Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/dsVEniM-PjP3aF57gRKfJeGsuXA.roa
File: dsVEniM-PjP3aF57gRKfJeGsuXA.roa (raw, json)
Hash identifier: rATVs9dRCK5irdzRkSY1vrtCfxCwPvZoSJA3EPbdN5Q=
Subject key identifier: 76:C5:44:9E:23:3E:3E:33:F7:68:5E:7B:81:12:9F:25:E1:AC:B9:70
Certificate issuer: /CN=e15808f3f921bc8c3eea87c7584c584c1000b051
Certificate serial: 0194266C0D6291B21A7ABE3CF3C17C1AC1DE
Authority key identifier: E1:58:08:F3:F9:21:BC:8C:3E:EA:87:C7:58:4C:58:4C:10:00:B0:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4VgI8_khvIw-6ofHWExYTBAAsFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/dsVEniM-PjP3aF57gRKfJeGsuXA.roa
Signing time: Thu 02 Jan 2025 09:50:03 +0000
ROA not before: Thu 02 Jan 2025 09:50:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 53356
IP address blocks: 45.139.44.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:0d:62:91:b2:1a:7a:be:3c:f3:c1:7c:1a:c1:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e15808f3f921bc8c3eea87c7584c584c1000b051
Validity
Not Before: Jan 2 09:50:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=76c5449e233e3e33f7685e7b81129f25e1acb970
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ba:90:1a:0c:de:8a:5e:79:9a:2b:7f:c8:a5:
3f:b6:8b:45:39:58:8f:95:ac:64:7c:fc:af:0e:7f:
4a:98:f7:de:1b:2e:94:1a:95:9c:a5:40:73:49:f8:
b2:59:15:02:0d:b6:c4:c7:4b:cc:c5:77:5b:73:3f:
49:28:ef:00:3c:09:cb:49:43:f1:39:9f:56:af:e5:
bf:8b:49:89:67:f2:26:5c:aa:39:64:01:68:0a:8a:
bf:76:0e:92:78:6b:73:bf:35:db:cf:5f:e9:ca:55:
e2:5a:4b:ac:7e:0e:28:25:68:70:c8:1e:64:c8:15:
fe:88:7c:53:1f:8d:54:42:9a:01:0a:e4:82:2c:89:
aa:6f:53:f8:1f:d9:89:73:69:c8:51:6c:e5:49:a4:
82:dd:ad:fc:46:40:61:2c:22:fc:71:22:3e:fb:ed:
8d:d2:84:64:14:4a:ca:dd:17:a3:53:9b:b3:f9:6a:
c1:60:f1:c5:3a:e1:be:62:23:a4:7a:17:f0:db:3c:
60:49:f3:ae:e5:91:a4:ec:f5:05:e9:99:67:fa:ea:
03:4a:5f:d8:99:1b:ba:a8:0f:37:26:cf:fb:12:8e:
6d:9b:92:91:b9:65:38:03:18:df:68:0b:f9:64:ba:
af:4b:55:9c:1f:0d:8b:52:ce:b3:83:94:a3:6b:48:
0f:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:C5:44:9E:23:3E:3E:33:F7:68:5E:7B:81:12:9F:25:E1:AC:B9:70
X509v3 Authority Key Identifier:
keyid:E1:58:08:F3:F9:21:BC:8C:3E:EA:87:C7:58:4C:58:4C:10:00:B0:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4VgI8_khvIw-6ofHWExYTBAAsFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/dsVEniM-PjP3aF57gRKfJeGsuXA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.139.44.0/22
Signature Algorithm: sha256WithRSAEncryption
