Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/af4c09-c8c2-4893-a10b-0cd8a69729b7/1/SAFVU4u3ZghJZx_5m4czMw40jGU.roa
File: SAFVU4u3ZghJZx_5m4czMw40jGU.roa (raw, json)
Hash identifier: IfuH3LW2qy9zPqjM+owlxI7x2K9zgNWJkR5lYS/TNog=
Subject key identifier: 48:01:55:53:8B:B7:66:08:49:67:1F:F9:9B:87:33:33:0E:34:8C:65
Certificate issuer: /CN=29493731efccc74ad5c273874b9360f7aa689465
Certificate serial: 019421441B067D5D37AA6B9F9E0EFB016323
Authority key identifier: 29:49:37:31:EF:CC:C7:4A:D5:C2:73:87:4B:93:60:F7:AA:68:94:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KUk3Me_Mx0rVwnOHS5Ng96polGU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/af4c09-c8c2-4893-a10b-0cd8a69729b7/1/SAFVU4u3ZghJZx_5m4czMw40jGU.roa
Signing time: Wed 01 Jan 2025 09:48:19 +0000
ROA not before: Wed 01 Jan 2025 09:48:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31638
IP address blocks: 45.141.231.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:1b:06:7d:5d:37:aa:6b:9f:9e:0e:fb:01:63:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29493731efccc74ad5c273874b9360f7aa689465
Validity
Not Before: Jan 1 09:48:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=480155538bb7660849671ff99b8733330e348c65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:58:2a:cb:a8:46:d0:7b:82:f5:e9:89:0a:04:
c5:cb:95:3f:fc:70:86:8d:ba:e7:02:3a:5e:e7:d2:
15:6c:d5:d9:67:ad:5e:f0:d0:db:9a:4b:3f:70:c3:
44:5e:b7:9b:6a:56:36:9b:80:6b:76:05:e6:05:f7:
6f:a3:49:4d:f4:3b:10:a5:a4:8f:4e:e3:c1:25:cc:
1a:b0:68:0c:45:c8:93:dd:e5:6c:f7:ea:e8:fc:a7:
8d:61:70:0c:8f:5b:90:a7:20:f7:18:dd:62:31:82:
22:45:8c:db:c0:60:43:65:d4:cd:c4:a7:80:02:dc:
5c:1a:00:e2:7e:da:9b:4a:7d:ca:f9:e6:9b:b0:10:
8a:bb:40:2f:b6:c6:ec:3e:12:18:b4:80:4d:44:06:
ae:d7:b9:09:1f:4b:45:aa:91:6c:e6:18:11:21:43:
ed:46:1c:e9:32:26:1c:4c:46:8a:9b:78:92:49:c1:
cf:02:b2:df:8d:ec:e7:99:29:90:4a:af:d0:cd:c2:
c6:03:25:f1:e5:13:81:e3:16:6e:cc:e8:6d:0c:10:
a6:68:82:bf:59:42:41:c6:36:a1:34:c9:68:59:4c:
a8:3f:16:ac:9f:c7:de:44:30:fa:2c:66:23:4b:fc:
ca:fc:ab:9f:2c:61:29:f2:17:38:0f:fd:2a:f8:28:
9a:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:01:55:53:8B:B7:66:08:49:67:1F:F9:9B:87:33:33:0E:34:8C:65
X509v3 Authority Key Identifier:
keyid:29:49:37:31:EF:CC:C7:4A:D5:C2:73:87:4B:93:60:F7:AA:68:94:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KUk3Me_Mx0rVwnOHS5Ng96polGU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/af4c09-c8c2-4893-a10b-0cd8a69729b7/1/SAFVU4u3ZghJZx_5m4czMw40jGU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/af4c09-c8c2-4893-a10b-0cd8a69729b7/1/KUk3Me_Mx0rVwnOHS5Ng96polGU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.231.0/24
