Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/1-AkEgtFYAeYpvfsAvZdlJuyuVF4.roa
File: 1-AkEgtFYAeYpvfsAvZdlJuyuVF4.roa (raw, json)
Hash identifier: bj7r1qBjXXo6AEdGvTw884ILliGHjEYqfvi7PxgbBxU=
Subject key identifier: F8:09:04:82:D1:58:01:E6:29:BD:FB:00:BD:97:65:26:EC:AE:54:5E
Certificate issuer: /CN=bd3668628f0df79d047eca0d9adcfc0b6693e309
Certificate serial: 019422FBE932C4E88F5FDF4A2810BB218E4C
Authority key identifier: BD:36:68:62:8F:0D:F7:9D:04:7E:CA:0D:9A:DC:FC:0B:66:93:E3:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/1-AkEgtFYAeYpvfsAvZdlJuyuVF4.roa
Signing time: Wed 01 Jan 2025 17:48:42 +0000
ROA not before: Wed 01 Jan 2025 17:48:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61317
IP address blocks: 45.95.227.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:e9:32:c4:e8:8f:5f:df:4a:28:10:bb:21:8e:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd3668628f0df79d047eca0d9adcfc0b6693e309
Validity
Not Before: Jan 1 17:48:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f8090482d15801e629bdfb00bd976526ecae545e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:ce:7d:86:41:a7:d4:71:7d:26:44:99:04:83:
90:9f:1b:f1:4a:b7:da:9f:dc:4c:4c:ff:fa:9f:de:
15:e4:ce:84:31:8b:d3:2b:88:29:48:80:c8:5c:a4:
f5:4e:9b:fe:7a:51:e0:1d:89:ad:46:63:66:23:db:
70:08:2d:9f:75:51:b7:8c:f0:0b:58:ef:6b:5b:bd:
53:5f:f2:10:1d:65:90:66:db:f8:bc:72:f7:c0:3d:
da:4d:05:54:f6:f8:77:22:c1:5f:0b:4e:f6:ff:d2:
d6:69:41:3a:5b:79:2f:d8:9a:83:ed:67:85:14:c2:
c8:a5:ba:36:28:65:df:2a:ab:35:ec:bb:3a:d4:4f:
89:c6:6d:ca:a0:f8:3d:5e:c3:e0:7b:c6:bd:ba:96:
0b:6e:eb:22:93:46:d9:5a:ec:ac:8c:36:25:74:1d:
5f:72:fd:70:f3:a2:1a:86:bd:23:50:23:c2:d0:d8:
e6:79:ed:17:5d:8f:a5:84:10:54:4c:80:78:4b:19:
ae:e5:c9:57:d5:d8:7e:df:73:02:5a:e7:ab:ec:60:
9a:70:d3:e3:24:aa:cb:05:a9:de:46:fc:0d:a0:7b:
d6:6a:95:4b:54:cf:41:61:d6:0f:6b:4a:a0:50:d3:
71:1a:9a:56:61:80:9d:4a:4a:ae:6b:b3:a2:ae:c8:
39:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:09:04:82:D1:58:01:E6:29:BD:FB:00:BD:97:65:26:EC:AE:54:5E
X509v3 Authority Key Identifier:
keyid:BD:36:68:62:8F:0D:F7:9D:04:7E:CA:0D:9A:DC:FC:0B:66:93:E3:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/1-AkEgtFYAeYpvfsAvZdlJuyuVF4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.227.0/24
Signature Algorithm: sha256WithRSAEncryption
26:4b:f0:3b:76:c4:27:14:32:ae:4b:18:49:ad:d6:38:95:0c:
65:3a:d2:1b:0e:d1:e7:49:aa:77:3f:e1:58:5d:d5:d6:8a:ec:
