Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/4R6k2h_D5pud05NQaTe74Uka13c.roa
File: 4R6k2h_D5pud05NQaTe74Uka13c.roa (raw, json)
Hash identifier: +xaDY5lcwTAm4oFKNMxP5ae0yvf2rdeAWOUsKNLM+LI=
Subject key identifier: E1:1E:A4:DA:1F:C3:E6:9B:9D:D3:93:50:69:37:BB:E1:49:1A:D7:77
Certificate issuer: /CN=1a7f036e2592391fb45a3dd33caf0b07956973cf
Certificate serial: 018B03FA6688AEA66CB211FA02D1A3725687
Authority key identifier: 1A:7F:03:6E:25:92:39:1F:B4:5A:3D:D3:3C:AF:0B:07:95:69:73:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/4R6k2h_D5pud05NQaTe74Uka13c.roa
Signing time: Fri 06 Oct 2023 07:53:43 +0000
ROA not before: Fri 06 Oct 2023 07:53:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 2.59.180.0/24 maxlen: 24
45.156.144.0/24 maxlen: 24
45.156.145.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:03:fa:66:88:ae:a6:6c:b2:11:fa:02:d1:a3:72:56:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a7f036e2592391fb45a3dd33caf0b07956973cf
Validity
Not Before: Oct 6 07:53:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e11ea4da1fc3e69b9dd393506937bbe1491ad777
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:b5:9b:09:f3:74:66:9a:6d:82:f3:03:40:78:
5a:6a:5c:e2:bc:83:07:a6:18:1b:39:7f:d1:28:31:
e5:b9:da:26:04:d4:fb:96:5c:03:0a:7e:91:e7:b9:
15:2c:e5:9e:7b:e7:ec:8b:6b:10:49:d1:8d:21:5f:
7e:30:82:22:86:c5:04:15:df:96:52:93:36:85:91:
9d:df:52:a5:aa:2f:8b:ec:b2:17:7f:38:3d:a8:4c:
1d:6e:c6:49:13:17:5a:92:7a:26:f7:56:0a:b5:05:
33:10:13:a1:26:e8:3a:8e:98:cc:82:58:5a:39:92:
4e:81:01:18:1b:40:b3:f4:e7:23:30:58:85:2f:a6:
6a:9c:37:f6:6f:5c:ab:73:10:46:c6:7d:3d:a7:11:
1a:5c:c6:bc:f4:75:a7:8f:29:77:d5:a9:fa:f2:cd:
f5:c9:59:91:11:a9:20:c7:63:93:1f:60:49:1e:9f:
ba:fd:d5:71:e2:0a:75:9f:aa:e3:f0:2e:ae:d0:df:
3a:ab:5d:d4:9a:d7:76:c6:a9:19:2c:12:e0:c8:88:
fa:94:63:43:bc:84:4c:32:57:16:d8:35:24:03:d7:
39:00:a8:0c:f6:9f:46:8d:67:ce:51:04:d4:4e:2f:
4a:11:67:5f:be:9e:1d:07:76:10:98:94:65:99:0d:
54:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:1E:A4:DA:1F:C3:E6:9B:9D:D3:93:50:69:37:BB:E1:49:1A:D7:77
X509v3 Authority Key Identifier:
keyid:1A:7F:03:6E:25:92:39:1F:B4:5A:3D:D3:3C:AF:0B:07:95:69:73:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/4R6k2h_D5pud05NQaTe74Uka13c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.180.0/24
45.156.144.0/23
Signature Algorithm: sha256WithRSAEncryption
0a:ec:84:79:22:fd:bc:d9:b9:41:94:5a:42:a9:60:f4:22:55:
2a:cd:b7:a2:ec:ac:50:64:fb:52:8b:87:18:a3:3c:1e:0b:96:
