Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/087c77-8fa0-41a1-b28e-8010f13ba15a/1/0wd8USbWCypDvxsrm2rdEEzeU_Q.roa
File: 0wd8USbWCypDvxsrm2rdEEzeU_Q.roa (raw, json)
Hash identifier: 4BLoMU8VT88SvJWyIY1jDuGzUxaGaHRq5WqqLmwX80o=
Subject key identifier: D3:07:7C:51:26:D6:0B:2A:43:BF:1B:2B:9B:6A:DD:10:4C:DE:53:F4
Certificate issuer: /CN=480526dbf3d578ed8b630c0e71dbd18cd547a5cd
Certificate serial: 0194266BE4536D62F2511D348B1A7A08040C
Authority key identifier: 48:05:26:DB:F3:D5:78:ED:8B:63:0C:0E:71:DB:D1:8C:D5:47:A5:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAUm2_PVeO2LYwwOcdvRjNVHpc0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/087c77-8fa0-41a1-b28e-8010f13ba15a/1/0wd8USbWCypDvxsrm2rdEEzeU_Q.roa
Signing time: Thu 02 Jan 2025 09:49:52 +0000
ROA not before: Thu 02 Jan 2025 09:49:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208247
IP address blocks: 45.151.86.0/23 maxlen: 23
45.151.86.0/24 maxlen: 24
45.151.87.0/24 maxlen: 24
2a0f:1500::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:e4:53:6d:62:f2:51:1d:34:8b:1a:7a:08:04:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=480526dbf3d578ed8b630c0e71dbd18cd547a5cd
Validity
Not Before: Jan 2 09:49:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d3077c5126d60b2a43bf1b2b9b6add104cde53f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:56:87:19:2a:96:6d:f2:d4:dc:d1:c0:ba:d0:
6f:a1:ad:01:2d:aa:e1:07:92:d2:87:de:69:bf:52:
2a:fb:19:18:43:9c:ba:04:68:24:62:3d:62:62:15:
8a:a9:d4:e3:4c:92:89:47:32:2d:4b:c4:9b:f5:da:
95:62:8c:62:66:46:c8:06:b7:4d:02:14:5b:59:42:
4c:45:84:1c:55:d2:14:f5:49:dd:b8:43:50:f7:18:
a0:58:10:92:09:be:44:2d:e7:a8:ee:3e:6f:23:1c:
f0:f7:c4:a0:99:a5:a6:1b:1a:e1:50:69:aa:1d:9d:
f3:77:3a:fe:9c:32:18:4e:ce:ac:4e:01:70:56:46:
fd:02:96:a8:02:c4:47:64:99:87:40:03:56:73:97:
5c:f1:82:43:19:bf:f4:d2:f3:a1:9c:d8:12:31:a2:
b6:c7:8f:94:a1:66:5f:46:6e:a2:a5:3d:33:a9:26:
0c:b4:ff:d4:37:50:d1:27:30:9d:79:6c:8a:7f:93:
5a:87:9c:fe:9a:1b:e4:63:11:c9:76:28:f7:d8:de:
e7:8e:41:ac:1c:4c:01:e7:86:d7:6e:d4:07:03:7d:
96:0c:ee:4d:e4:44:69:6e:e1:b1:53:d8:21:1c:2a:
d6:6c:f0:00:e1:d0:cb:42:30:4f:b8:13:78:60:27:
07:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:07:7C:51:26:D6:0B:2A:43:BF:1B:2B:9B:6A:DD:10:4C:DE:53:F4
X509v3 Authority Key Identifier:
keyid:48:05:26:DB:F3:D5:78:ED:8B:63:0C:0E:71:DB:D1:8C:D5:47:A5:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAUm2_PVeO2LYwwOcdvRjNVHpc0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/087c77-8fa0-41a1-b28e-8010f13ba15a/1/0wd8USbWCypDvxsrm2rdEEzeU_Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/087c77-8fa0-41a1-b28e-8010f13ba15a/1/SAUm2_PVeO2LYwwOcdvRjNVHpc0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.86.0/23
