Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/682ece-ebe2-4a23-8ab5-36e64ac64542/1/gPGcyQrRSC47MoDcNvHUCHgMy9I.roa
File: gPGcyQrRSC47MoDcNvHUCHgMy9I.roa (raw, json)
Hash identifier: MmytL0w6XbyXL7UhT0pH40kUdOSvBJ5woyxf0GcUHwU=
Subject key identifier: 80:F1:9C:C9:0A:D1:48:2E:3B:32:80:DC:36:F1:D4:08:78:0C:CB:D2
Certificate issuer: /CN=b334fc2b5b8227b6df3f21d1ad3a74b14ec0685a
Certificate serial: 0194258EF69622CD87A3763C459182EFC24B
Authority key identifier: B3:34:FC:2B:5B:82:27:B6:DF:3F:21:D1:AD:3A:74:B1:4E:C0:68:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/szT8K1uCJ7bfPyHRrTp0sU7AaFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/682ece-ebe2-4a23-8ab5-36e64ac64542/1/gPGcyQrRSC47MoDcNvHUCHgMy9I.roa
Signing time: Thu 02 Jan 2025 05:48:33 +0000
ROA not before: Thu 02 Jan 2025 05:48:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 45.159.224.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:f6:96:22:cd:87:a3:76:3c:45:91:82:ef:c2:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b334fc2b5b8227b6df3f21d1ad3a74b14ec0685a
Validity
Not Before: Jan 2 05:48:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=80f19cc90ad1482e3b3280dc36f1d408780ccbd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b7:26:a8:6e:95:f4:ac:2d:a0:7a:c5:a3:76:
41:6d:9d:e1:ad:c7:25:e3:22:94:21:4e:c7:62:7e:
24:27:05:be:12:8a:4d:f9:02:8b:67:c2:6d:89:81:
10:c0:35:bd:ea:5c:b9:c2:18:39:57:fc:05:7e:1d:
93:3e:c5:2f:cc:ed:61:85:d6:dc:b5:a8:a8:31:75:
2e:0d:bb:98:87:03:57:5b:9f:3c:47:48:e0:50:19:
92:93:87:e6:28:91:e1:0d:74:29:9d:04:08:eb:98:
5f:b1:7f:24:d7:da:ae:e9:38:e3:36:68:32:a3:50:
1e:f6:45:e3:00:a5:0e:64:fe:83:14:45:40:4e:38:
b2:4b:d8:12:72:57:4e:9b:c5:96:3f:fe:64:79:f2:
77:c2:2d:23:6e:08:84:3e:5e:41:f4:34:01:d5:7c:
83:66:68:dd:ef:52:6b:e8:5b:68:a2:56:0c:36:b8:
19:0f:53:30:51:55:e5:d5:4a:b2:23:bb:ec:42:1e:
31:9e:d0:75:a0:3c:04:8f:ec:df:1e:07:68:7c:cb:
1f:06:a7:a8:a6:39:fe:62:92:c1:ae:73:84:8a:ea:
f9:27:fa:8c:89:a6:42:f4:11:ea:88:62:95:e1:9f:
c0:8d:2b:e9:29:f8:4e:a7:58:67:a2:81:72:c4:e7:
7f:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:F1:9C:C9:0A:D1:48:2E:3B:32:80:DC:36:F1:D4:08:78:0C:CB:D2
X509v3 Authority Key Identifier:
keyid:B3:34:FC:2B:5B:82:27:B6:DF:3F:21:D1:AD:3A:74:B1:4E:C0:68:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/szT8K1uCJ7bfPyHRrTp0sU7AaFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/682ece-ebe2-4a23-8ab5-36e64ac64542/1/gPGcyQrRSC47MoDcNvHUCHgMy9I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/682ece-ebe2-4a23-8ab5-36e64ac64542/1/szT8K1uCJ7bfPyHRrTp0sU7AaFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.159.224.0/22
