Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/05f7c5-b21b-435e-8ebc-82a68118c752/1/K4Gb3AwaGq3gzkyO-1MyxTIk3gg.roa
File: K4Gb3AwaGq3gzkyO-1MyxTIk3gg.roa (raw, json)
Hash identifier: DCLfidqg0r72HrTsNGYvW13eljCKxYuCqdsXQsy2ahc=
Subject key identifier: 2B:81:9B:DC:0C:1A:1A:AD:E0:CE:4C:8E:FB:53:32:C5:32:24:DE:08
Certificate issuer: /CN=f700bb591c02778819aea1f5b8f644167b3d7c2e
Certificate serial: 0194222032AB4C4312F16B414CF2D961C279
Authority key identifier: F7:00:BB:59:1C:02:77:88:19:AE:A1:F5:B8:F6:44:16:7B:3D:7C:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9wC7WRwCd4gZrqH1uPZEFns9fC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/05f7c5-b21b-435e-8ebc-82a68118c752/1/K4Gb3AwaGq3gzkyO-1MyxTIk3gg.roa
Signing time: Wed 01 Jan 2025 13:48:42 +0000
ROA not before: Wed 01 Jan 2025 13:48:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209031
IP address blocks: 45.9.240.0/22 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:32:ab:4c:43:12:f1:6b:41:4c:f2:d9:61:c2:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f700bb591c02778819aea1f5b8f644167b3d7c2e
Validity
Not Before: Jan 1 13:48:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2b819bdc0c1a1aade0ce4c8efb5332c53224de08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d8:bc:8e:03:a5:b5:af:21:cf:1d:c4:1b:93:
1a:83:2d:fc:a9:ac:22:b8:15:b0:a2:17:64:2c:23:
7b:ee:f8:97:99:5d:72:c7:60:cc:80:30:43:5d:d5:
94:fb:96:b9:61:6c:5c:e1:1d:04:4a:73:62:70:c2:
01:c9:cb:ec:26:54:b7:ca:e9:e7:6c:ca:ee:4e:f4:
04:0c:5f:9f:83:9f:56:d5:ea:7a:9a:68:ea:9d:45:
3f:da:ee:ef:00:db:31:47:34:c3:af:6c:bd:73:f9:
ed:fb:4a:fe:8b:d1:5f:04:92:73:58:e0:9e:ec:d3:
1b:39:ae:4f:a3:66:89:b8:db:50:76:72:34:04:0d:
1b:98:00:6f:27:98:07:79:98:5d:fe:1b:79:1d:eb:
e0:c7:1e:76:21:cb:6d:b0:71:81:63:8f:eb:04:0d:
cd:fe:5a:61:ea:d9:a9:bb:2a:fe:3f:45:58:af:85:
c4:2b:1c:37:2c:29:e6:9f:82:1c:16:a4:17:ac:b5:
ae:56:37:0d:0d:3d:1b:d9:6e:f7:29:1b:cd:1c:8f:
a3:f2:eb:59:1f:e6:81:06:64:da:31:62:60:b5:a4:
90:8c:5e:ba:3a:2a:a0:50:83:e8:bb:9d:5a:91:3b:
39:d4:8d:2b:47:ed:05:d4:e3:d5:7a:f3:c0:d0:26:
b5:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:81:9B:DC:0C:1A:1A:AD:E0:CE:4C:8E:FB:53:32:C5:32:24:DE:08
X509v3 Authority Key Identifier:
keyid:F7:00:BB:59:1C:02:77:88:19:AE:A1:F5:B8:F6:44:16:7B:3D:7C:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9wC7WRwCd4gZrqH1uPZEFns9fC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/05f7c5-b21b-435e-8ebc-82a68118c752/1/K4Gb3AwaGq3gzkyO-1MyxTIk3gg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/05f7c5-b21b-435e-8ebc-82a68118c752/1/9wC7WRwCd4gZrqH1uPZEFns9fC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.240.0/22
