Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/l7RJRQmu4R6xKEfHa1zzTNluzAU.roa
File: l7RJRQmu4R6xKEfHa1zzTNluzAU.roa (raw, json)
Hash identifier: 19/NP/fOnHfPwDJifcyoBTTxLb7En0C1hs6JhM5xYvc=
Subject key identifier: 97:B4:49:45:09:AE:E1:1E:B1:28:47:C7:6B:5C:F3:4C:D9:6E:CC:05
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 019430108F4B49AAD817AD3436495E164A1C
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/l7RJRQmu4R6xKEfHa1zzTNluzAU.roa
Signing time: Sat 04 Jan 2025 06:46:19 +0000
ROA not before: Sat 04 Jan 2025 06:46:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209537
IP address blocks: 45.67.18.0/24 maxlen: 32
185.207.176.0/24 maxlen: 32
2a06:82c5::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:30:10:8f:4b:49:aa:d8:17:ad:34:36:49:5e:16:4a:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Jan 4 06:46:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=97b4494509aee11eb12847c76b5cf34cd96ecc05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:72:cc:18:4c:ee:89:b9:0c:26:56:32:87:2d:
94:23:ca:48:70:c9:23:51:ee:78:7a:a6:66:2f:86:
0b:7d:c3:23:5a:21:a6:82:07:d4:06:d4:c4:37:97:
e2:81:b1:c6:78:4c:b0:d4:07:1c:33:34:16:20:10:
d6:d6:e0:03:b2:28:84:d5:2b:c0:cb:06:e3:ed:a2:
16:60:47:91:ea:27:28:06:5f:0d:16:00:d2:9f:d1:
b5:d7:e5:17:cc:be:2b:e1:69:33:06:ac:78:22:da:
64:93:17:32:b5:cf:28:76:4e:14:ff:ee:83:a8:5b:
71:21:da:20:ae:00:30:de:e3:7e:8b:5f:05:3c:b2:
f8:73:8c:7a:04:b8:5d:31:84:97:a4:f3:a6:59:f0:
f4:d2:0c:ff:c1:fc:eb:b2:86:67:62:0f:d3:fc:37:
9a:40:17:20:ea:3d:bb:86:5f:c6:95:4b:f9:f5:c6:
8e:cd:b5:7d:83:e5:ae:87:54:9d:18:84:45:42:f7:
bf:79:6a:ad:90:39:5d:55:49:b3:06:c2:62:3f:c7:
1d:d7:1b:3e:cf:d2:6e:0f:c8:6f:ae:6f:d3:ac:32:
5b:ab:3d:30:2e:67:af:36:71:e7:68:9f:8c:c1:1e:
a8:32:91:4c:3d:a0:e5:66:68:38:a3:08:21:3e:c4:
6f:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:B4:49:45:09:AE:E1:1E:B1:28:47:C7:6B:5C:F3:4C:D9:6E:CC:05
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/l7RJRQmu4R6xKEfHa1zzTNluzAU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.18.0/24
185.207.176.0/24
IPv6:
2a06:82c5::/48
Signature Algorithm: sha256WithRSAEncryption
55:cc:b0:93:0b:c7:5a:df:da:5d:48:2d:6f:e1:22:3e:a3:1e:
a6:39:a5:61:9f:29:1f:a4:2f:32:82:08:93:68:d6:c3:63:ce:
61:8e:1b:af:8e:c9:27:2b:19:d7:52:3f:aa:64:9b:ff:c9:cb:
58:2f:92:d4:2a:2f:91:1e:e8:09:88:7b:31:cc:d9:9d:07:92:
