Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/tRAobnnBcsUw71HfQl4GWebl7xo.roa
File: tRAobnnBcsUw71HfQl4GWebl7xo.roa (raw, json)
Hash identifier: oY3FMa/4LRtMqYkCzZJIheH9akN68M5haFqok3/Oo34=
Subject key identifier: B5:10:28:6E:79:C1:72:C5:30:EF:51:DF:42:5E:06:59:E6:E5:EF:1A
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 019422FBBD4021AAB8FA2A7486E19B49E7B7
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/tRAobnnBcsUw71HfQl4GWebl7xo.roa
Signing time: Wed 01 Jan 2025 17:48:30 +0000
ROA not before: Wed 01 Jan 2025 17:48:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206092
IP address blocks: 45.151.1.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:bd:40:21:aa:b8:fa:2a:74:86:e1:9b:49:e7:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Jan 1 17:48:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b510286e79c172c530ef51df425e0659e6e5ef1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:f4:fb:a5:a2:c2:0b:29:8d:d4:1c:c8:6a:80:
52:6b:12:73:ab:e2:fa:78:03:6c:92:96:88:81:dd:
51:bb:a0:55:e3:14:22:bc:0c:e1:6f:e6:26:af:e5:
97:26:64:52:5b:e7:b3:58:16:de:f0:df:d7:30:f3:
83:b7:95:3a:cc:2c:f2:96:a5:c0:80:13:da:da:89:
08:ec:be:aa:d4:a7:53:1c:04:bd:dc:61:45:b7:ca:
06:5a:13:b0:53:fa:5a:8b:32:be:a5:b7:cd:6d:a6:
da:ee:9e:a9:71:9c:7e:a8:ea:bc:c9:53:04:d8:e0:
48:0d:dd:77:83:56:98:90:3c:35:21:a6:bc:4d:87:
54:69:d5:ce:7a:3e:ff:f1:96:de:4f:4f:c5:c5:6d:
f2:a6:ee:aa:78:c8:23:42:93:6f:ba:dd:e0:d0:9b:
c2:de:a8:c4:da:5f:21:e5:2c:0d:97:4e:16:f4:b1:
80:bb:4d:e4:5e:02:9e:00:79:79:3f:0b:15:74:f7:
d3:21:26:75:60:ef:e6:08:b3:fc:71:a4:d3:a1:fd:
88:65:4b:f7:ca:ce:01:65:f9:e7:fe:06:98:89:d3:
aa:b3:9c:f0:74:2e:28:82:37:b8:35:1d:d9:04:c4:
52:25:e4:ea:de:7e:77:f0:b6:52:b3:8c:fb:d6:3e:
1f:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:10:28:6E:79:C1:72:C5:30:EF:51:DF:42:5E:06:59:E6:E5:EF:1A
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/tRAobnnBcsUw71HfQl4GWebl7xo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.1.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:09:0f:b2:fb:73:94:a3:14:66:fa:f2:78:9b:49:8b:c0:bd:
11:dd:d2:9f:a2:dc:8c:e3:1a:30:92:ef:96:48:16:ab:da:3b:
3a:00:9b:37:38:e3:5d:ef:fa:b6:5b:80:58:32:17:c7:44:d9:
67:e8:ff:14:2e:78:2b:14:e5:95:fe:4d:72:f3:45:50:31:06:
80:c4:86:dc:2f:fa:78:78:e4:7b:b3:3d:e4:8c:3f:e6:0c:9b:
90:f3:53:ff:67:8f:54:6c:14:81:80:2d:21:04:29:46:e4:8c:
9b:38:82:5d:06:92:82:be:dd:d2:a3:a6:3a:17:c1:c3:71:35:
d4:c4:53:84:6f:ba:60:3e:6b:b2:58:cd:37:81:dd:99:8c:25:
02:5d:b0:4b:54:a6:40:66:80:e1:81:07:86:f0:41:17:e3:51:
e7:78:cb:54:2b:fd:bd:43:b7:c5:b1:cd:54:80:2d:00:2f:fd:
6c:7d:2c:06:8c:c8:d9:3e:16:c9:39:e5:d1:cf:95:96:fb:0b:
8e:5c:3d:18:a8:44:bd:4d:ea:9c:c8:1c:15:35:40:7d:61:13:
c1:2b:28:85:ec:9c:cd:a0:99:6b:03:60:b9:bc:31:54:61:9f:
f7:0f:90:1e:1a:a5:b3:e7:9c:14:42:ce:cd:e0:2a:a0:52:a5:
a9:25:ba:86
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQi+71AIaq4+ip0huGbSee3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkMmE0NzhiYjBiMDhlNjYxYjBiMmY5ZmJlODkzNWJjOWMy
YTI4YTEwHhcNMjUwMTAxMTc0ODMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNTEwMjg2ZTc5YzE3MmM1MzBlZjUxZGY0MjVlMDY1OWU2ZTVlZjFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1PT7paLCCymN1BzIaoBSaxJzq+L6
eANskpaIgd1Ru6BV4xQivAzhb+Ymr+WXJmRSW+ezWBbe8N/XMPODt5U6zCzylqXA
gBPa2okI7L6q1KdTHAS93GFFt8oGWhOwU/paizK+pbfNbaba7p6pcZx+qOq8yVME
2OBIDd13g1aYkDw1Iaa8TYdUadXOej7/8ZbeT0/FxW3ypu6qeMgjQpNvut3g0JvC
3qjE2l8h5SwNl04W9LGAu03kXgKeAHl5PwsVdPfTISZ1YO/mCLP8caTTof2IZUv3
ys4BZfnn/gaYidOqs5zwdC4ogje4NR3ZBMRSJeTq3n538LZSs4z71j4f/QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLUQKG55wXLFMO9R30JeBlnm5e8aMB8GA1UdIwQY
MBaAFJ0qR4uwsI5mGwsvn76JNbycKiihMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMt
ZWVmMzUxMWY2YzYwLzEvdFJBb2JubkJjc1V3NzFIZlFsNEdXZWJsN3hvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMtZWVmMzUxMWY2YzYw
LzEvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZcBMA0G
CSqGSIb3DQEBCwUAA4IBAQCxCQ+y+3OUoxRm+vJ4m0mLwL0R3dKfotyM4xowku+W
SBar2js6AJs3OONd7/q2W4BYMhfHRNln6P8ULngrFOWV/k1y80VQMQaAxIbcL/p4
eOR7sz3kjD/mDJuQ81P/Z49UbBSBgC0hBClG5IybOIJdBpKCvt3So6Y6F8HDcTXU
xFOEb7pgPmuyWM03gd2ZjCUCXbBLVKZAZoDhgQeG8EEX41HneMtUK/29Q7fFsc1U
gC0AL/1sfSwGjMjZPhbJOeXRz5WW+wuOXD0YqES9TeqcyBwVNUB9YRPBKyiF7JzN
oJlrA2C5vDFUYZ/3D5AeGqWz55wUQs7N4CqgUqWpJbqG
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:06 2025 by rpki-client on console.sobornost.net