Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/eeafdb-4708-409f-a953-24302c556ce9/1/BWTEUzAuHhqblErD8yx64q9mkvQ.roa
File: BWTEUzAuHhqblErD8yx64q9mkvQ.roa (raw, json)
Hash identifier: RYYUEkJ5BU2V8fSvdGo9IfTPoI7qDzzZF3W027f9+uk=
Subject key identifier: 05:64:C4:53:30:2E:1E:1A:9B:94:4A:C3:F3:2C:7A:E2:AF:66:92:F4
Certificate issuer: /CN=a412528c69db5fc5cbaed74cb22e44a2bce445ad
Certificate serial: 07750EE3
Authority key identifier: A4:12:52:8C:69:DB:5F:C5:CB:AE:D7:4C:B2:2E:44:A2:BC:E4:45:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pBJSjGnbX8XLrtdMsi5EorzkRa0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/eeafdb-4708-409f-a953-24302c556ce9/1/BWTEUzAuHhqblErD8yx64q9mkvQ.roa
Signing time: Sat 01 Jan 2022 01:59:02 +0000
ROA not before: Sat 01 Jan 2022 01:59:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42651
IP address blocks: 45.88.203.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 125112035 (0x7750ee3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a412528c69db5fc5cbaed74cb22e44a2bce445ad
Validity
Not Before: Jan 1 01:59:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0564c453302e1e1a9b944ac3f32c7ae2af6692f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c8:25:29:4d:d3:50:a5:45:6a:75:bc:f8:16:
a9:68:1c:fb:59:35:8a:15:cb:83:c4:50:b4:4f:39:
92:03:d5:d6:d4:32:54:5e:f5:d0:d9:55:03:fe:cd:
12:fc:71:18:27:7b:8c:dc:c8:15:1b:eb:24:64:7c:
09:95:f3:03:5e:37:5a:97:a0:14:d3:83:f7:c6:41:
91:8f:3a:9d:ff:82:99:61:7e:3c:7a:c8:06:eb:99:
6a:79:f8:cb:c6:d1:8f:65:a4:d6:84:8a:cf:e3:17:
87:02:79:db:8c:c9:7d:f4:43:c3:b7:98:11:5d:5d:
21:49:02:8b:a9:1d:bb:2f:19:5f:67:57:06:46:58:
4e:8c:12:1a:30:1a:10:1e:2d:fa:2b:0d:3e:a0:28:
30:41:40:65:ee:7e:79:a2:b6:7f:1b:b6:52:6a:53:
31:7d:eb:f0:bc:27:71:7b:40:70:ce:c1:2d:c5:b7:
da:93:6d:af:8a:c0:87:68:b9:ef:54:52:76:09:95:
0e:f7:3b:04:c8:84:bf:af:98:2c:c1:d3:c0:5e:09:
e0:49:45:cd:7b:fe:79:e0:ea:18:92:5b:fc:b5:bd:
38:e1:91:45:98:63:d6:8b:ae:ac:7b:a2:04:d9:d7:
6a:e7:e2:6b:ff:27:de:6a:e6:0e:81:aa:c7:5c:48:
2c:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:64:C4:53:30:2E:1E:1A:9B:94:4A:C3:F3:2C:7A:E2:AF:66:92:F4
X509v3 Authority Key Identifier:
keyid:A4:12:52:8C:69:DB:5F:C5:CB:AE:D7:4C:B2:2E:44:A2:BC:E4:45:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pBJSjGnbX8XLrtdMsi5EorzkRa0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/eeafdb-4708-409f-a953-24302c556ce9/1/BWTEUzAuHhqblErD8yx64q9mkvQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/eeafdb-4708-409f-a953-24302c556ce9/1/pBJSjGnbX8XLrtdMsi5EorzkRa0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.203.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:0e:8a:11:92:b5:72:ed:9b:19:4a:9c:c8:12:54:a8:09:12:
