Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/sCxYlTWiDhdRMcngf850A6XqaOE.roa
File: sCxYlTWiDhdRMcngf850A6XqaOE.roa (raw, json)
Hash identifier: kqrC9Mj0ll887+4wrCmPGnjHuKfBNUmVpy0g2oMFtCo=
Subject key identifier: B0:2C:58:95:35:A2:0E:17:51:31:C9:E0:7F:CE:74:03:A5:EA:68:E1
Certificate issuer: /CN=6cd98c2c54b0cbea134e27a981cfdde73236e055
Certificate serial: 0194266B54EB72BA1853CEEF0053BBD9FC24
Authority key identifier: 6C:D9:8C:2C:54:B0:CB:EA:13:4E:27:A9:81:CF:DD:E7:32:36:E0:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bNmMLFSwy-oTTiepgc_d5zI24FU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/sCxYlTWiDhdRMcngf850A6XqaOE.roa
Signing time: Thu 02 Jan 2025 09:49:15 +0000
ROA not before: Thu 02 Jan 2025 09:49:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 45.153.167.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:54:eb:72:ba:18:53:ce:ef:00:53:bb:d9:fc:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cd98c2c54b0cbea134e27a981cfdde73236e055
Validity
Not Before: Jan 2 09:49:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b02c589535a20e175131c9e07fce7403a5ea68e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:de:55:00:3a:64:66:b0:28:bb:94:6a:62:e2:
b6:26:c1:ef:29:eb:0b:ed:8f:f4:d0:6c:74:6d:7a:
ea:f8:5f:f2:ad:c3:79:f7:1b:a0:d7:b3:f9:56:6c:
0d:61:a6:73:ac:65:3b:e6:dd:85:16:18:0b:b9:c4:
98:10:ff:44:a6:ea:0e:03:46:b2:84:12:1f:16:07:
15:1f:e0:e7:20:bb:0e:66:a9:f5:15:75:03:51:4a:
de:fb:46:e9:f6:3a:31:d0:af:e0:15:43:c4:88:72:
a4:a6:7c:2f:f2:bc:2e:55:66:31:ec:b3:d0:f6:36:
7a:54:84:78:9c:31:cb:5b:5f:55:a5:54:23:b1:96:
17:d9:ca:88:e8:ca:a2:21:a2:0a:f4:7f:f2:6e:e8:
21:b9:29:25:d9:f3:3b:03:7b:04:cc:37:7d:df:6b:
99:90:8f:bc:ed:4e:7b:8b:cc:7f:d6:32:64:f2:ed:
95:cb:9a:3d:6a:65:18:ae:bd:fb:42:02:d3:81:8c:
e7:ea:48:13:b6:21:a6:35:93:35:f9:de:62:f8:46:
ce:b5:52:20:ac:f0:a0:35:86:71:8f:70:0f:fe:5e:
c7:22:dc:3b:34:ff:e8:b3:d9:db:db:11:3f:ec:bc:
cc:4a:1a:05:bc:fd:d7:79:d6:5c:ab:d2:7f:ef:f7:
43:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:2C:58:95:35:A2:0E:17:51:31:C9:E0:7F:CE:74:03:A5:EA:68:E1
X509v3 Authority Key Identifier:
keyid:6C:D9:8C:2C:54:B0:CB:EA:13:4E:27:A9:81:CF:DD:E7:32:36:E0:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bNmMLFSwy-oTTiepgc_d5zI24FU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/sCxYlTWiDhdRMcngf850A6XqaOE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/bNmMLFSwy-oTTiepgc_d5zI24FU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.153.167.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:c0:e1:b8:4f:61:33:51:57:46:a8:90:de:61:a8:cb:f5:02:
