Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/CwJDb2_PMxffxGiIhKJmmDUW6TI.roa
File: CwJDb2_PMxffxGiIhKJmmDUW6TI.roa (raw, json)
Hash identifier: o3xEd0ub9vsHzzra/VxPkNZVL+QdOh0+S+548rOlnlo=
Subject key identifier: 0B:02:43:6F:6F:CF:33:17:DF:C4:68:88:84:A2:66:98:35:16:E9:32
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 019422200F7D68E0C0A993C43DCCCD083B22
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/CwJDb2_PMxffxGiIhKJmmDUW6TI.roa
Signing time: Wed 01 Jan 2025 13:48:33 +0000
ROA not before: Wed 01 Jan 2025 13:48:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29802
IP address blocks: 45.151.142.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:0f:7d:68:e0:c0:a9:93:c4:3d:cc:cd:08:3b:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Jan 1 13:48:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0b02436f6fcf3317dfc4688884a266983516e932
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ef:5b:cb:5a:f0:1c:92:8c:96:ef:9e:9b:e7:
f7:b2:82:20:da:f6:90:a4:f5:9f:e7:6f:2d:54:74:
2c:e6:9e:e9:38:c7:2e:77:f9:01:59:62:34:7c:39:
3c:ee:64:e5:9a:09:39:ce:66:89:8b:71:23:5b:ea:
21:b6:17:17:d7:10:c8:41:cc:4c:81:87:df:5d:25:
69:26:01:a4:97:58:d5:4b:85:81:26:c7:50:0d:8c:
ba:d1:db:ec:5b:cd:5f:4b:30:bc:e6:00:93:d4:73:
1e:82:8d:ba:c5:fb:c0:56:48:b0:50:4e:32:8d:10:
6c:02:b6:82:b5:84:6c:51:e8:0a:50:88:ee:45:6d:
08:23:d7:1f:d6:8a:9f:82:41:fd:89:05:27:82:fc:
13:ce:8b:58:9e:3a:34:d3:b7:b9:1e:a6:c5:c2:7f:
bb:b2:5d:59:08:42:ec:43:48:eb:e2:bf:50:82:8f:
da:0c:b0:bb:b2:59:47:59:90:8a:83:41:cb:03:c4:
bf:f0:30:bf:f8:4a:2b:7b:8d:ab:98:0a:f5:11:f3:
c8:72:66:6f:f1:07:9d:88:8f:4e:aa:54:ce:be:e8:
63:d3:ce:dc:b2:50:aa:ea:42:6b:f8:78:c7:bb:9c:
44:fd:39:2d:72:4a:f5:bf:ff:6a:57:fc:31:7e:5b:
0c:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:02:43:6F:6F:CF:33:17:DF:C4:68:88:84:A2:66:98:35:16:E9:32
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/CwJDb2_PMxffxGiIhKJmmDUW6TI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.142.0/24
Signature Algorithm: sha256WithRSAEncryption
06:b0:46:80:15:c1:4a:87:cb:f6:4f:e7:c2:a2:62:2d:45:1a:
da:d2:0f:90:2c:02:4b:3e:a5:72:9d:d2:df:a9:d4:c3:08:a2:
28:1c:d3:68:2c:a0:f9:67:b3:27:5e:db:a7:b6:46:0f:d3:53:
c0:6a:a7:ff:5c:3a:d5:47:b1:11:9c:90:ab:b2:de:19:80:2f:
6d:eb:a0:61:aa:d1:24:fe:89:22:49:26:f0:0a:d3:09:ce:f2:
b9:bb:bd:26:d8:ef:07:f5:98:9d:6b:23:4b:78:29:b7:af:cb:
47:0a:02:d0:23:07:5f:dc:ba:56:99:c7:67:49:76:bd:f9:b2:
17:11:07:b8:25:0f:d6:34:f8:df:25:2d:a3:4d:a6:b2:44:88:
61:83:df:17:b7:de:25:88:5b:50:b6:af:fe:82:a8:de:8f:81:
77:35:fc:86:b3:d3:8b:b1:be:c0:af:8e:b8:17:49:81:ae:72:
32:95:48:00:c7:ea:5d:3d:aa:dc:87:7c:49:37:87:84:bf:c7:
dc:36:67:3f:90:08:0e:24:6e:62:5b:50:df:7a:a9:e2:46:d5:
ec:6f:85:a0:0e:f8:5c:a0:bb:61:f2:3f:41:da:cd:85:63:e1:
2d:0d:a4:b4:83:ee:29:1a:ad:c4:20:e1:78:4a:db:20:4b:30:
eb:54:39:65
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQiIA99aODAqZPEPczNCDsiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlMWMzNDcyYzI1YWNkMzQ3MzY0YjdkNjMxMjYxOGFhMzUz
MGNiNjMwHhcNMjUwMTAxMTM0ODMzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYjAyNDM2ZjZmY2YzMzE3ZGZjNDY4ODg4NGEyNjY5ODM1MTZlOTMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0u9by1rwHJKMlu+em+f3soIg2vaQ
pPWf528tVHQs5p7pOMcud/kBWWI0fDk87mTlmgk5zmaJi3EjW+ohthcX1xDIQcxM
gYffXSVpJgGkl1jVS4WBJsdQDYy60dvsW81fSzC85gCT1HMego26xfvAVkiwUE4y
jRBsAraCtYRsUegKUIjuRW0II9cf1oqfgkH9iQUngvwTzotYnjo007e5HqbFwn+7
sl1ZCELsQ0jr4r9Qgo/aDLC7sllHWZCKg0HLA8S/8DC/+Eore42rmAr1EfPIcmZv
8QediI9OqlTOvuhj087cslCq6kJr+HjHu5xE/Tktckr1v/9qV/wxflsMHQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAsCQ29vzzMX38RoiISiZpg1FukyMB8GA1UdIwQY
MBaAFO4cNHLCWs00c2S31jEmGKo1MMtjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYt
YjRiOGRiMjBiMWZiLzEvQ3dKRGIyX1BNeGZmeEdpSWhLSm1tRFVXNlRJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYtYjRiOGRiMjBiMWZi
LzEvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZeOMA0G
CSqGSIb3DQEBCwUAA4IBAQAGsEaAFcFKh8v2T+fComItRRra0g+QLAJLPqVyndLf
qdTDCKIoHNNoLKD5Z7MnXtuntkYP01PAaqf/XDrVR7ERnJCrst4ZgC9t66BhqtEk
/okiSSbwCtMJzvK5u70m2O8H9ZidayNLeCm3r8tHCgLQIwdf3LpWmcdnSXa9+bIX
EQe4JQ/WNPjfJS2jTaayRIhhg98Xt94liFtQtq/+gqjej4F3NfyGs9OLsb7Ar464
F0mBrnIylUgAx+pdParch3xJN4eEv8fcNmc/kAgOJG5iW1DfeqniRtXsb4WgDvhc
oLth8j9B2s2FY+EtDaS0g+4pGq3EIOF4StsgSzDrVDll
-----END CERTIFICATE-----
Generated at Wed Feb 19 21:59:23 2025 by rpki-client