Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/7d2cb5-bddf-4201-baf8-1b24484e55ec/1/alBKH0o_4kzhleiX69soFknJKkc.roa
File: alBKH0o_4kzhleiX69soFknJKkc.roa (raw, json)
Hash identifier: 0xl3ZFg/7Sno8/QF5nbiqzzuYWBqhpcMDwGXyIlAUiw=
Subject key identifier: 6A:50:4A:1F:4A:3F:E2:4C:E1:95:E8:97:EB:DB:28:16:49:C9:2A:47
Certificate issuer: /CN=54404da602dab0625be7223d09320b1cd7aafced
Certificate serial: 0194214464F04248B0D0D79ED086E03F7F6E
Authority key identifier: 54:40:4D:A6:02:DA:B0:62:5B:E7:22:3D:09:32:0B:1C:D7:AA:FC:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VEBNpgLasGJb5yI9CTILHNeq_O0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/7d2cb5-bddf-4201-baf8-1b24484e55ec/1/alBKH0o_4kzhleiX69soFknJKkc.roa
Signing time: Wed 01 Jan 2025 09:48:37 +0000
ROA not before: Wed 01 Jan 2025 09:48:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207117
IP address blocks: 45.152.78.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:64:f0:42:48:b0:d0:d7:9e:d0:86:e0:3f:7f:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54404da602dab0625be7223d09320b1cd7aafced
Validity
Not Before: Jan 1 09:48:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6a504a1f4a3fe24ce195e897ebdb281649c92a47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:2c:4f:7c:b7:cb:33:e1:ae:60:99:88:66:04:
e8:56:42:85:43:2f:49:e2:d8:33:18:18:d0:45:01:
8a:1a:4d:43:bd:57:7f:9c:60:69:13:67:0a:33:71:
ac:21:da:a5:57:e4:4e:ef:1b:eb:98:ab:46:d8:a4:
74:14:c7:28:67:b6:75:1d:6a:eb:3b:80:fd:e9:16:
e2:d4:f2:49:99:f2:c6:f4:3e:43:b7:43:4d:84:fe:
9a:c9:a9:fa:c2:5e:88:fd:25:d0:64:1a:89:57:5c:
2e:22:c8:f7:5e:5a:ef:98:ab:26:f8:6a:89:ea:80:
31:d3:93:48:18:c9:68:ca:c4:fb:1b:0d:8c:27:5f:
8c:d0:af:c0:8f:66:ef:32:9b:62:d8:45:e9:4d:b4:
59:34:20:91:fe:ea:6b:6f:47:c7:0d:f3:64:b6:93:
7b:b8:41:8b:57:42:cc:42:1b:5a:60:bf:bc:7e:84:
cf:dc:01:ad:15:0c:30:63:12:97:0f:f5:ea:7d:73:
42:17:8a:76:f8:e1:89:5f:1c:12:f4:24:f1:ed:44:
03:30:2a:d7:f0:81:28:93:fe:44:92:dc:6a:3d:3f:
05:ab:32:bb:47:36:96:8c:29:08:31:85:5d:37:a9:
eb:8f:14:d3:4a:6b:87:3e:22:15:fe:c9:eb:53:e0:
72:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:50:4A:1F:4A:3F:E2:4C:E1:95:E8:97:EB:DB:28:16:49:C9:2A:47
X509v3 Authority Key Identifier:
keyid:54:40:4D:A6:02:DA:B0:62:5B:E7:22:3D:09:32:0B:1C:D7:AA:FC:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VEBNpgLasGJb5yI9CTILHNeq_O0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/7d2cb5-bddf-4201-baf8-1b24484e55ec/1/alBKH0o_4kzhleiX69soFknJKkc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/7d2cb5-bddf-4201-baf8-1b24484e55ec/1/VEBNpgLasGJb5yI9CTILHNeq_O0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.152.78.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:0f:96:e3:5b:8d:4d:a7:15:41:72:8e:c4:de:7e:fa:5f:f9:
cf:19:9a:55:17:96:5a:f1:4c:49:ad:f8:08:13:92:4c:33:b9:
2d:06:86:4a:80:d9:ac:6e:30:84:fe:73:9a:70:c8:fb:98:a8:
23:af:09:88:16:fa:70:b8:86:ad:3f:a0:72:72:d3:ae:93:07:
01:53:88:3d:16:9a:cd:cd:8c:02:f1:85:80:44:d0:2f:c2:0a:
e2:d7:f6:34:18:0e:9d:fd:b9:72:3c:59:b6:47:4b:13:ce:9e:
f3:71:9f:ca:37:a2:de:58:b1:88:77:b7:eb:6c:97:f7:67:f9:
7b:da:fc:9b:82:c8:a6:7f:b5:c1:e8:96:55:86:c1:96:c5:e7:
6d:4d:4b:bc:1c:17:22:6e:78:91:76:84:f6:49:4d:c0:23:45:
20:66:be:0b:41:45:91:02:77:81:d8:6c:73:f6:5f:50:8c:e6:
37:8f:4c:e1:b9:69:da:ba:e9:19:32:28:55:15:91:06:f4:1f:
97:4c:11:4a:ab:5f:c4:44:af:05:63:39:a4:ab:5d:48:8b:2a:
a6:24:d3:f3:a4:f9:03:8d:ad:4b:43:92:b3:5a:1c:c8:f8:7f:
b2:8d:70:78:45:9e:d3:13:09:a5:18:3b:22:47:ae:89:ec:a0:
42:bc:48:91
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQhRGTwQkiw0Nee0IbgP39uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0NDA0ZGE2MDJkYWIwNjI1YmU3MjIzZDA5MzIwYjFjZDdh
YWZjZWQwHhcNMjUwMTAxMDk0ODM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YTUwNGExZjRhM2ZlMjRjZTE5NWU4OTdlYmRiMjgxNjQ5YzkyYTQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArCxPfLfLM+GuYJmIZgToVkKFQy9J
4tgzGBjQRQGKGk1DvVd/nGBpE2cKM3GsIdqlV+RO7xvrmKtG2KR0FMcoZ7Z1HWrr
O4D96Rbi1PJJmfLG9D5Dt0NNhP6ayan6wl6I/SXQZBqJV1wuIsj3XlrvmKsm+GqJ
6oAx05NIGMloysT7Gw2MJ1+M0K/Aj2bvMpti2EXpTbRZNCCR/uprb0fHDfNktpN7
uEGLV0LMQhtaYL+8foTP3AGtFQwwYxKXD/XqfXNCF4p2+OGJXxwS9CTx7UQDMCrX
8IEok/5EktxqPT8FqzK7RzaWjCkIMYVdN6nrjxTTSmuHPiIV/snrU+ByEQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGpQSh9KP+JM4ZXol+vbKBZJySpHMB8GA1UdIwQY
MBaAFFRATaYC2rBiW+ciPQkyCxzXqvztMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkVCTnBnTGFzR0piNXlJOUNUSUxITmVxX08wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny83ZDJjYjUtYmRkZi00MjAxLWJhZjgt
MWIyNDQ4NGU1NWVjLzEvYWxCS0gwb180a3pobGVpWDY5c29Ga25KS2tjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny83ZDJjYjUtYmRkZi00MjAxLWJhZjgtMWIyNDQ4NGU1NWVj
LzEvVkVCTnBnTGFzR0piNXlJOUNUSUxITmVxX08wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZhOMA0G
CSqGSIb3DQEBCwUAA4IBAQAaD5bjW41NpxVBco7E3n76X/nPGZpVF5Za8UxJrfgI
E5JMM7ktBoZKgNmsbjCE/nOacMj7mKgjrwmIFvpwuIatP6ByctOukwcBU4g9FprN
zYwC8YWARNAvwgri1/Y0GA6d/blyPFm2R0sTzp7zcZ/KN6LeWLGId7frbJf3Z/l7
2vybgsimf7XB6JZVhsGWxedtTUu8HBcibniRdoT2SU3AI0UgZr4LQUWRAneB2Gxz
9l9QjOY3j0zhuWnauukZMihVFZEG9B+XTBFKq1/ERK8FYzmkq11IiyqmJNPzpPkD
ja1LQ5KzWhzI+H+yjXB4RZ7TEwmlGDsiR66J7KBCvEiR
-----END CERTIFICATE-----
Generated at Thu Feb 20 03:34:31 2025 by rpki-client