fc:a1:5a:42:35:66:b4:83:49:33:77:ed:22:38:7a:c4:d7:8f:
bd:20:fc:a1:90:40:96:31:c8:c8:f4:cb:0f:a9:6b:01:d7:01:
f2:dc:fd:6a:3a:b9:8b:08:74:ac:b1:ab:e0:de:54:8a:2b:1b:
93:36:40:20:62:d8:36:f7:75:af:cf:a7:c5:d4:24:ce:9d:ba:
a2:6a:49:d9:20:5f:e4:b6:b5:48:68:72:49:39:3d:ca:a9:71:
70:d0:c3:0a:a1:a8:20:1f:75:54:39:a0:e1:ce:b5:7b:24:fe:
58:c4:c1:dd:e4:a3:4b:5b:30:60:e7:42:fc:ae:09:71:9a:52:
d9:00:45:9f:99:18:28:f7:28:08:5d:55:a3:77:89:ee:89:0b:
03:b4:d8:67:03:01:be:74:a7:60:08:6a:f8:58:a3:66:56:d1:
65:65:7f:b5:2c:4e:a4:f9:6b:cd:2f:a5:0e:cf:40:e8:f7:76:
8d:29:c2:12
-----BEGIN CERTIFICATE-----
MIIFFDCCA/ygAwIBAgISAZQwEI9LSarYF600NkleFkocMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjOGZkMWE4YWU1OTk2YzFlNTY5MmMxYThjNDJiZmU5YzNi
YTU3NDUwHhcNMjUwMTA0MDY0NjE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5N2I0NDk0NTA5YWVlMTFlYjEyODQ3Yzc2YjVjZjM0Y2Q5NmVjYzA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApnLMGEzuibkMJlYyhy2UI8pIcMkj
Ue54eqZmL4YLfcMjWiGmggfUBtTEN5figbHGeEyw1AccMzQWIBDW1uADsiiE1SvA
ywbj7aIWYEeR6icoBl8NFgDSn9G11+UXzL4r4WkzBqx4Itpkkxcytc8odk4U/+6D
qFtxIdogrgAw3uN+i18FPLL4c4x6BLhdMYSXpPOmWfD00gz/wfzrsoZnYg/T/Dea
QBcg6j27hl/GlUv59caOzbV9g+Wuh1SdGIRFQve/eWqtkDldVUmzBsJiP8cd1xs+
z9JuD8hvrm/TrDJbqz0wLmevNnHnaJ+MwR6oMpFMPaDlZmg4owghPsRv+QIDAQAB
o4ICIDCCAhwwHQYDVR0OBBYEFJe0SUUJruEesShHx2tc80zZbswFMB8GA1UdIwQY
MBaAFGyP0aiuWZbB5WksGoxCv+nDuldFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYklfUnFLNVpsc0hsYVN3YWpFS182Y082VjBVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC80OTI1OTAtYTAyZi00NDNlLWFhYTMt
ZmVhYzI2ZWFlY2MyLzEvbDdSSlJRbXU0UjZ4S0VmSGExenpUTmx1ekFVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC80OTI1OTAtYTAyZi00NDNlLWFhYTMtZmVhYzI2ZWFlY2My
LzEvYklfUnFLNVpsc0hsYVN3YWpFS182Y082VjBVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQALUMSAwQA
uc+wMA8EAgACMAkDBwAqBoLFAAAwDQYJKoZIhvcNAQELBQADggEBAFXMsJMLx1rf
2l1ILW/hIj6jHqY5pWGfKR+kLzKCCJNo1sNjzmGOG6+OyScrGddSP6pkm//Jy1gv
ktQqL5Ee6AmIezHM2Z0HkvyhWkI1ZrSDSTN37SI4esTXj70g/KGQQJYxyMj0yw+p
awHXAfLc/Wo6uYsIdKyxq+DeVIorG5M2QCBi2Db3da/Pp8XUJM6duqJqSdkgX+S2
tUhockk5PcqpcXDQwwqhqCAfdVQ5oOHOtXsk/ljEwd3ko0tbMGDnQvyuCXGaUtkA
RZ+ZGCj3KAhdVaN3ie6JCwO02GcDAb50p2AIavhYo2ZW0WVlf7UsTqT5a80vpQ7P
QOj3do0pwhI=
-----END CERTIFICATE-----
Generated at Sun Apr 6 09:49:51 2025 by rpki-client