Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/7hCd_HKEYkXLvNCBLfMsTezcRXs.roa
File: 7hCd_HKEYkXLvNCBLfMsTezcRXs.roa (raw, json)
Hash identifier: U6tVugGWrDYmHCXTomFCnYlQyCN2W9AcT+utfrGkYmM=
Subject key identifier: EE:10:9D:FC:72:84:62:45:CB:BC:D0:81:2D:F3:2C:4D:EC:DC:45:7B
Certificate issuer: /CN=e15808f3f921bc8c3eea87c7584c584c1000b051
Certificate serial: 0194266C0C0A4D27ABA1D9021D4CEABA5C43
Authority key identifier: E1:58:08:F3:F9:21:BC:8C:3E:EA:87:C7:58:4C:58:4C:10:00:B0:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4VgI8_khvIw-6ofHWExYTBAAsFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/7hCd_HKEYkXLvNCBLfMsTezcRXs.roa
Signing time: Thu 02 Jan 2025 09:50:02 +0000
ROA not before: Thu 02 Jan 2025 09:50:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 10753
IP address blocks: 45.139.36.0/22 maxlen: 24
45.139.56.0/22 maxlen: 24
45.139.64.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:0c:0a:4d:27:ab:a1:d9:02:1d:4c:ea:ba:5c:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e15808f3f921bc8c3eea87c7584c584c1000b051
Validity
Not Before: Jan 2 09:50:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ee109dfc72846245cbbcd0812df32c4decdc457b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:c2:b2:9e:65:3b:f3:d0:80:a4:5b:fe:fd:4a:
55:42:31:cf:eb:2a:37:02:e9:ee:74:20:a9:26:e4:
2b:d6:b5:74:dc:ad:09:82:ef:48:5f:5e:ec:5b:11:
5d:4e:d7:2f:f7:fc:30:64:cf:c2:37:d2:a2:f9:46:
21:ca:cb:b4:ab:b8:eb:a4:4c:b6:7d:ae:00:fe:be:
a5:10:c6:57:f8:b7:4a:ab:f1:43:a9:31:29:a9:49:
ce:75:c4:df:70:8a:03:91:02:88:78:c0:64:fb:aa:
6d:8d:5e:77:3d:49:9c:27:29:08:35:f3:ac:b5:26:
5a:a4:21:30:61:93:58:7e:71:80:93:b0:f4:d1:0d:
b5:34:50:6b:b9:61:67:88:37:9d:98:12:ec:21:40:
47:ec:f1:5b:90:32:b5:dc:56:fd:59:d4:ad:07:57:
eb:33:a1:a8:cb:1d:b4:c1:24:25:bb:d0:da:4e:e5:
2b:f2:4a:c5:fc:d0:04:5c:d5:4d:df:06:b9:95:ce:
92:02:af:4c:e2:69:5c:e7:a8:cd:16:b4:fd:33:fc:
93:eb:40:23:79:ce:15:a8:76:2d:f2:67:9a:55:46:
49:d4:f8:f6:23:89:61:1a:aa:c9:d7:d4:19:8f:54:
83:6a:2b:41:9c:65:cd:00:45:a7:dc:62:5c:56:4b:
b4:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:10:9D:FC:72:84:62:45:CB:BC:D0:81:2D:F3:2C:4D:EC:DC:45:7B
X509v3 Authority Key Identifier:
keyid:E1:58:08:F3:F9:21:BC:8C:3E:EA:87:C7:58:4C:58:4C:10:00:B0:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4VgI8_khvIw-6ofHWExYTBAAsFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/7hCd_HKEYkXLvNCBLfMsTezcRXs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.139.36.0/22
45.139.56.0/22
45.139.64.0/22
Signature Algorithm: sha256WithRSAEncryption
