Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/b03a36-0807-41ef-af86-3d439b7cde72/1/xMdRmutHFokxkkQckhp-estBVrY.roa
File: xMdRmutHFokxkkQckhp-estBVrY.roa (raw, json)
Hash identifier: B+GeVyXFQ8LdKQlX7fXVWpcWBfpc+XAscpHvCnfEhnA=
Subject key identifier: C4:C7:51:9A:EB:47:16:89:31:92:44:1C:92:1A:7E:7A:CB:41:56:B6
Certificate issuer: /CN=5661d964df4a86db8ffb99aa89582da68a30908c
Certificate serial: 01953C8807C85D3F99F018912E295ADC719B
Authority key identifier: 56:61:D9:64:DF:4A:86:DB:8F:FB:99:AA:89:58:2D:A6:8A:30:90:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VmHZZN9KhtuP-5mqiVgtpoowkIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/b03a36-0807-41ef-af86-3d439b7cde72/1/xMdRmutHFokxkkQckhp-estBVrY.roa
Signing time: Tue 25 Feb 2025 09:55:02 +0000
ROA not before: Tue 25 Feb 2025 09:55:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201150
IP address blocks: 45.134.99.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:3c:88:07:c8:5d:3f:99:f0:18:91:2e:29:5a:dc:71:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5661d964df4a86db8ffb99aa89582da68a30908c
Validity
Not Before: Feb 25 09:55:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c4c7519aeb4716893192441c921a7e7acb4156b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ca:f8:49:12:ee:79:e8:13:36:18:bc:86:43:
27:b4:c0:93:ee:f7:6d:61:a3:56:f3:97:a3:c3:8b:
59:25:7e:00:39:46:db:32:00:73:c1:42:3b:14:e4:
98:74:b5:62:ba:54:66:ed:b2:f0:c0:7a:53:d3:a2:
1d:f2:58:e3:69:f8:e3:6a:93:3b:65:fa:fb:79:e3:
22:df:8e:82:d5:3a:4a:b0:1a:0b:22:94:00:1a:22:
e3:61:6e:6e:5b:bf:45:df:67:1b:23:ed:dc:a1:41:
d5:c8:1d:6c:08:79:30:05:4d:e1:5f:05:6e:1a:a9:
49:dd:eb:31:35:d1:56:89:31:32:18:dc:7c:83:39:
71:67:a8:2e:8e:e0:f0:93:ad:7d:26:11:4c:2e:2a:
9e:fe:29:a9:d2:1f:71:df:11:9f:13:8f:d9:d1:dc:
3e:19:c5:fa:f5:42:84:f5:a0:73:4d:db:ee:04:56:
44:56:f5:65:5a:36:df:d6:f8:a9:1e:6e:74:43:b9:
11:d4:ec:6a:96:c8:75:1e:49:4c:97:93:1b:a0:4f:
06:66:f6:b4:00:dd:a0:67:ea:97:48:b6:2b:2b:d7:
17:39:c3:c8:6b:b5:14:6c:33:1c:c8:89:18:31:d7:
4f:c1:02:f5:f2:55:74:4a:3b:23:a3:ae:60:8b:7d:
60:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:C7:51:9A:EB:47:16:89:31:92:44:1C:92:1A:7E:7A:CB:41:56:B6
X509v3 Authority Key Identifier:
keyid:56:61:D9:64:DF:4A:86:DB:8F:FB:99:AA:89:58:2D:A6:8A:30:90:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VmHZZN9KhtuP-5mqiVgtpoowkIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/b03a36-0807-41ef-af86-3d439b7cde72/1/xMdRmutHFokxkkQckhp-estBVrY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/b03a36-0807-41ef-af86-3d439b7cde72/1/VmHZZN9KhtuP-5mqiVgtpoowkIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.134.99.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:8c:02:e7:c0:ae:72:4d:50:43:19:e9:f0:a6:c1:30:ce:9c:
9c:c8:8e:d8:d6:f1:ce:b2:21:ed:6a:2e:dc:ef:20:b3:0a:3e:
4f:d8:47:24:97:68:d0:6e:57:f3:be:71:e7:e1:c8:b3:ef:e2:
98:0d:80:fe:b4:69:34:8f:75:38:45:d9:c7:42:85:04:9d:f3:
38:ac:e9:81:b7:dd:58:86:f2:9d:f9:9f:24:4a:d0:24:9f:9e:
e7:50:68:2c:47:c9:9d:09:83:62:24:30:a8:47:3e:77:c7:8d:
13:ba:e4:31:40:f5:ae:07:73:bd:02:1b:ff:9d:58:f1:6f:22:
8d:c1:24:9a:c0:72:cf:8e:cc:d5:9b:78:7a:9d:5f:3c:09:02:
a7:23:28:47:28:1e:d1:29:3d:e3:51:fe:dd:36:54:56:74:2b:
1e:3b:e0:d4:0d:c7:da:a7:92:74:c5:08:51:bc:6d:5c:cd:17:
5e:31:24:d1:43:7e:dc:69:a2:72:fd:c9:ee:30:e7:9c:cd:84:
5e:97:84:58:bb:6b:14:c8:1d:5e:f6:bd:d3:ad:ed:67:d3:9b:
36:e2:8d:9d:e6:4b:9d:2e:58:12:98:2e:6d:18:32:60:8c:b4:
b6:63:49:52:f2:b1:92:f1:d0:c1:8d:9a:41:e7:66:b8:cc:9f:
dc:52:65:f0
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZU8iAfIXT+Z8BiRLila3HGbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2NjFkOTY0ZGY0YTg2ZGI4ZmZiOTlhYTg5NTgyZGE2OGEz
MDkwOGMwHhcNMjUwMjI1MDk1NTAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNGM3NTE5YWViNDcxNjg5MzE5MjQ0MWM5MjFhN2U3YWNiNDE1NmI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwMr4SRLueegTNhi8hkMntMCT7vdt
YaNW85ejw4tZJX4AOUbbMgBzwUI7FOSYdLViulRm7bLwwHpT06Id8ljjafjjapM7
Zfr7eeMi346C1TpKsBoLIpQAGiLjYW5uW79F32cbI+3coUHVyB1sCHkwBU3hXwVu
GqlJ3esxNdFWiTEyGNx8gzlxZ6gujuDwk619JhFMLiqe/imp0h9x3xGfE4/Z0dw+
GcX69UKE9aBzTdvuBFZEVvVlWjbf1vipHm50Q7kR1Oxqlsh1HklMl5MboE8GZva0
AN2gZ+qXSLYrK9cXOcPIa7UUbDMcyIkYMddPwQL18lV0Sjsjo65gi31gEwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMTHUZrrRxaJMZJEHJIafnrLQVa2MB8GA1UdIwQY
MBaAFFZh2WTfSobbj/uZqolYLaaKMJCMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVm1IWlpOOUtodHVQLTVtcWlWZ3Rwb293a0l3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy9iMDNhMzYtMDgwNy00MWVmLWFmODYt
M2Q0MzliN2NkZTcyLzEveE1kUm11dEhGb2t4a2tRY2tocC1lc3RCVnJZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy9iMDNhMzYtMDgwNy00MWVmLWFmODYtM2Q0MzliN2NkZTcy
LzEvVm1IWlpOOUtodHVQLTVtcWlWZ3Rwb293a0l3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYZjMA0G
CSqGSIb3DQEBCwUAA4IBAQA7jALnwK5yTVBDGenwpsEwzpycyI7Y1vHOsiHtai7c
7yCzCj5P2Eckl2jQblfzvnHn4ciz7+KYDYD+tGk0j3U4RdnHQoUEnfM4rOmBt91Y
hvKd+Z8kStAkn57nUGgsR8mdCYNiJDCoRz53x40TuuQxQPWuB3O9Ahv/nVjxbyKN
wSSawHLPjszVm3h6nV88CQKnIyhHKB7RKT3jUf7dNlRWdCseO+DUDcfap5J0xQhR
vG1czRdeMSTRQ37caaJy/cnuMOeczYRel4RYu2sUyB1e9r3Tre1n05s24o2d5kud
LlgSmC5tGDJgjLS2Y0lS8rGS8dDBjZpB52a4zJ/cUmXw
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:06 2025 by rpki-client on console.sobornost.net