Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/1f6073-87b2-4bb3-acb7-5c3db98bf864/1/OWdgTZjswlIH3v8ekYIkiNAvWUY.roa
File: OWdgTZjswlIH3v8ekYIkiNAvWUY.roa (raw, json)
Hash identifier: MSHfYYjKBHxQgm8RGtw1Edy9L8nTXsEr57VvXXxuBE0=
Subject key identifier: 39:67:60:4D:98:EC:C2:52:07:DE:FF:1E:91:82:24:88:D0:2F:59:46
Certificate issuer: /CN=5598ae5d5f12825a84e6c401c013ca5e5dcd9ec9
Certificate serial: 0194228E1906FF23DA70336571DAEB4F7CE6
Authority key identifier: 55:98:AE:5D:5F:12:82:5A:84:E6:C4:01:C0:13:CA:5E:5D:CD:9E:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VZiuXV8SglqE5sQBwBPKXl3Nnsk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/1f6073-87b2-4bb3-acb7-5c3db98bf864/1/OWdgTZjswlIH3v8ekYIkiNAvWUY.roa
Signing time: Wed 01 Jan 2025 15:48:45 +0000
ROA not before: Wed 01 Jan 2025 15:48:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210413
IP address blocks: 45.157.52.0/24 maxlen: 24
45.157.54.0/24 maxlen: 24
45.157.55.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:19:06:ff:23:da:70:33:65:71:da:eb:4f:7c:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5598ae5d5f12825a84e6c401c013ca5e5dcd9ec9
Validity
Not Before: Jan 1 15:48:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3967604d98ecc25207deff1e91822488d02f5946
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:bc:4f:3d:8c:33:05:3a:65:51:cd:4c:81:11:
9e:de:c7:5c:51:a7:ac:c5:f5:82:46:8e:8a:93:d8:
e7:21:d9:53:f2:8d:ad:18:01:40:91:fe:ca:58:e9:
60:db:a5:a5:8c:14:36:7f:b5:1d:50:c0:6e:1f:bb:
ca:3f:f1:40:64:af:53:35:06:e5:3d:7b:23:ec:ff:
9d:02:91:ec:1d:ca:a3:d1:ce:13:6d:c3:56:ea:a4:
4c:90:ff:e2:2f:f5:0f:cc:59:ac:22:40:15:52:29:
7b:54:4a:dc:2a:ca:77:52:e5:4a:de:5d:70:9c:94:
3c:82:e7:71:b8:dc:b1:59:8c:a0:35:0a:37:aa:f9:
6c:47:c3:db:45:d2:11:91:c7:e7:58:33:7a:14:73:
b5:25:8c:f8:d9:c7:9f:31:fc:8a:34:ba:5a:71:33:
28:86:35:11:da:91:22:f4:32:01:d0:ff:01:b6:76:
f4:9c:57:c8:99:be:a1:ba:e3:d4:4b:f3:6d:37:a5:
86:e7:c8:1b:8b:13:22:5d:4c:1c:22:e6:35:cc:27:
5e:c6:94:b0:43:d7:3e:de:89:7f:00:57:d7:61:dc:
59:fc:4e:b4:24:50:40:df:5e:b3:ff:df:23:a4:b0:
20:fe:35:83:3d:87:d0:4b:97:94:f4:30:58:2e:87:
90:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:67:60:4D:98:EC:C2:52:07:DE:FF:1E:91:82:24:88:D0:2F:59:46
X509v3 Authority Key Identifier:
keyid:55:98:AE:5D:5F:12:82:5A:84:E6:C4:01:C0:13:CA:5E:5D:CD:9E:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VZiuXV8SglqE5sQBwBPKXl3Nnsk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/1f6073-87b2-4bb3-acb7-5c3db98bf864/1/OWdgTZjswlIH3v8ekYIkiNAvWUY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/1f6073-87b2-4bb3-acb7-5c3db98bf864/1/VZiuXV8SglqE5sQBwBPKXl3Nnsk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.157.52.0/24
