Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/03NvcHNW_HvzI4W4SJxPrTHMgwA.roa
File: 03NvcHNW_HvzI4W4SJxPrTHMgwA.roa (raw, json)
Hash identifier: j/VFssXZ94cBB4K6pkvYintaHrw1Gm2GXSnyGsSNkic=
Subject key identifier: D3:73:6F:70:73:56:FC:7B:F3:23:85:B8:48:9C:4F:AD:31:CC:83:00
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 0195243DC50F317B9B888A39D0E2C3CAA398
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/03NvcHNW_HvzI4W4SJxPrTHMgwA.roa
Signing time: Thu 20 Feb 2025 16:43:02 +0000
ROA not before: Thu 20 Feb 2025 16:43:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21859
IP address blocks: 45.8.205.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:24:3d:c5:0f:31:7b:9b:88:8a:39:d0:e2:c3:ca:a3:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Feb 20 16:43:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d3736f707356fc7bf32385b8489c4fad31cc8300
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:68:63:86:0a:4b:63:71:85:2f:bb:73:65:9f:
e3:29:09:08:fc:cc:09:6a:02:75:f8:27:d7:24:5b:
01:17:eb:42:73:a6:8a:a0:ed:d1:b6:9c:6e:7b:14:
e8:24:21:3c:a4:cf:03:b3:3e:54:c0:c1:09:d0:8f:
e7:38:a6:19:d5:e1:c0:dd:1a:50:60:c4:44:4f:be:
8d:6f:37:c1:8d:7e:68:f3:45:a5:1d:e3:9a:bc:39:
7b:0c:f8:b1:57:77:63:e5:03:d1:a0:9f:54:63:21:
ab:3f:c9:95:3d:74:50:53:78:f2:8d:4f:da:44:3e:
e6:38:31:3b:e0:7f:b1:a1:49:70:bf:2f:5f:0c:a3:
96:47:8e:c9:e4:18:9e:93:75:27:af:82:64:1e:7a:
ec:14:bf:80:87:4b:13:96:fe:8c:cb:67:24:30:0e:
cb:af:c1:5a:02:62:86:f0:4b:c2:50:6e:07:d3:76:
a7:af:9b:3b:40:2a:20:cd:45:cd:cd:11:0f:29:db:
a8:bc:b8:9f:25:2e:3f:9e:d1:c2:2f:bc:43:c7:d0:
8a:eb:62:1f:51:27:e9:95:8a:ce:81:a9:37:17:b9:
e3:0b:a9:f8:b5:a5:c8:0f:43:83:02:20:c5:da:8d:
1e:43:d6:dd:b1:93:0e:de:13:1e:9a:e3:9d:3f:b5:
e7:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:73:6F:70:73:56:FC:7B:F3:23:85:B8:48:9C:4F:AD:31:CC:83:00
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/03NvcHNW_HvzI4W4SJxPrTHMgwA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.205.0/24
Signature Algorithm: sha256WithRSAEncryption
27:31:db:3a:ad:86:78:dc:1a:ac:ab:6d:63:4d:ca:7b:f5:ff:
26:f9:e5:a2:c4:f0:39:06:81:e7:f9:90:ad:5f:d7:c4:19:ff:
26:6a:51:3f:37:67:65:e3:2a:89:96:bc:f5:7d:d4:73:45:82:
2e:0d:ca:8f:7b:f6:c1:fc:31:3b:46:58:6f:eb:b8:44:f9:5b:
96:37:38:73:ac:bc:a7:69:42:f2:c7:74:2b:4e:61:94:cb:65:
c1:ac:99:59:57:45:43:a1:f3:49:cc:e8:6d:c8:22:33:ef:1a:
52:f4:c4:34:6a:b1:f8:ed:b7:e9:de:ae:fa:4e:26:91:38:23:
3f:35:53:64:b8:bf:ee:02:97:7a:0d:e4:5d:35:4f:6d:b2:4d:
ae:d8:93:b9:3c:3c:db:8d:c2:55:1f:a9:27:85:59:b3:5c:aa:
f3:9f:94:c2:17:83:53:96:46:dd:a4:d3:88:86:4a:92:51:52:
2b:a9:f4:6c:c9:88:75:10:54:1d:0b:40:53:63:18:e1:bc:56:
01:14:e7:c8:43:25:2e:79:90:da:d3:c4:a0:b0:fb:a9:1c:3d:
d2:27:5d:8a:56:f3:de:b4:33:06:fb:d1:87:c5:51:1f:dc:e1:
6d:84:8d:54:ec:33:4b:b2:d2:5b:ab:c0:c5:02:43:df:01:22:
fc:5d:d1:fc
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZUkPcUPMXubiIo50OLDyqOYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyZmRiNjc2NTRkZjYxODRlN2Q2MGM0MTUwZWE5NTMzYzJj
Zjk3MDQwHhcNMjUwMjIwMTY0MzAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMzczNmY3MDczNTZmYzdiZjMyMzg1Yjg0ODljNGZhZDMxY2M4MzAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu2hjhgpLY3GFL7tzZZ/jKQkI/MwJ
agJ1+CfXJFsBF+tCc6aKoO3RtpxuexToJCE8pM8Dsz5UwMEJ0I/nOKYZ1eHA3RpQ
YMRET76NbzfBjX5o80WlHeOavDl7DPixV3dj5QPRoJ9UYyGrP8mVPXRQU3jyjU/a
RD7mODE74H+xoUlwvy9fDKOWR47J5Biek3Unr4JkHnrsFL+Ah0sTlv6My2ckMA7L
r8FaAmKG8EvCUG4H03anr5s7QCogzUXNzREPKduovLifJS4/ntHCL7xDx9CK62If
USfplYrOgak3F7njC6n4taXID0ODAiDF2o0eQ9bdsZMO3hMemuOdP7XnGwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNNzb3BzVvx78yOFuEicT60xzIMAMB8GA1UdIwQY
MBaAFGL9tnZU32GE59YMQVDqlTPCz5cEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTct
ZTg2MTIxYzU5NGRmLzEvMDNOdmNITldfSHZ6STRXNFNKeFByVEhNZ3dBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTctZTg2MTIxYzU5NGRm
LzEvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALQjNMA0G
CSqGSIb3DQEBCwUAA4IBAQAnMds6rYZ43Bqsq21jTcp79f8m+eWixPA5BoHn+ZCt
X9fEGf8malE/N2dl4yqJlrz1fdRzRYIuDcqPe/bB/DE7Rlhv67hE+VuWNzhzrLyn
aULyx3QrTmGUy2XBrJlZV0VDofNJzOhtyCIz7xpS9MQ0arH47bfp3q76TiaROCM/
NVNkuL/uApd6DeRdNU9tsk2u2JO5PDzbjcJVH6knhVmzXKrzn5TCF4NTlkbdpNOI
hkqSUVIrqfRsyYh1EFQdC0BTYxjhvFYBFOfIQyUueZDa08SgsPupHD3SJ12KVvPe
tDMG+9GHxVEf3OFthI1U7DNLstJbq8DFAkPfASL8XdH8
-----END CERTIFICATE-----
Generated at Sun Apr 6 19:43:53 2025 by rpki-client