f7:c5:1f:f2:d4:0f:53:e0:02:e1:a6:a4:42:64:07:a6:db:37:
90:ad:da:ad:cf:ab:86:2e:f3:2a:02:b4:0a:bd:b2:9d:10:32:
52:a0:af:b9:e0:e5:9d:5c:67:79:1f:d5:55:40:18:6f:39:a8:
09:eb:3b:e3:b4:3b:89:43:2c:62:26:33:c9:b3:35:32:48:a5:
c2:11:79:e1:8b:85:d1:9e:66:0f:5a:f4:c8:41:37:cf:63:e5:
2a:04:ff:2e:0a:5b:cd:cb:1c:c5:cd:74:c7:07:b0:41:9b:85:
8a:40:57:31:c5:c1:c8:d6:6a:f1:a3:e6:88:95:06:df:ef:50:
ce:27:f5:06:5e:4d:81:7a:d8:11:52:49:08:64:1a:1f:65:d1:
7c:ba:e9:c5:19:5d:b3:43:a6:d9:90:4e:1b:85:b8:40:1a:48:
e7:90:a0:6d:02:70:54:1d:79:ee:d6:39:44:4b:18:fe:05:18:
ec:69:5a:d5:c9:96:d6:a5:da:c8:93:85:7f:03:60:8b:1b:8f:
6c:a7:ea:e4:eb:28:17:70:be:6d:5f:e8:4c:2d:da:ce:69:1f:
a9:fa:a9:4e
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZQi++kyxOiPX99KKBC7IY5MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkMzY2ODYyOGYwZGY3OWQwNDdlY2EwZDlhZGNmYzBiNjY5
M2UzMDkwHhcNMjUwMTAxMTc0ODQyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmODA5MDQ4MmQxNTgwMWU2MjliZGZiMDBiZDk3NjUyNmVjYWU1NDVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2M59hkGn1HF9JkSZBIOQnxvxSrfa
n9xMTP/6n94V5M6EMYvTK4gpSIDIXKT1Tpv+elHgHYmtRmNmI9twCC2fdVG3jPAL
WO9rW71TX/IQHWWQZtv4vHL3wD3aTQVU9vh3IsFfC072/9LWaUE6W3kv2JqD7WeF
FMLIpbo2KGXfKqs17Ls61E+Jxm3KoPg9XsPge8a9upYLbusik0bZWuysjDYldB1f
cv1w86Iahr0jUCPC0Njmee0XXY+lhBBUTIB4Sxmu5clX1dh+33MCWuer7GCacNPj
JKrLBaneRvwNoHvWapVLVM9BYdYPa0qgUNNxGppWYYCdSkqua7Oirsg5kwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFPgJBILRWAHmKb37AL2XZSbsrlReMB8GA1UdIwQY
MBaAFL02aGKPDfedBH7KDZrc/Atmk+MJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdlRab1lvOE45NTBFZnNvTm10ejhDMmFUNHdrLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi8xYjU3MjItMWRkYS00ZGYzLWE0NWMt
ZTZiZjMxNmM5NGExLzEvMS1Ba0VndEZZQWVZcHZmc0F2WmRsSnV5dVZGNC5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvZTIvMWI1NzIyLTFkZGEtNGRmMy1hNDVjLWU2YmYzMTZjOTRh
MS8xL3ZUWm9ZbzhOOTUwRWZzb05tdHo4QzJhVDR3ay5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC1f4zAN
BgkqhkiG9w0BAQsFAAOCAQEAJkvwO3bEJxQyrksYSa3WOJUMZTrSGw7R50mqdz/h
WF3V1ors98Uf8tQPU+AC4aakQmQHpts3kK3arc+rhi7zKgK0Cr2ynRAyUqCvueDl
nVxneR/VVUAYbzmoCes747Q7iUMsYiYzybM1MkilwhF54YuF0Z5mD1r0yEE3z2Pl
KgT/Lgpbzcscxc10xwewQZuFikBXMcXByNZq8aPmiJUG3+9Qzif1Bl5NgXrYEVJJ
CGQaH2XRfLrpxRlds0Om2ZBOG4W4QBpI55CgbQJwVB157tY5REsY/gUY7Gla1cmW
1qXayJOFfwNgixuPbKfq5OsoF3C+bV/oTC3azmkfqfqpTg==
-----END CERTIFICATE-----
Generated at Fri Apr 4 18:50:57 2025 by rpki-client