Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/94b66e-3e0d-4332-ab4f-770f8eab2ae7/1/xtIJ9CSowwXn8DwE9pPmeClg6ms.roa
File: xtIJ9CSowwXn8DwE9pPmeClg6ms.roa (raw, json)
Hash identifier: 31wz/SD10DVN8Iw7UtHrcLnrWKuEhsF6+2Xv8D4eSwQ=
Subject key identifier: C6:D2:09:F4:24:A8:C3:05:E7:F0:3C:04:F6:93:E6:78:29:60:EA:6B
Certificate issuer: /CN=6832c32d2259013991260d530d9120031aaefcd0
Certificate serial: 0194258FC1159E4A23B6E2C028FCC8965BFE
Authority key identifier: 68:32:C3:2D:22:59:01:39:91:26:0D:53:0D:91:20:03:1A:AE:FC:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aDLDLSJZATmRJg1TDZEgAxqu_NA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/94b66e-3e0d-4332-ab4f-770f8eab2ae7/1/xtIJ9CSowwXn8DwE9pPmeClg6ms.roa
Signing time: Thu 02 Jan 2025 05:49:25 +0000
ROA not before: Thu 02 Jan 2025 05:49:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8075
IP address blocks: 145.46.160.0/24 maxlen: 24
145.46.161.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:c1:15:9e:4a:23:b6:e2:c0:28:fc:c8:96:5b:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6832c32d2259013991260d530d9120031aaefcd0
Validity
Not Before: Jan 2 05:49:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c6d209f424a8c305e7f03c04f693e6782960ea6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:3e:e0:25:12:44:b5:b3:a6:6b:39:a2:6d:1c:
e7:82:c4:0e:d3:9f:c9:fc:bf:4d:66:cb:dc:2a:a8:
2d:5c:07:ee:18:8b:24:59:2a:f8:41:20:56:f6:7e:
7f:ce:58:40:72:e9:5c:a3:4a:8f:aa:60:20:99:e1:
f3:bb:7f:c6:9b:4f:d7:22:d2:88:89:d6:47:2d:54:
a1:fc:dd:e1:26:7a:58:a4:ea:43:9d:88:2a:11:1d:
fd:0b:0d:ce:fe:3d:23:d0:25:64:0f:fb:22:9e:fd:
fb:da:c8:3f:4d:47:77:95:39:08:8a:04:a1:fd:61:
1c:46:bb:9b:c5:8f:0d:b8:87:cb:bb:02:cc:e1:69:
f2:6d:cf:c1:0d:d1:60:60:b0:c2:30:32:da:a1:24:
27:8e:2d:0b:d8:4e:53:f5:cc:d5:9e:f4:94:50:3c:
9b:3e:16:96:32:9b:d0:19:ae:dd:a2:1f:54:0d:6a:
dd:a2:ae:95:c8:8f:d0:f4:3a:19:5a:b4:8a:55:b1:
8e:ee:88:4c:6e:3b:00:aa:a2:88:f2:b2:bb:c2:59:
45:d9:d5:ef:d4:8e:39:17:6b:f1:5a:cc:15:00:ea:
e0:c0:b7:4f:75:6e:87:85:32:73:51:e7:9f:75:39:
23:42:57:64:f7:05:83:2a:5a:cb:dc:0f:a0:b1:91:
32:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:D2:09:F4:24:A8:C3:05:E7:F0:3C:04:F6:93:E6:78:29:60:EA:6B
X509v3 Authority Key Identifier:
keyid:68:32:C3:2D:22:59:01:39:91:26:0D:53:0D:91:20:03:1A:AE:FC:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aDLDLSJZATmRJg1TDZEgAxqu_NA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/94b66e-3e0d-4332-ab4f-770f8eab2ae7/1/xtIJ9CSowwXn8DwE9pPmeClg6ms.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/94b66e-3e0d-4332-ab4f-770f8eab2ae7/1/aDLDLSJZATmRJg1TDZEgAxqu_NA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.46.160.0/23
