0:fd:43:63:fc:
84:65:28:18:bd:d1:f1:34:1a:14:77:bb:44:02:b8:
34:63:18:57:3f:95:16:a2:c9:ee:e1:d8:80:7a:5c:
f0:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:DD:F4:91:49:59:6F:65:1D:B2:01:3E:3A:EB:73:6C:B4:22:11:1A
X509v3 Authority Key Identifier:
keyid:C2:D2:1E:80:4A:B7:71:3A:D7:87:7D:DE:60:3A:A7:82:4B:31:98:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wtIegEq3cTrXh33eYDqngksxmDw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/JN30kUlZb2UdsgE-OutzbLQiERo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.136.140.0/24
IPv6:
2a10:5a80::/32
Signature Algorithm: sha256WithRSAEncryption
14:b9:aa:24:87:5d:e7:ff:b6:0d:62:95:b6:3e:2d:24:81:ba:
51:d2:e7:37:3c:e4:d9:a4:2a:e6:85:2f:03:a9:7d:87:59:d7:
cb:1e:5a:7d:ec:fe:bf:38:12:a4:9b:10:89:fd:ee:b7:65:11:
28:b8:19:16:b1:30:c4:fc:4f:3e:87:ba:83:90:cb:0a:d3:0b:
24:fe:a7:16:b9:9e:5b:50:4a:df:fe:05:5c:3b:fc:cf:b2:d8:
cb:6d:8f:64:58:23:0c:19:79:98:2d:5f:38:d3:43:a5:83:96:
fa:7f:e3:fc:d4:ae:04:4d:fd:cb:03:4e:f5:b1:af:1a:61:44:
dd:b2:0f:61:1c:10:ef:f2:3d:d2:b8:d5:8e:95:e7:e7:be:91:
9a:bf:4d:1b:74:89:3b:75:3b:36:e4:79:44:a0:0b:87:26:96:
d9:ef:4f:15:4e:4c:cc:28:8c:38:9f:b9:40:c3:e5:8d:74:e3:
0a:45:d3:7d:f1:9f:de:b0:6b:f1:94:5b:be:df:cc:9f:25:8d:
59:e8:84:b5:86:5a:80:02:0d:51:fa:a3:91:c7:6a:14:f1:37:
c8:41:34:bb:fc:5f:4a:87:51:3d:66:9e:c5:db:b1:c7:ef:b3:
41:6e:c6:3b:c0:b3:ec:bf:2c:1a:18:e6:77:dd:41:93:44:c5:
c4:40:35:3f
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZQkRXYp3vh/mQzJy39J2z+1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyZDIxZTgwNGFiNzcxM2FkNzg3N2RkZTYwM2FhNzgyNGIz
MTk4M2MwHhcNMjUwMTAxMjM0ODM5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNGRkZjQ5MTQ5NTk2ZjY1MWRiMjAxM2UzYWViNzM2Y2I0MjIxMTFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Yvo7ge1MsohvHrdCcLwWi7gUujG
HcQVb5uOjslXSZzaGqRFFuy5D2etoO30ypzZOP7BcHgJuhuS9DkK13XWFaHdEBlL
PYyjCjtdP+meknfYlNQxG6qnNLufBHbRWAVLqZgkfkPixx5v/cSEyhY9C2Hw0t//
AOd5GWCYwGutlds6N1nSj44iBw+oAyC20lX0jCdyjREeUdl0TzULxvcOtaxdZBNi
om7p/kaFDwwrrB2tZJMcf6yfy/aJGOojCaLr//lqgYX45GriFFkqXKyU1erJaU9+
6DpGdml9oP1DY/yEZSgYvdHxNBoUd7tEArg0YxhXP5UWosnu4diAelzwKQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFCTd9JFJWW9lHbIBPjrrc2y0IhEaMB8GA1UdIwQY
MBaAFMLSHoBKt3E614d93mA6p4JLMZg8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd3RJZWdFcTNjVHJYaDMzZVlEcW5na3N4bUR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wNGI0NDYtNGFlMS00ZmU1LWI2NDYt
NTlhZTA5ZWRiZWI5LzEvSk4zMGtVbFpiMlVkc2dFLU91dHpiTFFpRVJvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS8wNGI0NDYtNGFlMS00ZmU1LWI2NDYtNTlhZTA5ZWRiZWI5
LzEvd3RJZWdFcTNjVHJYaDMzZVlEcW5na3N4bUR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQALYiMMA0E
AgACMAcDBQAqEFqAMA0GCSqGSIb3DQEBCwUAA4IBAQAUuaokh13n/7YNYpW2Pi0k
gbpR0uc3POTZpCrmhS8DqX2HWdfLHlp97P6/OBKkmxCJ/e63ZREouBkWsTDE/E8+
h7qDkMsK0wsk/qcWuZ5bUErf/gVcO/zPstjLbY9kWCMMGXmYLV8400Olg5b6f+P8
1K4ETf3LA071sa8aYUTdsg9hHBDv8j3SuNWOlefnvpGav00bdIk7dTs25HlEoAuH
JpbZ708VTkzMKIw4n7lAw+WNdOMKRdN98Z/esGvxlFu+38yfJY1Z6IS1hlqAAg1R
+qORx2oU8TfIQTS7/F9Kh1E9Zp7F27HH77NBbsY7wLPsvywaGOZ33UGTRMXEQDU/
-----END CERTIFICATE-----
Generated at Sun Apr 6 00:17:44 2025 by rpki-client