Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/_ciH7L2BfSRnVsQehUek-VLD6ak.roa
File: _ciH7L2BfSRnVsQehUek-VLD6ak.roa (raw, json)
Hash identifier: bgDXmuZyrULpg7liZM4mm32J+5bT3Fd4ufOU+HWRRKY=
Subject key identifier: FD:C8:87:EC:BD:81:7D:24:67:56:C4:1E:85:47:A4:F9:52:C3:E9:A9
Certificate issuer: /CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Certificate serial: 066284E9
Authority key identifier: 50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/_ciH7L2BfSRnVsQehUek-VLD6ak.roa
Signing time: Wed 16 Mar 2022 19:20:10 +0000
ROA not before: Wed 16 Mar 2022 19:20:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 133115
IP address blocks: 45.88.14.0/24 maxlen: 24
45.88.13.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107119849 (0x66284e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Validity
Not Before: Mar 16 19:20:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fdc887ecbd817d246756c41e8547a4f952c3e9a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:c5:30:9a:64:76:4d:8f:2b:af:0b:36:99:88:
be:cf:d2:05:02:82:12:9f:e3:05:6a:11:d6:a9:77:
59:04:55:93:88:f7:9f:2c:55:28:c0:ef:22:99:1e:
52:8b:49:27:1c:8d:13:c6:c0:e8:68:9b:a5:83:c4:
50:f8:23:e8:36:f4:1e:5c:c8:3e:2b:88:0a:5b:06:
ec:47:bd:6e:1a:3f:23:4f:a8:b4:fd:83:27:b6:ce:
0b:1f:6a:4b:c8:ee:cc:aa:25:a2:e2:04:a3:91:fb:
ad:48:32:01:f9:93:a4:8f:bc:9a:70:9d:4a:14:3c:
a0:e2:09:71:f3:48:0c:ea:f4:71:31:5a:58:8b:eb:
84:d0:67:16:a2:83:00:1f:d8:bf:6d:ff:c6:13:9f:
f4:9a:58:c8:f3:53:8f:16:76:ed:29:34:5e:b0:54:
17:4e:04:33:a7:7e:d0:c2:48:98:19:0c:a4:ef:81:
b2:b7:bd:50:8d:29:52:d3:30:0e:a2:99:b0:a6:f6:
8c:99:b3:2e:e4:ae:67:7e:83:83:aa:ac:f1:9f:39:
31:60:49:92:a9:c7:94:04:1d:35:15:09:0b:65:30:
27:ce:f5:f9:0d:61:78:0d:0b:29:70:21:de:7b:ea:
57:05:f1:2a:0e:01:ac:f4:01:b8:dd:3b:cb:59:f4:
d2:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:C8:87:EC:BD:81:7D:24:67:56:C4:1E:85:47:A4:F9:52:C3:E9:A9
X509v3 Authority Key Identifier:
keyid:50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/_ciH7L2BfSRnVsQehUek-VLD6ak.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/ULpbdE6N9QPZT0H7KQJCicb6Xls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.13.0-45.88.14.255
Signature Algorithm: sha256WithRSAEncryption
5d:11:87:d1:c8:00:e7:e3:e2:ac:d5:5b:0a:f3:d1:dd:e2:8b:
fb:75:0e:e0:37:13:74:59:5c:bb:01:2b:b9:35:bc:41:26:67:
3c:49:65:c0:96:da:10:17:c4:8d:73:bf:73:d6:dd:f3:06:29:
