Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/ea7e61-98b3-4120-83ce-c077e1702bc7/1/RjzornIpBpWAVg31mbW6GCIn3FE.roa
File: RjzornIpBpWAVg31mbW6GCIn3FE.roa (raw, json)
Hash identifier: 1SRf58fZ7vrCHWvD/MO3Mvx+IEH2+W2jesliOPCnBDw=
Subject key identifier: 46:3C:E8:AE:72:29:06:95:80:56:0D:F5:99:B5:BA:18:22:27:DC:51
Certificate issuer: /CN=fcea08e8421df2f245c7cb333ee76a14a8882d4a
Certificate serial: 0194266C1023CC85D218693434177316A46C
Authority key identifier: FC:EA:08:E8:42:1D:F2:F2:45:C7:CB:33:3E:E7:6A:14:A8:88:2D:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_OoI6EId8vJFx8szPudqFKiILUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/ea7e61-98b3-4120-83ce-c077e1702bc7/1/RjzornIpBpWAVg31mbW6GCIn3FE.roa
Signing time: Thu 02 Jan 2025 09:50:03 +0000
ROA not before: Thu 02 Jan 2025 09:50:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43948
IP address blocks: 45.86.104.0/24 maxlen: 24
2a0f:95c0::/34 maxlen: 34
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:10:23:cc:85:d2:18:69:34:34:17:73:16:a4:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcea08e8421df2f245c7cb333ee76a14a8882d4a
Validity
Not Before: Jan 2 09:50:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=463ce8ae7229069580560df599b5ba182227dc51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:b3:b8:65:5c:52:f1:b0:04:31:2d:d5:ec:28:
22:7c:9f:fb:22:68:32:22:1d:2c:b1:9d:73:f1:4f:
63:d2:e9:3d:87:62:08:86:ce:68:1c:fc:cb:55:8a:
52:1a:cb:d1:b3:a5:4c:ec:b0:05:cd:44:5a:6c:e0:
b9:bb:82:3f:cc:c8:4d:f9:82:34:25:dd:7b:d6:45:
9d:a5:26:e9:ef:7e:c2:3b:01:d0:5b:ff:da:36:da:
92:04:be:4a:6e:82:c4:82:c4:e9:d0:06:f6:ea:ee:
8a:eb:31:b4:7f:02:c6:65:cd:d0:93:05:17:8b:1b:
cb:43:24:6c:b5:78:9f:0f:0a:f0:44:08:61:cf:92:
5f:91:f4:22:58:f7:20:03:cb:b9:c6:c8:66:d7:4f:
e0:ab:5c:bf:4f:4a:62:9a:52:3c:81:e4:e8:b3:ae:
b7:44:b2:14:70:33:e7:d1:2b:50:89:a0:b5:5e:eb:
75:ad:7b:88:76:9c:8a:cc:c4:c4:11:26:56:21:3c:
d3:4b:2b:49:e4:58:3d:0c:06:20:97:ea:c9:2b:71:
9a:f6:69:a7:97:68:09:0d:86:fa:e9:46:82:21:f1:
67:ae:52:1d:04:3f:15:4a:97:59:89:9c:6c:4e:ac:
47:78:af:6a:36:bf:c4:ef:66:7f:64:a3:32:10:0b:
12:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:3C:E8:AE:72:29:06:95:80:56:0D:F5:99:B5:BA:18:22:27:DC:51
X509v3 Authority Key Identifier:
keyid:FC:EA:08:E8:42:1D:F2:F2:45:C7:CB:33:3E:E7:6A:14:A8:88:2D:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_OoI6EId8vJFx8szPudqFKiILUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/ea7e61-98b3-4120-83ce-c077e1702bc7/1/RjzornIpBpWAVg31mbW6GCIn3FE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/ea7e61-98b3-4120-83ce-c077e1702bc7/1/_OoI6EId8vJFx8szPudqFKiILUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.86.104.0/24
