Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/c4de01-f0ab-43a3-b230-45688a4edea4/1/03pc4JgiGO4nmtln18b5rkAZRYo.roa
File: 03pc4JgiGO4nmtln18b5rkAZRYo.roa (raw, json)
Hash identifier: si0O8YwkIX1xCjNyOVQ7eKu9N0IcGvWxUpYvgYuoqzk=
Subject key identifier: D3:7A:5C:E0:98:22:18:EE:27:9A:D9:67:D7:C6:F9:AE:40:19:45:8A
Certificate issuer: /CN=692933a4cc4e1d73b843eeb313bf6840beb7259c
Certificate serial: 0187F672
Authority key identifier: 69:29:33:A4:CC:4E:1D:73:B8:43:EE:B3:13:BF:68:40:BE:B7:25:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aSkzpMxOHXO4Q-6zE79oQL63JZw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/c4de01-f0ab-43a3-b230-45688a4edea4/1/03pc4JgiGO4nmtln18b5rkAZRYo.roa
Signing time: Sat 01 Jan 2022 06:55:06 +0000
ROA not before: Sat 01 Jan 2022 06:55:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 139038
IP address blocks: 45.129.227.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25687666 (0x187f672)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=692933a4cc4e1d73b843eeb313bf6840beb7259c
Validity
Not Before: Jan 1 06:55:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d37a5ce0982218ee279ad967d7c6f9ae4019458a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a5:33:49:50:6f:4e:b9:51:02:c7:87:d8:60:
9d:7b:fc:c7:c1:c0:50:e7:9a:4a:e5:ab:bb:54:39:
6d:4f:d0:7a:6f:aa:1e:03:16:7b:6b:99:24:ea:ce:
f4:18:93:a7:52:62:46:07:0b:09:db:30:64:a8:08:
0a:87:5b:59:4b:98:02:27:39:cd:78:4f:f9:bc:b8:
37:55:b8:4f:a0:d4:be:eb:cd:72:bd:b7:ef:88:f8:
08:db:ed:7d:54:ca:31:1d:ed:40:a8:7b:b7:f1:51:
8e:3e:53:c9:c3:34:c7:3f:a0:99:d5:f4:41:62:44:
5e:e1:9b:cb:31:14:a2:5a:ab:65:d7:f2:f2:2b:c6:
77:e5:2d:3b:8a:03:01:86:91:52:70:df:df:0d:1b:
0c:51:f4:94:03:9c:74:7c:13:b2:e3:b1:3a:82:ce:
f5:b0:6f:0f:04:f7:3e:d3:18:9d:af:8f:f0:b8:4e:
3d:ce:db:27:c4:f5:a4:7f:80:e5:ad:88:78:39:bb:
e2:22:ce:7e:7a:ee:e7:d0:d8:d0:11:3e:cb:68:b5:
b0:5c:05:e7:98:5e:e1:eb:28:e8:77:a7:cb:a3:75:
df:72:94:ac:07:88:d8:fd:87:b8:f1:68:70:32:b5:
c9:1f:5e:36:b1:e3:77:e6:60:30:7f:06:9f:b3:48:
ca:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:7A:5C:E0:98:22:18:EE:27:9A:D9:67:D7:C6:F9:AE:40:19:45:8A
X509v3 Authority Key Identifier:
keyid:69:29:33:A4:CC:4E:1D:73:B8:43:EE:B3:13:BF:68:40:BE:B7:25:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aSkzpMxOHXO4Q-6zE79oQL63JZw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/c4de01-f0ab-43a3-b230-45688a4edea4/1/03pc4JgiGO4nmtln18b5rkAZRYo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/c4de01-f0ab-43a3-b230-45688a4edea4/1/aSkzpMxOHXO4Q-6zE79oQL63JZw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.227.0/24