2e:f2:a1:be:f0:0e:f4:ea:61:6e:bb:35:ab:bf:48:52:73:07:
c9:7b:ff:ec:70:ad:1a:b5:f2:84:73:1a:cf:c5:e6:93:81:ee:
f5:21:ae:09:d2:b1:69:50:b0:55:37:a1:4d:4f:20:7f:48:9b:
de:02:72:58:f4:73:e7:d1:90:b4:c8:c2:2b:b3:f0:5a:8e:d2:
b1:4b:96:e1:56:14:6d:33:76:1c:67:20:36:ca:39:fa:da:b8:
9c:80:1e:63:2a:5d:f6:0b:d3:e1:5f:fd:f2:85:39:54:fc:4e:
1d:cf:89:b6:c1:b1:d5:30:31:6a:ad:85:6e:09:a8:58:7a:37:
79:2a:ae:8c:c4:7d:0f:57:18:f3:ac:5e:c5:7c:38:02:95:b6:
28:e2:15:85:47:54:84:0e:05:78:e9:24:66:6d:8b:62:bd:e5:
db:23:c6:43:b6:87:2c:9e:49:e5:45:6e:91:2a:2b:0a:db:f2:
75:61:80:82:c5:01:a5:6f:2b:cc:aa:ea:5a:a0:3b:1b:e1:2a:
2d:e1:57:a4:25:7a:50:33:17:d5:7f:9e:e9:e8:1b:5b:ef:87:
32:fe:2c:d8:13:93:de:41:12:9e:fe:50:08:e8:e7:85:31:b8:
af:34:e5:65:2e:d1:c0:12:15:91:4c:78:d1:8c:06:82:fb:c7:
36:29:a3:4b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQmbA1ikbIaer4888F8GsHeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxNTgwOGYzZjkyMWJjOGMzZWVhODdjNzU4NGM1ODRjMTAw
MGIwNTEwHhcNMjUwMTAyMDk1MDAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NmM1NDQ5ZTIzM2UzZTMzZjc2ODVlN2I4MTEyOWYyNWUxYWNiOTcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuLqQGgzeil55mit/yKU/totFOViP
laxkfPyvDn9KmPfeGy6UGpWcpUBzSfiyWRUCDbbEx0vMxXdbcz9JKO8APAnLSUPx
OZ9Wr+W/i0mJZ/ImXKo5ZAFoCoq/dg6SeGtzvzXbz1/pylXiWkusfg4oJWhwyB5k
yBX+iHxTH41UQpoBCuSCLImqb1P4H9mJc2nIUWzlSaSC3a38RkBhLCL8cSI+++2N
0oRkFErK3RejU5uz+WrBYPHFOuG+YiOkehfw2zxgSfOu5ZGk7PUF6Zln+uoDSl/Y
mRu6qA83Js/7Eo5tm5KRuWU4AxjfaAv5ZLqvS1WcHw2LUs6zg5Sja0gPWQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHbFRJ4jPj4z92hee4ESnyXhrLlwMB8GA1UdIwQY
MBaAFOFYCPP5IbyMPuqHx1hMWEwQALBRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFZnSThfa2h2SXctNm9mSFdFeFlUQkFBc0ZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC84ZThlODItNTI3NC00ZDJmLThjYTAt
YWIxOWZjYjBjZTY0LzEvZHNWRW5pTS1QalAzYUY1N2dSS2ZKZUdzdVhBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC84ZThlODItNTI3NC00ZDJmLThjYTAtYWIxOWZjYjBjZTY0
LzEvNFZnSThfa2h2SXctNm9mSFdFeFlUQkFBc0ZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLYssMA0G
CSqGSIb3DQEBCwUAA4IBAQAu8qG+8A706mFuuzWrv0hScwfJe//scK0atfKEcxrP
xeaTge71Ia4J0rFpULBVN6FNTyB/SJveAnJY9HPn0ZC0yMIrs/BajtKxS5bhVhRt
M3YcZyA2yjn62ricgB5jKl32C9PhX/3yhTlU/E4dz4m2wbHVMDFqrYVuCahYejd5
Kq6MxH0PVxjzrF7FfDgClbYo4hWFR1SEDgV46SRmbYtiveXbI8ZDtocsnknlRW6R
KisK2/J1YYCCxQGlbyvMqupaoDsb4Sot4VekJXpQMxfVf57p6Btb74cy/izYE5Pe
QRKe/lAI6OeFMbivNOVlLtHAEhWRTHjRjAaC+8c2KaNL
-----END CERTIFICATE-----
Generated at Tue Apr 8 23:36:37 2025 by rpki-client