Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/21c61a-d6b1-4aca-9782-97348336f33a/1/xFbU4UXG5RajcOwoLmpvCSpG_lI.roa
File: xFbU4UXG5RajcOwoLmpvCSpG_lI.roa (raw, json)
Hash identifier: EpP3aMWHOolyh4RCM05UrLn8Zcfi0zy+85a7iQrKm9M=
Subject key identifier: C4:56:D4:E1:45:C6:E5:16:A3:70:EC:28:2E:6A:6F:09:2A:46:FE:52
Certificate issuer: /CN=315955c4af3eb1a8d3400a86625e365c26298d6a
Certificate serial: 019504A696ECDA884D0B2D5C24E6962E3DAE
Authority key identifier: 31:59:55:C4:AF:3E:B1:A8:D3:40:0A:86:62:5E:36:5C:26:29:8D:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MVlVxK8-sajTQAqGYl42XCYpjWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/21c61a-d6b1-4aca-9782-97348336f33a/1/xFbU4UXG5RajcOwoLmpvCSpG_lI.roa
Signing time: Fri 14 Feb 2025 13:29:41 +0000
ROA not before: Fri 14 Feb 2025 13:29:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47160
IP address blocks: 45.147.208.0/22 maxlen: 24
176.124.40.0/22 maxlen: 24
2a0f:3400::/29 maxlen: 48
2a0f:3400::/40 maxlen: 40
2a0f:3400:200::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:04:a6:96:ec:da:88:4d:0b:2d:5c:24:e6:96:2e:3d:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=315955c4af3eb1a8d3400a86625e365c26298d6a
Validity
Not Before: Feb 14 13:29:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c456d4e145c6e516a370ec282e6a6f092a46fe52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:6d:59:7e:8b:a6:64:05:2c:c1:9c:1f:ce:ab:
ce:74:ad:67:be:b3:8f:45:50:dc:6d:eb:40:b7:50:
79:9b:03:ea:df:fe:6f:01:2d:38:52:f7:6b:71:7e:
81:3f:96:6a:0e:da:80:ff:a5:5d:45:3d:2f:a4:f0:
b6:24:9c:f8:8e:e8:ed:b9:f0:11:b0:22:d8:c8:0c:
f6:3b:c5:43:eb:09:3b:19:40:18:28:4c:c1:7a:4c:
a2:ef:cb:2f:25:f9:26:cd:f5:dc:b6:c9:c1:e4:fb:
cf:17:db:c4:54:05:8d:4d:39:1e:d1:72:98:c2:27:
4d:89:eb:09:68:d6:a3:4b:58:7d:b7:88:e6:36:4b:
ed:a3:f7:f0:61:65:cf:65:f0:49:4d:45:cd:e4:f8:
ef:67:98:ae:32:42:5b:b5:61:42:6e:7a:32:dc:12:
31:fd:e6:24:c3:c2:39:8c:44:c1:fb:d1:86:cf:1b:
59:76:ae:2f:77:d9:bd:a8:fa:5d:9d:84:55:b5:eb:
6c:07:b9:4c:d7:10:43:e1:5b:f0:fc:31:dd:96:75:
50:2f:13:b3:6c:84:91:d7:4d:96:13:dc:5a:83:03:
88:b8:ee:39:cb:8b:8f:8b:4a:20:01:fb:6b:8c:b3:
5f:54:55:7b:0c:2c:75:80:94:12:9a:35:80:f0:7b:
76:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:56:D4:E1:45:C6:E5:16:A3:70:EC:28:2E:6A:6F:09:2A:46:FE:52
X509v3 Authority Key Identifier:
keyid:31:59:55:C4:AF:3E:B1:A8:D3:40:0A:86:62:5E:36:5C:26:29:8D:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MVlVxK8-sajTQAqGYl42XCYpjWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/21c61a-d6b1-4aca-9782-97348336f33a/1/xFbU4UXG5RajcOwoLmpvCSpG_lI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/21c61a-d6b1-4aca-9782-97348336f33a/1/MVlVxK8-sajTQAqGYl42XCYpjWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.147.208.0/22
