Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/ee2d10-ebb0-41ba-9981-3f06829e0f5c/1/HPg8Ft7vHOJTKGGcMCV_EbNyeNU.roa
File: HPg8Ft7vHOJTKGGcMCV_EbNyeNU.roa (raw, json)
Hash identifier: 4TmjFkVE8RpewKQV2NBEk3fhlkdiSYaPUvJ9IIqxwAI=
Subject key identifier: 1C:F8:3C:16:DE:EF:1C:E2:53:28:61:9C:30:25:7F:11:B3:72:78:D5
Certificate issuer: /CN=3490424c688ff519fb9e204d8f1588553455b151
Certificate serial: 019422FB149EEE8A5B924CAB746ACAF3A51E
Authority key identifier: 34:90:42:4C:68:8F:F5:19:FB:9E:20:4D:8F:15:88:55:34:55:B1:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJBCTGiP9Rn7niBNjxWIVTRVsVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/ee2d10-ebb0-41ba-9981-3f06829e0f5c/1/HPg8Ft7vHOJTKGGcMCV_EbNyeNU.roa
Signing time: Wed 01 Jan 2025 17:47:47 +0000
ROA not before: Wed 01 Jan 2025 17:47:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212256
IP address blocks: 45.132.212.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:14:9e:ee:8a:5b:92:4c:ab:74:6a:ca:f3:a5:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3490424c688ff519fb9e204d8f1588553455b151
Validity
Not Before: Jan 1 17:47:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1cf83c16deef1ce25328619c30257f11b37278d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ea:c0:b5:5e:71:94:58:63:bb:68:17:a9:18:
7d:48:9d:f8:ac:49:a7:cc:55:93:fe:cb:d7:c4:36:
b5:40:82:7f:0e:eb:87:a5:c3:1f:08:88:72:e5:65:
f9:80:d1:ef:89:37:35:b9:db:cd:6f:37:f8:2a:f5:
72:de:e2:ec:f6:af:8d:a6:20:8f:a6:91:b8:c2:28:
05:b7:eb:91:d9:24:b1:06:e8:c8:7d:72:24:c8:97:
e2:52:53:49:46:ef:36:d7:cb:1a:9b:49:27:86:99:
55:60:a9:68:2f:40:c8:c4:50:38:14:42:31:21:ad:
e0:96:7e:d3:e7:5e:fe:4d:7e:07:8b:23:59:a4:e5:
a6:f2:19:9b:99:e9:62:db:e4:16:8f:fe:cc:66:f0:
56:a8:32:e4:2c:06:c5:0c:e2:40:2d:09:2d:87:82:
53:5a:74:db:e4:52:7f:91:68:85:f3:84:f5:04:f0:
57:e8:f7:7e:4f:04:f0:7b:e9:b1:ae:70:f1:1d:05:
c2:40:90:24:a0:73:9d:7a:a6:7f:42:6c:4f:5c:07:
17:ff:06:8b:5c:6f:0b:19:ec:d2:b3:34:52:5b:bf:
da:b2:16:58:7a:35:f8:9d:6d:bf:92:85:59:44:d6:
04:95:b8:66:17:dd:cc:c8:b9:48:8b:ba:a8:9b:2e:
72:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:F8:3C:16:DE:EF:1C:E2:53:28:61:9C:30:25:7F:11:B3:72:78:D5
X509v3 Authority Key Identifier:
keyid:34:90:42:4C:68:8F:F5:19:FB:9E:20:4D:8F:15:88:55:34:55:B1:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJBCTGiP9Rn7niBNjxWIVTRVsVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/ee2d10-ebb0-41ba-9981-3f06829e0f5c/1/HPg8Ft7vHOJTKGGcMCV_EbNyeNU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/ee2d10-ebb0-41ba-9981-3f06829e0f5c/1/NJBCTGiP9Rn7niBNjxWIVTRVsVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.212.0/22
