Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/zHdvrua5Kd33gD_k27ilzx5ttmI.roa
File: zHdvrua5Kd33gD_k27ilzx5ttmI.roa (raw, json)
Hash identifier: +3DPlEdqpYekQR/zMW9U0Rn/CsxUyaUk4QviKvNUrDk=
Subject key identifier: CC:77:6F:AE:E6:B9:29:DD:F7:80:3F:E4:DB:B8:A5:CF:1E:6D:B6:62
Certificate issuer: /CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Certificate serial: 01954894B602CB29AD83B871020B2B6C28C2
Authority key identifier: 2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/zHdvrua5Kd33gD_k27ilzx5ttmI.roa
Signing time: Thu 27 Feb 2025 18:04:20 +0000
ROA not before: Thu 27 Feb 2025 18:04:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215540
IP address blocks: 45.141.234.0/24 maxlen: 24
78.159.131.0/24 maxlen: 24
93.152.207.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:48:94:b6:02:cb:29:ad:83:b8:71:02:0b:2b:6c:28:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Validity
Not Before: Feb 27 18:04:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cc776faee6b929ddf7803fe4dbb8a5cf1e6db662
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:5a:b2:95:ea:c6:c6:9e:53:3e:74:75:dd:7d:
fd:62:8d:3e:5f:9c:50:ec:ef:3f:01:b2:1b:6a:4e:
9f:88:3b:f5:d7:f3:1c:ac:c4:fd:da:c2:96:f5:c8:
54:9a:7e:0c:29:c5:69:80:ed:81:fd:a8:f4:53:59:
96:72:c5:86:c5:d2:a1:d6:a3:f2:b3:30:ad:1d:9d:
37:59:79:44:d1:2e:b3:ac:ae:d8:1f:71:cc:e8:2c:
5b:58:7e:a6:20:07:b6:82:7b:0c:99:e1:72:4a:e0:
c3:39:a2:89:c4:4a:50:2e:09:d9:2d:09:f9:80:3e:
15:cd:c6:83:70:7b:60:12:2c:15:c9:df:2c:28:f5:
14:5c:89:20:f3:32:32:3a:d2:11:79:85:87:07:e5:
7a:a5:b2:28:12:06:55:27:48:49:c1:6b:f6:8d:5d:
5b:c6:60:0a:40:5e:e4:65:e1:3b:c8:a5:74:20:a2:
a8:e1:36:e6:96:6d:92:05:cf:d8:7d:2c:ef:44:af:
5f:06:d8:a7:b2:b6:81:c6:f4:f4:96:ff:d6:b2:a1:
81:2c:ff:27:ad:03:90:21:b3:fb:4f:0d:52:86:c2:
f7:91:8a:4b:6a:dc:3c:5f:13:19:08:49:d5:c6:5a:
54:f0:6f:c9:9f:5f:e0:55:90:b1:90:a4:18:9b:3d:
c9:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:77:6F:AE:E6:B9:29:DD:F7:80:3F:E4:DB:B8:A5:CF:1E:6D:B6:62
X509v3 Authority Key Identifier:
keyid:2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/zHdvrua5Kd33gD_k27ilzx5ttmI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.234.0/24
78.159.131.0/24
93.152.207.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:f2:3c:a7:52:44:63:3f:c1:48:37:ea:9c:c7:af:ea:43:60:
d8:9a:02:e7:1c:9f:54:36:73:ed:c5:22:77:13:05:5b:35:62:
b7:44:80:57:63:52:e4:1d:ed:c2:f2:4f:d2:bd:6b:fa:ff:77:
6a:4b:5e:7b:83:87:b4:b3:a5:c2:f6:2a:96:a7:29:fb:9b:bf:
ab:93:49:22:e1:7f:f9:71:d4:6d:86:b8:96:89:c8:df:7f:5a:
1c:12:94:57:df:a4:35:08:11:b1:49:0d:fe:fa:72:73:64:54:
de:5a:9a:f8:01:af:e0:b5:22:3a:05:a7:1f:09:40:3c:fb:e9:
53:c6:74:d4:d4:37:5a:c5:72:a2:3a:20:69:7f:20:9d:74:9b:
22:e7:4d:f9:25:cd:31:5a:a5:6d:81:ee:ad:65:f7:af:bc:30:
2c:5e:ec:1c:16:4c:48:cd:5a:66:da:1c:92:60:83:25:c7:17:
11:a7:52:bd:bc:d4:d9:aa:24:5e:36:73:76:2d:cc:89:b1:6b:
02:c6:91:47:b6:b6:85:a4:42:f9:09:d6:39:d2:a0:bc:f2:a1:
99:7d:07:a0:23:1a:22:c9:75:f1:06:18:7a:0b:af:47:e6:9a:
e5:f4:af:7f:bb:49:e0:ce:51:15:d7:0d:13:25:f3:28:e3:5a:
5f:2d:b3:c4
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZVIlLYCyymtg7hxAgsrbCjCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkMWNhYTY5MzU4ZjhjOThmN2E3MTlmMjU5N2Q1ZGFkZGJk
MDAxOGMwHhcNMjUwMjI3MTgwNDIwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYzc3NmZhZWU2YjkyOWRkZjc4MDNmZTRkYmI4YTVjZjFlNmRiNjYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqVqylerGxp5TPnR13X39Yo0+X5xQ
7O8/AbIbak6fiDv11/McrMT92sKW9chUmn4MKcVpgO2B/aj0U1mWcsWGxdKh1qPy
szCtHZ03WXlE0S6zrK7YH3HM6CxbWH6mIAe2gnsMmeFySuDDOaKJxEpQLgnZLQn5
gD4VzcaDcHtgEiwVyd8sKPUUXIkg8zIyOtIReYWHB+V6pbIoEgZVJ0hJwWv2jV1b
xmAKQF7kZeE7yKV0IKKo4Tbmlm2SBc/YfSzvRK9fBtinsraBxvT0lv/WsqGBLP8n
rQOQIbP7Tw1ShsL3kYpLatw8XxMZCEnVxlpU8G/Jn1/gVZCxkKQYmz3JkQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFMx3b67muSnd94A/5Nu4pc8ebbZiMB8GA1UdIwQY
MBaAFC0cqmk1j4yY96cZ8ll9Xa3b0AGMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTFJ5cWFUV1BqSmozcHhueVdYMWRyZHZRQVl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9hOTM2OTktMTg4Yi00NzBhLTk2Yjct
MjliMDg1ZGQyM2FkLzEvekhkdnJ1YTVLZDMzZ0RfazI3aWx6eDV0dG1JLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi9hOTM2OTktMTg4Yi00NzBhLTk2YjctMjliMDg1ZGQyM2Fk
LzEvTFJ5cWFUV1BqSmozcHhueVdYMWRyZHZRQVl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQALY3qAwQA
Tp+DAwQAXZjPMA0GCSqGSIb3DQEBCwUAA4IBAQA+8jynUkRjP8FIN+qcx6/qQ2DY
mgLnHJ9UNnPtxSJ3EwVbNWK3RIBXY1LkHe3C8k/SvWv6/3dqS157g4e0s6XC9iqW
pyn7m7+rk0ki4X/5cdRthriWicjff1ocEpRX36Q1CBGxSQ3++nJzZFTeWpr4Aa/g
tSI6BacfCUA8++lTxnTU1DdaxXKiOiBpfyCddJsi5035Jc0xWqVtge6tZfevvDAs
XuwcFkxIzVpm2hySYIMlxxcRp1K9vNTZqiReNnN2LcyJsWsCxpFHtraFpEL5CdY5
0qC88qGZfQegIxoiyXXxBhh6C69H5prl9K9/u0ngzlEV1w0TJfMo41pfLbPE
-----END CERTIFICATE-----
Generated at Wed Apr 9 00:20:29 2025 by rpki-client