Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/pVERmmWSK2MXf7sxDQKCGkNgq-A.roa
File: pVERmmWSK2MXf7sxDQKCGkNgq-A.roa (raw, json)
Hash identifier: S/KFwfFvE4CjvwrWp6r6a8fJrvG6h992hoFxps1Xj4k=
Subject key identifier: A5:51:11:9A:65:92:2B:63:17:7F:BB:31:0D:02:82:1A:43:60:AB:E0
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 019423D714B0C33560A8A0F94DD1F0836220
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/pVERmmWSK2MXf7sxDQKCGkNgq-A.roa
Signing time: Wed 01 Jan 2025 21:48:05 +0000
ROA not before: Wed 01 Jan 2025 21:48:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59994
IP address blocks: 45.137.107.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:14:b0:c3:35:60:a8:a0:f9:4d:d1:f0:83:62:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Jan 1 21:48:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a551119a65922b63177fbb310d02821a4360abe0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:be:43:3d:04:a6:03:98:22:00:d6:ba:77:ba:
9a:94:0b:52:63:d0:01:f0:22:97:39:9b:bf:1b:21:
22:ae:59:7f:f5:29:cd:5f:53:ce:70:db:ee:27:06:
41:eb:f5:c9:26:a7:74:dc:82:31:4d:41:f2:a2:58:
3b:cb:1a:28:14:42:36:51:ad:00:c9:c6:cb:2c:9f:
9d:2d:d8:c6:97:07:02:7d:7b:5f:26:60:65:0a:d4:
36:19:2b:d8:85:87:d5:01:6d:e1:b3:a1:a8:6e:44:
84:be:b9:3c:c1:bc:2b:7f:e2:df:b2:db:fe:5f:84:
70:27:1d:8a:26:a5:c6:13:d7:4e:dc:f1:45:58:76:
1d:59:ec:d6:8f:d2:e8:b0:d2:4d:54:a3:26:01:e6:
60:4e:0f:ca:cd:f3:11:96:94:f6:7d:26:61:67:64:
da:da:05:8e:30:12:2f:79:77:39:87:ce:0b:f7:9a:
ce:c7:c5:53:91:9e:6f:84:15:32:0b:93:ce:d7:f9:
04:67:65:6d:f4:4e:0d:35:a7:ba:56:15:17:95:aa:
8c:ad:90:a2:b6:8d:e1:e1:3d:0c:20:c0:8f:d6:f2:
64:6a:85:70:23:36:89:1d:69:09:4c:39:3b:47:cf:
08:d5:32:40:46:46:18:24:5b:8f:f2:95:91:07:92:
e9:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:51:11:9A:65:92:2B:63:17:7F:BB:31:0D:02:82:1A:43:60:AB:E0
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/pVERmmWSK2MXf7sxDQKCGkNgq-A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.137.107.0/24
Signature Algorithm: sha256WithRSAEncryption
95:ba:c6:bb:c2:ca:0d:73:5f:4e:6f:99:d4:a3:fc:1a:43:51:
64:82:d9:78:59:70:e1:a8:da:01:80:05:7d:d8:e2:f9:31:10:
40:3d:56:99:b5:12:81:ad:08:8d:9c:db:bf:ca:65:dc:71:50:
97:04:75:3b:92:2c:a4:e7:68:68:b6:6e:2c:2f:52:95:3f:80:
f2:66:c3:03:79:c1:3b:22:e4:b0:f0:0d:30:65:fd:b2:22:02:
63:08:ad:54:cc:fd:12:b7:62:ee:27:63:cd:20:81:39:93:ba:
b1:12:91:1b:01:27:13:31:2f:eb:c7:03:ca:40:63:3a:bb:46:
a5:b2:a8:17:f5:61:5c:95:3c:5c:98:2a:00:18:af:c0:01:16:
83:d3:ca:31:80:d8:e5:3a:48:fa:97:a7:2f:3b:b0:d3:44:36:
6f:be:56:94:09:29:f1:92:8f:d1:a5:6e:6d:1b:17:5d:b5:74:
a5:e6:2f:44:a8:4b:ba:33:ec:d7:5c:93:ed:e2:f6:ff:ba:76:
dc:ef:62:13:8e:a5:7c:af:fe:3d:40:40:0f:ad:91:25:7f:aa:
34:bb:59:35:93:df:00:f1:55:26:72:9d:04:67:54:58:b8:fe:
cc:49:aa:ae:9d:0e:e5:00:08:42:0d:68:74:6c:d1:a2:c0:20:
33:b6:e4:fc
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQj1xSwwzVgqKD5TdHwg2IgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0Zjk2MzQ1ZDNmMjJlZGIzOTVkMjQ3ZjdiODZkMmQ3M2U0
YTAwOTEwHhcNMjUwMTAxMjE0ODA1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNTUxMTE5YTY1OTIyYjYzMTc3ZmJiMzEwZDAyODIxYTQzNjBhYmUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx75DPQSmA5giANa6d7qalAtSY9AB
8CKXOZu/GyEirll/9SnNX1POcNvuJwZB6/XJJqd03IIxTUHyolg7yxooFEI2Ua0A
ycbLLJ+dLdjGlwcCfXtfJmBlCtQ2GSvYhYfVAW3hs6GobkSEvrk8wbwrf+Lfstv+
X4RwJx2KJqXGE9dO3PFFWHYdWezWj9LosNJNVKMmAeZgTg/KzfMRlpT2fSZhZ2Ta
2gWOMBIveXc5h84L95rOx8VTkZ5vhBUyC5PO1/kEZ2Vt9E4NNae6VhUXlaqMrZCi
to3h4T0MIMCP1vJkaoVwIzaJHWkJTDk7R88I1TJARkYYJFuP8pWRB5LpWwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKVREZplkitjF3+7MQ0CghpDYKvgMB8GA1UdIwQY
MBaAFLT5Y0XT8i7bOV0kf3uG0tc+SgCRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFBsalJkUHlMdHM1WFNSX2U0YlMxejVLQUpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS84ZTEyMWQtNzNiMy00MzhhLTgzYzQt
NmZjMzQzZDc3Y2QyLzEvcFZFUm1tV1NLMk1YZjdzeERRS0NHa05ncS1BLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS84ZTEyMWQtNzNiMy00MzhhLTgzYzQtNmZjMzQzZDc3Y2Qy
LzEvdFBsalJkUHlMdHM1WFNSX2U0YlMxejVLQUpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYlrMA0G
CSqGSIb3DQEBCwUAA4IBAQCVusa7wsoNc19Ob5nUo/waQ1Fkgtl4WXDhqNoBgAV9
2OL5MRBAPVaZtRKBrQiNnNu/ymXccVCXBHU7kiyk52hotm4sL1KVP4DyZsMDecE7
IuSw8A0wZf2yIgJjCK1UzP0St2LuJ2PNIIE5k7qxEpEbAScTMS/rxwPKQGM6u0al
sqgX9WFclTxcmCoAGK/AARaD08oxgNjlOkj6l6cvO7DTRDZvvlaUCSnxko/RpW5t
GxddtXSl5i9EqEu6M+zXXJPt4vb/unbc72ITjqV8r/49QEAPrZElf6o0u1k1k98A
8VUmcp0EZ1RYuP7MSaqunQ7lAAhCDWh0bNGiwCAztuT8
-----END CERTIFICATE-----
Generated at Sun Apr 6 17:49:10 2025 by rpki-client