Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/36e4c8-e5ab-4b59-a366-63c5c1d6bf02/1/Qgg0OrZf1btG9Hg3bnql_fo9jrE.roa
File: Qgg0OrZf1btG9Hg3bnql_fo9jrE.roa (raw, json)
Hash identifier: MGsVBiqcPfrONQ+0tbl2VBzc1I89aZQDybKZsZE18S4=
Subject key identifier: 42:08:34:3A:B6:5F:D5:BB:46:F4:78:37:6E:7A:A5:FD:FA:3D:8E:B1
Certificate issuer: /CN=8e2c935e3b5b7a5d017a7839c1662c7d7fed75ef
Certificate serial: 053EF892
Authority key identifier: 8E:2C:93:5E:3B:5B:7A:5D:01:7A:78:39:C1:66:2C:7D:7F:ED:75:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jiyTXjtbel0Beng5wWYsfX_tde8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/36e4c8-e5ab-4b59-a366-63c5c1d6bf02/1/Qgg0OrZf1btG9Hg3bnql_fo9jrE.roa
Signing time: Sat 01 Jan 2022 09:02:21 +0000
ROA not before: Sat 01 Jan 2022 09:02:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39364
IP address blocks: 45.94.212.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88012946 (0x53ef892)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e2c935e3b5b7a5d017a7839c1662c7d7fed75ef
Validity
Not Before: Jan 1 09:02:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4208343ab65fd5bb46f478376e7aa5fdfa3d8eb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:02:59:ef:68:20:18:b0:48:48:76:0c:75:c4:
00:0c:54:e8:47:ec:5c:a1:48:15:07:b0:ff:8c:2a:
d9:b0:41:d4:5f:ac:bc:1b:9a:77:ad:72:de:28:1b:
bb:d4:44:37:95:97:f7:12:23:b5:93:d1:bc:be:7b:
cd:d5:9f:0a:d8:5d:4f:7a:e7:73:ea:39:1b:20:85:
82:08:2a:3a:fe:fd:f6:40:6e:7a:93:cc:2b:e3:1e:
81:a0:1c:3d:49:b9:b2:05:55:bd:3b:25:8b:b6:da:
d2:a7:88:6f:1a:ad:7d:f4:6e:79:89:57:a9:85:5d:
14:5b:ed:b0:23:bd:ef:c5:cc:df:56:66:b0:b0:60:
26:4d:e2:1f:e3:e3:9d:8c:df:bd:5f:84:7f:1e:85:
33:7a:4a:d4:59:e4:50:46:0e:14:b9:55:85:ab:dc:
24:46:62:fe:d8:bf:49:4d:7b:91:3c:10:f4:0e:59:
75:4d:ae:58:85:45:24:01:46:d2:8d:48:dd:4b:83:
67:1a:20:84:82:ba:b4:77:f0:e1:73:85:8e:0c:19:
8a:f2:91:36:ea:92:c5:47:ca:7c:50:78:ca:97:81:
b4:ab:87:50:47:d8:c9:f1:f4:d6:8a:03:1a:ab:70:
4c:3c:ce:cf:9d:a8:92:47:ab:1b:17:a0:9b:dd:13:
de:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:08:34:3A:B6:5F:D5:BB:46:F4:78:37:6E:7A:A5:FD:FA:3D:8E:B1
X509v3 Authority Key Identifier:
keyid:8E:2C:93:5E:3B:5B:7A:5D:01:7A:78:39:C1:66:2C:7D:7F:ED:75:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jiyTXjtbel0Beng5wWYsfX_tde8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/36e4c8-e5ab-4b59-a366-63c5c1d6bf02/1/Qgg0OrZf1btG9Hg3bnql_fo9jrE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/36e4c8-e5ab-4b59-a366-63c5c1d6bf02/1/jiyTXjtbel0Beng5wWYsfX_tde8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.212.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:87:3c:64:02:56:23:70:57:ca:a7:a5:27:11:33:68:48:96:
81:6b:3e:a2:07:5e:f3:19:7a:0c:65:06:4b:e0:9b:bc:f7:26:
53:90:65:e4:31:82:c4:27:68:f0:04:98:37:75:ee:31:9d:04:
00:8d:95:48:4e:7d:6d:0e:05:f9:88:24:7d:dd:a6:07:e4:aa:
4b:ba:20:8b:a1:af:39:bb:60:11:a6:cc:8a:aa:b4:46:13:40:
23:33:6d:7a:b7:3e:eb:7f:44:cf:68:32:f9:20:cd:cd:2a:1e:
df:f0:9f:8f:c3:75:53:93:fe:37:84:86:8c:48:ec:81:44:2f:
0f:87:a1:fc:cd:9a:41:7c:16:73:5c:7a:b9:18:ac:df:62:a2:
5d:98:08:64:78:39:15:90:7a:a9:74:f6:ba:5b:c7:33:de:5f:
35:e3:3c:6d:a1:51:1f:39:84:d9:30:b2:84:8c:4d:58:73:a3:
31:b5:43:0d:e6:b5:5c:37:49:8a:36:45:bf:a9:be:81:7d:8c:
6f:b1:f9:07:b0:6b:a0:6e:a9:59:df:4e:37:ac:6c:b4:50:c6:
a2:24:27:b6:f7:91:53:10:0a:f4:24:95:47:c9:9b:53:5f:9e:
0c:74:03:7f:ed:fc:87:eb:09:53:da:4e:1e:2e:f7:e6:f6:c7:
ae:63:79:a8
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBT74kjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4
ZTJjOTM1ZTNiNWI3YTVkMDE3YTc4MzljMTY2MmM3ZDdmZWQ3NWVmMB4XDTIyMDEw
MTA5MDIyMVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNDIwODM0M2FiNjVm
ZDViYjQ2ZjQ3ODM3NmU3YWE1ZmRmYTNkOGViMTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJACWe9oIBiwSEh2DHXEAAxU6EfsXKFIFQew/4wq2bBB1F+s
vBuad61y3igbu9REN5WX9xIjtZPRvL57zdWfCthdT3rnc+o5GyCFgggqOv799kBu
epPMK+MegaAcPUm5sgVVvTsli7ba0qeIbxqtffRueYlXqYVdFFvtsCO978XM31Zm
sLBgJk3iH+PjnYzfvV+Efx6FM3pK1FnkUEYOFLlVhavcJEZi/ti/SU17kTwQ9A5Z
dU2uWIVFJAFG0o1I3UuDZxoghIK6tHfw4XOFjgwZivKRNuqSxUfKfFB4ypeBtKuH
UEfYyfH01ooDGqtwTDzOz52okkerGxegm90T3g8CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRCCDQ6tl/Vu0b0eDdueqX9+j2OsTAfBgNVHSMEGDAWgBSOLJNeO1t6XQF6
eDnBZix9f+117zAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2ppeVRYanRiZWwwQmVuZzV3V1lzZlhfdGRlOC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvY2MvMzZlNGM4LWU1YWItNGI1OS1hMzY2LTYzYzVjMWQ2YmYwMi8x
L1FnZzBPclpmMWJ0RzlIZzNibnFsX2ZvOWpyRS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2Mv
MzZlNGM4LWU1YWItNGI1OS1hMzY2LTYzYzVjMWQ2YmYwMi8xL2ppeVRYanRiZWww
QmVuZzV3V1lzZlhfdGRlOC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC1e1DANBgkqhkiG9w0BAQsFAAOC
AQEAtoc8ZAJWI3BXyqelJxEzaEiWgWs+ogde8xl6DGUGS+CbvPcmU5Bl5DGCxCdo
8ASYN3XuMZ0EAI2VSE59bQ4F+Ygkfd2mB+SqS7ogi6GvObtgEabMiqq0RhNAIzNt
erc+639Ez2gy+SDNzSoe3/Cfj8N1U5P+N4SGjEjsgUQvD4eh/M2aQXwWc1x6uRis
32KiXZgIZHg5FZB6qXT2ulvHM95fNeM8baFRHzmE2TCyhIxNWHOjMbVDDea1XDdJ
ijZFv6m+gX2Mb7H5B7BroG6pWd9ON6xstFDGoiQntveRUxAK9CSVR8mbU1+eDHQD
f+38h+sJU9pOHi735vbHrmN5qA==
-----END CERTIFICATE-----
Generated at Mon Jun 9 02:39:40 2025 by rpki-client