24:fe:91:a2:7a:46:a8:3d:ab:2d:05:52:79:91:99:7b:8a:0a:
22:ad:4f:5c:17:53:da:01:e9:05:5e:a7:d2:63:1f:f6:cf:5f:
50:43:c6:63:0c:90:2f:72:f1:39:6a:85:fc:1c:48:b7:00:7d:
2d:51:78:fa:84:3e:ae:f9:64:c9:28:4b:5c:eb:c3:5b:4f:63:
74:fb:b0:8f:ce:94:ee:29:5c:f9:0c:5b:ed:54:ab:c2:c9:48:
a9:ee:ec:c0:18:52:92:c5:20:7c:9d:d6:b5:11:3d:2c:1e:af:
cc:19:7c:01:97:af:bc:ff:31:bf:cc:f0:48:9c:3a:8d:ab:a4:
bb:e7:f3:e1:29:da:cc:08:d0:d0:1a:58:e6:a1:ae:67:50:20:
30:83:d3:45:c0:09:50:c0:2c:21:38:20:62:62:c5:0d:e6:16:
ec:d2:63:67:96:db:a8:98:e4:54:12:64:dc:44:94:e0:3c:2a:
93:13:81:fa:c6:25:b3:c2:3b:48:0b:44:36:a1:e1:d4:74:27:
2e:9f:d4:9f:5d:70:3d:c9:bd:2e:74:f9:66:aa:2b:35:e0:cc:
b4:c8:31:5e:89:83:86:b4:f9:67:b9:dc:cf:58:f2:1d:39:a5:
70:09:84:ba
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQma1TrcroYU87vAFO72fwkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjZDk4YzJjNTRiMGNiZWExMzRlMjdhOTgxY2ZkZGU3MzIz
NmUwNTUwHhcNMjUwMTAyMDk0OTE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMDJjNTg5NTM1YTIwZTE3NTEzMWM5ZTA3ZmNlNzQwM2E1ZWE2OGUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsN5VADpkZrAou5RqYuK2JsHvKesL
7Y/00Gx0bXrq+F/yrcN59xug17P5VmwNYaZzrGU75t2FFhgLucSYEP9EpuoOA0ay
hBIfFgcVH+DnILsOZqn1FXUDUUre+0bp9jox0K/gFUPEiHKkpnwv8rwuVWYx7LPQ
9jZ6VIR4nDHLW19VpVQjsZYX2cqI6MqiIaIK9H/ybughuSkl2fM7A3sEzDd932uZ
kI+87U57i8x/1jJk8u2Vy5o9amUYrr37QgLTgYzn6kgTtiGmNZM1+d5i+EbOtVIg
rPCgNYZxj3AP/l7HItw7NP/os9nb2xE/7LzMShoFvP3XedZcq9J/7/dDNwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLAsWJU1og4XUTHJ4H/OdAOl6mjhMB8GA1UdIwQY
MBaAFGzZjCxUsMvqE04nqYHP3ecyNuBVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYk5tTUxGU3d5LW9UVGllcGdjX2Q1ekkyNEZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS8wMTYzOGMtNmNiOS00NTg5LTkwOWIt
ZDM3ZGY2MzRhOTI5LzEvc0N4WWxUV2lEaGRSTWNuZ2Y4NTBBNlhxYU9FLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS8wMTYzOGMtNmNiOS00NTg5LTkwOWItZDM3ZGY2MzRhOTI5
LzEvYk5tTUxGU3d5LW9UVGllcGdjX2Q1ekkyNEZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZmnMA0G
CSqGSIb3DQEBCwUAA4IBAQA6wOG4T2EzUVdGqJDeYajL9QIk/pGiekaoPastBVJ5
kZl7igoirU9cF1PaAekFXqfSYx/2z19QQ8ZjDJAvcvE5aoX8HEi3AH0tUXj6hD6u
+WTJKEtc68NbT2N0+7CPzpTuKVz5DFvtVKvCyUip7uzAGFKSxSB8nda1ET0sHq/M
GXwBl6+8/zG/zPBInDqNq6S75/PhKdrMCNDQGljmoa5nUCAwg9NFwAlQwCwhOCBi
YsUN5hbs0mNnltuomORUEmTcRJTgPCqTE4H6xiWzwjtIC0Q2oeHUdCcun9SfXXA9
yb0udPlmqis14My0yDFeiYOGtPlnudzPWPIdOaVwCYS6
-----END CERTIFICATE-----
Generated at Fri Apr 4 23:55:45 2025 by rpki-client