Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/a1ae75-2d6b-4cc6-acef-dce6d6909247/1/g1Zk3nIRea2SYaHqoN92Ss1LCL8.roa
File: g1Zk3nIRea2SYaHqoN92Ss1LCL8.roa (raw, json)
Hash identifier: aHQejC3hHy18rRg2jbGxWbnzx0KaJtZTncqKQ8jXn3M=
Subject key identifier: 83:56:64:DE:72:11:79:AD:92:61:A1:EA:A0:DF:76:4A:CD:4B:08:BF
Certificate issuer: /CN=940a10a256728f11a4bbaadc3204b7f0a35a5000
Certificate serial: 0194266C075717F0A694DC2534C65D328F8D
Authority key identifier: 94:0A:10:A2:56:72:8F:11:A4:BB:AA:DC:32:04:B7:F0:A3:5A:50:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lAoQolZyjxGku6rcMgS38KNaUAA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/a1ae75-2d6b-4cc6-acef-dce6d6909247/1/g1Zk3nIRea2SYaHqoN92Ss1LCL8.roa
Signing time: Thu 02 Jan 2025 09:50:01 +0000
ROA not before: Thu 02 Jan 2025 09:50:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31287
IP address blocks: 45.15.183.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:07:57:17:f0:a6:94:dc:25:34:c6:5d:32:8f:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=940a10a256728f11a4bbaadc3204b7f0a35a5000
Validity
Not Before: Jan 2 09:50:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=835664de721179ad9261a1eaa0df764acd4b08bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:34:26:c3:72:2a:15:eb:16:6e:d0:52:14:eb:
43:f2:8a:dc:46:8b:5c:aa:a9:65:36:65:d7:fc:d7:
ab:24:39:f7:61:b5:ae:93:7a:f2:f7:3e:55:6f:dd:
72:99:0b:47:15:5c:52:79:e5:da:9b:1a:ac:44:64:
05:49:47:60:93:ee:c8:db:8b:84:d6:53:6a:3f:8f:
91:fb:80:11:2c:92:5b:e7:30:cd:78:ab:07:b0:a1:
d7:07:60:3d:d7:a3:27:38:cd:91:94:80:4c:a3:38:
0d:76:df:fe:1f:8c:76:4f:e7:fd:c7:1a:56:28:94:
91:79:67:08:3c:87:08:a8:6e:b7:23:2f:99:1a:4c:
37:94:3b:8c:db:86:83:3d:3f:2e:93:8b:02:b9:6d:
a9:00:b9:13:8d:8c:05:6a:90:53:e0:5d:db:a9:b0:
5f:a2:20:9f:16:11:ad:07:52:73:f4:74:a8:fc:c8:
e0:29:0e:32:d3:10:b2:8d:19:ab:52:89:93:22:1e:
d8:d2:f8:86:96:4c:4f:71:15:ec:50:cb:f8:20:00:
53:0f:f6:f1:a1:ae:8b:2b:7d:f6:66:92:1d:f9:20:
1c:71:93:44:cd:0c:43:f3:a1:d2:80:3b:56:49:56:
1f:1b:46:f8:0a:74:b2:63:25:7a:45:a4:58:81:c1:
81:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:56:64:DE:72:11:79:AD:92:61:A1:EA:A0:DF:76:4A:CD:4B:08:BF
X509v3 Authority Key Identifier:
keyid:94:0A:10:A2:56:72:8F:11:A4:BB:AA:DC:32:04:B7:F0:A3:5A:50:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lAoQolZyjxGku6rcMgS38KNaUAA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a1ae75-2d6b-4cc6-acef-dce6d6909247/1/g1Zk3nIRea2SYaHqoN92Ss1LCL8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a1ae75-2d6b-4cc6-acef-dce6d6909247/1/lAoQolZyjxGku6rcMgS38KNaUAA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.15.183.0/24
