Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/0f50bb-1fe1-4c83-8c88-e35d2d5f00f8/1/a0IOHkR8Hy4G4S5yuBNMKITBrOY.roa
File: a0IOHkR8Hy4G4S5yuBNMKITBrOY.roa (raw, json)
Hash identifier: 1vK3mpE9sJgd81KLmucTH/3OWCFME4WKb3CLP0pv4Go=
Subject key identifier: 6B:42:0E:1E:44:7C:1F:2E:06:E1:2E:72:B8:13:4C:28:84:C1:AC:E6
Certificate issuer: /CN=d98ac0b1066d0defcb1695643dcbaa0739975ca8
Certificate serial: 019427B63250E1F1A62931A9068643034EB6
Authority key identifier: D9:8A:C0:B1:06:6D:0D:EF:CB:16:95:64:3D:CB:AA:07:39:97:5C:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2YrAsQZtDe_LFpVkPcuqBzmXXKg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/0f50bb-1fe1-4c83-8c88-e35d2d5f00f8/1/a0IOHkR8Hy4G4S5yuBNMKITBrOY.roa
Signing time: Thu 02 Jan 2025 15:50:39 +0000
ROA not before: Thu 02 Jan 2025 15:50:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207725
IP address blocks: 45.137.232.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:32:50:e1:f1:a6:29:31:a9:06:86:43:03:4e:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d98ac0b1066d0defcb1695643dcbaa0739975ca8
Validity
Not Before: Jan 2 15:50:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6b420e1e447c1f2e06e12e72b8134c2884c1ace6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:8e:b3:3d:5c:af:fa:7b:0c:1e:6a:74:c5:a2:
65:38:e3:c9:b4:65:42:d7:21:42:fa:f1:2e:12:13:
5e:bf:53:23:68:28:92:90:fa:5f:90:53:bd:0b:3e:
37:33:9d:1b:19:ce:45:a3:b0:8b:f4:0f:46:fb:ba:
60:dc:15:3a:21:05:42:15:b5:0e:fd:aa:5b:3c:0c:
27:92:df:fc:33:77:23:90:3f:68:2c:0d:2b:7d:81:
0f:e7:d2:9c:31:58:36:5b:07:e1:e9:6d:a5:a5:9e:
fd:97:71:a2:0e:dd:25:aa:b1:01:dc:3a:7e:63:3f:
26:33:c6:cc:4f:b1:57:38:08:db:b6:81:81:f3:37:
bf:9d:5d:cc:ed:c3:1a:44:52:bc:a3:a1:62:fe:0c:
0e:f4:d3:3d:89:dc:43:ef:be:f3:8d:91:4e:ad:df:
12:77:b0:14:a4:f9:03:42:93:06:62:71:df:4a:d1:
58:1c:ea:f4:be:0c:c8:9a:80:07:8d:8e:93:2d:72:
c2:1a:4b:77:d3:21:d0:ae:f4:9c:31:51:2d:a9:36:
71:9e:2c:9b:82:f4:8e:dc:f2:68:80:23:d8:ff:06:
30:d4:f2:e3:af:c3:2e:fc:27:e0:f9:27:4b:89:88:
69:4a:c2:fe:15:d4:d9:57:83:1d:58:85:5e:2d:14:
b1:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:42:0E:1E:44:7C:1F:2E:06:E1:2E:72:B8:13:4C:28:84:C1:AC:E6
X509v3 Authority Key Identifier:
keyid:D9:8A:C0:B1:06:6D:0D:EF:CB:16:95:64:3D:CB:AA:07:39:97:5C:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2YrAsQZtDe_LFpVkPcuqBzmXXKg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/0f50bb-1fe1-4c83-8c88-e35d2d5f00f8/1/a0IOHkR8Hy4G4S5yuBNMKITBrOY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/0f50bb-1fe1-4c83-8c88-e35d2d5f00f8/1/2YrAsQZtDe_LFpVkPcuqBzmXXKg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.137.232.0/22
