Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/iP8ql6ZvDkSsBTs1J-PrJpdHpKo.roa
File: iP8ql6ZvDkSsBTs1J-PrJpdHpKo.roa (raw, json)
Hash identifier: tXTXKqH5Aew+pK21GPBswq4NS3nwUUaBaQxJqd2WYgg=
Subject key identifier: 88:FF:2A:97:A6:6F:0E:44:AC:05:3B:35:27:E3:EB:26:97:47:A4:AA
Certificate issuer: /CN=ffdec4a46a6e6e4f9a92d0ba2e0b3ab5658be1bd
Certificate serial: 019423D75CE2FD2110F75158016BB9D54DF3
Authority key identifier: FF:DE:C4:A4:6A:6E:6E:4F:9A:92:D0:BA:2E:0B:3A:B5:65:8B:E1:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_97EpGpubk-aktC6Lgs6tWWL4b0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/iP8ql6ZvDkSsBTs1J-PrJpdHpKo.roa
Signing time: Wed 01 Jan 2025 21:48:24 +0000
ROA not before: Wed 01 Jan 2025 21:48:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 24669
IP address blocks: 45.250.25.0/24 maxlen: 24
45.250.26.0/24 maxlen: 24
45.250.27.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:5c:e2:fd:21:10:f7:51:58:01:6b:b9:d5:4d:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffdec4a46a6e6e4f9a92d0ba2e0b3ab5658be1bd
Validity
Not Before: Jan 1 21:48:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=88ff2a97a66f0e44ac053b3527e3eb269747a4aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:6e:6c:61:30:15:a4:9d:54:52:7d:0e:06:43:
d1:37:fb:94:f9:49:43:13:54:88:67:fe:13:c2:15:
be:00:79:1b:f3:54:c9:86:0a:17:ed:fc:1f:b1:38:
8a:59:78:a9:15:12:bd:2a:45:56:b0:2f:1d:7c:f6:
07:43:a4:ab:76:54:ec:7b:46:60:e6:a9:61:d6:e9:
62:5e:2d:e9:d4:3e:c6:3c:bb:b4:2e:21:db:cf:83:
a4:b4:0c:78:58:f9:f3:d3:b2:1e:c6:18:ea:07:71:
6a:53:ec:37:7c:fe:26:72:fc:bc:a1:a7:10:c9:e6:
2e:c8:93:ba:b6:9b:e0:1b:5f:8c:43:b7:8c:ae:40:
61:3d:50:cb:64:e7:c0:71:23:54:42:fd:03:68:f6:
4e:9d:42:3e:a4:8a:e9:cc:ca:2e:78:98:1f:dc:98:
df:4b:c3:25:cc:eb:91:4a:b9:72:cd:4a:0a:8c:a1:
f6:4d:2e:6b:e6:49:91:1e:4f:2e:15:26:7e:40:66:
cd:f9:fe:07:2d:b8:ce:0e:59:04:2d:9b:ca:db:15:
c6:71:5a:27:2e:c1:43:b2:54:02:e1:e9:ad:bb:b7:
26:17:42:ab:4c:f3:83:1d:06:53:13:7b:00:ec:e0:
b8:3c:10:f3:a6:86:c6:42:d7:7d:8b:11:36:2b:4a:
65:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:FF:2A:97:A6:6F:0E:44:AC:05:3B:35:27:E3:EB:26:97:47:A4:AA
X509v3 Authority Key Identifier:
keyid:FF:DE:C4:A4:6A:6E:6E:4F:9A:92:D0:BA:2E:0B:3A:B5:65:8B:E1:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_97EpGpubk-aktC6Lgs6tWWL4b0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/iP8ql6ZvDkSsBTs1J-PrJpdHpKo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.250.25.0-45.250.27.255
Signature Algorithm: sha256WithRSAEncryption
