Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/sDrv6ds57QYfp4Z_4o5IpblURKI.roa
File: sDrv6ds57QYfp4Z_4o5IpblURKI.roa (raw, json)
Hash identifier: Y8MxO27e+WV4vIqzW7fZxZuurHymmQUKVTNCec7B22g=
Subject key identifier: B0:3A:EF:E9:DB:39:ED:06:1F:A7:86:7F:E2:8E:48:A5:B9:54:44:A2
Certificate issuer: /CN=23446da7a70bce773ec2bc1655aae30c3c18412c
Certificate serial: 019425FC1256528AB1FE59472361957F74A6
Authority key identifier: 23:44:6D:A7:A7:0B:CE:77:3E:C2:BC:16:55:AA:E3:0C:3C:18:41:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I0Rtp6cLznc-wrwWVarjDDwYQSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/sDrv6ds57QYfp4Z_4o5IpblURKI.roa
Signing time: Thu 02 Jan 2025 07:47:44 +0000
ROA not before: Thu 02 Jan 2025 07:47:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 55410
IP address blocks: 45.142.52.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:12:56:52:8a:b1:fe:59:47:23:61:95:7f:74:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23446da7a70bce773ec2bc1655aae30c3c18412c
Validity
Not Before: Jan 2 07:47:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b03aefe9db39ed061fa7867fe28e48a5b95444a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:3e:3b:7f:43:02:db:a1:a3:1a:35:dd:27:c1:
b1:e5:20:b6:b5:e6:76:5a:f5:fc:50:6d:f0:96:cf:
dc:c8:84:fc:73:94:df:72:e6:a8:6b:7f:4b:a6:f2:
ff:3c:5d:7e:c5:e2:ad:46:9c:c5:e8:93:ae:7d:84:
4f:37:02:c9:1c:e6:56:65:46:e2:36:ca:e5:d3:83:
fc:2a:17:fe:85:45:48:b9:b7:4c:f9:dc:91:57:65:
6a:98:d0:db:1b:e1:59:4b:f6:a6:4b:80:1f:45:d5:
c4:6b:26:e0:73:c9:8c:66:d5:de:0e:51:71:d1:84:
cf:ac:8e:48:1c:65:d4:44:4b:85:95:95:01:85:a4:
0e:6d:bb:13:a4:8a:92:d9:c7:45:21:e2:6a:30:c7:
2c:af:67:62:0e:ef:66:fc:b4:d3:87:cb:8c:ce:b0:
c5:2c:2d:62:35:16:29:a2:e7:0b:d6:df:c1:77:77:
e2:47:1a:d5:b1:38:88:89:53:93:72:47:33:82:34:
34:50:19:b9:0d:94:ba:9c:2e:62:f8:36:f9:cf:e9:
bc:26:93:62:0d:35:09:04:9d:74:11:a4:b8:64:72:
e9:32:ce:a1:d3:67:c4:a0:1e:3c:bc:6d:06:34:e7:
d8:a3:2e:8c:a6:56:b0:96:1c:6a:c1:71:bb:7c:71:
ec:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:3A:EF:E9:DB:39:ED:06:1F:A7:86:7F:E2:8E:48:A5:B9:54:44:A2
X509v3 Authority Key Identifier:
keyid:23:44:6D:A7:A7:0B:CE:77:3E:C2:BC:16:55:AA:E3:0C:3C:18:41:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I0Rtp6cLznc-wrwWVarjDDwYQSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/sDrv6ds57QYfp4Z_4o5IpblURKI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.52.0/22
Signature Algorithm: sha256WithRSAEncryption