Signature Algorithm: sha256WithRSAEncryption
87:20:06:f2:01:8d:22:6b:ce:40:69:10:4d:3f:6a:55:5c:a4:
c9:dd:95:48:d7:e1:7f:07:b4:3b:44:17:a9:a0:0f:52:01:2c:
86:ba:c0:4a:ca:36:01:a1:3c:c0:61:46:51:72:cb:a8:3c:37:
68:ec:71:21:d0:31:e8:26:ae:78:16:5f:6d:57:cb:28:f6:9a:
0f:31:f7:ba:09:45:61:e0:5b:62:a6:9f:56:8c:7a:6b:a0:10:
90:a4:2f:26:3c:d6:d1:d8:c0:e2:26:73:56:e0:1b:23:8d:8d:
f1:77:37:c6:ad:f4:0b:65:5e:83:a9:f2:ce:7b:c0:41:86:e2:
be:c8:02:07:6e:dc:aa:67:48:9f:0a:af:72:5d:08:a5:a8:4f:
1c:08:3a:b3:7b:c0:1f:29:fe:20:a1:7a:74:38:10:bc:0d:e3:
39:a4:9e:e3:5f:73:74:f4:0b:72:73:ae:54:ed:a5:dd:32:2d:
0c:62:a3:81:67:00:2c:e8:9a:06:c1:52:ad:d3:c4:61:42:c2:
06:fb:af:2a:70:cf:ed:d8:b8:94:2c:4b:66:f1:a1:d5:e7:e7:
d0:1c:73:01:6a:49:3c:83:7c:3b:2a:11:c9:62:d4:57:62:85:
ab:fb:45:0f:ef:b1:7c:bb:bf:44:bd:17:15:ba:6c:3b:6f:6c:
9d:6d:94:70
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQi+xSe7opbkkyrdGrK86UeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0OTA0MjRjNjg4ZmY1MTlmYjllMjA0ZDhmMTU4ODU1MzQ1
NWIxNTEwHhcNMjUwMTAxMTc0NzQ3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxY2Y4M2MxNmRlZWYxY2UyNTMyODYxOWMzMDI1N2YxMWIzNzI3OGQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvOrAtV5xlFhju2gXqRh9SJ34rEmn
zFWT/svXxDa1QIJ/DuuHpcMfCIhy5WX5gNHviTc1udvNbzf4KvVy3uLs9q+NpiCP
ppG4wigFt+uR2SSxBujIfXIkyJfiUlNJRu8218sam0knhplVYKloL0DIxFA4FEIx
Ia3gln7T517+TX4HiyNZpOWm8hmbmeli2+QWj/7MZvBWqDLkLAbFDOJALQkth4JT
WnTb5FJ/kWiF84T1BPBX6Pd+TwTwe+mxrnDxHQXCQJAkoHOdeqZ/QmxPXAcX/waL
XG8LGezSszRSW7/ashZYejX4nW2/koVZRNYElbhmF93MyLlIi7qomy5yRQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBz4PBbe7xziUyhhnDAlfxGzcnjVMB8GA1UdIwQY
MBaAFDSQQkxoj/UZ+54gTY8ViFU0VbFRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTkpCQ1RHaVA5Um43bmlCTmp4V0lWVFJWc1ZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS9lZTJkMTAtZWJiMC00MWJhLTk5ODEt
M2YwNjgyOWUwZjVjLzEvSFBnOEZ0N3ZIT0pUS0dHY01DVl9FYk55ZU5VLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MS9lZTJkMTAtZWJiMC00MWJhLTk5ODEtM2YwNjgyOWUwZjVj
LzEvTkpCQ1RHaVA5Um43bmlCTmp4V0lWVFJWc1ZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLYTUMA0G
CSqGSIb3DQEBCwUAA4IBAQCHIAbyAY0ia85AaRBNP2pVXKTJ3ZVI1+F/B7Q7RBep
oA9SASyGusBKyjYBoTzAYUZRcsuoPDdo7HEh0DHoJq54Fl9tV8so9poPMfe6CUVh
4Ftipp9WjHproBCQpC8mPNbR2MDiJnNW4BsjjY3xdzfGrfQLZV6DqfLOe8BBhuK+
yAIHbtyqZ0ifCq9yXQilqE8cCDqze8AfKf4goXp0OBC8DeM5pJ7jX3N09Atyc65U
7aXdMi0MYqOBZwAs6JoGwVKt08RhQsIG+68qcM/t2LiULEtm8aHV5+fQHHMBakk8
g3w7KhHJYtRXYoWr+0UP77F8u79EvRcVumw7b2ydbZRw
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:54 2025 by rpki-client on console.sobornost.net