45.157.54.0/23
Signature Algorithm: sha256WithRSAEncryption
7c:c7:cb:62:91:29:9e:19:da:9f:b5:d8:28:d1:f1:bd:42:82:
47:36:07:00:60:c0:42:13:45:1d:2a:4c:fb:c6:05:cc:97:43:
85:7b:1f:54:78:7e:56:e6:d5:42:1e:6b:f5:ef:e4:31:e4:02:
09:e0:ec:49:66:11:d1:12:fd:20:49:62:8f:61:ad:d6:af:cc:
ed:6a:51:59:c2:66:92:05:e3:5c:ae:db:80:ae:fa:51:cb:2a:
ab:ba:5a:72:c6:88:5c:28:99:6b:41:51:34:60:22:00:5c:de:
68:6e:d3:69:8e:7f:44:1b:c4:d6:9f:dc:0c:ff:df:a8:15:fc:
f4:1b:0e:3a:89:6a:07:63:bb:8b:5f:0c:38:84:ea:38:7f:de:
fa:31:5d:34:b5:f9:1c:06:a3:ac:54:7b:38:1b:95:67:15:84:
7b:4d:b5:d4:7b:02:a7:fe:03:ff:e0:b5:63:d7:87:c3:38:eb:
04:f5:45:3f:db:c1:94:63:2b:25:22:c6:5f:00:78:37:e6:63:
54:25:bb:63:d4:f4:e0:3c:5b:fd:aa:86:16:69:c2:8f:54:6a:
a6:a8:35:52:3c:cd:87:0d:2a:a9:00:42:57:6f:59:0f:54:5f:
cc:8e:87:e7:67:57:29:b1:9f:34:0f:60:db:6b:66:bd:6e:54:
57:95:9f:de
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQijhkG/yPacDNlcdrrT3zmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1OThhZTVkNWYxMjgyNWE4NGU2YzQwMWMwMTNjYTVlNWRj
ZDllYzkwHhcNMjUwMTAxMTU0ODQ1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzOTY3NjA0ZDk4ZWNjMjUyMDdkZWZmMWU5MTgyMjQ4OGQwMmY1OTQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9rxPPYwzBTplUc1MgRGe3sdcUaes
xfWCRo6Kk9jnIdlT8o2tGAFAkf7KWOlg26WljBQ2f7UdUMBuH7vKP/FAZK9TNQbl
PXsj7P+dApHsHcqj0c4TbcNW6qRMkP/iL/UPzFmsIkAVUil7VErcKsp3UuVK3l1w
nJQ8gudxuNyxWYygNQo3qvlsR8PbRdIRkcfnWDN6FHO1JYz42cefMfyKNLpacTMo
hjUR2pEi9DIB0P8Btnb0nFfImb6huuPUS/NtN6WG58gbixMiXUwcIuY1zCdexpSw
Q9c+3ol/AFfXYdxZ/E60JFBA316z/98jpLAg/jWDPYfQS5eU9DBYLoeQyQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFDlnYE2Y7MJSB97/HpGCJIjQL1lGMB8GA1UdIwQY
MBaAFFWYrl1fEoJahObEAcATyl5dzZ7JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVlppdVhWOFNnbHFFNXNRQndCUEtYbDNObnNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy8xZjYwNzMtODdiMi00YmIzLWFjYjct
NWMzZGI5OGJmODY0LzEvT1dkZ1RaanN3bElIM3Y4ZWtZSWtpTkF2V1VZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy8xZjYwNzMtODdiMi00YmIzLWFjYjctNWMzZGI5OGJmODY0
LzEvVlppdVhWOFNnbHFFNXNRQndCUEtYbDNObnNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALZ00AwQB
LZ02MA0GCSqGSIb3DQEBCwUAA4IBAQB8x8tikSmeGdqftdgo0fG9QoJHNgcAYMBC
E0UdKkz7xgXMl0OFex9UeH5W5tVCHmv17+Qx5AIJ4OxJZhHREv0gSWKPYa3Wr8zt
alFZwmaSBeNcrtuArvpRyyqrulpyxohcKJlrQVE0YCIAXN5obtNpjn9EG8TWn9wM
/9+oFfz0Gw46iWoHY7uLXww4hOo4f976MV00tfkcBqOsVHs4G5VnFYR7TbXUewKn
/gP/4LVj14fDOOsE9UU/28GUYyslIsZfAHg35mNUJbtj1PTgPFv9qoYWacKPVGqm
qDVSPM2HDSqpAEJXb1kPVF/MjofnZ1cpsZ80D2Dba2a9blRXlZ/e
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:58:53 2025 by rpki-client