Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/4tu1evbMzRYyS7xTfYxX-x49Rhw.roa
File: 4tu1evbMzRYyS7xTfYxX-x49Rhw.roa (raw, json)
Hash identifier: /BNGOQy+bEBWy/WcXlQ7Pt8J+lcR7raWdazEmHW64Hk=
Subject key identifier: E2:DB:B5:7A:F6:CC:CD:16:32:4B:BC:53:7D:8C:57:FB:1E:3D:46:1C
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 0194236A30C61CEBC1EE7C59E8B5E0412167
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/4tu1evbMzRYyS7xTfYxX-x49Rhw.roa
Signing time: Wed 01 Jan 2025 19:49:09 +0000
ROA not before: Wed 01 Jan 2025 19:49:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2914
IP address blocks: 45.138.210.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:30:c6:1c:eb:c1:ee:7c:59:e8:b5:e0:41:21:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Jan 1 19:49:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e2dbb57af6cccd16324bbc537d8c57fb1e3d461c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:dd:d1:1e:c1:3c:9f:20:1b:23:7a:0c:93:bd:
75:d3:69:1f:90:28:26:b2:b3:fb:7c:46:be:43:ec:
b5:cb:68:db:c0:a2:5c:01:ad:11:25:5a:71:87:2d:
0b:d4:55:b1:ab:49:b4:c5:d6:3d:56:f9:95:24:08:
85:9b:d1:54:00:1c:86:5e:b7:06:91:ac:da:e5:58:
52:1c:c8:90:e0:63:de:5e:05:95:e5:f3:22:c7:6a:
cf:a3:5c:2f:17:c9:aa:5f:20:1a:e9:1e:82:1e:40:
34:a3:1a:88:29:ee:c9:68:2e:2f:4f:68:8e:5e:70:
c1:82:22:76:f6:e4:fa:0a:15:5e:e1:5a:06:db:2b:
f3:69:a7:72:dc:ce:d1:7c:b4:e7:bf:46:b5:b2:ec:
f9:25:df:b9:07:3e:db:08:7b:7f:28:b0:0e:c1:5d:
ab:e9:d9:55:2c:2c:f4:ed:77:c3:a4:d6:98:a1:83:
bd:4a:20:43:fc:fe:00:91:08:8f:e6:da:42:16:ee:
41:86:22:30:c0:9f:90:1f:9c:41:e6:bb:e6:3b:bc:
db:d5:ef:91:9d:5d:65:91:92:e2:fb:94:88:6e:21:
8d:b2:b1:9c:bf:84:fe:15:a2:27:b6:e4:9a:43:88:
2a:9b:4f:24:6d:25:90:d3:80:43:b6:42:a4:fb:01:
35:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:DB:B5:7A:F6:CC:CD:16:32:4B:BC:53:7D:8C:57:FB:1E:3D:46:1C
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/4tu1evbMzRYyS7xTfYxX-x49Rhw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.138.210.0/24
Signature Algorithm: sha256WithRSAEncryption
30:8f:e2:ba:28:b7:d3:f5:25:92:a3:20:0b:17:da:59:ce:eb:
f3:37:09:48:c4:10:a6:d9:e4:52:86:26:44:81:df:2c:14:d2:
75:b6:c2:bd:96:b7:47:dd:d6:8a:4b:64:3f:7a:57:0b:82:7c:
7c:9b:9d:30:21:62:66:77:f6:16:e9:af:64:f3:7f:5d:ae:2e:
d5:5c:1b:4a:62:f0:39:e7:1b:73:b5:8c:7d:ed:67:e9:5a:62:
14:45:9b:5c:df:9b:92:3e:7a:6a:4e:a2:2d:5d:1f:a4:76:7d:
a5:67:6c:d1:c0:9b:df:97:3b:37:d3:24:de:40:75:eb:92:ee:
a0:71:80:9f:03:02:36:88:ac:f7:1c:e3:46:fd:8e:39:8e:93:
50:14:f1:ad:35:8a:76:0a:cf:b6:00:80:1f:5e:de:2e:06:db:
dc:24:88:35:70:38:d7:fc:b8:2c:a0:d4:60:7c:a4:5d:2f:b2:
18:db:27:63:10:f2:d9:66:8f:56:44:d7:c3:f6:19:a8:e3:c0:
e0:e6:6d:ae:28:c6:9b:8e:27:1d:58:3b:71:b4:da:30:de:df:
40:93:b3:34:c4:f5:05:37:37:6a:1a:5c:89:98:dd:78:ce:66:
af:bb:61:b4:fb:48:db:99:28:9e:aa:e7:f0:57:cf:72:ba:cf:
2b:b8:cc:fd
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQjajDGHOvB7nxZ6LXgQSFnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjOGZkMWE4YWU1OTk2YzFlNTY5MmMxYThjNDJiZmU5YzNi
YTU3NDUwHhcNMjUwMTAxMTk0OTA5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMmRiYjU3YWY2Y2NjZDE2MzI0YmJjNTM3ZDhjNTdmYjFlM2Q0NjFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzt3RHsE8nyAbI3oMk71102kfkCgm
srP7fEa+Q+y1y2jbwKJcAa0RJVpxhy0L1FWxq0m0xdY9VvmVJAiFm9FUAByGXrcG
kaza5VhSHMiQ4GPeXgWV5fMix2rPo1wvF8mqXyAa6R6CHkA0oxqIKe7JaC4vT2iO
XnDBgiJ29uT6ChVe4VoG2yvzaady3M7RfLTnv0a1suz5Jd+5Bz7bCHt/KLAOwV2r
6dlVLCz07XfDpNaYoYO9SiBD/P4AkQiP5tpCFu5BhiIwwJ+QH5xB5rvmO7zb1e+R
nV1lkZLi+5SIbiGNsrGcv4T+FaIntuSaQ4gqm08kbSWQ04BDtkKk+wE11wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOLbtXr2zM0WMku8U32MV/sePUYcMB8GA1UdIwQY
MBaAFGyP0aiuWZbB5WksGoxCv+nDuldFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYklfUnFLNVpsc0hsYVN3YWpFS182Y082VjBVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC80OTI1OTAtYTAyZi00NDNlLWFhYTMt
ZmVhYzI2ZWFlY2MyLzEvNHR1MWV2Yk16Ull5Uzd4VGZZeFgteDQ5Umh3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC80OTI1OTAtYTAyZi00NDNlLWFhYTMtZmVhYzI2ZWFlY2My
LzEvYklfUnFLNVpsc0hsYVN3YWpFS182Y082VjBVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYrSMA0G
CSqGSIb3DQEBCwUAA4IBAQAwj+K6KLfT9SWSoyALF9pZzuvzNwlIxBCm2eRShiZE
gd8sFNJ1tsK9lrdH3daKS2Q/elcLgnx8m50wIWJmd/YW6a9k839dri7VXBtKYvA5
5xtztYx97WfpWmIURZtc35uSPnpqTqItXR+kdn2lZ2zRwJvflzs30yTeQHXrku6g
cYCfAwI2iKz3HONG/Y45jpNQFPGtNYp2Cs+2AIAfXt4uBtvcJIg1cDjX/LgsoNRg
fKRdL7IY2ydjEPLZZo9WRNfD9hmo48Dg5m2uKMabjicdWDtxtNow3t9Ak7M0xPUF
NzdqGlyJmN14zmavu2G0+0jbmSiequfwV89yus8ruMz9
-----END CERTIFICATE-----
Generated at Sun Apr 6 13:26:52 2025 by rpki-client