Signature Algorithm: sha256WithRSAEncryption
8b:4b:b8:3e:5c:18:0b:d1:ee:e9:11:76:a2:c9:a5:23:02:05:
0a:e7:c7:bc:b5:62:1b:a6:e9:dd:68:19:ef:db:a5:f6:7e:96:
81:4f:a6:81:b0:87:c0:a9:a6:05:a7:bc:7e:35:23:9b:08:c2:
97:9c:10:5b:4d:ac:10:52:d6:dd:c3:67:e1:53:74:00:e3:f4:
89:fa:ad:ac:a1:ae:1f:2d:62:35:44:34:53:39:d8:59:f7:e1:
cb:d3:d7:50:25:64:7e:2a:9c:e3:ed:da:52:4e:00:d2:a9:40:
8f:cb:85:c2:9d:c6:79:c9:8d:ac:4d:6d:c9:f0:fa:7b:0f:d1:
f3:71:e5:d1:5e:a6:4a:99:13:b1:53:63:93:1d:a0:03:47:aa:
89:01:de:b0:e6:02:df:e1:a3:7d:d5:9c:77:07:9c:53:b6:ff:
98:ee:e9:79:21:fd:a0:ac:19:08:0f:75:b5:93:49:4e:a5:c8:
32:6f:1a:e9:4b:fa:4c:ea:dd:de:10:65:fb:e1:93:14:a1:29:
07:41:b9:d5:21:cc:03:16:34:b7:8e:f0:3f:d6:b9:39:3a:23:
79:54:3b:3b:78:70:c5:ee:5e:6e:8e:46:5a:d9:db:81:24:1f:
e4:ce:b9:0e:0d:c9:b9:f9:6f:a1:ea:65:28:99:f1:b6:14:ed:
dc:e8:2b:9e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQljvaWIs2Ho3Y8RZGC78JLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzMzRmYzJiNWI4MjI3YjZkZjNmMjFkMWFkM2E3NGIxNGVj
MDY4NWEwHhcNMjUwMTAyMDU0ODMzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MGYxOWNjOTBhZDE0ODJlM2IzMjgwZGMzNmYxZDQwODc4MGNjYmQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp7cmqG6V9KwtoHrFo3ZBbZ3hrccl
4yKUIU7HYn4kJwW+EopN+QKLZ8JtiYEQwDW96ly5whg5V/wFfh2TPsUvzO1hhdbc
taioMXUuDbuYhwNXW588R0jgUBmSk4fmKJHhDXQpnQQI65hfsX8k19qu6TjjNmgy
o1Ae9kXjAKUOZP6DFEVATjiyS9gScldOm8WWP/5kefJ3wi0jbgiEPl5B9DQB1XyD
Zmjd71Jr6FtoolYMNrgZD1MwUVXl1UqyI7vsQh4xntB1oDwEj+zfHgdofMsfBqeo
pjn+YpLBrnOEiur5J/qMiaZC9BHqiGKV4Z/AjSvpKfhOp1hnooFyxOd/MwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIDxnMkK0UguOzKA3Dbx1Ah4DMvSMB8GA1UdIwQY
MBaAFLM0/Ctbgie23z8h0a06dLFOwGhaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc3pUOEsxdUNKN2JmUHlIUnJUcDBzVTdBYUZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC82ODJlY2UtZWJlMi00YTIzLThhYjUt
MzZlNjRhYzY0NTQyLzEvZ1BHY3lRclJTQzQ3TW9EY052SFVDSGdNeTlJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC82ODJlY2UtZWJlMi00YTIzLThhYjUtMzZlNjRhYzY0NTQy
LzEvc3pUOEsxdUNKN2JmUHlIUnJUcDBzVTdBYUZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLZ/gMA0G
CSqGSIb3DQEBCwUAA4IBAQCLS7g+XBgL0e7pEXaiyaUjAgUK58e8tWIbpundaBnv
26X2fpaBT6aBsIfAqaYFp7x+NSObCMKXnBBbTawQUtbdw2fhU3QA4/SJ+q2soa4f
LWI1RDRTOdhZ9+HL09dQJWR+Kpzj7dpSTgDSqUCPy4XCncZ5yY2sTW3J8Pp7D9Hz
ceXRXqZKmROxU2OTHaADR6qJAd6w5gLf4aN91Zx3B5xTtv+Y7ul5If2grBkID3W1
k0lOpcgybxrpS/pM6t3eEGX74ZMUoSkHQbnVIcwDFjS3jvA/1rk5OiN5VDs7eHDF
7l5ujkZa2duBJB/kzrkODcm5+W+h6mUomfG2FO3c6Cue
-----END CERTIFICATE-----
Generated at Fri Apr 4 23:42:13 2025 by rpki-client