Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/tXmj_lk4J_cxjq5mg9Y-DnR4g68.roa
File: tXmj_lk4J_cxjq5mg9Y-DnR4g68.roa (raw, json)
Hash identifier: FkJnyg1Nbp4kUP6A2c71ys6CgKIoTjWwYiDec6OD1BY=
Subject key identifier: B5:79:A3:FE:59:38:27:F7:31:8E:AE:66:83:D6:3E:0E:74:78:83:AF
Certificate issuer: /CN=b27261d715348bfd73ce9dbb72488656993ba2f1
Certificate serial: 0194221FBE7ACD3F0B854430B03017AA6D84
Authority key identifier: B2:72:61:D7:15:34:8B:FD:73:CE:9D:BB:72:48:86:56:99:3B:A2:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/snJh1xU0i_1zzp27ckiGVpk7ovE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/tXmj_lk4J_cxjq5mg9Y-DnR4g68.roa
Signing time: Wed 01 Jan 2025 13:48:13 +0000
ROA not before: Wed 01 Jan 2025 13:48:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199785
IP address blocks: 45.132.1.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:be:7a:cd:3f:0b:85:44:30:b0:30:17:aa:6d:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b27261d715348bfd73ce9dbb72488656993ba2f1
Validity
Not Before: Jan 1 13:48:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b579a3fe593827f7318eae6683d63e0e747883af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:30:c1:13:e1:f0:e6:d4:4f:86:81:3c:b9:25:
50:6b:dc:7d:32:53:4b:a2:c8:c6:5a:ae:a8:9d:9a:
9e:bd:46:cd:ff:4d:eb:cb:6a:05:4c:32:f0:ff:36:
e0:d1:8f:37:89:ce:d5:20:c0:32:3a:0b:3a:a1:5d:
cc:89:d3:1c:cd:e8:f2:5c:48:9d:cd:d2:26:7c:cc:
0b:48:e8:10:fa:8c:41:50:71:63:55:40:32:69:a3:
c4:48:70:02:29:70:6f:2c:56:4b:8f:45:80:a9:6c:
0a:85:1e:e2:13:93:4f:97:a1:e2:e3:c8:9b:23:3c:
73:dd:4a:29:91:e5:89:a1:d5:0e:d6:64:60:30:07:
bf:31:97:69:6e:32:fa:55:c3:f8:9e:16:d0:67:7a:
f9:f9:95:72:f2:b8:8c:1d:86:02:b9:85:b4:79:21:
c6:8b:38:22:5e:38:61:24:44:02:c5:e8:69:ce:14:
25:ff:2a:f5:ab:c9:6a:1c:21:7b:35:3f:c0:11:a1:
c2:e2:75:c6:fa:a8:93:a0:80:84:4d:0e:29:ae:45:
95:10:74:98:00:ce:36:b7:15:2c:aa:d4:1e:0f:12:
5f:a2:88:6b:57:06:69:cc:78:b5:26:07:2f:ba:3b:
1a:e2:cf:00:57:c3:9d:f0:e6:12:bc:84:3b:54:e9:
56:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:79:A3:FE:59:38:27:F7:31:8E:AE:66:83:D6:3E:0E:74:78:83:AF
X509v3 Authority Key Identifier:
keyid:B2:72:61:D7:15:34:8B:FD:73:CE:9D:BB:72:48:86:56:99:3B:A2:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/snJh1xU0i_1zzp27ckiGVpk7ovE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/tXmj_lk4J_cxjq5mg9Y-DnR4g68.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/snJh1xU0i_1zzp27ckiGVpk7ovE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.1.0/24
Signature Algorithm: sha256WithRSAEncryption
