Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/VO2SxOmx540X-73ZjWtbqh5KvS4.roa
File: VO2SxOmx540X-73ZjWtbqh5KvS4.roa (raw, json)
Hash identifier: uXcwvVmNSbkhO+iXK75bWSToOZZ/+tA9RkET+fNpYUU=
Subject key identifier: 54:ED:92:C4:E9:B1:E7:8D:17:FB:BD:D9:8D:6B:5B:AA:1E:4A:BD:2E
Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial: 0194258F94538CBE1B92A701BB1D821B236B
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/VO2SxOmx540X-73ZjWtbqh5KvS4.roa
Signing time: Thu 02 Jan 2025 05:49:14 +0000
ROA not before: Thu 02 Jan 2025 05:49:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49729
IP address blocks: 45.132.205.0/24 maxlen: 24
84.54.6.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:94:53:8c:be:1b:92:a7:01:bb:1d:82:1b:23:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
Validity
Not Before: Jan 2 05:49:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=54ed92c4e9b1e78d17fbbdd98d6b5baa1e4abd2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:73:c1:cb:06:df:02:ad:da:6e:14:d8:a7:ed:
9f:0d:69:33:20:9e:2b:8f:95:f6:c7:ff:60:d2:65:
b6:80:a0:30:c0:8f:3d:82:0b:83:78:ab:6f:ee:9d:
44:20:b5:ac:d2:96:bf:24:fb:55:08:62:70:d6:65:
2b:f2:48:5e:e0:4b:6d:73:b9:cc:6a:f6:cd:09:5e:
51:ba:a3:56:24:4b:d3:8e:93:be:0c:fe:78:36:1b:
d4:4f:26:62:ac:7c:e9:24:e8:51:6b:5e:86:6a:40:
e9:cd:93:8e:ad:67:28:21:83:f7:18:8e:0c:a1:f4:
a9:a8:e5:f7:7a:50:e4:8e:3a:7e:14:2d:75:f6:0c:
cf:59:c1:80:3f:3c:7c:24:38:db:64:60:07:12:e5:
0f:b4:95:e4:1a:e4:2c:1c:1e:62:97:88:b7:ac:89:
23:4e:58:bb:20:69:fe:0a:d2:4a:03:c3:8f:45:43:
93:a8:0f:4b:19:d9:18:88:f1:c9:48:fc:f4:1e:7c:
55:34:b1:df:3e:05:21:48:83:a5:b6:32:bc:23:aa:
cc:47:a1:d4:69:61:3b:20:d5:51:26:06:47:3a:b6:
a8:a8:7a:37:83:90:2b:40:02:d4:31:90:49:6a:c7:
73:a8:d4:c5:54:a7:1a:7e:67:cf:8c:74:44:ef:99:
67:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:ED:92:C4:E9:B1:E7:8D:17:FB:BD:D9:8D:6B:5B:AA:1E:4A:BD:2E
X509v3 Authority Key Identifier:
keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/VO2SxOmx540X-73ZjWtbqh5KvS4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.205.0/24
84.54.6.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:4f:b4:a4:eb:13:e3:2b:c7:b7:1d:8b:a6:db:19:83:8e:d9:
09:9d:29:ea:45:4b:e7:5e:3d:35:b9:61:e2:bb:e8:94:66:10:
bb:8d:2d:2f:9f:35:e9:d5:df:2e:6c:d3:6f:dc:29:4a:6d:f0:
ba:b1:b6:5d:70:fe:0b:66:2a:43:fa:8f:2b:86:9c:19:16:d2:
29:f9:2a:b8:bf:5c:18:f4:94:a9:4a:4b:ea:b0:8f:4e:7d:cc:
6e:27:36:4a:64:ea:1a:bc:4a:6c:1b:cb:57:30:bf:f2:cb:42:
e1:f9:c4:2f:f2:6a:5d:a3:21:33:fb:5e:48:71:73:e8:49:34:
16:00:c2:d7:2c:56:02:fa:6c:4e:bb:c6:de:81:8c:cd:92:83:
ad:06:49:c4:4b:8c:a5:20:b0:e3:a3:26:b9:26:8e:a8:95:a2:
fb:52:ec:24:6d:e6:1f:26:c6:a4:93:d1:b8:a7:93:2f:ea:7d:
64:31:d2:d4:1f:84:22:6f:ce:f2:c6:17:8a:23:f5:0b:5e:d3:
71:c2:0f:2b:46:8d:58:a1:21:91:5e:04:f1:7f:40:74:04:00:
ab:3b:0c:33:64:85:75:1c:c1:4d:cf:89:69:1c:d5:9a:51:23:
b6:58:09:c8:bb:86:7b:1d:8f:c3:36:01:47:d4:49:bf:f9:8b:
46:c7:bb:53
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQlj5RTjL4bkqcBux2CGyNrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxODQ3OGYxOThmZTU2OTAxMGMzZGY2MjE5MTQyZjUzMGM0
ZjVlNTYwHhcNMjUwMTAyMDU0OTE0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NGVkOTJjNGU5YjFlNzhkMTdmYmJkZDk4ZDZiNWJhYTFlNGFiZDJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqXPBywbfAq3abhTYp+2fDWkzIJ4r
j5X2x/9g0mW2gKAwwI89gguDeKtv7p1EILWs0pa/JPtVCGJw1mUr8khe4Ettc7nM
avbNCV5RuqNWJEvTjpO+DP54NhvUTyZirHzpJOhRa16GakDpzZOOrWcoIYP3GI4M
ofSpqOX3elDkjjp+FC119gzPWcGAPzx8JDjbZGAHEuUPtJXkGuQsHB5il4i3rIkj
Tli7IGn+CtJKA8OPRUOTqA9LGdkYiPHJSPz0HnxVNLHfPgUhSIOltjK8I6rMR6HU
aWE7INVRJgZHOraoqHo3g5ArQALUMZBJasdzqNTFVKcafmfPjHRE75lnnwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFFTtksTpseeNF/u92Y1rW6oeSr0uMB8GA1UdIwQY
MBaAFGGEePGY/laQEMPfYhkUL1MMT15WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVlSNDhaai1WcEFRdzk5aUdSUXZVd3hQWGxZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC81M2M3YjgtNWU0Yi00OWZkLThjOTEt
YmE5OGYxMTIyMTIxLzEvVk8yU3hPbXg1NDBYLTczWmpXdGJxaDVLdlM0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC81M2M3YjgtNWU0Yi00OWZkLThjOTEtYmE5OGYxMTIyMTIx
LzEvWVlSNDhaai1WcEFRdzk5aUdSUXZVd3hQWGxZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALYTNAwQA
VDYGMA0GCSqGSIb3DQEBCwUAA4IBAQCpT7Sk6xPjK8e3HYum2xmDjtkJnSnqRUvn
Xj01uWHiu+iUZhC7jS0vnzXp1d8ubNNv3ClKbfC6sbZdcP4LZipD+o8rhpwZFtIp
+Sq4v1wY9JSpSkvqsI9OfcxuJzZKZOoavEpsG8tXML/yy0Lh+cQv8mpdoyEz+15I
cXPoSTQWAMLXLFYC+mxOu8begYzNkoOtBknES4ylILDjoya5Jo6olaL7UuwkbeYf
Jsakk9G4p5Mv6n1kMdLUH4Qib87yxheKI/ULXtNxwg8rRo1YoSGRXgTxf0B0BACr
OwwzZIV1HMFNz4lpHNWaUSO2WAnIu4Z7HY/DNgFH1Em/+YtGx7tT
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:34:42 2025 by rpki-client