Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/fMwuXwZKVuW6Et1z6Bbj_f4RViI.roa
File: fMwuXwZKVuW6Et1z6Bbj_f4RViI.roa (raw, json)
Hash identifier: y5fmHfel3mUciVehOASKD+VNK/HEXB8PvpldcX1RDso=
Subject key identifier: 7C:CC:2E:5F:06:4A:56:E5:BA:12:DD:73:E8:16:E3:FD:FE:11:56:22
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 019421B23404A0DDF47D8E05113DB2204B3F
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/fMwuXwZKVuW6Et1z6Bbj_f4RViI.roa
Signing time: Wed 01 Jan 2025 11:48:34 +0000
ROA not before: Wed 01 Jan 2025 11:48:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25369
IP address blocks: 45.8.184.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:34:04:a0:dd:f4:7d:8e:05:11:3d:b2:20:4b:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Jan 1 11:48:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7ccc2e5f064a56e5ba12dd73e816e3fdfe115622
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:3d:fd:ca:3a:de:06:92:b7:1d:33:00:9c:25:
c8:a2:31:17:e6:73:78:3a:45:cd:76:3a:fa:7f:1f:
af:3b:60:b8:d6:3f:c9:c5:29:ed:cf:d1:ab:fb:bd:
b1:5d:0f:b9:15:d0:42:7b:39:0f:69:a5:7e:71:bd:
9d:ea:0c:19:e9:aa:09:c7:f7:f9:92:d7:6d:54:c8:
02:11:8d:f4:6f:e1:98:ed:f2:e4:36:c5:bf:4c:49:
75:0a:37:5d:3d:42:ed:a0:17:bf:73:e3:a6:dd:7b:
ca:35:be:b9:4a:19:6a:99:41:9f:31:77:ac:74:ab:
96:94:fc:c4:a0:de:96:4a:f5:e7:fb:74:b8:b0:72:
83:df:08:4a:d3:32:d6:74:df:21:55:3d:30:24:a6:
62:ac:a3:a0:3f:dd:2c:bf:d4:d0:4d:16:8c:f8:87:
3e:be:d6:98:01:ab:ab:83:7b:2b:29:ae:27:7e:17:
d1:a1:56:f5:78:44:09:17:10:23:ae:f7:cb:65:65:
a9:c2:46:1e:04:d3:ae:83:54:f0:da:0b:a6:a6:78:
5f:cf:f6:3c:6f:f4:66:a8:de:3f:e9:df:37:4c:f2:
89:ec:f0:d9:1a:04:11:68:ca:97:4f:e3:ab:d5:5e:
50:cc:b5:59:e9:37:ff:ae:28:d1:ba:0b:42:47:75:
0d:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:CC:2E:5F:06:4A:56:E5:BA:12:DD:73:E8:16:E3:FD:FE:11:56:22
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/fMwuXwZKVuW6Et1z6Bbj_f4RViI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.184.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:6a:16:f8:76:38:49:84:4d:d0:54:07:18:dd:be:de:b6:1e:
b2:f1:20:47:d5:8d:41:bd:66:26:92:56:e3:85:7e:57:f1:fc:
dd:dc:ab:c3:92:5a:d5:b6:50:ec:2d:f2:c9:4d:77:0b:a4:bc:
aa:73:c3:27:7a:b4:70:0c:6d:b0:e0:4c:b4:e3:bd:39:ec:8c:
ef:e1:77:a8:c4:2b:c3:df:29:9b:84:53:73:54:f4:9d:4e:52:
98:22:c8:98:27:56:47:f8:1e:72:74:8d:b1:0b:a2:b3:6e:e7:
56:70:a7:76:d8:22:ed:1a:42:9c:78:84:88:fd:e2:0e:f4:db:
15:3e:33:9d:13:66:f0:c4:76:66:51:a1:db:07:c8:70:f0:5e:
53:58:78:72:2f:7f:ff:3a:76:15:2d:74:4d:3e:45:2a:f1:32:
15:27:e7:1e:40:75:f0:ba:86:c3:72:ba:e6:da:25:f2:8e:95:
63:84:ee:6b:f3:32:3f:5e:5d:92:cc:e5:02:4b:16:01:7e:57:
02:01:e7:d4:19:93:9f:73:a5:aa:0b:62:fb:8a:b2:f7:5f:a6:
12:bd:52:23:96:73:a3:5a:a6:9f:91:42:f7:02:56:94:49:45:
c2:c0:57:91:49:8e:c8:e5:93:55:a7:fb:f1:68:fb:a4:27:80:
5a:a7:0b:cd
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQhsjQEoN30fY4FET2yIEs/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyZmRiNjc2NTRkZjYxODRlN2Q2MGM0MTUwZWE5NTMzYzJj
Zjk3MDQwHhcNMjUwMTAxMTE0ODM0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3Y2NjMmU1ZjA2NGE1NmU1YmExMmRkNzNlODE2ZTNmZGZlMTE1NjIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxj39yjreBpK3HTMAnCXIojEX5nN4
OkXNdjr6fx+vO2C41j/JxSntz9Gr+72xXQ+5FdBCezkPaaV+cb2d6gwZ6aoJx/f5
ktdtVMgCEY30b+GY7fLkNsW/TEl1CjddPULtoBe/c+Om3XvKNb65ShlqmUGfMXes
dKuWlPzEoN6WSvXn+3S4sHKD3whK0zLWdN8hVT0wJKZirKOgP90sv9TQTRaM+Ic+
vtaYAaurg3srKa4nfhfRoVb1eEQJFxAjrvfLZWWpwkYeBNOug1Tw2gumpnhfz/Y8
b/RmqN4/6d83TPKJ7PDZGgQRaMqXT+Or1V5QzLVZ6Tf/rijRugtCR3UNjQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHzMLl8GSlbluhLdc+gW4/3+EVYiMB8GA1UdIwQY
MBaAFGL9tnZU32GE59YMQVDqlTPCz5cEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTct
ZTg2MTIxYzU5NGRmLzEvZk13dVh3WktWdVc2RXQxejZCYmpfZjRSVmlJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTctZTg2MTIxYzU5NGRm
LzEvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALQi4MA0G
CSqGSIb3DQEBCwUAA4IBAQC8ahb4djhJhE3QVAcY3b7eth6y8SBH1Y1BvWYmklbj
hX5X8fzd3KvDklrVtlDsLfLJTXcLpLyqc8MnerRwDG2w4Ey047057Izv4XeoxCvD
3ymbhFNzVPSdTlKYIsiYJ1ZH+B5ydI2xC6KzbudWcKd22CLtGkKceISI/eIO9NsV
PjOdE2bwxHZmUaHbB8hw8F5TWHhyL3//OnYVLXRNPkUq8TIVJ+ceQHXwuobDcrrm
2iXyjpVjhO5r8zI/Xl2SzOUCSxYBflcCAefUGZOfc6WqC2L7irL3X6YSvVIjlnOj
WqafkUL3AlaUSUXCwFeRSY7I5ZNVp/vxaPukJ4BapwvN
-----END CERTIFICATE-----
Generated at Sat Apr 5 21:45:03 2025 by rpki-client