Signature Algorithm: sha256WithRSAEncryption
d8:29:f3:b1:a6:72:9c:ff:7b:2e:67:7f:eb:50:ae:4d:a9:50:
4d:28:3e:af:7d:6f:70:23:6f:15:18:58:74:4c:0f:d0:46:fa:
05:51:7b:59:9e:4d:95:9d:1b:c8:68:ce:74:b8:82:0e:52:a9:
31:08:07:a2:21:54:1c:26:39:c2:5d:ac:50:39:61:5f:13:f5:
8e:67:57:e5:69:c2:ca:cd:3b:f9:19:12:f7:82:70:62:48:1f:
f1:fb:2a:7d:d7:80:02:7b:0c:4a:69:13:02:e7:3e:b2:de:f1:
fa:82:0f:71:b4:53:d5:29:17:41:e0:bd:30:77:32:27:a2:11:
ac:2b:df:ab:14:d7:ab:d4:15:fa:cd:52:82:62:d2:87:62:3e:
05:52:8f:e5:3f:7e:5f:64:e7:12:61:d2:36:25:68:db:a3:b1:
cf:94:15:4c:11:a8:e1:44:b9:ca:7f:35:e9:f8:ec:6d:56:22:
61:37:70:fa:a2:ef:03:eb:99:79:46:7f:a5:7e:26:7e:c5:d5:
15:e8:0d:bf:d7:bf:65:db:b4:a0:98:15:5f:54:30:a9:c8:f3:
4f:a9:e7:91:34:04:e8:bf:20:93:08:3f:2c:cf:3e:2b:d1:26:
84:bd:bc:6b:8b:dc:eb:e1:71:a6:62:f8:f3:1e:e7:ac:63:7e:
95:24:36:32
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQmbAdXF/CmlNwlNMZdMo+NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0MGExMGEyNTY3MjhmMTFhNGJiYWFkYzMyMDRiN2YwYTM1
YTUwMDAwHhcNMjUwMTAyMDk1MDAxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MzU2NjRkZTcyMTE3OWFkOTI2MWExZWFhMGRmNzY0YWNkNGIwOGJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnDQmw3IqFesWbtBSFOtD8orcRotc
qqllNmXX/NerJDn3YbWuk3ry9z5Vb91ymQtHFVxSeeXamxqsRGQFSUdgk+7I24uE
1lNqP4+R+4ARLJJb5zDNeKsHsKHXB2A916MnOM2RlIBMozgNdt/+H4x2T+f9xxpW
KJSReWcIPIcIqG63Iy+ZGkw3lDuM24aDPT8uk4sCuW2pALkTjYwFapBT4F3bqbBf
oiCfFhGtB1Jz9HSo/MjgKQ4y0xCyjRmrUomTIh7Y0viGlkxPcRXsUMv4IABTD/bx
oa6LK332ZpId+SAccZNEzQxD86HSgDtWSVYfG0b4CnSyYyV6RaRYgcGBMwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFINWZN5yEXmtkmGh6qDfdkrNSwi/MB8GA1UdIwQY
MBaAFJQKEKJWco8RpLuq3DIEt/CjWlAAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbEFvUW9sWnlqeEdrdTZyY01nUzM4S05hVUFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS9hMWFlNzUtMmQ2Yi00Y2M2LWFjZWYt
ZGNlNmQ2OTA5MjQ3LzEvZzFaazNuSVJlYTJTWWFIcW9OOTJTczFMQ0w4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS9hMWFlNzUtMmQ2Yi00Y2M2LWFjZWYtZGNlNmQ2OTA5MjQ3
LzEvbEFvUW9sWnlqeEdrdTZyY01nUzM4S05hVUFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALQ+3MA0G
CSqGSIb3DQEBCwUAA4IBAQDYKfOxpnKc/3suZ3/rUK5NqVBNKD6vfW9wI28VGFh0
TA/QRvoFUXtZnk2VnRvIaM50uIIOUqkxCAeiIVQcJjnCXaxQOWFfE/WOZ1flacLK
zTv5GRL3gnBiSB/x+yp914ACewxKaRMC5z6y3vH6gg9xtFPVKRdB4L0wdzInohGs
K9+rFNer1BX6zVKCYtKHYj4FUo/lP35fZOcSYdI2JWjbo7HPlBVMEajhRLnKfzXp
+OxtViJhN3D6ou8D65l5Rn+lfiZ+xdUV6A2/179l27SgmBVfVDCpyPNPqeeRNATo
vyCTCD8szz4r0SaEvbxri9zr4XGmYvjzHuesY36VJDYy
-----END CERTIFICATE-----
Generated at Sat Apr 5 22:29:28 2025 by rpki-client