Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/cff630-6c8a-43bd-afb9-b07f016a1762/1/d12qVgxDPPHiE2ljm9qZxxkNLxQ.roa
File: d12qVgxDPPHiE2ljm9qZxxkNLxQ.roa (raw, json)
Hash identifier: zX9r1B9nDeSmX0ma2mBmx6eNhz70tybIXv2tasEp9Z0=
Subject key identifier: 77:5D:AA:56:0C:43:3C:F1:E2:13:69:63:9B:DA:99:C7:19:0D:2F:14
Certificate issuer: /CN=854c8176d9c42c704b310913309470351bb599e5
Certificate serial: 01942747824519603689C2A34547BA6E9377
Authority key identifier: 85:4C:81:76:D9:C4:2C:70:4B:31:09:13:30:94:70:35:1B:B5:99:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hUyBdtnELHBLMQkTMJRwNRu1meU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/cff630-6c8a-43bd-afb9-b07f016a1762/1/d12qVgxDPPHiE2ljm9qZxxkNLxQ.roa
Signing time: Thu 02 Jan 2025 13:49:45 +0000
ROA not before: Thu 02 Jan 2025 13:49:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6768
IP address blocks: 45.14.108.0/22 maxlen: 22
45.14.108.0/23 maxlen: 23
45.14.108.0/24 maxlen: 24
45.14.109.0/24 maxlen: 24
45.14.110.0/23 maxlen: 23
45.14.110.0/24 maxlen: 24
45.14.111.0/24 maxlen: 24
2a01:4a60::/32 maxlen: 32
2a0e:c080::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:82:45:19:60:36:89:c2:a3:45:47:ba:6e:93:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=854c8176d9c42c704b310913309470351bb599e5
Validity
Not Before: Jan 2 13:49:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=775daa560c433cf1e21369639bda99c7190d2f14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:35:5b:7b:d8:2a:f9:90:f1:16:ef:87:e7:c0:
ce:72:fe:0c:1a:25:0a:0a:ab:16:6c:44:c9:03:79:
6b:3c:d1:1b:95:15:09:4e:e6:1f:a2:c4:0d:6b:8c:
46:12:d4:cc:ab:92:2e:f8:8b:3c:8a:ce:79:c4:a5:
73:09:d1:ca:3d:cd:ce:db:58:46:ff:41:60:45:44:
38:1e:6e:b7:60:ba:1e:ef:09:38:d5:4e:37:b3:19:
1e:4a:2a:c2:b1:51:fd:f8:cb:94:7b:eb:8e:e7:14:
bd:59:d4:23:b2:e2:c5:76:dd:35:bb:03:22:66:bf:
f2:33:8b:b2:0b:28:68:b3:44:a0:cd:39:66:65:6f:
f4:ad:be:30:18:25:d1:25:da:25:44:13:83:cd:fc:
23:da:af:d4:6d:b0:0f:cb:4a:73:74:e1:11:59:82:
d7:0c:6f:06:78:38:a1:30:ae:8a:df:bf:e7:27:74:
11:56:0a:e7:b8:39:cf:9d:81:3d:c4:b2:6b:85:05:
1d:5a:34:88:28:4a:b4:3b:67:4a:5b:9e:6a:61:44:
d2:60:7a:a6:e7:db:ad:2f:d2:de:5e:06:e9:47:e4:
cb:6d:0f:ee:70:3e:f7:18:2a:94:56:6e:d8:56:b2:
08:49:bd:78:f5:6a:7d:9e:10:1e:ac:60:1c:47:b0:
42:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:5D:AA:56:0C:43:3C:F1:E2:13:69:63:9B:DA:99:C7:19:0D:2F:14
X509v3 Authority Key Identifier:
keyid:85:4C:81:76:D9:C4:2C:70:4B:31:09:13:30:94:70:35:1B:B5:99:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hUyBdtnELHBLMQkTMJRwNRu1meU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/cff630-6c8a-43bd-afb9-b07f016a1762/1/d12qVgxDPPHiE2ljm9qZxxkNLxQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/cff630-6c8a-43bd-afb9-b07f016a1762/1/hUyBdtnELHBLMQkTMJRwNRu1meU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.14.108.0/22