4f:05:ea:03:3e:59:29:36:03:f6:b7:65:6b:83:a9:02:ff:29:
2c:44:3f:d9:50:d2:7b:e1:58:32:bc:ed:40:f9:e5:8d:6b:ac:
32:36:86:2f:e5:3e:04:e2:2e:12:98:06:37:96:db:48:8b:f4:
63:ef:3d:e5:e9:14:87:83:ad:b9:70:f6:1d:a8:58:1e:d3:9e:
68:2c:0d:1a:53:16:44:b0:50:12:d3:73:ba:23:ce:d6:ab:72:
e5:15:47:28:63:e8:6a:7c:1d:d6:25:b8:d7:50:c9:38:24:14:
38:b8:85:0c:46:a7:7d:b4:dd:75:f2:86:02:4d:16:10:7e:c2:
68:62:16:3f:2e:38:4e:97:76:ea:03:a6:2c:86:6a:e6:42:78:
69:a5:a3:72:01:72:73:3b:0b:c7:af:df:18:e8:97:d6:b2:5c:
7a:8a:66:35:d7:de:96:a7:20:a6:7d:84:4b:79:f8:2f:e3:70:
92:93:30:5e:1c:59:36:50:35:43:d4:4e:12:1e:8d:a3:6b:4a:
a0:ad:24:c8:9c:c1:e8:e8:86:a8:e0:c4:c5:91:47:56:92:54:
b8:4f:ea:bc
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYsD+maIrqZsshH6AtGjclaHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhN2YwMzZlMjU5MjM5MWZiNDVhM2RkMzNjYWYwYjA3OTU2
OTczY2YwHhcNMjMxMDA2MDc1MzQzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMTFlYTRkYTFmYzNlNjliOWRkMzkzNTA2OTM3YmJlMTQ5MWFkNzc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0bWbCfN0ZpptgvMDQHhaalzivIMH
phgbOX/RKDHludomBNT7llwDCn6R57kVLOWee+fsi2sQSdGNIV9+MIIihsUEFd+W
UpM2hZGd31Klqi+L7LIXfzg9qEwdbsZJExdaknom91YKtQUzEBOhJug6jpjMglha
OZJOgQEYG0Cz9OcjMFiFL6ZqnDf2b1yrcxBGxn09pxEaXMa89HWnjyl31an68s31
yVmREakgx2OTH2BJHp+6/dVx4gp1n6rj8C6u0N86q13Umtd2xqkZLBLgyIj6lGND
vIRMMlcW2DUkA9c5AKgM9p9GjWfOUQTUTi9KEWdfvp4dB3YQmJRlmQ1UzQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFOEepNofw+abndOTUGk3u+FJGtd3MB8GA1UdIwQY
MBaAFBp/A24lkjkftFo90zyvCweVaXPPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR244RGJpV1NPUi0wV2ozVFBLOExCNVZwYzg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC8yNGJlMWEtMTZkYS00ODFjLThiY2It
MzQwZDYyNWM2ZGJhLzEvNFI2azJoX0Q1cHVkMDVOUWFUZTc0VWthMTNjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC8yNGJlMWEtMTZkYS00ODFjLThiY2ItMzQwZDYyNWM2ZGJh
LzEvR244RGJpV1NPUi0wV2ozVFBLOExCNVZwYzg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAAju0AwQB
LZyQMA0GCSqGSIb3DQEBCwUAA4IBAQAK7IR5Iv282blBlFpCqWD0IlUqzbei7KxQ
ZPtSi4cYozweC5ZPBeoDPlkpNgP2t2Vrg6kC/yksRD/ZUNJ74VgyvO1A+eWNa6wy
NoYv5T4E4i4SmAY3lttIi/Rj7z3l6RSHg625cPYdqFge055oLA0aUxZEsFAS03O6
I87Wq3LlFUcoY+hqfB3WJbjXUMk4JBQ4uIUMRqd9tN118oYCTRYQfsJoYhY/LjhO
l3bqA6YshmrmQnhppaNyAXJzOwvHr98Y6JfWslx6imY1196WpyCmfYRLefgv43CS
kzBeHFk2UDVD1E4SHo2ja0qgrSTInMHo6Iao4MTFkUdWklS4T+q8
-----END CERTIFICATE-----
Generated at Thu Apr 10 21:33:21 2025 by rpki-client