b2:ce:22:ab:0b:cf:83:4d:d2:d4:80:37:74:80:7a:94:38:49:
de:82:40:25:41:04:69:41:6d:52:7f:b9:09:ce:6b:ef:cc:cc:
2f:36:9c:d8:f7:d7:93:bd:95:64:8a:98:5f:ee:fb:86:35:10:
c8:f5:81:f2:dd:35:1c:59:ad:63:a3:97:e1:69:3a:d4:43:ea:
05:c9:e8:93:07:af:8e:f6:05:47:f8:1d:37:41:38:80:85:24:
32:7a:86:cd:b5:3b:3d:db:6d:6c:8a:31:4d:06:c0:d8:e4:9c:
f0:03:3c:b9:ab:35:3f:b9:d0:f3:d7:7b:5f:23:5a:58:66:71:
73:05:1b:75:31:cf:fc:c8:cb:0e:b8:43:30:bf:55:f1:5f:f7:
6b:39:a7:83:98:1d:fa:30:cf:86:ec:ad:d9:2e:c0:f8:d8:cd:
43:04:4f:7b:5a:b9:47:c9:30:a3:14:25:b9:37:cf:df:88:84:
6d:92:fc:75:b7:11:d7:07:9a:82:26:68:a2:39:68:3f:0d:b5:
30:29:9d:78:0e:bb:f4:a4:06:6c:aa:55:af:a1:35:75:87:0b:
b3:4e:a3:56:c4:9c:1b:da:15:eb:88:c8:92:80:ae:4d:64:4f:
50:90:b8:0f
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEB3UO4zANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhh
NDEyNTI4YzY5ZGI1ZmM1Y2JhZWQ3NGNiMjJlNDRhMmJjZTQ0NWFkMB4XDTIyMDEw
MTAxNTkwMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMDU2NGM0NTMzMDJl
MWUxYTliOTQ0YWMzZjMyYzdhZTJhZjY2OTJmNDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALrIJSlN01ClRWp1vPgWqWgc+1k1ihXLg8RQtE85kgPV1tQy
VF710NlVA/7NEvxxGCd7jNzIFRvrJGR8CZXzA143WpegFNOD98ZBkY86nf+CmWF+
PHrIBuuZann4y8bRj2Wk1oSKz+MXhwJ524zJffRDw7eYEV1dIUkCi6kduy8ZX2dX
BkZYTowSGjAaEB4t+isNPqAoMEFAZe5+eaK2fxu2UmpTMX3r8LwncXtAcM7BLcW3
2pNtr4rAh2i571RSdgmVDvc7BMiEv6+YLMHTwF4J4ElFzXv+eeDqGJJb/LW9OOGR
RZhj1ouurHuiBNnXaufia/8n3mrmDoGqx1xILPcCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQFZMRTMC4eGpuUSsPzLHrir2aS9DAfBgNVHSMEGDAWgBSkElKMadtfxcuu
10yyLkSivORFrTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3BCSlNqR25iWDhYTHJ0ZE1zaTVFb3J6a1JhMC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYjQvZWVhZmRiLTQ3MDgtNDA5Zi1hOTUzLTI0MzAyYzU1NmNlOS8x
L0JXVEVVekF1SGhxYmxFckQ4eXg2NHE5bWt2US5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjQv
ZWVhZmRiLTQ3MDgtNDA5Zi1hOTUzLTI0MzAyYzU1NmNlOS8xL3BCSlNqR25iWDhY
THJ0ZE1zaTVFb3J6a1JhMC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC1YyzANBgkqhkiG9w0BAQsFAAOC
AQEAnw6KEZK1cu2bGUqcyBJUqAkSss4iqwvPg03S1IA3dIB6lDhJ3oJAJUEEaUFt
Un+5Cc5r78zMLzac2PfXk72VZIqYX+77hjUQyPWB8t01HFmtY6OX4Wk61EPqBcno
kwevjvYFR/gdN0E4gIUkMnqGzbU7PdttbIoxTQbA2OSc8AM8uas1P7nQ89d7XyNa
WGZxcwUbdTHP/MjLDrhDML9V8V/3azmng5gd+jDPhuyt2S7A+NjNQwRPe1q5R8kw
oxQluTfP34iEbZL8dbcR1weagiZoojloPw21MCmdeA679KQGbKpVr6E1dYcLs06j
VsScG9oV64jIkoCuTWRPUJC4Dw==
-----END CERTIFICATE-----
Generated at Sun Jun 8 04:18:43 2025 by rpki-client