IPv6:
2a01:4a60::/32
2a0e:c080::/29
Signature Algorithm: sha256WithRSAEncryption
61:02:56:8f:f7:84:55:de:b1:ff:ff:38:41:fc:7a:87:41:dd:
fd:7e:45:d7:e1:f4:28:6c:94:38:42:89:70:d2:cf:9d:8f:90:
6a:27:e2:bc:b4:e7:64:b9:ed:d2:8f:61:60:ce:c8:e6:01:d0:
e8:3e:6f:74:17:77:f4:45:fe:f2:69:bc:80:7a:01:b6:c6:85:
20:34:89:5f:9b:b3:2c:f8:09:95:70:5c:70:81:f6:51:8a:92:
18:f9:23:bf:22:17:88:69:aa:fd:a6:17:0c:74:e2:83:14:8d:
f0:05:36:c0:ab:ea:48:c7:31:74:7d:6b:60:58:f6:07:67:b7:
85:8b:22:df:5e:1d:7b:d5:08:f2:b9:cf:b1:e7:82:27:e8:11:
43:fd:bf:94:06:7f:d9:b2:18:dd:d8:db:38:17:dc:84:d0:18:
1b:5d:09:ec:6f:cc:b8:46:d5:f6:be:51:28:47:cb:98:66:7f:
1e:42:1b:73:2a:16:b8:4a:8f:fe:92:54:43:20:3e:53:5f:66:
0b:57:92:46:15:60:81:ca:a2:0f:79:0b:f5:2b:15:76:54:72:
95:a6:fc:1b:eb:f7:ea:99:1c:a3:ff:bd:30:42:41:18:e3:37:
ac:ee:e6:52:2c:69:e3:84:fb:80:74:81:d8:38:86:e8:39:a3:
8f:a5:7e:df
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgISAZQnR4JFGWA2icKjRUe6bpN3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1NGM4MTc2ZDljNDJjNzA0YjMxMDkxMzMwOTQ3MDM1MWJi
NTk5ZTUwHhcNMjUwMTAyMTM0OTQ1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NzVkYWE1NjBjNDMzY2YxZTIxMzY5NjM5YmRhOTljNzE5MGQyZjE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtDVbe9gq+ZDxFu+H58DOcv4MGiUK
CqsWbETJA3lrPNEblRUJTuYfosQNa4xGEtTMq5Iu+Is8is55xKVzCdHKPc3O21hG
/0FgRUQ4Hm63YLoe7wk41U43sxkeSirCsVH9+MuUe+uO5xS9WdQjsuLFdt01uwMi
Zr/yM4uyCyhos0SgzTlmZW/0rb4wGCXRJdolRBODzfwj2q/UbbAPy0pzdOERWYLX
DG8GeDihMK6K37/nJ3QRVgrnuDnPnYE9xLJrhQUdWjSIKEq0O2dKW55qYUTSYHqm
59utL9LeXgbpR+TLbQ/ucD73GCqUVm7YVrIISb149Wp9nhAerGAcR7BCbwIDAQAB
o4ICHzCCAhswHQYDVR0OBBYEFHddqlYMQzzx4hNpY5vamccZDS8UMB8GA1UdIwQY
MBaAFIVMgXbZxCxwSzEJEzCUcDUbtZnlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaFV5QmR0bkVMSEJMTVFrVE1KUndOUnUxbWVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS9jZmY2MzAtNmM4YS00M2JkLWFmYjkt
YjA3ZjAxNmExNzYyLzEvZDEycVZneERQUEhpRTJsam05cVp4eGtOTHhRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS9jZmY2MzAtNmM4YS00M2JkLWFmYjktYjA3ZjAxNmExNzYy
LzEvaFV5QmR0bkVMSEJMTVFrVE1KUndOUnUxbWVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDUGCCsGAQUFBwEHAQH/BCYwJDAMBAIAATAGAwQCLQ5sMBQE
AgACMA4DBQAqAUpgAwUDKg7AgDANBgkqhkiG9w0BAQsFAAOCAQEAYQJWj/eEVd6x
//84Qfx6h0Hd/X5F1+H0KGyUOEKJcNLPnY+QaifivLTnZLnt0o9hYM7I5gHQ6D5v
dBd39EX+8mm8gHoBtsaFIDSJX5uzLPgJlXBccIH2UYqSGPkjvyIXiGmq/aYXDHTi
gxSN8AU2wKvqSMcxdH1rYFj2B2e3hYsi314de9UI8rnPseeCJ+gRQ/2/lAZ/2bIY
3djbOBfchNAYG10J7G/MuEbV9r5RKEfLmGZ/HkIbcyoWuEqP/pJUQyA+U19mC1eS
RhVggcqiD3kL9SsVdlRylab8G+v36pkco/+9MEJBGOM3rO7mUixp44T7gHSB2DiG
6Dmjj6V+3w==
-----END CERTIFICATE-----
Generated at Tue Apr 8 00:22:38 2025 by rpki-client