Signature Algorithm: sha256WithRSAEncryption
68:77:9f:46:d0:ee:83:02:ea:6d:2e:06:b2:2d:6c:ac:70:0c:
f1:a6:f3:9d:b1:13:03:8f:9e:1f:92:6c:69:83:11:77:34:66:
50:27:23:6f:ec:36:73:b7:43:29:b7:92:a9:99:ec:27:1e:37:
e0:09:5d:76:5f:42:f9:b8:c0:c1:4e:a1:fc:b6:d5:a6:07:93:
7d:a6:a5:df:4c:0f:59:a0:25:34:1f:a8:d2:48:51:b7:b5:59:
c4:22:bd:f8:a5:99:1f:c5:a8:e6:c7:fb:f4:e8:82:3d:a4:be:
7b:ed:7c:ff:8c:d1:90:00:8a:c5:66:a5:ba:9c:3d:77:3b:9d:
8b:5a:c1:80:7d:be:42:bc:04:5b:24:ee:c2:6c:a3:0a:be:e1:
e1:ba:93:fb:54:8a:80:74:f0:da:57:24:52:f8:0e:9e:8e:19:
bd:90:5e:57:3d:f1:e3:1e:48:c9:da:b5:d7:76:bb:37:e2:74:
06:d8:36:42:41:47:4a:fa:5a:57:5a:96:d9:a1:01:c3:36:59:
c1:cf:6b:20:e1:57:ff:0c:1e:8d:83:1d:dc:33:1d:3c:aa:e1:
54:d5:7c:ac:7a:d3:96:26:ab:7e:dc:27:94:51:57:62:de:60:
9a:5a:b5:80:ff:36:7b:5c:e0:28:e8:99:b6:3d:b4:70:18:33:
01:86:e8:3e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQiIDKrTEMS8WtBTPLZYcJ5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3MDBiYjU5MWMwMjc3ODgxOWFlYTFmNWI4ZjY0NDE2N2Iz
ZDdjMmUwHhcNMjUwMTAxMTM0ODQyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYjgxOWJkYzBjMWExYWFkZTBjZTRjOGVmYjUzMzJjNTMyMjRkZTA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvti8jgOlta8hzx3EG5Magy38qawi
uBWwohdkLCN77viXmV1yx2DMgDBDXdWU+5a5YWxc4R0ESnNicMIBycvsJlS3yunn
bMruTvQEDF+fg59W1ep6mmjqnUU/2u7vANsxRzTDr2y9c/nt+0r+i9FfBJJzWOCe
7NMbOa5Po2aJuNtQdnI0BA0bmABvJ5gHeZhd/ht5Hevgxx52IcttsHGBY4/rBA3N
/lph6tmpuyr+P0VYr4XEKxw3LCnmn4IcFqQXrLWuVjcNDT0b2W73KRvNHI+j8utZ
H+aBBmTaMWJgtaSQjF66OiqgUIPou51akTs51I0rR+0F1OPVevPA0Ca1+QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCuBm9wMGhqt4M5MjvtTMsUyJN4IMB8GA1UdIwQY
MBaAFPcAu1kcAneIGa6h9bj2RBZ7PXwuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOXdDN1dSd0NkNGdacnFIMXVQWkVGbnM5ZkM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS8wNWY3YzUtYjIxYi00MzVlLThlYmMt
ODJhNjgxMThjNzUyLzEvSzRHYjNBd2FHcTNnemt5Ty0xTXl4VElrM2dnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS8wNWY3YzUtYjIxYi00MzVlLThlYmMtODJhNjgxMThjNzUy
LzEvOXdDN1dSd0NkNGdacnFIMXVQWkVGbnM5ZkM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLQnwMA0G
CSqGSIb3DQEBCwUAA4IBAQBod59G0O6DAuptLgayLWyscAzxpvOdsRMDj54fkmxp
gxF3NGZQJyNv7DZzt0Mpt5KpmewnHjfgCV12X0L5uMDBTqH8ttWmB5N9pqXfTA9Z
oCU0H6jSSFG3tVnEIr34pZkfxajmx/v06II9pL577Xz/jNGQAIrFZqW6nD13O52L
WsGAfb5CvARbJO7CbKMKvuHhupP7VIqAdPDaVyRS+A6ejhm9kF5XPfHjHkjJ2rXX
drs34nQG2DZCQUdK+lpXWpbZoQHDNlnBz2sg4Vf/DB6Ngx3cMx08quFU1XysetOW
Jqt+3CeUUVdi3mCaWrWA/zZ7XOAo6Jm2PbRwGDMBhug+
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:25 2025 by rpki-client on console.sobornost.net