b3:8b:58:3d:59:d4:af:6e:94:5b:78:d6:a1:71:e8:07:ec:93:
ab:ca:2f:25:6e:7b:0f:64:cf:44:11:60:9e:58:69:01:d5:0a:
87:c7:af:0b:f0:42:2e:c0:21:53:24:c6:2f:88:74:88:cc:77:
95:10:8c:5f:0d:27:60:08:37:63:38:0b:6f:53:b2:9b:b6:79:
6c:c5:bd:97:bb:5d:76:f7:a2:0e:d4:b8:ef:5c:2c:1e:72:85:
d5:5e:db:fb:83:f4:5a:1b:bc:a4:48:7c:03:27:2d:22:fd:72:
b3:f3:04:ca:d2:2f:d6:91:60:19:49:fa:60:8e:25:19:9e:1f:
9a:f8:f2:96:57:aa:f8:10:51:87:8f:2a:50:c0:57:10:5e:ac:
ec:3e:56:aa:c5:5d:55:a1:74:72:0f:02:2c:72:c6:7e:fc:dc:
0e:b5:77:78:4f:a0:24:7b:2c:b0:6c:d1:c0:ee:99:f2:09:6f:
a6:03:56:45:f6:12:24:a2:5a:4a:2e:65:b7:4a:5e:af:b6:ef:
2f:f8:93:54:24:e4:f6:62:7f:9a:1e:3d:2e:cc:df:f7:7b:8d:
26:44:c6:8c:b3:34:87:cc:9c:d6:65:8d:4d:da:7b:96:b5:c8:
85:74:d9:a1:39:02:25:ab:3e:b4:f7:20:bd:f7:b6:ad:9e:49:
7a:72:1b:d3
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZQj11zi/SEQ91FYAWu51U3zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmZGVjNGE0NmE2ZTZlNGY5YTkyZDBiYTJlMGIzYWI1NjU4
YmUxYmQwHhcNMjUwMTAxMjE0ODI0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4OGZmMmE5N2E2NmYwZTQ0YWMwNTNiMzUyN2UzZWIyNjk3NDdhNGFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA025sYTAVpJ1UUn0OBkPRN/uU+UlD
E1SIZ/4TwhW+AHkb81TJhgoX7fwfsTiKWXipFRK9KkVWsC8dfPYHQ6SrdlTse0Zg
5qlh1uliXi3p1D7GPLu0LiHbz4OktAx4WPnz07IexhjqB3FqU+w3fP4mcvy8oacQ
yeYuyJO6tpvgG1+MQ7eMrkBhPVDLZOfAcSNUQv0DaPZOnUI+pIrpzMoueJgf3Jjf
S8MlzOuRSrlyzUoKjKH2TS5r5kmRHk8uFSZ+QGbN+f4HLbjODlkELZvK2xXGcVon
LsFDslQC4emtu7cmF0KrTPODHQZTE3sA7OC4PBDzpobGQtd9ixE2K0plqQIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFIj/Kpembw5ErAU7NSfj6yaXR6SqMB8GA1UdIwQY
MBaAFP/exKRqbm5PmpLQui4LOrVli+G9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvXzk3RXBHcHViay1ha3RDNkxnczZ0V1dMNGIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC8xMWU1YjMtNDNhYS00Mjc5LTk0NDEt
N2U4YzZkNGQ5YmVmLzEvaVA4cWw2WnZEa1NzQlRzMUotUHJKcGRIcEtvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC8xMWU1YjMtNDNhYS00Mjc5LTk0NDEtN2U4YzZkNGQ5YmVm
LzEvXzk3RXBHcHViay1ha3RDNkxnczZ0V1dMNGIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAAt+hkD
BAIt+hgwDQYJKoZIhvcNAQELBQADggEBALOLWD1Z1K9ulFt41qFx6Afsk6vKLyVu
ew9kz0QRYJ5YaQHVCofHrwvwQi7AIVMkxi+IdIjMd5UQjF8NJ2AIN2M4C29Tspu2
eWzFvZe7XXb3og7UuO9cLB5yhdVe2/uD9FobvKRIfAMnLSL9crPzBMrSL9aRYBlJ
+mCOJRmeH5r48pZXqvgQUYePKlDAVxBerOw+VqrFXVWhdHIPAixyxn783A61d3hP
oCR7LLBs0cDumfIJb6YDVkX2EiSiWkouZbdKXq+27y/4k1Qk5PZif5oePS7M3/d7
jSZExoyzNIfMnNZljU3ae5a1yIV02aE5AiWrPrT3IL33tq2eSXpyG9M=
-----END CERTIFICATE-----
Generated at Fri Apr 4 16:15:14 2025 by rpki-client