IPv6:
2a0f:95c0::/34
Signature Algorithm: sha256WithRSAEncryption
42:32:14:18:b8:6b:3a:24:f7:b1:d3:a5:5b:36:1f:9a:41:ba:
7b:fe:24:1c:ee:9b:dc:f7:96:50:b8:f5:04:07:44:c7:03:8f:
6d:ba:40:c6:32:fd:a7:06:f0:6a:a5:52:72:55:c0:1b:5a:5e:
4c:8e:b5:fe:50:b6:9a:96:93:e7:6e:50:bc:89:14:48:6c:5e:
b1:09:d3:80:27:34:31:18:8c:41:8d:b3:13:db:ef:cd:38:9d:
e6:38:a7:be:13:3a:af:17:4d:75:bb:c1:55:94:97:b0:29:6e:
1a:5f:37:7a:58:09:d3:4c:82:fc:5a:f7:3d:8b:a7:c6:58:44:
17:17:50:e8:48:cc:a6:12:93:28:e7:d1:f5:95:8f:80:ec:70:
af:ba:cf:6a:18:08:85:c2:a8:fc:37:95:5f:44:29:53:e6:63:
61:db:59:56:01:e0:16:e9:f3:44:f2:50:f8:05:a8:f1:f4:c9:
f0:7a:b0:d5:8d:7f:49:6c:bf:b9:3c:cd:c9:13:c3:4a:02:2b:
86:f2:12:d5:09:77:6c:5d:f9:3e:34:28:ab:8b:ff:4d:2b:4a:
bb:6b:fc:00:94:da:37:ea:d7:81:df:d5:32:39:5f:e5:df:0b:
94:27:45:54:9a:d8:8a:3c:db:10:07:2a:23:68:64:e5:1b:9f:
15:4e:9d:f8
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgISAZQmbBAjzIXSGGk0NBdzFqRsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjZWEwOGU4NDIxZGYyZjI0NWM3Y2IzMzNlZTc2YTE0YTg4
ODJkNGEwHhcNMjUwMTAyMDk1MDAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NjNjZThhZTcyMjkwNjk1ODA1NjBkZjU5OWI1YmExODIyMjdkYzUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj7O4ZVxS8bAEMS3V7CgifJ/7Imgy
Ih0ssZ1z8U9j0uk9h2IIhs5oHPzLVYpSGsvRs6VM7LAFzURabOC5u4I/zMhN+YI0
Jd171kWdpSbp737COwHQW//aNtqSBL5KboLEgsTp0Ab26u6K6zG0fwLGZc3QkwUX
ixvLQyRstXifDwrwRAhhz5JfkfQiWPcgA8u5xshm10/gq1y/T0pimlI8geTos663
RLIUcDPn0StQiaC1Xut1rXuIdpyKzMTEESZWITzTSytJ5Fg9DAYgl+rJK3Ga9mmn
l2gJDYb66UaCIfFnrlIdBD8VSpdZiZxsTqxHeK9qNr/E72Z/ZKMyEAsSEQIDAQAB
o4ICGTCCAhUwHQYDVR0OBBYEFEY86K5yKQaVgFYN9Zm1uhgiJ9xRMB8GA1UdIwQY
MBaAFPzqCOhCHfLyRcfLMz7nahSoiC1KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX09vSTZFSWQ4dkpGeDhzelB1ZHFGS2lJTFVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS9lYTdlNjEtOThiMy00MTIwLTgzY2Ut
YzA3N2UxNzAyYmM3LzEvUmp6b3JuSXBCcFdBVmczMW1iVzZHQ0luM0ZFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS9lYTdlNjEtOThiMy00MTIwLTgzY2UtYzA3N2UxNzAyYmM3
LzEvX09vSTZFSWQ4dkpGeDhzelB1ZHFGS2lJTFVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQALVZoMA4E
AgACMAgDBgYqD5XAADANBgkqhkiG9w0BAQsFAAOCAQEAQjIUGLhrOiT3sdOlWzYf
mkG6e/4kHO6b3PeWULj1BAdExwOPbbpAxjL9pwbwaqVSclXAG1peTI61/lC2mpaT
525QvIkUSGxesQnTgCc0MRiMQY2zE9vvzTid5jinvhM6rxdNdbvBVZSXsCluGl83
elgJ00yC/Fr3PYunxlhEFxdQ6EjMphKTKOfR9ZWPgOxwr7rPahgIhcKo/DeVX0Qp
U+ZjYdtZVgHgFunzRPJQ+AWo8fTJ8Hqw1Y1/SWy/uTzNyRPDSgIrhvIS1Ql3bF35
PjQoq4v/TStKu2v8AJTaN+rXgd/VMjlf5d8LlCdFVJrYijzbEAcqI2hk5RufFU6d
+A==
-----END CERTIFICATE-----
Generated at Sat Apr 5 16:40:00 2025 by rpki-client