Signature Algorithm: sha256WithRSAEncryption
10:1e:3a:2e:fd:bd:cb:ec:3b:6c:ce:b6:b9:0c:7f:26:5c:d8:
8d:61:62:d5:70:96:69:97:7b:be:a7:11:8d:4c:36:26:69:40:
6d:25:15:50:12:9b:5e:c2:d3:0b:9d:fd:15:f3:16:5f:89:78:
40:cd:e9:6e:c1:6a:90:44:08:e4:15:51:20:21:8d:e1:a4:bd:
c8:61:45:4f:3b:87:36:d6:1c:ae:b1:64:d1:95:4c:76:44:cc:
77:06:1e:2a:ff:b0:04:e3:85:fe:ac:51:96:27:2f:72:4b:d6:
a2:6c:50:eb:54:cf:2f:d7:74:ab:78:37:63:79:77:dd:4f:90:
38:d7:ba:54:88:99:38:09:4f:7e:d1:d2:be:96:cb:7a:a3:cb:
72:56:08:1d:0d:64:f1:15:99:ec:e4:b6:e0:13:07:54:b7:c2:
0e:2f:82:f9:97:f5:ec:8a:f6:bc:eb:4a:3d:9e:8b:f5:9d:c2:
c1:ac:55:bc:8f:f3:5e:bd:b3:4e:17:43:06:ac:da:2b:26:64:
1a:85:ce:7f:e1:f4:cc:84:23:37:18:70:28:e5:fe:1a:06:0c:
db:75:b6:d1:d9:a9:6f:e3:bf:b8:fb:97:de:08:77:4b:36:cc:
70:ed:7f:b1:f6:de:74:f4:3c:70:f7:a6:bb:d1:e6:53:33:8c:
0e:6d:cd:28
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAYf2cjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
OTI5MzNhNGNjNGUxZDczYjg0M2VlYjMxM2JmNjg0MGJlYjcyNTljMB4XDTIyMDEw
MTA2NTUwNloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZDM3YTVjZTA5ODIy
MThlZTI3OWFkOTY3ZDdjNmY5YWU0MDE5NDU4YTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAL2lM0lQb065UQLHh9hgnXv8x8HAUOeaSuWru1Q5bU/Qem+q
HgMWe2uZJOrO9BiTp1JiRgcLCdswZKgICodbWUuYAic5zXhP+by4N1W4T6DUvuvN
cr2374j4CNvtfVTKMR3tQKh7t/FRjj5TycM0xz+gmdX0QWJEXuGbyzEUolqrZdfy
8ivGd+UtO4oDAYaRUnDf3w0bDFH0lAOcdHwTsuOxOoLO9bBvDwT3PtMYna+P8LhO
Pc7bJ8T1pH+A5a2IeDm74iLOfnru59DY0BE+y2i1sFwF55he4eso6Heny6N133KU
rAeI2P2HuPFocDK1yR9eNrHjd+ZgMH8Gn7NIyp8CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTTelzgmCIY7iea2WfXxvmuQBlFijAfBgNVHSMEGDAWgBRpKTOkzE4dc7hD
7rMTv2hAvrclnDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2FTa3pwTXhPSFhPNFEtNnpFNzlvUUw2M0pady5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZjkvYzRkZTAxLWYwYWItNDNhMy1iMjMwLTQ1Njg4YTRlZGVhNC8x
LzAzcGM0SmdpR080bm10bG4xOGI1cmtBWlJZby5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjkv
YzRkZTAxLWYwYWItNDNhMy1iMjMwLTQ1Njg4YTRlZGVhNC8xL2FTa3pwTXhPSFhP
NFEtNnpFNzlvUUw2M0pady5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC2B4zANBgkqhkiG9w0BAQsFAAOC
AQEAEB46Lv29y+w7bM62uQx/JlzYjWFi1XCWaZd7vqcRjUw2JmlAbSUVUBKbXsLT
C539FfMWX4l4QM3pbsFqkEQI5BVRICGN4aS9yGFFTzuHNtYcrrFk0ZVMdkTMdwYe
Kv+wBOOF/qxRlicvckvWomxQ61TPL9d0q3g3Y3l33U+QONe6VIiZOAlPftHSvpbL
eqPLclYIHQ1k8RWZ7OS24BMHVLfCDi+C+Zf17Ir2vOtKPZ6L9Z3CwaxVvI/zXr2z
ThdDBqzaKyZkGoXOf+H0zIQjNxhwKOX+GgYM23W20dmpb+O/uPuX3gh3SzbMcO1/
sfbedPQ8cPemu9HmUzOMDm3NKA==
-----END CERTIFICATE-----
Generated at Sat Apr 19 15:15:32 2025 by rpki-client