Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/071eeb-154a-45f0-8d7b-63873e884413/1/SjIkpyQ7a466hqkgdpcQ1k2IFnM.roa
File: SjIkpyQ7a466hqkgdpcQ1k2IFnM.roa (raw, json)
Hash identifier: Ka4bOW3Lwex81O0FRlMpa0sWUNlOOrrrXHeIztmbIBM=
Subject key identifier: 4A:32:24:A7:24:3B:6B:8E:BA:86:A9:20:76:97:10:D6:4D:88:16:73
Certificate issuer: /CN=b0758e88c20702131b917a4dfdb2374bc3655587
Certificate serial: 019425FC920DBB7B663E2FCCCD269A8A17D9
Authority key identifier: B0:75:8E:88:C2:07:02:13:1B:91:7A:4D:FD:B2:37:4B:C3:65:55:87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sHWOiMIHAhMbkXpN_bI3S8NlVYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/071eeb-154a-45f0-8d7b-63873e884413/1/SjIkpyQ7a466hqkgdpcQ1k2IFnM.roa
Signing time: Thu 02 Jan 2025 07:48:16 +0000
ROA not before: Thu 02 Jan 2025 07:48:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200793
IP address blocks: 45.149.200.0/22 maxlen: 22
45.149.200.0/23 maxlen: 23
45.149.200.0/24 maxlen: 24
45.149.201.0/24 maxlen: 24
45.149.202.0/24 maxlen: 24
45.149.203.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:92:0d:bb:7b:66:3e:2f:cc:cd:26:9a:8a:17:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0758e88c20702131b917a4dfdb2374bc3655587
Validity
Not Before: Jan 2 07:48:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4a3224a7243b6b8eba86a920769710d64d881673
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:24:4b:88:71:bc:c4:9a:8d:77:c3:a3:22:a1:
2b:5a:62:a7:55:84:bf:b2:02:d2:83:80:7b:fc:b5:
80:f3:07:b0:3f:65:f7:99:97:97:01:65:db:f4:61:
3b:6f:8a:fe:79:ab:67:89:f3:6f:c3:66:28:14:39:
7c:85:fe:b5:6d:c9:e1:b2:89:3a:a0:52:4e:09:5d:
ff:f3:53:69:2c:bc:36:42:6d:3f:a4:f0:cb:f0:f0:
a9:59:21:3c:06:00:78:59:fa:8f:47:f5:24:10:5d:
a2:5a:f9:72:d7:6b:2b:33:51:47:50:97:af:76:8b:
75:1c:3f:a3:ed:57:16:fc:40:aa:9b:47:70:6f:1a:
11:b2:49:92:7b:bc:d3:aa:16:b7:5a:00:77:d0:76:
a1:69:c6:21:83:05:5a:ea:cb:4c:f7:9e:21:84:4b:
1a:53:89:a9:1b:be:8f:74:ea:f6:4c:82:eb:3c:f4:
af:2d:a0:27:25:b7:b1:18:06:a5:f0:6f:7f:32:c0:
ed:47:e7:5d:cd:f6:0d:fe:99:1a:f1:91:58:f9:2c:
45:d5:1d:02:0d:76:29:5e:96:f9:4a:79:9b:eb:7e:
82:6d:48:8b:26:86:ea:1f:6e:57:88:e6:b6:0e:74:
b6:39:0e:f3:bd:63:00:fc:1d:57:45:cf:64:3f:22:
3c:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:32:24:A7:24:3B:6B:8E:BA:86:A9:20:76:97:10:D6:4D:88:16:73
X509v3 Authority Key Identifier:
keyid:B0:75:8E:88:C2:07:02:13:1B:91:7A:4D:FD:B2:37:4B:C3:65:55:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sHWOiMIHAhMbkXpN_bI3S8NlVYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/071eeb-154a-45f0-8d7b-63873e884413/1/SjIkpyQ7a466hqkgdpcQ1k2IFnM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/071eeb-154a-45f0-8d7b-63873e884413/1/sHWOiMIHAhMbkXpN_bI3S8NlVYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.200.0/22
