Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/tHXbddu46M08G9mcWsiFW_fcR5E.roa
File: tHXbddu46M08G9mcWsiFW_fcR5E.roa (raw, json)
Hash identifier: Ag3jK4bipP+zcUQDIGtk7Y4jEEN+9+ADOQEaVgZB4T8=
Subject key identifier: B4:75:DB:75:DB:B8:E8:CD:3C:1B:D9:9C:5A:C8:85:5B:F7:DC:47:91
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 01950A4536023D7D39AF7C342ECE7696CEE9
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/tHXbddu46M08G9mcWsiFW_fcR5E.roa
Signing time: Sat 15 Feb 2025 15:41:02 +0000
ROA not before: Sat 15 Feb 2025 15:41:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 45.8.205.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:0a:45:36:02:3d:7d:39:af:7c:34:2e:ce:76:96:ce:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Feb 15 15:41:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b475db75dbb8e8cd3c1bd99c5ac8855bf7dc4791
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:10:b0:60:a9:7b:d3:9c:62:ac:04:86:c6:0c:
e2:ce:b7:34:e7:7f:c0:b0:6a:28:68:40:f6:02:91:
42:0f:4d:d7:b8:f1:d3:c0:4d:e3:92:80:dd:08:4b:
45:c0:30:31:e3:de:fd:8a:8b:0c:46:d9:92:73:b3:
d2:5a:d0:e1:86:d1:69:7b:76:bc:85:67:3d:aa:e7:
21:3e:12:9a:26:59:d5:4c:7c:67:23:fd:ae:88:3c:
e7:78:1f:52:a1:6c:89:a5:9a:3e:ed:63:49:9f:09:
4c:07:ec:aa:55:c3:66:0c:3e:e4:aa:92:54:9b:4f:
b9:39:26:da:b9:46:b6:c5:f1:e9:ac:69:6a:1c:07:
61:6d:40:cf:d4:f1:f1:49:e8:fa:7e:fe:3f:41:96:
5b:3f:c9:40:37:af:8d:f9:ca:6f:2b:89:bb:e2:ec:
ab:61:1e:0c:6a:fa:64:73:25:b2:7b:c8:d7:d6:f4:
29:c7:f1:92:a9:90:b8:1c:f9:be:ca:b8:a8:77:c1:
10:ad:63:5b:32:7e:50:ee:13:37:d9:3e:48:8a:a6:
cf:a1:ea:29:0e:ae:40:8c:c8:e3:4b:e2:f0:9c:6a:
1d:20:61:ce:ea:f4:49:9a:f6:5a:ee:d5:62:99:ca:
90:3e:29:a1:fb:b4:f6:15:6c:51:50:04:a8:7f:dc:
f2:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:75:DB:75:DB:B8:E8:CD:3C:1B:D9:9C:5A:C8:85:5B:F7:DC:47:91
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/tHXbddu46M08G9mcWsiFW_fcR5E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.205.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:c5:9c:a2:d6:1b:8e:8f:69:68:a2:43:19:ac:50:f4:b5:00:
8d:be:2e:3e:f1:ed:10:88:73:13:6a:21:87:35:d9:8a:c5:26:
c6:4d:6f:4b:88:9c:a0:a8:a2:f9:04:3b:15:e0:29:db:d5:00:
db:e9:b1:fa:3d:1f:0f:9f:71:51:d0:79:f4:3b:3d:be:8e:5f:
2b:b0:c3:04:c7:33:72:17:85:40:c9:7c:82:aa:29:50:c0:39:
b4:eb:c5:15:51:72:b8:e8:ce:64:84:a4:0c:37:dc:bb:52:9a:
11:6a:31:59:09:bc:d7:e5:4b:f8:59:b9:34:a3:e9:45:9e:43:
4a:0c:7e:9f:5d:6a:a0:95:2b:bb:f3:39:08:e5:7d:c2:e0:ce:
b1:27:cd:56:a3:59:bf:f0:9d:27:f0:84:67:ee:48:23:c2:63:
63:bf:21:55:48:68:6a:7f:41:89:5a:e1:ae:18:05:64:a5:78:
cb:16:0d:88:7c:56:87:b4:c6:75:df:9b:21:85:3a:d7:a7:49:
03:d5:75:28:07:d9:7f:8b:7c:67:31:56:38:59:98:91:e9:53:
cc:d3:cd:19:2c:68:1a:04:32:bb:1e:d2:eb:5e:46:39:3e:5a:
5d:10:f3:c8:1f:d3:36:14:9c:61:a7:3e:03:3b:6d:4b:6e:b9:
da:72:06:3b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZUKRTYCPX05r3w0Ls52ls7pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyZmRiNjc2NTRkZjYxODRlN2Q2MGM0MTUwZWE5NTMzYzJj
Zjk3MDQwHhcNMjUwMjE1MTU0MTAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNDc1ZGI3NWRiYjhlOGNkM2MxYmQ5OWM1YWM4ODU1YmY3ZGM0NzkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6RCwYKl705xirASGxgzizrc053/A
sGooaED2ApFCD03XuPHTwE3jkoDdCEtFwDAx4979iosMRtmSc7PSWtDhhtFpe3a8
hWc9quchPhKaJlnVTHxnI/2uiDzneB9SoWyJpZo+7WNJnwlMB+yqVcNmDD7kqpJU
m0+5OSbauUa2xfHprGlqHAdhbUDP1PHxSej6fv4/QZZbP8lAN6+N+cpvK4m74uyr
YR4MavpkcyWye8jX1vQpx/GSqZC4HPm+yriod8EQrWNbMn5Q7hM32T5IiqbPoeop
Dq5AjMjjS+LwnGodIGHO6vRJmvZa7tVimcqQPimh+7T2FWxRUASof9zyaQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLR123XbuOjNPBvZnFrIhVv33EeRMB8GA1UdIwQY
MBaAFGL9tnZU32GE59YMQVDqlTPCz5cEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTct
ZTg2MTIxYzU5NGRmLzEvdEhYYmRkdTQ2TTA4RzltY1dzaUZXX2ZjUjVFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTctZTg2MTIxYzU5NGRm
LzEvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALQjNMA0G
CSqGSIb3DQEBCwUAA4IBAQCsxZyi1huOj2lookMZrFD0tQCNvi4+8e0QiHMTaiGH
NdmKxSbGTW9LiJygqKL5BDsV4Cnb1QDb6bH6PR8Pn3FR0Hn0Oz2+jl8rsMMExzNy
F4VAyXyCqilQwDm068UVUXK46M5khKQMN9y7UpoRajFZCbzX5Uv4Wbk0o+lFnkNK
DH6fXWqglSu78zkI5X3C4M6xJ81Wo1m/8J0n8IRn7kgjwmNjvyFVSGhqf0GJWuGu
GAVkpXjLFg2IfFaHtMZ135shhTrXp0kD1XUoB9l/i3xnMVY4WZiR6VPM080ZLGga
BDK7HtLrXkY5PlpdEPPIH9M2FJxhpz4DO21LbrnacgY7
-----END CERTIFICATE-----
Generated at Tue Apr 8 23:41:36 2025 by rpki-client