Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/BSdUh4Mx46YxneIv9XXQFWQFRM8.roa
File: BSdUh4Mx46YxneIv9XXQFWQFRM8.roa (raw, json)
Hash identifier: uIz9J4/pmc1QSWdzdEoDzju92OM67lEo4nRxljwBr9M=
Subject key identifier: 05:27:54:87:83:31:E3:A6:31:9D:E2:2F:F5:75:D0:15:64:05:44:CF
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0195384ECBA3DDF219B532CA3DB4F4C73CB9
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/BSdUh4Mx46YxneIv9XXQFWQFRM8.roa
Signing time: Mon 24 Feb 2025 14:14:02 +0000
ROA not before: Mon 24 Feb 2025 14:14:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 45.87.243.0/24 maxlen: 24
45.146.128.0/24 maxlen: 24
2a09:17c0:1000::/48 maxlen: 48
2a0a:2d02::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:38:4e:cb:a3:dd:f2:19:b5:32:ca:3d:b4:f4:c7:3c:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Feb 24 14:14:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=052754878331e3a6319de22ff575d015640544cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:8e:b9:92:1e:a9:3b:29:e4:5e:b5:fc:c6:f1:
09:d4:4a:8d:c3:95:67:ae:99:df:75:ab:83:90:98:
2f:a3:da:5d:51:22:fd:a7:e1:64:e2:7c:57:87:d8:
7f:bc:bc:08:82:a9:b6:d2:59:f6:cc:92:be:39:26:
07:af:f5:84:59:fc:b0:24:49:96:4b:f6:9c:15:41:
1a:78:6a:00:37:47:8b:27:3f:d1:f6:d5:29:80:9a:
d4:ad:14:02:da:ad:7a:76:81:71:9c:fa:45:65:4e:
eb:f1:81:85:ed:c0:95:48:2f:b0:13:42:2e:4d:ea:
6f:f3:98:e9:31:3f:eb:3f:e3:8d:e8:7b:8a:34:d7:
7f:47:b9:0e:97:1b:f0:c3:9b:b8:b5:7d:da:43:29:
42:29:2d:f7:76:a3:ca:9a:36:f2:db:84:00:11:78:
5a:d4:d9:74:b4:b2:d9:7a:3b:a0:42:1a:fa:5f:a2:
54:d9:df:d9:f9:e0:27:33:eb:fd:2e:df:72:c8:0e:
54:99:b4:ed:28:7f:38:b1:f7:c2:4e:43:c0:86:5a:
aa:75:d4:5c:66:27:cb:dd:e3:c3:10:e3:c4:40:99:
0e:62:09:ef:6f:39:e0:97:46:5a:d6:20:33:f5:9a:
ef:99:66:77:ed:f1:c8:5b:63:1b:a2:26:28:97:2c:
86:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:27:54:87:83:31:E3:A6:31:9D:E2:2F:F5:75:D0:15:64:05:44:CF
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/BSdUh4Mx46YxneIv9XXQFWQFRM8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.87.243.0/24
45.146.128.0/24
IPv6:
2a09:17c0:1000::/48
2a0a:2d02::/32
Signature Algorithm: sha256WithRSAEncryption
40:6e:12:ce:4f:cd:84:00:0b:ae:3c:f2:e7:98:04:ec:3f:d2:
af:d6:c2:41:6a:e1:22:b1:a6:2d:b1:bb:42:57:80:15:09:c1:
fb:22:49:91:92:d1:1a:c0:4e:80:9d:2a:18:ac:34:70:53:70:
c0:cd:53:7d:5f:ac:6e:d9:0f:f6:25:35:47:e1:fa:5a:d7:51:
f8:0e:92:80:87:04:cd:1a:88:72:8a:3d:b1:60:c3:87:17:ef:
d8:97:91:c3:82:c3:b8:79:9e:2b:9e:86:b5:29:dd:c2:29:dc:
3f:86:32:aa:a7:f1:94:9d:51:7f:3e:74:9f:b8:6f:1d:2a:5b:
31:ee:02:af:38:88:9b:89:6d:0b:9f:b8:2e:be:57:ec:2b:35:
39:17:6f:1a:7f:5f:b0:48:dc:5f:a3:eb:ab:89:36:80:39:27:
ca:db:ba:57:86:bf:0b:27:eb:80:57:84:67:c4:13:0d:8a:0f:
66:51:9e:b3:c7:a8:e1:cf:23:dc:11:36:48:61:9d:46:46:c9:
09:85:d4:c3:fe:36:83:96:03:90:9c:ad:7a:8e:9c:4a:32:ed:
f4:39:d0:5e:9d:ee:1b:5f:92:ed:53:74:ec:47:fa:01:bb:fe:
49:66:3a:00:4e:04:ec:b1:af:db:9b:5a:fa:73:0f:65:08:cf:
6e:42:e0:43
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAZU4Tsuj3fIZtTLKPbT0xzy5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz
ZTRjMjYwHhcNMjUwMjI0MTQxNDAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNTI3NTQ4NzgzMzFlM2E2MzE5ZGUyMmZmNTc1ZDAxNTY0MDU0NGNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm465kh6pOynkXrX8xvEJ1EqNw5Vn
rpnfdauDkJgvo9pdUSL9p+Fk4nxXh9h/vLwIgqm20ln2zJK+OSYHr/WEWfywJEmW
S/acFUEaeGoAN0eLJz/R9tUpgJrUrRQC2q16doFxnPpFZU7r8YGF7cCVSC+wE0Iu
Tepv85jpMT/rP+ON6HuKNNd/R7kOlxvww5u4tX3aQylCKS33dqPKmjby24QAEXha
1Nl0tLLZejugQhr6X6JU2d/Z+eAnM+v9Lt9yyA5UmbTtKH84sffCTkPAhlqqddRc
ZifL3ePDEOPEQJkOYgnvbzngl0Za1iAz9ZrvmWZ37fHIW2MboiYolyyG3QIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFAUnVIeDMeOmMZ3iL/V10BVkBUTPMB8GA1UdIwQY
MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt
OGM1MDA3YzJhNGI2LzEvQlNkVWg0TXg0Nll4bmVJdjlYWFFGV1FGUk04LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2
LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDASBAIAATAMAwQALVfzAwQA
LZKAMBYEAgACMBADBwAqCRfAEAADBQAqCi0CMA0GCSqGSIb3DQEBCwUAA4IBAQBA
bhLOT82EAAuuPPLnmATsP9Kv1sJBauEisaYtsbtCV4AVCcH7IkmRktEawE6AnSoY
rDRwU3DAzVN9X6xu2Q/2JTVH4fpa11H4DpKAhwTNGohyij2xYMOHF+/Yl5HDgsO4
eZ4rnoa1Kd3CKdw/hjKqp/GUnVF/PnSfuG8dKlsx7gKvOIibiW0Ln7guvlfsKzU5
F28af1+wSNxfo+uriTaAOSfK27pXhr8LJ+uAV4RnxBMNig9mUZ6zx6jhzyPcETZI
YZ1GRskJhdTD/jaDlgOQnK16jpxKMu30OdBene4bX5LtU3TsR/oBu/5JZjoATgTs
sa/bm1r6cw9lCM9uQuBD
-----END CERTIFICATE-----
Generated at Sun Apr 6 20:49:21 2025 by rpki-client