176.124.40.0/22
IPv6:
2a0f:3400::/29
Signature Algorithm: sha256WithRSAEncryption
94:4f:ff:3f:50:f7:d0:91:26:29:f6:ab:ed:ad:dd:2f:e8:af:
28:62:a4:17:d3:42:0e:eb:7c:53:24:b5:46:2d:30:bb:85:93:
96:3e:3f:b5:37:cf:ae:16:a0:f2:f4:bc:7c:42:39:cb:86:42:
c2:0a:56:79:68:18:64:7a:d7:32:27:29:75:c5:fa:5f:88:9e:
1d:7f:6c:12:b9:6d:ea:d9:1e:e0:75:48:81:ca:dd:99:89:e2:
14:97:a0:13:2f:ee:a9:0d:a2:96:b5:cc:21:fc:96:ea:cf:23:
80:22:6b:16:ed:89:5b:22:5c:22:a0:96:ab:e5:a5:53:dd:e8:
44:4a:fc:3d:fb:af:90:d7:e4:c5:8f:75:67:e3:de:88:ee:ac:
7f:46:40:76:64:b2:ce:ee:0b:d7:58:ee:32:28:d8:41:f2:e1:
dd:35:a1:17:99:71:fa:f2:04:07:1b:52:df:09:fe:e0:61:27:
76:d6:4e:0b:fe:13:cd:fd:6d:5f:11:89:43:d3:13:7e:c2:af:
3e:33:dc:b8:02:8a:41:4e:64:ba:c1:38:7f:45:c1:da:ca:67:
af:d5:66:8b:33:21:9e:c2:da:2f:31:a0:e9:fd:52:1a:7d:90:
91:89:47:b0:6b:63:74:85:7f:d3:13:7c:ae:4a:88:b0:7c:1e:
86:ec:80:aa
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAZUEppbs2ohNCy1cJOaWLj2uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxNTk1NWM0YWYzZWIxYThkMzQwMGE4NjYyNWUzNjVjMjYy
OThkNmEwHhcNMjUwMjE0MTMyOTQxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNDU2ZDRlMTQ1YzZlNTE2YTM3MGVjMjgyZTZhNmYwOTJhNDZmZTUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArG1ZfoumZAUswZwfzqvOdK1nvrOP
RVDcbetAt1B5mwPq3/5vAS04UvdrcX6BP5ZqDtqA/6VdRT0vpPC2JJz4jujtufAR
sCLYyAz2O8VD6wk7GUAYKEzBekyi78svJfkmzfXctsnB5PvPF9vEVAWNTTke0XKY
widNiesJaNajS1h9t4jmNkvto/fwYWXPZfBJTUXN5PjvZ5iuMkJbtWFCbnoy3BIx
/eYkw8I5jETB+9GGzxtZdq4vd9m9qPpdnYRVtetsB7lM1xBD4Vvw/DHdlnVQLxOz
bISR102WE9xagwOIuO45y4uPi0ogAftrjLNfVFV7DCx1gJQSmjWA8Ht2CQIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFMRW1OFFxuUWo3DsKC5qbwkqRv5SMB8GA1UdIwQY
MBaAFDFZVcSvPrGo00AKhmJeNlwmKY1qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTVZsVnhLOC1zYWpUUUFxR1lsNDJYQ1lwaldvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy8yMWM2MWEtZDZiMS00YWNhLTk3ODIt
OTczNDgzMzZmMzNhLzEveEZiVTRVWEc1UmFqY093b0xtcHZDU3BHX2xJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy8yMWM2MWEtZDZiMS00YWNhLTk3ODItOTczNDgzMzZmMzNh
LzEvTVZsVnhLOC1zYWpUUUFxR1lsNDJYQ1lwaldvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCLZPQAwQC
sHwoMA0EAgACMAcDBQMqDzQAMA0GCSqGSIb3DQEBCwUAA4IBAQCUT/8/UPfQkSYp
9qvtrd0v6K8oYqQX00IO63xTJLVGLTC7hZOWPj+1N8+uFqDy9Lx8QjnLhkLCClZ5
aBhketcyJyl1xfpfiJ4df2wSuW3q2R7gdUiByt2ZieIUl6ATL+6pDaKWtcwh/Jbq
zyOAImsW7YlbIlwioJar5aVT3ehESvw9+6+Q1+TFj3Vn496I7qx/RkB2ZLLO7gvX
WO4yKNhB8uHdNaEXmXH68gQHG1LfCf7gYSd21k4L/hPN/W1fEYlD0xN+wq8+M9y4
AopBTmS6wTh/RcHaymev1WaLMyGewtovMaDp/VIafZCRiUewa2N0hX/TE3yuSoiw
fB6G7ICq
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:46:30 2025 by rpki-client