Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/9e4f21-f9e6-4942-9601-adf43f04ec9c/1/0hbCuxhGBbcq1BE_SuUs0Qoi-Vg.roa
File: 0hbCuxhGBbcq1BE_SuUs0Qoi-Vg.roa (raw, json)
Hash identifier: MAtioDj4t6UaO211UFLR8yqYOPNcNMxWi5lPTtRkcJ4=
Subject key identifier: D2:16:C2:BB:18:46:05:B7:2A:D4:11:3F:4A:E5:2C:D1:0A:22:F9:58
Certificate issuer: /CN=694a2ed9a412747fcd644749de57d9ff780393aa
Certificate serial: 019423D6FDDA95F1AD5C54FB54852720AA6A
Authority key identifier: 69:4A:2E:D9:A4:12:74:7F:CD:64:47:49:DE:57:D9:FF:78:03:93:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aUou2aQSdH_NZEdJ3lfZ_3gDk6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/9e4f21-f9e6-4942-9601-adf43f04ec9c/1/0hbCuxhGBbcq1BE_SuUs0Qoi-Vg.roa
Signing time: Wed 01 Jan 2025 21:47:59 +0000
ROA not before: Wed 01 Jan 2025 21:47:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62336
IP address blocks: 45.81.44.0/22 maxlen: 22
45.89.92.0/22 maxlen: 22
45.93.104.0/22 maxlen: 22
45.130.92.0/22 maxlen: 22
45.138.40.0/22 maxlen: 22
45.148.112.0/22 maxlen: 22
91.212.40.0/23 maxlen: 23
91.212.54.0/23 maxlen: 23
194.99.82.0/24 maxlen: 24
194.99.85.0/24 maxlen: 24
194.99.91.0/24 maxlen: 24
194.99.110.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:fd:da:95:f1:ad:5c:54:fb:54:85:27:20:aa:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=694a2ed9a412747fcd644749de57d9ff780393aa
Validity
Not Before: Jan 1 21:47:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d216c2bb184605b72ad4113f4ae52cd10a22f958
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:66:8b:33:b2:5d:44:31:cc:53:a9:df:12:75:
36:a6:9e:1b:33:65:21:1a:2d:54:25:c8:be:88:ab:
dc:b8:64:de:76:4b:dd:28:df:13:1d:cd:db:91:98:
76:db:5b:f0:e3:a8:b8:36:75:f1:fa:bd:6c:cf:ec:
0a:0b:6e:63:42:b4:db:90:ae:31:30:d8:16:35:05:
59:9a:1d:4b:c2:5c:3d:e0:80:17:e5:78:c7:e6:db:
ab:be:04:f5:ba:60:5e:7e:a1:1d:4d:a6:10:dc:8f:
a0:80:2b:8e:9e:eb:d8:8d:fc:82:82:98:2e:ca:14:
23:9d:d0:67:8a:ca:f3:31:6a:a9:4c:a4:06:e1:95:
e7:76:22:0b:52:b4:c4:5c:48:b4:9f:35:d6:ce:84:
1e:6a:58:18:bc:4e:ea:1a:e6:0e:43:3c:6c:83:f8:
52:64:7b:0c:9e:4c:30:54:1b:a0:90:71:3d:cf:7c:
07:78:e0:a3:65:ce:e5:c1:da:c5:6c:e1:a1:2c:c1:
45:1e:45:e4:ee:d9:cd:ea:07:65:a3:9e:9f:4c:25:
0d:41:8d:fc:8f:f7:25:3d:22:79:21:47:67:d5:5c:
58:b0:92:fb:69:49:15:f7:e4:66:9f:15:dd:39:36:
4f:ec:f2:c0:87:38:0d:52:7c:c2:71:32:0c:05:6a:
ee:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:16:C2:BB:18:46:05:B7:2A:D4:11:3F:4A:E5:2C:D1:0A:22:F9:58
X509v3 Authority Key Identifier:
keyid:69:4A:2E:D9:A4:12:74:7F:CD:64:47:49:DE:57:D9:FF:78:03:93:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aUou2aQSdH_NZEdJ3lfZ_3gDk6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9e4f21-f9e6-4942-9601-adf43f04ec9c/1/0hbCuxhGBbcq1BE_SuUs0Qoi-Vg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9e4f21-f9e6-4942-9601-adf43f04ec9c/1/aUou2aQSdH_NZEdJ3lfZ_3gDk6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.44.0/22
