Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/10ebec-2784-4daa-8df7-be4d5d09d710/1/IPgK_RAdsHuRvKKv6Yp_JI973ng.roa
File: IPgK_RAdsHuRvKKv6Yp_JI973ng.roa (raw, json)
Hash identifier: tX54SYM7m1FlAg3IfdN7mYvGyQfWousk3Km0i1Rx1t4=
Subject key identifier: 20:F8:0A:FD:10:1D:B0:7B:91:BC:A2:AF:E9:8A:7F:24:8F:7B:DE:78
Certificate issuer: /CN=f2a253cdf507a03e1f579d202d8df11d68f5c3d7
Certificate serial: 019424B3E9B4BC3F1FD1B9B44AD07D20E1DD
Authority key identifier: F2:A2:53:CD:F5:07:A0:3E:1F:57:9D:20:2D:8D:F1:1D:68:F5:C3:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8qJTzfUHoD4fV50gLY3xHWj1w9c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/10ebec-2784-4daa-8df7-be4d5d09d710/1/IPgK_RAdsHuRvKKv6Yp_JI973ng.roa
Signing time: Thu 02 Jan 2025 01:49:18 +0000
ROA not before: Thu 02 Jan 2025 01:49:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212582
IP address blocks: 45.88.228.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:e9:b4:bc:3f:1f:d1:b9:b4:4a:d0:7d:20:e1:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2a253cdf507a03e1f579d202d8df11d68f5c3d7
Validity
Not Before: Jan 2 01:49:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=20f80afd101db07b91bca2afe98a7f248f7bde78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:08:19:36:17:9c:2b:d6:b5:0c:18:c0:0e:75:
67:64:34:80:80:1f:65:be:dd:dd:2b:5e:be:0b:c5:
c4:a9:c1:b3:52:a8:23:f8:e9:94:c2:5a:74:3e:50:
87:17:35:24:8a:f3:b1:e1:29:5c:d5:ff:88:65:b0:
76:5c:3b:4d:08:f2:83:15:1c:4d:a6:6c:08:59:ca:
ef:ca:c8:af:87:24:71:29:b2:2e:8a:0f:84:12:23:
65:16:e0:a7:39:0a:19:41:bd:21:18:a0:4a:a8:9a:
62:5b:ba:68:7f:08:59:08:88:18:35:0c:3d:80:12:
f7:fe:b0:d1:09:23:50:d1:56:92:11:4d:6f:9e:fa:
b6:aa:ca:af:67:09:8d:cb:70:91:01:40:24:40:88:
99:6a:a7:bb:bc:eb:71:5c:b3:86:74:59:dc:36:ea:
ce:8a:e3:41:c6:a7:0f:ab:80:a4:99:3c:d0:e2:8b:
52:37:bb:56:71:01:74:a2:b6:b2:3b:8a:06:26:fa:
30:82:50:36:aa:cb:a5:82:44:c6:44:a9:00:75:33:
cb:e5:97:cb:16:ed:34:a3:60:d8:0d:10:90:27:9e:
69:65:bf:6b:02:30:df:2a:75:56:d0:23:36:be:36:
5f:e5:dd:8e:21:ba:60:b0:86:02:df:5a:e2:6b:12:
78:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:F8:0A:FD:10:1D:B0:7B:91:BC:A2:AF:E9:8A:7F:24:8F:7B:DE:78
X509v3 Authority Key Identifier:
keyid:F2:A2:53:CD:F5:07:A0:3E:1F:57:9D:20:2D:8D:F1:1D:68:F5:C3:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8qJTzfUHoD4fV50gLY3xHWj1w9c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/10ebec-2784-4daa-8df7-be4d5d09d710/1/IPgK_RAdsHuRvKKv6Yp_JI973ng.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/10ebec-2784-4daa-8df7-be4d5d09d710/1/8qJTzfUHoD4fV50gLY3xHWj1w9c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.228.0/22