Signature Algorithm: sha256WithRSAEncryption
13:e0:31:13:45:b4:01:9e:71:74:a5:cf:3c:d8:a5:f5:fd:ed:
02:de:64:c6:64:7a:c5:02:a2:62:15:84:3e:bc:75:66:50:2f:
ca:24:4a:98:df:96:1f:e8:e1:dd:ae:b7:aa:b1:60:08:ab:19:
cf:67:9a:70:07:4a:3c:17:e1:79:61:34:fa:50:d1:2e:62:14:
9a:a3:4a:78:96:46:82:5a:7e:aa:86:f6:6b:81:cd:20:03:0c:
ca:88:43:19:54:86:74:23:89:ac:56:3d:45:a7:d8:fa:ed:83:
cc:d5:89:0d:27:97:c6:50:b2:92:dc:fa:f3:78:6d:9f:46:02:
da:ee:28:02:c9:fe:a2:95:df:48:d1:85:44:e7:fc:3c:a2:d7:
69:32:c1:01:e0:19:fa:27:f6:a3:eb:87:3e:32:98:7f:74:5d:
d9:69:2c:6e:f8:bf:3c:9b:b2:b5:66:db:58:db:f7:89:ed:ac:
d1:6d:0e:c2:ed:77:31:1e:8b:aa:a1:65:41:8f:ac:9b:23:af:
67:53:b4:08:90:52:04:2e:03:cd:22:f6:04:33:be:e1:7e:13:
e0:e0:65:19:97:8c:24:95:ef:e7:9f:f5:d0:8c:fa:28:b5:53:
ce:b8:cb:54:28:ea:69:3e:be:bc:ba:77:7e:51:7a:2b:cc:02:
82:0c:07:a9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQl/JINu3tmPi/MzSaaihfZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwNzU4ZTg4YzIwNzAyMTMxYjkxN2E0ZGZkYjIzNzRiYzM2
NTU1ODcwHhcNMjUwMTAyMDc0ODE2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YTMyMjRhNzI0M2I2YjhlYmE4NmE5MjA3Njk3MTBkNjRkODgxNjczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlSRLiHG8xJqNd8OjIqErWmKnVYS/
sgLSg4B7/LWA8wewP2X3mZeXAWXb9GE7b4r+eatnifNvw2YoFDl8hf61bcnhsok6
oFJOCV3/81NpLLw2Qm0/pPDL8PCpWSE8BgB4WfqPR/UkEF2iWvly12srM1FHUJev
dot1HD+j7VcW/ECqm0dwbxoRskmSe7zTqha3WgB30HahacYhgwVa6stM954hhEsa
U4mpG76PdOr2TILrPPSvLaAnJbexGAal8G9/MsDtR+ddzfYN/pka8ZFY+SxF1R0C
DXYpXpb5Snmb636CbUiLJobqH25XiOa2DnS2OQ7zvWMA/B1XRc9kPyI8JwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEoyJKckO2uOuoapIHaXENZNiBZzMB8GA1UdIwQY
MBaAFLB1jojCBwITG5F6Tf2yN0vDZVWHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc0hXT2lNSUhBaE1ia1hwTl9iSTNTOE5sVlljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My8wNzFlZWItMTU0YS00NWYwLThkN2It
NjM4NzNlODg0NDEzLzEvU2pJa3B5UTdhNDY2aHFrZ2RwY1ExazJJRm5NLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My8wNzFlZWItMTU0YS00NWYwLThkN2ItNjM4NzNlODg0NDEz
LzEvc0hXT2lNSUhBaE1ia1hwTl9iSTNTOE5sVlljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLZXIMA0G
CSqGSIb3DQEBCwUAA4IBAQAT4DETRbQBnnF0pc882KX1/e0C3mTGZHrFAqJiFYQ+
vHVmUC/KJEqY35Yf6OHdrreqsWAIqxnPZ5pwB0o8F+F5YTT6UNEuYhSao0p4lkaC
Wn6qhvZrgc0gAwzKiEMZVIZ0I4msVj1Fp9j67YPM1YkNJ5fGULKS3PrzeG2fRgLa
7igCyf6ild9I0YVE5/w8otdpMsEB4Bn6J/aj64c+Mph/dF3ZaSxu+L88m7K1ZttY
2/eJ7azRbQ7C7XcxHouqoWVBj6ybI69nU7QIkFIELgPNIvYEM77hfhPg4GUZl4wk
le/nn/XQjPootVPOuMtUKOppPr68und+UXorzAKCDAep
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:11 2025 by rpki-client on console.sobornost.net