Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/dc4e00-78b6-475b-85c4-02144551299f/1/yd8S7Lw8RLa1TLxvcXOs0A0yvNc.roa
File: yd8S7Lw8RLa1TLxvcXOs0A0yvNc.roa (raw, json)
Hash identifier: TjY/C753z23PNVVlzQ1jh9OReL6y1ktkiF1uuaTrNKE=
Subject key identifier: C9:DF:12:EC:BC:3C:44:B6:B5:4C:BC:6F:71:73:AC:D0:0D:32:BC:D7
Certificate issuer: /CN=2614411899d721f343ed2a39629969417b5b655d
Certificate serial: 0194D6A10DAD3266617CB5EBC913F66DA3BF
Authority key identifier: 26:14:41:18:99:D7:21:F3:43:ED:2A:39:62:99:69:41:7B:5B:65:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JhRBGJnXIfND7So5YplpQXtbZV0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/dc4e00-78b6-475b-85c4-02144551299f/1/yd8S7Lw8RLa1TLxvcXOs0A0yvNc.roa
Signing time: Wed 05 Feb 2025 15:01:06 +0000
ROA not before: Wed 05 Feb 2025 15:01:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200908
IP address blocks: 45.144.228.0/22 maxlen: 24
45.150.192.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:d6:a1:0d:ad:32:66:61:7c:b5:eb:c9:13:f6:6d:a3:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2614411899d721f343ed2a39629969417b5b655d
Validity
Not Before: Feb 5 15:01:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c9df12ecbc3c44b6b54cbc6f7173acd00d32bcd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:34:9e:9a:6d:bc:6b:6a:e0:ab:b9:98:b9:ac:
ff:26:a5:cc:4d:c0:f7:00:e1:35:ae:5a:70:29:ce:
61:6f:df:35:39:7d:94:1c:25:29:87:ab:1e:4d:13:
bb:22:87:5a:91:a6:64:66:6d:9b:ce:c2:7f:90:65:
16:a9:bb:49:35:2a:8d:ea:3e:cb:84:13:61:19:30:
6e:7a:35:3b:61:06:3b:52:59:de:09:0b:10:31:e2:
4c:dc:3a:8f:f7:77:a6:4b:5a:e5:34:48:67:e0:45:
df:11:66:77:f0:31:7c:5b:db:d5:ef:bb:4d:51:c0:
3c:f3:53:1d:07:ee:b8:b1:98:28:72:a3:a9:39:3c:
67:b2:6e:7b:c5:a3:a1:9a:dd:72:5c:3d:2f:b6:d3:
c3:d5:a7:11:08:e3:99:37:ce:29:ca:d9:fe:89:49:
70:08:a0:38:66:ad:fa:18:f0:7d:1a:62:4b:14:a8:
50:1b:62:fa:6e:70:54:0b:fa:39:61:ea:f2:50:68:
c9:be:cf:82:42:76:2d:c8:29:92:12:d3:e9:9b:27:
16:12:6d:0e:0f:a0:6e:1b:71:4d:b5:b7:10:56:68:
d3:8d:7b:d4:9f:aa:bf:f0:f3:3a:d2:f8:cd:6d:50:
6b:d3:9b:af:f5:1a:15:d1:09:a9:9c:83:21:f5:87:
29:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:DF:12:EC:BC:3C:44:B6:B5:4C:BC:6F:71:73:AC:D0:0D:32:BC:D7
X509v3 Authority Key Identifier:
keyid:26:14:41:18:99:D7:21:F3:43:ED:2A:39:62:99:69:41:7B:5B:65:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JhRBGJnXIfND7So5YplpQXtbZV0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/dc4e00-78b6-475b-85c4-02144551299f/1/yd8S7Lw8RLa1TLxvcXOs0A0yvNc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/dc4e00-78b6-475b-85c4-02144551299f/1/JhRBGJnXIfND7So5YplpQXtbZV0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.144.228.0/22
