Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/S4-AN7joerVdZQ0hLdZVAec5hCo.roa
File: S4-AN7joerVdZQ0hLdZVAec5hCo.roa (raw, json)
Hash identifier: sauyY83bV5c01FbBm+hVu2Izr6Rl8Igw1Pdj4244cbc=
Subject key identifier: 4B:8F:80:37:B8:E8:7A:B5:5D:65:0D:21:2D:D6:55:01:E7:39:84:2A
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 019422203F39531EBF6057ED188503FC2CD9
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/S4-AN7joerVdZQ0hLdZVAec5hCo.roa
Signing time: Wed 01 Jan 2025 13:48:46 +0000
ROA not before: Wed 01 Jan 2025 13:48:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206216
IP address blocks: 45.8.22.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:3f:39:53:1e:bf:60:57:ed:18:85:03:fc:2c:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jan 1 13:48:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4b8f8037b8e87ab55d650d212dd65501e739842a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c2:8c:34:e1:e4:d8:38:df:e1:fa:4b:c3:91:
2e:06:49:89:31:5d:f5:bd:53:04:66:cf:a6:5b:22:
bb:8f:06:87:6c:9f:9a:c1:e0:49:c1:fa:0c:5b:b0:
5a:ac:49:4b:43:66:22:5c:aa:e2:6e:06:f9:fa:47:
c0:77:9c:aa:9e:08:97:62:7a:4a:81:c3:b2:c5:38:
c5:9d:dd:bb:8d:0e:35:af:71:ad:42:c5:f8:d8:54:
dc:af:bf:9e:28:6a:0a:7b:51:1f:1c:3b:99:65:9f:
56:38:01:12:e4:36:58:16:83:d7:00:3a:25:cf:f2:
27:c4:09:76:46:d1:7a:f2:ff:fa:42:e5:cd:ce:d6:
24:c5:82:97:d8:39:42:93:c8:f8:30:bf:ac:cf:36:
32:da:37:52:ba:7e:2b:38:86:90:01:d0:de:7c:48:
6b:28:36:60:a2:02:3e:08:20:44:9b:d1:c0:dd:27:
e9:b2:54:a4:c3:7f:08:bb:8f:e3:85:1d:f9:37:2b:
28:c1:78:eb:38:23:99:31:4f:a4:98:90:f6:5a:dd:
c2:ad:52:e6:03:d9:1b:1f:e8:c3:88:f2:b5:1d:4d:
80:9f:d5:d1:48:b2:44:00:7e:80:59:9f:0f:fc:b1:
02:0e:49:bf:3b:b3:74:54:0c:39:37:0f:ab:de:8d:
3a:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:8F:80:37:B8:E8:7A:B5:5D:65:0D:21:2D:D6:55:01:E7:39:84:2A
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/S4-AN7joerVdZQ0hLdZVAec5hCo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.22.0/24
Signature Algorithm: sha256WithRSAEncryption
56:76:03:0c:22:96:b8:8d:a4:e1:4e:9b:c8:db:33:29:34:4a:
d8:f3:da:5f:ee:6a:64:93:f1:fe:55:80:b6:57:b4:89:66:ea:
ea:52:d4:33:7e:46:5f:26:49:52:e9:f2:d5:b2:da:b1:70:21:
b7:f9:5d:af:4a:6d:66:2c:9b:d6:76:0c:10:82:da:df:83:e7:
c7:63:2d:86:f8:32:a8:14:09:fe:f9:a3:5d:e0:44:e5:45:ac:
16:75:c1:1a:54:4e:c8:b7:be:9b:6c:7d:2c:1f:24:5e:f0:9c:
9c:01:28:e9:30:36:1d:77:50:ce:c4:47:98:dc:c7:74:6a:3f:
d8:7f:cb:00:b9:31:8e:03:49:38:8a:ba:c1:e0:61:6e:1f:fb:
a1:8a:33:7a:4c:cf:f7:7c:ca:16:9b:8e:8f:11:af:0a:36:10:
30:c0:6d:54:65:a6:64:78:fe:fe:24:95:a5:a3:eb:09:a3:d7:
a1:4c:5b:63:2c:15:37:57:fc:38:fe:3c:45:76:79:6f:c0:e9:
cc:c6:d7:ad:e8:14:6a:b1:d3:87:2f:fc:b5:4e:a3:a9:1c:a9:
68:df:e7:59:64:fe:15:c8:14:74:34:1c:21:f7:dc:d4:6b:2d:
75:e9:3a:92:41:e0:b1:e2:2b:d0:49:ea:fe:bd:2d:bc:11:7a:
84:d0:fd:0d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQiID85Ux6/YFftGIUD/CzZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx
MTRjYWYwHhcNMjUwMTAxMTM0ODQ2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YjhmODAzN2I4ZTg3YWI1NWQ2NTBkMjEyZGQ2NTUwMWU3Mzk4NDJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwcKMNOHk2Djf4fpLw5EuBkmJMV31
vVMEZs+mWyK7jwaHbJ+aweBJwfoMW7BarElLQ2YiXKribgb5+kfAd5yqngiXYnpK
gcOyxTjFnd27jQ41r3GtQsX42FTcr7+eKGoKe1EfHDuZZZ9WOAES5DZYFoPXADol
z/InxAl2RtF68v/6QuXNztYkxYKX2DlCk8j4ML+szzYy2jdSun4rOIaQAdDefEhr
KDZgogI+CCBEm9HA3SfpslSkw38Iu4/jhR35NysowXjrOCOZMU+kmJD2Wt3CrVLm
A9kbH+jDiPK1HU2An9XRSLJEAH6AWZ8P/LECDkm/O7N0VAw5Nw+r3o06JwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEuPgDe46Hq1XWUNIS3WVQHnOYQqMB8GA1UdIwQY
MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt
YjQzNDJiYTkxYWJjLzEvUzQtQU43am9lclZkWlEwaExkWlZBZWM1aENvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj
LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALQgWMA0G
CSqGSIb3DQEBCwUAA4IBAQBWdgMMIpa4jaThTpvI2zMpNErY89pf7mpkk/H+VYC2
V7SJZurqUtQzfkZfJklS6fLVstqxcCG3+V2vSm1mLJvWdgwQgtrfg+fHYy2G+DKo
FAn++aNd4ETlRawWdcEaVE7It76bbH0sHyRe8JycASjpMDYdd1DOxEeY3Md0aj/Y
f8sAuTGOA0k4irrB4GFuH/uhijN6TM/3fMoWm46PEa8KNhAwwG1UZaZkeP7+JJWl
o+sJo9ehTFtjLBU3V/w4/jxFdnlvwOnMxtet6BRqsdOHL/y1TqOpHKlo3+dZZP4V
yBR0NBwh99zUay116TqSQeCx4ivQSer+vS28EXqE0P0N
-----END CERTIFICATE-----
Generated at Wed Feb 19 20:32:42 2025 by rpki-client