86:3e:e5:fd:77:09:af:47:7a:31:d9:75:ac:6f:ff:94:61:0f:
4f:79:b0:c6:8e:a0:6a:5a:91:b8:5b:4b:7f:49:d4:2f:dc:d8:
6a:78:c9:21:cd:d3:9c:86:bc:0a:64:fe:6d:49:10:60:4f:dd:
a2:80:48:a4:8c:e2:77:ab:19:83:6c:c7:97:24:ba:6e:51:da:
61:20:90:99:9f:bb:d4:04:2e:c5:1e:47:70:30:36:14:84:80:
a0:50:66:46:63:74:7b:d6:e2:da:1a:64:09:e3:a0:f2:e6:fb:
51:8b:35:38:ac:ef:cc:d8:49:2d:5e:a5:5b:6a:95:c4:9d:7b:
7b:d7:2e:6b:44:0e:b7:ed:4a:f2:21:b5:39:ab:54:10:cd:bf:
e3:36:35:5f:ca:91:58:86:a6:92:d0:64:ed:0f:e8:e7:a8:35:
59:25:3f:7a:72:1d:a5:a6:11:4d:4a:ad:0c:4a:e8:61:dd:8d:
50:f3:5a:6c:0e:56:82:43:7b:0f:3b:d6:a4:5c:b5:71:0d:77:
45:82:01:6c:e8:27:22:95:33:5a:11:9f:45:7a:eb:23:32:6a:
32:b3:32:07:cd:48:c6:52:d8:d7:b2:8b:a9:66:ae:de:1a:87:
c3:5e:30:47:48:75:ec:3e:cb:53:0c:b1:3e:3d:cf:38:89:76:
84:d7:e5:ca
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQiH756zT8LhUQwsDAXqm2EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyNzI2MWQ3MTUzNDhiZmQ3M2NlOWRiYjcyNDg4NjU2OTkz
YmEyZjEwHhcNMjUwMTAxMTM0ODEzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNTc5YTNmZTU5MzgyN2Y3MzE4ZWFlNjY4M2Q2M2UwZTc0Nzg4M2FmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAszDBE+Hw5tRPhoE8uSVQa9x9MlNL
osjGWq6onZqevUbN/03ry2oFTDLw/zbg0Y83ic7VIMAyOgs6oV3MidMczejyXEid
zdImfMwLSOgQ+oxBUHFjVUAyaaPESHACKXBvLFZLj0WAqWwKhR7iE5NPl6Hi48ib
Izxz3UopkeWJodUO1mRgMAe/MZdpbjL6VcP4nhbQZ3r5+ZVy8riMHYYCuYW0eSHG
izgiXjhhJEQCxehpzhQl/yr1q8lqHCF7NT/AEaHC4nXG+qiToICETQ4prkWVEHSY
AM42txUsqtQeDxJfoohrVwZpzHi1Jgcvujsa4s8AV8Od8OYSvIQ7VOlWHwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLV5o/5ZOCf3MY6uZoPWPg50eIOvMB8GA1UdIwQY
MBaAFLJyYdcVNIv9c86du3JIhlaZO6LxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc25KaDF4VTBpXzF6enAyN2NraUdWcGs3b3ZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9hYmE1MDItZDE5MS00ZmQ3LWE3Y2Yt
NTA0ZjI3NjY3NjBmLzEvdFhtal9sazRKX2N4anE1bWc5WS1EblI0ZzY4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS9hYmE1MDItZDE5MS00ZmQ3LWE3Y2YtNTA0ZjI3NjY3NjBm
LzEvc25KaDF4VTBpXzF6enAyN2NraUdWcGs3b3ZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYQBMA0G
CSqGSIb3DQEBCwUAA4IBAQCGPuX9dwmvR3ox2XWsb/+UYQ9PebDGjqBqWpG4W0t/
SdQv3NhqeMkhzdOchrwKZP5tSRBgT92igEikjOJ3qxmDbMeXJLpuUdphIJCZn7vU
BC7FHkdwMDYUhICgUGZGY3R71uLaGmQJ46Dy5vtRizU4rO/M2EktXqVbapXEnXt7
1y5rRA637UryIbU5q1QQzb/jNjVfypFYhqaS0GTtD+jnqDVZJT96ch2lphFNSq0M
Suhh3Y1Q81psDlaCQ3sPO9akXLVxDXdFggFs6CcilTNaEZ9FeusjMmoyszIHzUjG
UtjXsoupZq7eGofDXjBHSHXsPstTDLE+Pc84iXaE1+XK
-----END CERTIFICATE-----
Generated at Fri Apr 4 19:38:16 2025 by rpki-client