Signature Algorithm: sha256WithRSAEncryption
62:48:e6:4b:a6:cb:c9:25:89:00:5c:7d:98:dc:22:8f:1f:c1:
e7:f4:04:05:c2:9b:9f:d8:1d:bb:5b:97:f6:a9:68:7c:a7:2a:
4c:e0:32:2f:8a:0e:fd:57:84:33:23:37:61:f3:53:e8:98:17:
2a:c9:ea:9c:6f:6f:2a:2b:7e:c4:9e:57:83:1a:66:8f:dc:aa:
7e:b2:a8:82:9f:11:e6:39:ea:98:8e:ac:21:47:f0:83:e0:67:
57:ee:af:b4:9b:d5:1d:c1:66:c9:cf:4f:ff:b5:e1:7a:71:38:
0f:f0:98:5c:3c:3a:5f:8a:d4:01:85:d7:3a:53:00:03:cf:db:
2b:6d:df:2a:50:96:c3:af:53:5a:ff:bb:90:62:2f:20:4f:da:
d5:c3:b1:47:e8:0a:0d:a9:c5:a8:27:5d:a3:89:da:6e:dd:4f:
28:62:4b:1a:c5:c7:7e:6d:cc:9a:8d:22:75:35:13:5c:dd:7e:
fb:c3:04:a0:33:5e:ef:15:77:36:67:58:ea:d7:fd:c4:67:fa:
79:d4:9b:c4:80:09:b1:32:36:a0:f0:14:3c:f9:8a:54:c0:de:
2d:ef:91:2f:ff:8a:e4:32:4f:45:73:11:74:76:f6:ac:c3:da:
fa:5c:1d:8f:65:2e:2b:9d:ac:bf:46:07:5f:96:a4:16:85:d0:
83:70:d5:ec
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQlj8EVnkojtuLAKPzIllv+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4MzJjMzJkMjI1OTAxMzk5MTI2MGQ1MzBkOTEyMDAzMWFh
ZWZjZDAwHhcNMjUwMTAyMDU0OTI1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNmQyMDlmNDI0YThjMzA1ZTdmMDNjMDRmNjkzZTY3ODI5NjBlYTZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvz7gJRJEtbOmazmibRzngsQO05/J
/L9NZsvcKqgtXAfuGIskWSr4QSBW9n5/zlhAculco0qPqmAgmeHzu3/Gm0/XItKI
idZHLVSh/N3hJnpYpOpDnYgqER39Cw3O/j0j0CVkD/sinv372sg/TUd3lTkIigSh
/WEcRrubxY8NuIfLuwLM4Wnybc/BDdFgYLDCMDLaoSQnji0L2E5T9czVnvSUUDyb
PhaWMpvQGa7doh9UDWrdoq6VyI/Q9DoZWrSKVbGO7ohMbjsAqqKI8rK7wllF2dXv
1I45F2vxWswVAOrgwLdPdW6HhTJzUeefdTkjQldk9wWDKlrL3A+gsZEy0QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMbSCfQkqMMF5/A8BPaT5ngpYOprMB8GA1UdIwQY
MBaAFGgywy0iWQE5kSYNUw2RIAMarvzQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYURMRExTSlpBVG1SSmcxVERaRWdBeHF1X05BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC85NGI2NmUtM2UwZC00MzMyLWFiNGYt
NzcwZjhlYWIyYWU3LzEveHRJSjlDU293d1huOER3RTlwUG1lQ2xnNm1zLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC85NGI2NmUtM2UwZC00MzMyLWFiNGYtNzcwZjhlYWIyYWU3
LzEvYURMRExTSlpBVG1SSmcxVERaRWdBeHF1X05BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBkS6gMA0G
CSqGSIb3DQEBCwUAA4IBAQBiSOZLpsvJJYkAXH2Y3CKPH8Hn9AQFwpuf2B27W5f2
qWh8pypM4DIvig79V4QzIzdh81PomBcqyeqcb28qK37EnleDGmaP3Kp+sqiCnxHm
OeqYjqwhR/CD4GdX7q+0m9UdwWbJz0//teF6cTgP8JhcPDpfitQBhdc6UwADz9sr
bd8qUJbDr1Na/7uQYi8gT9rVw7FH6AoNqcWoJ12jidpu3U8oYksaxcd+bcyajSJ1
NRNc3X77wwSgM17vFXc2Z1jq1/3EZ/p51JvEgAmxMjag8BQ8+YpUwN4t75Ev/4rk
Mk9FcxF0dvasw9r6XB2PZS4rnay/RgdflqQWhdCDcNXs
-----END CERTIFICATE-----
Generated at Sun Apr 6 00:09:29 2025 by rpki-client