45.89.92.0/22
45.93.104.0/22
45.130.92.0/22
45.138.40.0/22
45.148.112.0/22
91.212.40.0/23
91.212.54.0/23
194.99.82.0/24
194.99.85.0/24
194.99.91.0/24
194.99.110.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:2f:75:5c:bb:52:56:ee:fd:5b:e0:f6:13:b0:77:18:a8:77:
fb:8a:51:00:0f:33:48:f8:48:99:07:a1:2c:54:cc:36:18:22:
9e:53:2d:a2:df:10:e7:ac:bb:c7:60:46:86:c1:eb:58:30:cc:
bc:fa:ec:ed:e8:0a:4f:ff:47:2c:12:b5:46:e9:41:d5:64:cc:
89:52:15:33:5b:83:77:16:29:1b:9f:27:ad:61:49:41:b3:26:
cd:68:bc:55:9a:20:e9:d2:62:57:1d:4b:f4:51:28:b2:4a:97:
1e:0d:d7:82:af:9c:0f:29:1a:e0:8b:2e:02:1d:cb:ed:0a:c2:
c1:0d:98:bd:c6:57:ad:5d:46:b5:86:c4:5f:c4:45:50:2c:2f:
4c:ea:61:4d:d1:12:48:f0:d8:eb:82:18:14:08:d2:de:c5:21:
2e:ec:2d:f2:ca:e3:b6:ab:be:06:a4:8d:76:75:ea:cf:af:60:
a7:83:86:13:ec:5e:99:d5:04:c8:41:b0:aa:2a:fa:f1:ff:a4:
59:9d:56:0f:7a:ca:cd:6d:a8:94:41:f7:7d:05:54:fa:13:8b:
38:52:f3:a5:65:82:f3:15:0b:c2:e9:f7:2e:e1:95:4c:54:82:
be:e8:3b:f3:ae:42:f4:e5:8f:05:ec:3d:73:f1:de:8b:16:34:
9d:7d:f9:d3
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgISAZQj1v3alfGtXFT7VIUnIKpqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5NGEyZWQ5YTQxMjc0N2ZjZDY0NDc0OWRlNTdkOWZmNzgw
MzkzYWEwHhcNMjUwMTAxMjE0NzU5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMjE2YzJiYjE4NDYwNWI3MmFkNDExM2Y0YWU1MmNkMTBhMjJmOTU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzGaLM7JdRDHMU6nfEnU2pp4bM2Uh
Gi1UJci+iKvcuGTedkvdKN8THc3bkZh221vw46i4NnXx+r1sz+wKC25jQrTbkK4x
MNgWNQVZmh1Lwlw94IAX5XjH5turvgT1umBefqEdTaYQ3I+ggCuOnuvYjfyCgpgu
yhQjndBnisrzMWqpTKQG4ZXndiILUrTEXEi0nzXWzoQealgYvE7qGuYOQzxsg/hS
ZHsMnkwwVBugkHE9z3wHeOCjZc7lwdrFbOGhLMFFHkXk7tnN6gdlo56fTCUNQY38
j/clPSJ5IUdn1VxYsJL7aUkV9+RmnxXdOTZP7PLAhzgNUnzCcTIMBWru9QIDAQAB
o4ICSzCCAkcwHQYDVR0OBBYEFNIWwrsYRgW3KtQRP0rlLNEKIvlYMB8GA1UdIwQY
MBaAFGlKLtmkEnR/zWRHSd5X2f94A5OqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVVvdTJhUVNkSF9OWkVkSjNsZlpfM2dEazZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS85ZTRmMjEtZjllNi00OTQyLTk2MDEt
YWRmNDNmMDRlYzljLzEvMGhiQ3V4aEdCYmNxMUJFX1N1VXMwUW9pLVZnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZS85ZTRmMjEtZjllNi00OTQyLTk2MDEtYWRmNDNmMDRlYzlj
LzEvYVVvdTJhUVNkSF9OWkVkSjNsZlpfM2dEazZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGEGCCsGAQUFBwEHAQH/BFIwUDBOBAIAATBIAwQCLVEsAwQC
LVlcAwQCLV1oAwQCLYJcAwQCLYooAwQCLZRwAwQBW9QoAwQBW9Q2AwQAwmNSAwQA
wmNVAwQAwmNbAwQAwmNuMA0GCSqGSIb3DQEBCwUAA4IBAQC5L3Vcu1JW7v1b4PYT
sHcYqHf7ilEADzNI+EiZB6EsVMw2GCKeUy2i3xDnrLvHYEaGwetYMMy8+uzt6ApP
/0csErVG6UHVZMyJUhUzW4N3FikbnyetYUlBsybNaLxVmiDp0mJXHUv0USiySpce
DdeCr5wPKRrgiy4CHcvtCsLBDZi9xletXUa1hsRfxEVQLC9M6mFN0RJI8NjrghgU
CNLexSEu7C3yyuO2q74GpI12derPr2Cng4YT7F6Z1QTIQbCqKvrx/6RZnVYPesrN
baiUQfd9BVT6E4s4UvOlZYLzFQvC6fcu4ZVMVIK+6DvzrkL05Y8F7D1z8d6LFjSd
ffnT
-----END CERTIFICATE-----
Generated at Sun Apr 6 15:08:50 2025 by rpki-client