Signature Algorithm: sha256WithRSAEncryption
30:e3:3e:4a:00:aa:0f:88:8c:be:00:d1:30:3e:d9:98:bf:e7:
b2:2c:9a:93:a8:78:21:71:a4:62:31:6f:d9:60:03:91:71:a8:
35:36:29:f8:44:2e:b0:e3:7e:bc:cd:53:61:6b:8f:87:6c:9c:
db:ff:da:5c:0f:7c:72:ed:9e:92:69:84:75:07:a1:24:dd:e9:
44:05:e2:6f:80:0f:9d:7a:16:ea:ce:fe:28:67:aa:53:79:c1:
4e:29:a7:e0:e8:73:d5:00:9d:8a:b1:67:0c:f3:a7:e1:b1:9a:
93:cc:37:87:d4:76:28:1d:b8:60:a4:e0:b2:f3:e7:96:25:4b:
84:67:32:13:13:98:58:6d:c0:9c:7c:fd:ee:7e:66:b6:84:f4:
96:e5:e9:b2:b5:04:58:7e:df:a5:c3:66:c1:70:15:ce:21:8c:
a8:18:72:dd:b5:d1:7c:56:eb:6c:a8:8e:0c:c1:72:f1:a0:2e:
7c:bf:35:39:8f:88:cc:52:4c:1f:33:77:8c:e1:b2:e4:c8:c2:
4e:c0:61:b7:ad:ef:c0:1b:c9:e7:b4:09:22:c2:03:4f:b6:f9:
e4:e9:d0:63:f2:9f:6c:3a:80:20:57:77:60:26:b2:54:e4:16:
20:65:96:72:b5:7a:77:d2:4f:39:83:a1:04:d6:96:bc:ef:7d:
d9:d5:d2:0f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQks+m0vD8f0bm0StB9IOHdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyYTI1M2NkZjUwN2EwM2UxZjU3OWQyMDJkOGRmMTFkNjhm
NWMzZDcwHhcNMjUwMTAyMDE0OTE4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMGY4MGFmZDEwMWRiMDdiOTFiY2EyYWZlOThhN2YyNDhmN2JkZTc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1wgZNhecK9a1DBjADnVnZDSAgB9l
vt3dK16+C8XEqcGzUqgj+OmUwlp0PlCHFzUkivOx4Slc1f+IZbB2XDtNCPKDFRxN
pmwIWcrvysivhyRxKbIuig+EEiNlFuCnOQoZQb0hGKBKqJpiW7pofwhZCIgYNQw9
gBL3/rDRCSNQ0VaSEU1vnvq2qsqvZwmNy3CRAUAkQIiZaqe7vOtxXLOGdFncNurO
iuNBxqcPq4CkmTzQ4otSN7tWcQF0orayO4oGJvowglA2qsulgkTGRKkAdTPL5ZfL
Fu00o2DYDRCQJ55pZb9rAjDfKnVW0CM2vjZf5d2OIbpgsIYC31riaxJ4kwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCD4Cv0QHbB7kbyir+mKfySPe954MB8GA1UdIwQY
MBaAFPKiU831B6A+H1edIC2N8R1o9cPXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOHFKVHpmVUhvRDRmVjUwZ0xZM3hIV2oxdzljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS8xMGViZWMtMjc4NC00ZGFhLThkZjct
YmU0ZDVkMDlkNzEwLzEvSVBnS19SQWRzSHVSdktLdjZZcF9KSTk3M25nLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS8xMGViZWMtMjc4NC00ZGFhLThkZjctYmU0ZDVkMDlkNzEw
LzEvOHFKVHpmVUhvRDRmVjUwZ0xZM3hIV2oxdzljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLVjkMA0G
CSqGSIb3DQEBCwUAA4IBAQAw4z5KAKoPiIy+ANEwPtmYv+eyLJqTqHghcaRiMW/Z
YAORcag1Nin4RC6w4368zVNha4+HbJzb/9pcD3xy7Z6SaYR1B6Ek3elEBeJvgA+d
ehbqzv4oZ6pTecFOKafg6HPVAJ2KsWcM86fhsZqTzDeH1HYoHbhgpOCy8+eWJUuE
ZzITE5hYbcCcfP3ufma2hPSW5emytQRYft+lw2bBcBXOIYyoGHLdtdF8VutsqI4M
wXLxoC58vzU5j4jMUkwfM3eM4bLkyMJOwGG3re/AG8nntAkiwgNPtvnk6dBj8p9s
OoAgV3dgJrJU5BYgZZZytXp30k85g6EE1pa8733Z1dIP
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:09 2025 by rpki-client on console.sobornost.net