Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/90c2ef-e0ee-4dcf-9dd5-9c7fdbdad0db/1/ouEBNeKNVV3DDs9Gedc2UuPBsK8.roa
File: ouEBNeKNVV3DDs9Gedc2UuPBsK8.roa (raw, json)
Hash identifier: GZrF69M6OPQLUdJhkYXuI1+6l1nLd7gwKqn+8etYqy4=
Subject key identifier: A2:E1:01:35:E2:8D:55:5D:C3:0E:CF:46:79:D7:36:52:E3:C1:B0:AF
Certificate issuer: /CN=7485bd93bbaae9d7c973ab386872f1148bb258d1
Certificate serial: 018CC26D6A493D72BE469AEC1A842D7BACC3
Authority key identifier: 74:85:BD:93:BB:AA:E9:D7:C9:73:AB:38:68:72:F1:14:8B:B2:58:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dIW9k7uq6dfJc6s4aHLxFIuyWNE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/90c2ef-e0ee-4dcf-9dd5-9c7fdbdad0db/1/ouEBNeKNVV3DDs9Gedc2UuPBsK8.roa
Signing time: Mon 01 Jan 2024 00:29:59 +0000
ROA not before: Mon 01 Jan 2024 00:29:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212655
IP address blocks: 45.92.44.0/22 maxlen: 24
2a0e:1d40::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:6a:49:3d:72:be:46:9a:ec:1a:84:2d:7b:ac:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7485bd93bbaae9d7c973ab386872f1148bb258d1
Validity
Not Before: Jan 1 00:29:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a2e10135e28d555dc30ecf4679d73652e3c1b0af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:7d:af:06:61:c1:23:70:dd:de:fc:f3:c9:f8:
b1:d9:73:94:42:61:02:47:6d:9f:42:7e:19:a5:f0:
3a:d7:0e:d4:c1:f7:88:61:df:52:1b:c2:b5:e2:76:
d8:55:e3:3c:10:ec:43:af:25:0f:ba:bc:a5:20:c0:
ac:df:44:d8:13:d4:51:94:cb:fe:2d:fe:6d:be:eb:
27:63:d8:5e:62:7c:90:00:15:3d:90:b0:f2:b1:36:
42:a0:fe:64:6a:fe:1b:28:c5:05:be:63:01:0d:4e:
73:9c:13:ae:0b:84:d1:08:33:32:c1:7b:fd:cd:b9:
47:d8:56:25:77:ca:a8:04:29:f3:37:48:24:e8:3a:
67:d0:95:f6:5c:f6:74:0a:bc:90:d8:77:53:0e:6c:
3e:10:98:e4:fe:65:0f:7f:20:ab:5d:07:e7:64:08:
51:88:38:a9:08:c2:17:97:73:1d:53:78:7b:d2:63:
7e:e8:9f:d8:f1:f5:a5:4f:b1:01:22:09:82:a2:a4:
67:7b:eb:c7:2f:7a:51:31:dd:28:04:b9:52:7d:8e:
df:94:9b:42:68:c1:96:ce:2a:38:bd:ad:1e:04:6c:
88:24:74:f5:4b:7e:12:c9:b8:12:6d:0a:ad:63:bb:
39:a9:12:d4:bb:a8:a0:34:dc:13:69:3c:59:1e:1f:
0c:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:E1:01:35:E2:8D:55:5D:C3:0E:CF:46:79:D7:36:52:E3:C1:B0:AF
X509v3 Authority Key Identifier:
keyid:74:85:BD:93:BB:AA:E9:D7:C9:73:AB:38:68:72:F1:14:8B:B2:58:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dIW9k7uq6dfJc6s4aHLxFIuyWNE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/90c2ef-e0ee-4dcf-9dd5-9c7fdbdad0db/1/ouEBNeKNVV3DDs9Gedc2UuPBsK8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/90c2ef-e0ee-4dcf-9dd5-9c7fdbdad0db/1/dIW9k7uq6dfJc6s4aHLxFIuyWNE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.92.44.0/22