50:d4:6d:ed:bb:8c:07:87:32:71:76:ec:e5:50:0f:52:2e:75:
b4:fd:7a:75:01:fb:7e:1b:7e:4c:23:a7:4b:ae:1a:eb:3b:41:
43:4e:fb:31:f6:3e:d9:68:fc:b3:ef:af:4f:08:8c:26:95:d0:
98:5a:34:e6:8a:b1:81:ab:08:60:02:f6:cd:62:73:a2:62:29:
46:08:c6:7b:7f:5d:26:c2:13:a3:7b:86:2c:00:40:c3:31:6b:
35:7f:eb:e8:00:db:cc:b4:13:24:af:b4:db:30:8b:ee:80:a2:
a4:bd:20:1b:bb:04:a0:07:e4:1e:13:d4:7a:80:f9:41:82:ad:
7b:81:da:20:51:e9:d6:c5:aa:06:6a:3d:b1:1c:42:9f:22:4b:
c4:bf:05:7f:e3:52:e0:b9:12:37:2d:31:12:cd:d0:a8:53:f5:
92:2b:0c:84:5d:15:ea:77:06:c6:74:ba:0f:de:56:72:6b:22:
37:dc:ac:9b:11:2d:5f:32:48:b2:b6:64:1a:3e:5f:f6:14:9b:
e7:51:f4:ff:33:57:d7:b4:38:dd:a3:71:12:39:f2:c2:f6:81:
d9:94:4b:1d:ac:5a:5c:8d:26:48:5f:af:5a:a2:3c:3a:6d:dc:
dd:0a:d3:4b:fa:14:4a:79:65:fd:28:49:e8:e8:ea:59:8b:3a:
13:09:e6:98
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZQmbAwKTSerodkCHUzqulxDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxNTgwOGYzZjkyMWJjOGMzZWVhODdjNzU4NGM1ODRjMTAw
MGIwNTEwHhcNMjUwMTAyMDk1MDAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZTEwOWRmYzcyODQ2MjQ1Y2JiY2QwODEyZGYzMmM0ZGVjZGM0NTdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0sKynmU789CApFv+/UpVQjHP6yo3
AunudCCpJuQr1rV03K0Jgu9IX17sWxFdTtcv9/wwZM/CN9Ki+UYhysu0q7jrpEy2
fa4A/r6lEMZX+LdKq/FDqTEpqUnOdcTfcIoDkQKIeMBk+6ptjV53PUmcJykINfOs
tSZapCEwYZNYfnGAk7D00Q21NFBruWFniDedmBLsIUBH7PFbkDK13Fb9WdStB1fr
M6Goyx20wSQlu9DaTuUr8krF/NAEXNVN3wa5lc6SAq9M4mlc56jNFrT9M/yT60Aj
ec4VqHYt8meaVUZJ1Pj2I4lhGqrJ19QZj1SDaitBnGXNAEWn3GJcVku0dQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFO4QnfxyhGJFy7zQgS3zLE3s3EV7MB8GA1UdIwQY
MBaAFOFYCPP5IbyMPuqHx1hMWEwQALBRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFZnSThfa2h2SXctNm9mSFdFeFlUQkFBc0ZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC84ZThlODItNTI3NC00ZDJmLThjYTAt
YWIxOWZjYjBjZTY0LzEvN2hDZF9IS0VZa1hMdk5DQkxmTXNUZXpjUlhzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC84ZThlODItNTI3NC00ZDJmLThjYTAtYWIxOWZjYjBjZTY0
LzEvNFZnSThfa2h2SXctNm9mSFdFeFlUQkFBc0ZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCLYskAwQC
LYs4AwQCLYtAMA0GCSqGSIb3DQEBCwUAA4IBAQBQ1G3tu4wHhzJxduzlUA9SLnW0
/Xp1Aft+G35MI6dLrhrrO0FDTvsx9j7ZaPyz769PCIwmldCYWjTmirGBqwhgAvbN
YnOiYilGCMZ7f10mwhOje4YsAEDDMWs1f+voANvMtBMkr7TbMIvugKKkvSAbuwSg
B+QeE9R6gPlBgq17gdogUenWxaoGaj2xHEKfIkvEvwV/41LguRI3LTESzdCoU/WS
KwyEXRXqdwbGdLoP3lZyayI33KybES1fMkiytmQaPl/2FJvnUfT/M1fXtDjdo3ES
OfLC9oHZlEsdrFpcjSZIX69aojw6bdzdCtNL+hRKeWX9KEno6OpZizoTCeaY
-----END CERTIFICATE-----
Generated at Sat Apr 5 14:19:33 2025 by rpki-client