Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/p3Y3crt9wWUb6xKtKHwtfKRhpKA.roa
File: p3Y3crt9wWUb6xKtKHwtfKRhpKA.roa (raw, json)
Hash identifier: NWTiGaZGuwbETRLnJD5VxxB23JLGGVuboYx2qrcj0Vo=
Subject key identifier: A7:76:37:72:BB:7D:C1:65:1B:EB:12:AD:28:7C:2D:7C:A4:61:A4:A0
Certificate issuer: /CN=3a00807698f0b097d69ab3926917d1dcc838a624
Certificate serial: 01942368D2B926510CF05D8A54D827259F5D
Authority key identifier: 3A:00:80:76:98:F0:B0:97:D6:9A:B3:92:69:17:D1:DC:C8:38:A6:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/p3Y3crt9wWUb6xKtKHwtfKRhpKA.roa
Signing time: Wed 01 Jan 2025 19:47:39 +0000
ROA not before: Wed 01 Jan 2025 19:47:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 55933
IP address blocks: 45.150.236.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:68:d2:b9:26:51:0c:f0:5d:8a:54:d8:27:25:9f:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a00807698f0b097d69ab3926917d1dcc838a624
Validity
Not Before: Jan 1 19:47:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a7763772bb7dc1651beb12ad287c2d7ca461a4a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:ee:fb:5e:fa:39:85:87:89:19:88:ae:ec:5d:
74:bf:c8:8e:e6:08:69:58:95:fb:51:ab:e8:a6:3e:
9f:da:25:b2:8e:81:e8:42:8b:b3:40:b7:0f:65:95:
c8:ab:dc:da:2a:11:6d:8d:b3:28:16:fc:4e:d3:73:
43:34:8a:5d:bf:02:6e:31:32:ba:b9:e7:12:e4:49:
9c:83:31:ff:79:aa:e4:bc:0c:8c:87:fe:47:b3:2b:
19:a6:47:8b:a6:dd:ca:ae:b4:3c:36:59:d9:e9:c3:
59:a9:b8:6a:56:ee:5e:0b:22:92:f2:1a:e1:da:f3:
64:13:5b:82:12:b8:1a:c4:9c:ad:e3:ce:4b:7d:8d:
83:2a:94:48:a9:6a:4f:b3:46:88:a0:3a:8a:eb:42:
1f:f7:92:81:ef:04:a1:d9:20:eb:f1:cc:7e:16:6e:
35:26:03:b0:96:05:f5:ae:39:0d:50:75:61:02:e7:
8f:c6:5f:c0:75:96:b8:0d:d9:0c:f2:16:b9:4d:4a:
01:09:01:7e:b8:45:57:f2:60:40:aa:0d:54:2a:c4:
5c:a9:c7:a0:08:50:6f:78:e7:2d:fb:d1:e9:ff:4b:
e0:e9:da:d5:a8:97:1d:47:07:3f:06:37:04:47:4c:
1d:20:02:ef:88:d6:f2:2e:8f:31:66:1f:78:27:7c:
76:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:76:37:72:BB:7D:C1:65:1B:EB:12:AD:28:7C:2D:7C:A4:61:A4:A0
X509v3 Authority Key Identifier:
keyid:3A:00:80:76:98:F0:B0:97:D6:9A:B3:92:69:17:D1:DC:C8:38:A6:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/p3Y3crt9wWUb6xKtKHwtfKRhpKA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.236.0/22
Signature Algorithm: sha256WithRSAEncryption
92:d8:3d:5c:d7:5d:97:ae:4a:72:a0:f9:84:6e:55:3c:ba:79:
18:da:74:d5:68:de:f8:8b:2c:d6:60:7a:2b:9f:52:75:c4:fe:
f2:77:f0:47:38:2a:49:ac:ac:59:ac:17:76:f5:4b:d9:a3:e2:
74:71:29:6f:4e:33:76:61:e1:69:0c:57:ff:6c:7f:65:af:cc:
c7:aa:11:02:88:dc:99:1e:90:fa:59:6e:30:6d:64:34:1f:1c:
71:5a:98:9e:35:cf:00:a1:7b:d2:f4:94:ba:78:6a:e2:08:98:
bc:0a:5a:55:fb:4b:c0:fe:29:17:c1:ac:63:c5:88:26:bf:aa:
b7:2d:6c:97:9c:79:a7:32:44:eb:74:a1:d2:d0:f7:f6:f0:96:
23:c8:61:ff:80:37:22:0c:95:03:ae:02:67:2c:27:0c:93:09:
5f:24:6f:25:24:73:c5:17:05:94:9b:9f:25:a3:c9:78:21:af:
cb:04:0d:2a:78:a7:d4:87:73:90:31:a7:77:9a:c3:ce:79:d3:
ad:d1:54:91:f3:1e:19:4f:dc:f1:a1:aa:fa:32:ea:2f:85:d7:
0a:48:6c:19:f8:e8:df:34:2c:d8:29:98:d5:dd:8d:59:c8:3b:
4f:df:16:fc:40:f9:c6:7c:34:84:f8:03:59:de:9c:5e:32:69:
5b:0e:55:39
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQjaNK5JlEM8F2KVNgnJZ9dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhMDA4MDc2OThmMGIwOTdkNjlhYjM5MjY5MTdkMWRjYzgz
OGE2MjQwHhcNMjUwMTAxMTk0NzM5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNzc2Mzc3MmJiN2RjMTY1MWJlYjEyYWQyODdjMmQ3Y2E0NjFhNGEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2O77Xvo5hYeJGYiu7F10v8iO5ghp
WJX7Uavopj6f2iWyjoHoQouzQLcPZZXIq9zaKhFtjbMoFvxO03NDNIpdvwJuMTK6
uecS5EmcgzH/earkvAyMh/5HsysZpkeLpt3KrrQ8NlnZ6cNZqbhqVu5eCyKS8hrh
2vNkE1uCErgaxJyt485LfY2DKpRIqWpPs0aIoDqK60If95KB7wSh2SDr8cx+Fm41
JgOwlgX1rjkNUHVhAuePxl/AdZa4DdkM8ha5TUoBCQF+uEVX8mBAqg1UKsRcqceg
CFBveOct+9Hp/0vg6drVqJcdRwc/BjcER0wdIALviNbyLo8xZh94J3x2+wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKd2N3K7fcFlG+sSrSh8LXykYaSgMB8GA1UdIwQY
MBaAFDoAgHaY8LCX1pqzkmkX0dzIOKYkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT2dDQWRwandzSmZXbXJPU2FSZlIzTWc0cGlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS8xNDNkMjktY2Y3Mi00ZDAxLTkxOGMt
MTZhZmM0ZGZmZGQ0LzEvcDNZM2NydDl3V1ViNnhLdEtId3RmS1JocEtBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS8xNDNkMjktY2Y3Mi00ZDAxLTkxOGMtMTZhZmM0ZGZmZGQ0
LzEvT2dDQWRwandzSmZXbXJPU2FSZlIzTWc0cGlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLZbsMA0G
CSqGSIb3DQEBCwUAA4IBAQCS2D1c112XrkpyoPmEblU8unkY2nTVaN74iyzWYHor
n1J1xP7yd/BHOCpJrKxZrBd29UvZo+J0cSlvTjN2YeFpDFf/bH9lr8zHqhECiNyZ
HpD6WW4wbWQ0HxxxWpieNc8AoXvS9JS6eGriCJi8ClpV+0vA/ikXwaxjxYgmv6q3
LWyXnHmnMkTrdKHS0Pf28JYjyGH/gDciDJUDrgJnLCcMkwlfJG8lJHPFFwWUm58l
o8l4Ia/LBA0qeKfUh3OQMad3msPOedOt0VSR8x4ZT9zxoar6MuovhdcKSGwZ+Ojf
NCzYKZjV3Y1ZyDtP3xb8QPnGfDSE+ANZ3pxeMmlbDlU5
-----END CERTIFICATE-----
Generated at Sat Apr 5 06:29:01 2025 by rpki-client