IPv6:
2a0e:1d40::/29
Signature Algorithm: sha256WithRSAEncryption
40:08:93:37:ae:37:84:f3:49:65:0d:d7:39:67:35:1d:bb:0e:
9c:5d:7a:f1:fa:2f:6c:f4:aa:68:a9:c5:21:a3:eb:4a:8c:7a:
c1:b4:ef:f9:5f:74:44:64:cf:75:f9:33:dc:47:b2:f4:b1:0c:
23:4a:c4:d0:d6:60:c8:f1:34:5d:32:a6:0c:eb:7b:02:6d:5f:
96:1e:87:a9:55:c5:dc:b9:a2:dd:19:dc:05:6d:af:9a:64:89:
24:6d:df:d0:8d:32:92:c8:15:11:91:49:3f:e5:d5:60:0d:41:
e9:c3:b5:aa:02:1b:0b:ce:06:71:b5:a1:75:26:d2:41:15:d9:
fb:8c:d7:2b:c8:4e:30:bf:df:91:a7:94:63:c2:e6:3b:90:9f:
a8:2a:c1:7d:5b:58:1c:1f:54:f2:b1:72:7f:87:54:84:bb:43:
49:06:d3:59:a2:7c:a2:b6:56:28:d7:a4:78:89:c8:78:89:a0:
3f:fe:9e:c3:8e:87:a3:27:56:04:59:96:34:da:a2:c5:0d:11:
14:bb:20:ca:3a:ed:5b:f6:88:d5:5d:13:d4:04:92:01:fc:ac:
96:6a:1a:23:f9:0b:0e:38:a5:eb:7c:67:10:8c:c8:4a:0f:89:
ad:20:59:ab:7b:60:60:97:28:9a:a5:5a:26:cb:32:ce:28:b6:
33:e8:77:c1
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYzCbWpJPXK+RprsGoQte6zDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0ODViZDkzYmJhYWU5ZDdjOTczYWIzODY4NzJmMTE0OGJi
MjU4ZDEwHhcNMjQwMTAxMDAyOTU5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMmUxMDEzNWUyOGQ1NTVkYzMwZWNmNDY3OWQ3MzY1MmUzYzFiMGFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAun2vBmHBI3Dd3vzzyfix2XOUQmEC
R22fQn4ZpfA61w7UwfeIYd9SG8K14nbYVeM8EOxDryUPurylIMCs30TYE9RRlMv+
Lf5tvusnY9heYnyQABU9kLDysTZCoP5kav4bKMUFvmMBDU5znBOuC4TRCDMywXv9
zblH2FYld8qoBCnzN0gk6Dpn0JX2XPZ0CryQ2HdTDmw+EJjk/mUPfyCrXQfnZAhR
iDipCMIXl3MdU3h70mN+6J/Y8fWlT7EBIgmCoqRne+vHL3pRMd0oBLlSfY7flJtC
aMGWzio4va0eBGyIJHT1S34SybgSbQqtY7s5qRLUu6igNNwTaTxZHh8MwwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFKLhATXijVVdww7PRnnXNlLjwbCvMB8GA1UdIwQY
MBaAFHSFvZO7qunXyXOrOGhy8RSLsljRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZElXOWs3dXE2ZGZKYzZzNGFITHhGSXV5V05FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC85MGMyZWYtZTBlZS00ZGNmLTlkZDUt
OWM3ZmRiZGFkMGRiLzEvb3VFQk5lS05WVjNERHM5R2VkYzJVdVBCc0s4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC85MGMyZWYtZTBlZS00ZGNmLTlkZDUtOWM3ZmRiZGFkMGRi
LzEvZElXOWs3dXE2ZGZKYzZzNGFITHhGSXV5V05FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLVwsMA0E
AgACMAcDBQMqDh1AMA0GCSqGSIb3DQEBCwUAA4IBAQBACJM3rjeE80llDdc5ZzUd
uw6cXXrx+i9s9KpoqcUho+tKjHrBtO/5X3REZM91+TPcR7L0sQwjSsTQ1mDI8TRd
MqYM63sCbV+WHoepVcXcuaLdGdwFba+aZIkkbd/QjTKSyBURkUk/5dVgDUHpw7Wq
AhsLzgZxtaF1JtJBFdn7jNcryE4wv9+Rp5RjwuY7kJ+oKsF9W1gcH1TysXJ/h1SE
u0NJBtNZonyitlYo16R4ich4iaA//p7DjoejJ1YEWZY02qLFDREUuyDKOu1b9ojV
XRPUBJIB/KyWahoj+QsOOKXrfGcQjMhKD4mtIFmre2BglyiapVomyzLOKLYz6HfB
-----END CERTIFICATE-----
Generated at Thu Mar 13 20:49:49 2025 by rpki-client