IPv6:
2a0f:1500::/29
Signature Algorithm: sha256WithRSAEncryption
2f:d6:16:fc:18:e3:3d:c9:6e:6a:46:fd:fb:2b:2d:98:30:52:
36:72:9b:c4:0d:91:a3:ff:54:32:37:aa:67:b8:b0:53:5d:95:
b8:bc:f5:c0:73:ee:37:48:76:55:28:8c:42:72:0f:b7:6f:1f:
df:ed:1d:a5:09:52:53:29:f6:a4:e0:9e:8d:61:b9:f7:34:8f:
75:84:48:c4:91:88:e5:f2:ba:60:7e:88:fa:1c:44:e3:fb:8f:
51:c1:97:6c:ec:fd:f3:85:42:92:ea:3d:6e:cb:d1:d7:24:f9:
f4:12:90:0e:4c:6c:f2:7c:3b:5d:c2:7c:60:d5:86:0b:03:be:
7b:30:a0:f0:94:2c:e1:4e:cc:a5:00:f9:9d:d1:07:50:df:1c:
c1:67:26:7a:dd:b1:da:e6:4c:c2:5b:2f:23:be:a4:4b:89:6f:
f0:fe:a2:2e:22:82:2b:3f:c6:09:bd:74:ca:70:c8:65:d0:7f:
45:0d:94:dd:8e:c6:ab:21:b0:de:24:5f:7b:4c:86:33:68:10:
5e:67:ef:f9:f9:7e:fb:fb:6c:8d:78:ab:c1:32:29:73:57:80:
9b:90:f5:2b:bc:77:c6:b6:2c:56:6b:ef:f9:14:cc:fc:67:b4:
89:cf:70:cf:1f:30:44:e8:1c:32:6c:76:05:d5:50:13:2e:4f:
d0:3b:99:89
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZQma+RTbWLyUR00ixp6CAQMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4MDUyNmRiZjNkNTc4ZWQ4YjYzMGMwZTcxZGJkMThjZDU0
N2E1Y2QwHhcNMjUwMTAyMDk0OTUyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMzA3N2M1MTI2ZDYwYjJhNDNiZjFiMmI5YjZhZGQxMDRjZGU1M2Y0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAllaHGSqWbfLU3NHAutBvoa0BLarh
B5LSh95pv1Iq+xkYQ5y6BGgkYj1iYhWKqdTjTJKJRzItS8Sb9dqVYoxiZkbIBrdN
AhRbWUJMRYQcVdIU9UnduENQ9xigWBCSCb5ELeeo7j5vIxzw98SgmaWmGxrhUGmq
HZ3zdzr+nDIYTs6sTgFwVkb9ApaoAsRHZJmHQANWc5dc8YJDGb/00vOhnNgSMaK2
x4+UoWZfRm6ipT0zqSYMtP/UN1DRJzCdeWyKf5Nah5z+mhvkYxHJdij32N7njkGs
HEwB54bXbtQHA32WDO5N5ERpbuGxU9ghHCrWbPAA4dDLQjBPuBN4YCcH6wIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFNMHfFEm1gsqQ78bK5tq3RBM3lP0MB8GA1UdIwQY
MBaAFEgFJtvz1Xjti2MMDnHb0YzVR6XNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0FVbTJfUFZlTzJMWXd3T2NkdlJqTlZIcGMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS8wODdjNzctOGZhMC00MWExLWIyOGUt
ODAxMGYxM2JhMTVhLzEvMHdkOFVTYldDeXBEdnhzcm0ycmRFRXplVV9RLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS8wODdjNzctOGZhMC00MWExLWIyOGUtODAxMGYxM2JhMTVh
LzEvU0FVbTJfUFZlTzJMWXd3T2NkdlJqTlZIcGMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBLZdWMA0E
AgACMAcDBQMqDxUAMA0GCSqGSIb3DQEBCwUAA4IBAQAv1hb8GOM9yW5qRv37Ky2Y
MFI2cpvEDZGj/1QyN6pnuLBTXZW4vPXAc+43SHZVKIxCcg+3bx/f7R2lCVJTKfak
4J6NYbn3NI91hEjEkYjl8rpgfoj6HETj+49RwZds7P3zhUKS6j1uy9HXJPn0EpAO
TGzyfDtdwnxg1YYLA757MKDwlCzhTsylAPmd0QdQ3xzBZyZ63bHa5kzCWy8jvqRL
iW/w/qIuIoIrP8YJvXTKcMhl0H9FDZTdjsarIbDeJF97TIYzaBBeZ+/5+X77+2yN
eKvBMilzV4CbkPUrvHfGtixWa+/5FMz8Z7SJz3DPHzBE6BwybHYF1VATLk/QO5mJ
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:50:06 2025 by rpki-client