c2:b3:d7:1e:77:af:45:d9:5c:2d:e7:1f:a2:3b:2e:c0:46:4e:
9c:99:20:24:6a:79:bd:c7:95:7a:d8:b1:5d:30:00:ee:48:64:
65:d3:74:da:c4:51:a1:20:16:41:79:28:9b:9e:ae:91:51:39:
4c:1f:62:d0:25:7e:75:7f:80:6c:03:1a:71:d6:ce:1d:da:e8:
a5:a7:18:05:f9:3e:de:5d:d2:c5:15:7c:1d:06:7f:02:b8:22:
68:e3:4d:6f:07:0a:90:9d:f9:7a:6e:f9:ad:cb:ba:30:be:ea:
7f:3f:d3:bc:3f:59:f9:85:ae:06:4f:d9:ef:d2:ec:ba:1e:24:
c8:11:22:76:17:fb:42:85:0d:1a:89:3c:99:8a:b0:bc:88:f3:
7f:9a:ca:10:bb:21:1b:3c:c5:41:e8:16:59:fd:5d:ee:10:a3:
f9:68:f5:e3:c7:3b:8f:e8:a4:94:56:76:45:ee:fc:0a:9f:12:
5a:66:e8:26:da:c9:54:91:a9:9c:5f:69:02:2d:28:17:87:16:
9e:c4:ba:07
-----BEGIN CERTIFICATE-----
MIIE9zCCA9+gAwIBAgIEBmKE6TANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
MGJhNWI3NDRlOGRmNTAzZDk0ZjQxZmIyOTAyNDI4OWM2ZmE1ZTViMB4XDTIyMDMx
NjE5MjAxMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZmRjODg3ZWNiZDgx
N2QyNDY3NTZjNDFlODU0N2E0Zjk1MmMzZTlhOTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAPPFMJpkdk2PK68LNpmIvs/SBQKCEp/jBWoR1ql3WQRVk4j3
nyxVKMDvIpkeUotJJxyNE8bA6GibpYPEUPgj6Db0HlzIPiuIClsG7Ee9bho/I0+o
tP2DJ7bOCx9qS8juzKolouIEo5H7rUgyAfmTpI+8mnCdShQ8oOIJcfNIDOr0cTFa
WIvrhNBnFqKDAB/Yv23/xhOf9JpYyPNTjxZ27Sk0XrBUF04EM6d+0MJImBkMpO+B
sre9UI0pUtMwDqKZsKb2jJmzLuSuZ36Dg6qs8Z85MWBJkqnHlAQdNRUJC2UwJ871
+Q1heA0LKXAh3nvqVwXxKg4BrPQBuN07y1n00vkCAwEAAaOCAhEwggINMB0GA1Ud
DgQWBBT9yIfsvYF9JGdWxB6FR6T5UsPpqTAfBgNVHSMEGDAWgBRQult0To31A9lP
QfspAkKJxvpeWzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1VMcGJkRTZOOVFQWlQwSDdLUUpDaWNiNlhscy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZTYvN2FmZjY4LWJhZTYtNDk4YS05ZjU4LWY1NTljZGE4ZDQ5Zi8x
L19jaUg3TDJCZlNSblZzUWVoVWVrLVZMRDZhay5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTYv
N2FmZjY4LWJhZTYtNDk4YS05ZjU4LWY1NTljZGE4ZDQ5Zi8xL1VMcGJkRTZOOVFQ
WlQwSDdLUUpDaWNiNlhscy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAn
BggrBgEFBQcBBwEB/wQYMBYwFAQCAAEwDjAMAwQALVgNAwQALVgOMA0GCSqGSIb3
DQEBCwUAA4IBAQBdEYfRyADn4+Ks1VsK89Hd4ov7dQ7gNxN0WVy7ASu5NbxBJmc8
SWXAltoQF8SNc79z1t3zBinCs9ced69F2Vwt5x+iOy7ARk6cmSAkanm9x5V62LFd
MADuSGRl03TaxFGhIBZBeSibnq6RUTlMH2LQJX51f4BsAxpx1s4d2uilpxgF+T7e
XdLFFXwdBn8CuCJo401vBwqQnfl6bvmty7owvup/P9O8P1n5ha4GT9nv0uy6HiTI
ESJ2F/tChQ0aiTyZirC8iPN/msoQuyEbPMVB6BZZ/V3uEKP5aPXjxzuP6KSUVnZF
7vwKnxJaZugm2slUkamcX2kCLSgXhxaexLoH
-----END CERTIFICATE-----
Generated at Tue May 13 20:09:26 2025 by rpki-client