Signature Algorithm: sha256WithRSAEncryption
be:f4:25:1a:45:81:4d:49:a5:86:18:89:a8:30:c6:c3:e8:5f:
22:86:a1:b4:ff:d3:4b:0d:59:5b:1a:d9:93:c5:3a:75:83:9d:
e1:36:4b:5e:24:43:da:76:8e:11:95:1a:f2:70:82:2e:f1:4d:
2f:1a:86:79:2d:13:2e:51:c5:06:5e:9a:d8:62:2c:6f:2e:48:
c6:4e:4b:39:16:7b:11:b3:23:7a:b2:f4:73:eb:6b:be:3d:6b:
eb:c2:63:d8:47:80:ea:11:2e:40:93:f2:7c:ac:97:bc:10:34:
fd:45:7a:72:e9:e6:32:b1:50:87:10:c4:2a:b0:1e:cc:e9:76:
66:a6:65:49:af:a1:44:f9:a0:a8:05:52:9b:a5:4e:d8:25:8b:
32:14:00:59:d5:6a:54:01:57:32:9b:4f:6f:50:db:35:f2:8b:
59:40:6e:38:3d:ed:06:58:37:bf:46:72:e0:be:28:2a:38:34:
9f:15:00:8e:8b:7f:63:44:5f:0a:2b:db:c1:ac:03:e5:16:64:
94:b7:7f:56:74:63:dc:4e:59:77:0c:ee:a3:c3:c7:a3:30:05:
1c:65:33:37:7e:f8:8d:51:ce:83:37:df:63:6b:8c:2c:b8:a7:
a5:3d:41:f4:a0:f9:11:12:e3:bb:58:42:80:92:fb:5a:5b:a2:
f4:72:a6:a9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQhRBsGfV03qmufng77AWMjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5NDkzNzMxZWZjY2M3NGFkNWMyNzM4NzRiOTM2MGY3YWE2
ODk0NjUwHhcNMjUwMTAxMDk0ODE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ODAxNTU1MzhiYjc2NjA4NDk2NzFmZjk5Yjg3MzMzMzBlMzQ4YzY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzlgqy6hG0HuC9emJCgTFy5U//HCG
jbrnAjpe59IVbNXZZ61e8NDbmks/cMNEXrebalY2m4BrdgXmBfdvo0lN9DsQpaSP
TuPBJcwasGgMRciT3eVs9+ro/KeNYXAMj1uQpyD3GN1iMYIiRYzbwGBDZdTNxKeA
AtxcGgDiftqbSn3K+eabsBCKu0AvtsbsPhIYtIBNRAau17kJH0tFqpFs5hgRIUPt
RhzpMiYcTEaKm3iSScHPArLfjeznmSmQSq/QzcLGAyXx5ROB4xZuzOhtDBCmaIK/
WUJBxjahNMloWUyoPxasn8feRDD6LGYjS/zK/KufLGEp8hc4D/0q+CiaeQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEgBVVOLt2YISWcf+ZuHMzMONIxlMB8GA1UdIwQY
MBaAFClJNzHvzMdK1cJzh0uTYPeqaJRlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1VrM01lX014MHJWd25PSFM1Tmc5NnBvbEdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi9hZjRjMDktYzhjMi00ODkzLWExMGIt
MGNkOGE2OTcyOWI3LzEvU0FGVlU0dTNaZ2hKWnhfNW00Y3pNdzQwakdVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi9hZjRjMDktYzhjMi00ODkzLWExMGItMGNkOGE2OTcyOWI3
LzEvS1VrM01lX014MHJWd25PSFM1Tmc5NnBvbEdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALY3nMA0G
CSqGSIb3DQEBCwUAA4IBAQC+9CUaRYFNSaWGGImoMMbD6F8ihqG0/9NLDVlbGtmT
xTp1g53hNkteJEPado4RlRrycIIu8U0vGoZ5LRMuUcUGXprYYixvLkjGTks5FnsR
syN6svRz62u+PWvrwmPYR4DqES5Ak/J8rJe8EDT9RXpy6eYysVCHEMQqsB7M6XZm
pmVJr6FE+aCoBVKbpU7YJYsyFABZ1WpUAVcym09vUNs18otZQG44Pe0GWDe/RnLg
vigqODSfFQCOi39jRF8KK9vBrAPlFmSUt39WdGPcTll3DO6jw8ejMAUcZTM3fviN
Uc6DN99ja4wsuKelPUH0oPkREuO7WEKAkvtaW6L0cqap
-----END CERTIFICATE-----
Generated at Tue Apr 1 17:31:34 2025 by rpki-client on console.sobornost.net