8b:fd:4b:14:2f:03:12:85:3c:c7:56:dc:86:9e:fe:84:39:9d:
2b:08:07:fe:97:bf:01:a9:59:22:ad:7a:81:ea:27:10:f7:bd:
8a:22:bf:ac:cb:3c:5c:a7:35:b3:21:1d:e4:fd:0f:89:4f:67:
15:16:bc:28:37:48:50:79:51:8a:65:86:42:9f:42:77:b5:aa:
1e:47:56:10:5a:c3:fe:4f:c7:86:30:49:d9:84:e9:ae:56:0d:
aa:db:33:95:f0:e0:d1:c5:1a:f6:65:40:31:ec:91:32:b6:7b:
cc:8d:b0:56:6a:08:80:c8:07:c5:a6:4f:5b:4f:b4:ad:ea:b8:
85:a0:0e:5a:3a:6d:30:f9:e1:ce:25:a3:f1:66:7d:75:ed:f2:
a4:39:0e:bc:98:fa:ae:73:b3:eb:c7:50:d2:b1:df:ef:4f:c8:
63:62:81:27:4e:17:b3:fc:47:1c:46:9f:7c:8a:cd:e8:dc:92:
b6:43:0e:f3:51:b7:b8:0d:25:6c:69:24:df:88:b9:4a:b6:07:
d1:f9:a9:dd:c8:10:27:d3:78:0b:0b:7f:62:4e:c2:71:6e:c0:
ac:f7:74:06:41:ca:6d:2a:fe:f0:b3:7c:99:cc:5b:76:b3:cb:
7e:15:3c:5e:05:d2:1f:bb:ac:85:06:05:9c:8e:5f:61:91:47:
96:5b:45:70
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQl/BJWUoqx/llHI2GVf3SmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzNDQ2ZGE3YTcwYmNlNzczZWMyYmMxNjU1YWFlMzBjM2Mx
ODQxMmMwHhcNMjUwMTAyMDc0NzQ0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMDNhZWZlOWRiMzllZDA2MWZhNzg2N2ZlMjhlNDhhNWI5NTQ0NGEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxD47f0MC26GjGjXdJ8Gx5SC2teZ2
WvX8UG3wls/cyIT8c5Tfcuaoa39LpvL/PF1+xeKtRpzF6JOufYRPNwLJHOZWZUbi
Nsrl04P8Khf+hUVIubdM+dyRV2VqmNDbG+FZS/amS4AfRdXEaybgc8mMZtXeDlFx
0YTPrI5IHGXUREuFlZUBhaQObbsTpIqS2cdFIeJqMMcsr2diDu9m/LTTh8uMzrDF
LC1iNRYpoucL1t/Bd3fiRxrVsTiIiVOTckczgjQ0UBm5DZS6nC5i+Db5z+m8JpNi
DTUJBJ10EaS4ZHLpMs6h02fEoB48vG0GNOfYoy6MplawlhxqwXG7fHHs8QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLA67+nbOe0GH6eGf+KOSKW5VESiMB8GA1UdIwQY
MBaAFCNEbaenC853PsK8FlWq4ww8GEEsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSTBSdHA2Y0x6bmMtd3J3V1ZhcmpERHdZUVN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy9mMzU0OWYtMThmNy00OGIwLTkwMWQt
MjVjYzlkNmNmYmI5LzEvc0RydjZkczU3UVlmcDRaXzRvNUlwYmxVUktJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy9mMzU0OWYtMThmNy00OGIwLTkwMWQtMjVjYzlkNmNmYmI5
LzEvSTBSdHA2Y0x6bmMtd3J3V1ZhcmpERHdZUVN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLY40MA0G
CSqGSIb3DQEBCwUAA4IBAQCL/UsULwMShTzHVtyGnv6EOZ0rCAf+l78BqVkirXqB
6icQ972KIr+syzxcpzWzIR3k/Q+JT2cVFrwoN0hQeVGKZYZCn0J3taoeR1YQWsP+
T8eGMEnZhOmuVg2q2zOV8ODRxRr2ZUAx7JEytnvMjbBWagiAyAfFpk9bT7St6riF
oA5aOm0w+eHOJaPxZn117fKkOQ68mPquc7Prx1DSsd/vT8hjYoEnThez/EccRp98
is3o3JK2Qw7zUbe4DSVsaSTfiLlKtgfR+andyBAn03gLC39iTsJxbsCs93QGQcpt
Kv7ws3yZzFt2s8t+FTxeBdIfu6yFBgWcjl9hkUeWW0Vw
-----END CERTIFICATE-----
Generated at Mon Apr 7 01:18:06 2025 by rpki-client