Signature Algorithm: sha256WithRSAEncryption
50:11:22:6f:67:75:d3:0b:1b:4f:9a:74:4a:1b:1f:c6:76:b3:
2b:2f:89:21:8a:6f:de:58:d1:00:6a:bb:bd:65:7b:5e:a9:ea:
ce:87:93:59:85:c2:00:9c:42:2f:2d:ab:7e:9b:cd:52:73:dd:
81:12:06:5e:d9:74:03:b8:1f:a8:a9:f4:d7:88:6e:89:19:ec:
39:b9:02:88:64:03:95:65:f9:03:48:17:61:59:e2:ca:66:78:
b3:17:ea:ba:73:34:68:f3:01:f5:4d:60:15:73:e8:bd:9e:fd:
21:f8:b9:21:dd:07:61:bc:bf:45:da:f6:12:fa:37:50:53:a6:
af:70:76:ff:ed:51:f1:e5:02:6a:a4:5c:8f:cc:eb:47:17:34:
2c:0b:2b:c9:af:26:2d:0f:46:d8:29:7b:cb:4d:c2:b6:33:df:
a6:4a:36:71:76:6b:a6:18:cc:d3:ed:a5:41:f9:00:0f:41:13:
cf:24:85:3a:fc:52:e5:f4:ab:7c:31:d8:99:c2:e4:6a:da:11:
cc:7c:ee:10:a7:77:38:f4:06:ef:29:cf:bf:9a:f3:73:f1:73:
13:d3:8e:23:96:c4:39:33:94:7e:1c:8a:f9:de:c3:bf:7b:13:
59:51:30:3a:47:bc:30:ae:d7:5d:21:52:09:86:4b:5b:58:73:
e4:c2:c1:49
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQntjJQ4fGmKTGpBoZDA062MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5OGFjMGIxMDY2ZDBkZWZjYjE2OTU2NDNkY2JhYTA3Mzk5
NzVjYTgwHhcNMjUwMTAyMTU1MDM5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YjQyMGUxZTQ0N2MxZjJlMDZlMTJlNzJiODEzNGMyODg0YzFhY2U2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyY6zPVyv+nsMHmp0xaJlOOPJtGVC
1yFC+vEuEhNev1MjaCiSkPpfkFO9Cz43M50bGc5Fo7CL9A9G+7pg3BU6IQVCFbUO
/apbPAwnkt/8M3cjkD9oLA0rfYEP59KcMVg2Wwfh6W2lpZ79l3GiDt0lqrEB3Dp+
Yz8mM8bMT7FXOAjbtoGB8ze/nV3M7cMaRFK8o6Fi/gwO9NM9idxD777zjZFOrd8S
d7AUpPkDQpMGYnHfStFYHOr0vgzImoAHjY6TLXLCGkt30yHQrvScMVEtqTZxniyb
gvSO3PJogCPY/wYw1PLjr8Mu/Cfg+SdLiYhpSsL+FdTZV4MdWIVeLRSxnQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGtCDh5EfB8uBuEucrgTTCiEwazmMB8GA1UdIwQY
MBaAFNmKwLEGbQ3vyxaVZD3Lqgc5l1yoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMllyQXNRWnREZV9MRnBWa1BjdXFCem1YWEtnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS8wZjUwYmItMWZlMS00YzgzLThjODgt
ZTM1ZDJkNWYwMGY4LzEvYTBJT0hrUjhIeTRHNFM1eXVCTk1LSVRCck9ZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS8wZjUwYmItMWZlMS00YzgzLThjODgtZTM1ZDJkNWYwMGY4
LzEvMllyQXNRWnREZV9MRnBWa1BjdXFCem1YWEtnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLYnoMA0G
CSqGSIb3DQEBCwUAA4IBAQBQESJvZ3XTCxtPmnRKGx/GdrMrL4khim/eWNEAaru9
ZXteqerOh5NZhcIAnEIvLat+m81Sc92BEgZe2XQDuB+oqfTXiG6JGew5uQKIZAOV
ZfkDSBdhWeLKZnizF+q6czRo8wH1TWAVc+i9nv0h+Lkh3QdhvL9F2vYS+jdQU6av
cHb/7VHx5QJqpFyPzOtHFzQsCyvJryYtD0bYKXvLTcK2M9+mSjZxdmumGMzT7aVB
+QAPQRPPJIU6/FLl9Kt8MdiZwuRq2hHMfO4Qp3c49AbvKc+/mvNz8XMT044jlsQ5
M5R+HIr53sO/exNZUTA6R7wwrtddIVIJhktbWHPkwsFJ
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:31 2025 by rpki-client on console.sobornost.net