45.150.192.0/22
Signature Algorithm: sha256WithRSAEncryption
17:74:ab:c8:dc:15:c3:a2:d0:86:66:17:54:14:63:e5:0a:9f:
70:aa:6e:e2:d5:ed:9e:9f:d1:19:26:ff:de:ec:90:c4:23:cf:
3c:e3:9e:38:e8:f4:d2:33:03:4d:0f:93:a0:aa:d3:34:26:1a:
57:90:2e:01:b3:9e:d9:2e:01:bc:6e:af:ee:3c:f1:45:92:52:
e7:86:95:7d:3c:0f:5b:a4:e3:15:ef:8b:3f:5f:d5:1d:d4:6b:
fe:39:c2:66:cc:3a:57:23:7e:8a:6c:e0:a4:ad:55:50:5b:35:
7f:6e:5d:0e:15:64:2e:97:00:2b:18:51:fd:0f:60:1d:3b:8d:
c7:2c:01:5d:cf:49:62:3b:cf:84:63:8f:70:ad:36:08:37:45:
99:59:e5:f4:3f:b8:b0:b0:3e:e3:7d:12:52:41:41:87:f5:c2:
4a:83:5f:12:db:3b:a6:c0:c0:83:8a:3c:8b:30:04:ca:06:96:
85:ae:a9:ac:92:6f:de:31:26:27:93:d5:da:e5:d8:eb:07:5c:
e1:2b:7b:e8:c3:e2:75:02:76:d5:32:85:1c:c0:9a:9e:91:ab:
d5:77:bc:db:7c:85:e9:3a:3c:b5:80:96:8c:60:0e:67:69:6f:
e6:70:12:ae:f4:e2:cb:90:bb:1a:e7:ce:57:d7:55:be:38:ac:
1d:48:c9:b7
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZTWoQ2tMmZhfLXryRP2baO/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2MTQ0MTE4OTlkNzIxZjM0M2VkMmEzOTYyOTk2OTQxN2I1
YjY1NWQwHhcNMjUwMjA1MTUwMTA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjOWRmMTJlY2JjM2M0NGI2YjU0Y2JjNmY3MTczYWNkMDBkMzJiY2Q3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjzSemm28a2rgq7mYuaz/JqXMTcD3
AOE1rlpwKc5hb981OX2UHCUph6seTRO7IodakaZkZm2bzsJ/kGUWqbtJNSqN6j7L
hBNhGTBuejU7YQY7UlneCQsQMeJM3DqP93emS1rlNEhn4EXfEWZ38DF8W9vV77tN
UcA881MdB+64sZgocqOpOTxnsm57xaOhmt1yXD0vttPD1acRCOOZN84pytn+iUlw
CKA4Zq36GPB9GmJLFKhQG2L6bnBUC/o5YeryUGjJvs+CQnYtyCmSEtPpmycWEm0O
D6BuG3FNtbcQVmjTjXvUn6q/8PM60vjNbVBr05uv9RoV0QmpnIMh9YcpsQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFMnfEuy8PES2tUy8b3FzrNANMrzXMB8GA1UdIwQY
MBaAFCYUQRiZ1yHzQ+0qOWKZaUF7W2VdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSmhSQkdKblhJZk5EN1NvNVlwbHBRWHRiWlYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi9kYzRlMDAtNzhiNi00NzViLTg1YzQt
MDIxNDQ1NTEyOTlmLzEveWQ4UzdMdzhSTGExVEx4dmNYT3MwQTB5dk5jLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi9kYzRlMDAtNzhiNi00NzViLTg1YzQtMDIxNDQ1NTEyOTlm
LzEvSmhSQkdKblhJZk5EN1NvNVlwbHBRWHRiWlYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCLZDkAwQC
LZbAMA0GCSqGSIb3DQEBCwUAA4IBAQAXdKvI3BXDotCGZhdUFGPlCp9wqm7i1e2e
n9EZJv/e7JDEI88845446PTSMwNND5OgqtM0JhpXkC4Bs57ZLgG8bq/uPPFFklLn
hpV9PA9bpOMV74s/X9Ud1Gv+OcJmzDpXI36KbOCkrVVQWzV/bl0OFWQulwArGFH9
D2AdO43HLAFdz0liO8+EY49wrTYIN0WZWeX0P7iwsD7jfRJSQUGH9cJKg18S2zum
wMCDijyLMATKBpaFrqmskm/eMSYnk9Xa5djrB1zhK3vow+J1AnbVMoUcwJqekavV
d7zbfIXpOjy1gJaMYA5naW/mcBKu9OLLkLsa585X11W+OKwdSMm3
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:39:55 2025 by rpki-client