Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/zCJNwAHBT-OuD8JSwLlWmHeq2i0.roa
File: zCJNwAHBT-OuD8JSwLlWmHeq2i0.roa (raw, json)
Hash identifier: xxcu2GFnZrIoRaIL254U2SP3O3E+qALgdaalLMmqYoY=
Subject key identifier: CC:22:4D:C0:01:C1:4F:E3:AE:0F:C2:52:C0:B9:56:98:77:AA:DA:2D
Certificate issuer: /CN=081b7a22e51cfb9cf84205e4449998ad55d8f065
Certificate serial: 019423D701BFFED46627054C006E4DCA81A6
Authority key identifier: 08:1B:7A:22:E5:1C:FB:9C:F8:42:05:E4:44:99:98:AD:55:D8:F0:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/zCJNwAHBT-OuD8JSwLlWmHeq2i0.roa
Signing time: Wed 01 Jan 2025 21:48:00 +0000
ROA not before: Wed 01 Jan 2025 21:48:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207409
IP address blocks: 45.9.255.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:01:bf:fe:d4:66:27:05:4c:00:6e:4d:ca:81:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=081b7a22e51cfb9cf84205e4449998ad55d8f065
Validity
Not Before: Jan 1 21:48:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cc224dc001c14fe3ae0fc252c0b9569877aada2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:c1:3f:2b:14:8b:21:47:35:96:5a:d6:a5:a9:
aa:9b:98:ee:aa:7b:22:89:70:da:60:61:61:ac:fb:
60:f0:66:17:7e:55:12:82:a5:ea:84:f1:2b:d6:50:
3e:ea:74:36:7f:7f:08:14:94:6d:7e:25:e5:d5:74:
eb:d1:06:3c:ea:c2:c2:95:06:92:9e:13:61:c4:1f:
07:36:12:52:36:c4:d1:5c:19:39:80:9d:c0:82:dd:
fb:e9:56:2d:b6:c0:5e:f1:56:3c:d7:75:01:90:06:
95:2d:61:e0:e0:45:79:9f:0e:ab:82:78:7b:64:37:
36:ac:6c:0c:d4:bf:b7:e5:3d:5f:16:45:06:e7:f7:
20:1d:2b:9d:eb:e4:e4:4b:6e:ed:5c:91:8e:90:a0:
75:e3:d3:80:68:c7:09:c4:27:78:81:3b:e9:bb:4b:
3c:d4:ef:ac:5f:e8:51:a2:be:6a:6d:e6:3a:8e:0c:
87:2d:e0:e9:dc:c7:5f:81:2e:a6:f6:98:cf:3a:bf:
46:1c:a6:f6:a6:84:35:4f:0b:17:d7:2c:ab:f9:96:
95:79:42:a1:33:67:b3:09:aa:46:72:af:32:e6:67:
85:1d:a8:6a:df:a8:1e:df:1c:26:97:9b:3a:40:ee:
22:54:f3:cf:bf:9e:cb:4d:af:bf:64:7d:a2:54:fb:
30:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:22:4D:C0:01:C1:4F:E3:AE:0F:C2:52:C0:B9:56:98:77:AA:DA:2D
X509v3 Authority Key Identifier:
keyid:08:1B:7A:22:E5:1C:FB:9C:F8:42:05:E4:44:99:98:AD:55:D8:F0:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/zCJNwAHBT-OuD8JSwLlWmHeq2i0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.255.0/24
Signature Algorithm: sha256WithRSAEncryption
09:b5:59:1c:e4:f0:bd:4f:e1:8d:f8:53:db:37:76:67:16:c1:
8d:5e:64:88:e1:ba:26:a3:59:8e:69:7a:bb:7b:6d:dc:e4:b3:
09:0f:3c:97:62:d3:c8:a2:32:c2:d9:e6:f7:e9:cd:c4:a5:5e:
3c:db:7e:25:d9:01:a3:52:ee:b5:0e:d0:cf:e3:1e:67:44:3d:
9f:59:4a:81:66:cc:6f:c2:aa:d3:47:35:5a:56:fa:5c:29:c2:
f2:0f:16:1b:b2:33:65:11:f4:33:e3:1b:7e:d0:ac:39:80:00:
f7:cc:03:95:47:81:20:19:4f:bf:24:4e:2c:93:8c:ae:bd:56:
1c:61:a0:69:2a:44:e5:2e:30:ac:72:37:e4:8f:45:72:28:5a:
bb:4d:29:f0:07:27:b9:06:24:2f:54:21:45:e0:62:90:0a:2e:
ab:e3:16:f8:73:29:0a:54:a5:6e:a9:18:62:96:7b:d2:61:b1:
9c:b2:8a:26:ec:ab:d9:84:d0:52:c0:ef:eb:ef:60:60:5e:97:
a6:e5:2f:b7:53:a7:f3:af:f3:75:83:ee:a3:27:de:65:17:6e:
81:d4:3a:aa:71:b1:c7:ef:51:36:28:c9:a0:dc:26:45:87:e3:
49:b5:9c:c1:26:ab:31:f3:f4:4b:82:61:52:55:b9:d7:b0:c2:
ee:91:5d:de
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQj1wG//tRmJwVMAG5NyoGmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4MWI3YTIyZTUxY2ZiOWNmODQyMDVlNDQ0OTk5OGFkNTVk
OGYwNjUwHhcNMjUwMTAxMjE0ODAwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYzIyNGRjMDAxYzE0ZmUzYWUwZmMyNTJjMGI5NTY5ODc3YWFkYTJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi8E/KxSLIUc1llrWpamqm5juqnsi
iXDaYGFhrPtg8GYXflUSgqXqhPEr1lA+6nQ2f38IFJRtfiXl1XTr0QY86sLClQaS
nhNhxB8HNhJSNsTRXBk5gJ3Agt376VYttsBe8VY813UBkAaVLWHg4EV5nw6rgnh7
ZDc2rGwM1L+35T1fFkUG5/cgHSud6+TkS27tXJGOkKB149OAaMcJxCd4gTvpu0s8
1O+sX+hRor5qbeY6jgyHLeDp3MdfgS6m9pjPOr9GHKb2poQ1TwsX1yyr+ZaVeUKh
M2ezCapGcq8y5meFHahq36ge3xwml5s6QO4iVPPPv57LTa+/ZH2iVPswUwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMwiTcABwU/jrg/CUsC5Vph3qtotMB8GA1UdIwQY
MBaAFAgbeiLlHPuc+EIF5ESZmK1V2PBlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0J0Nkl1VWMtNXo0UWdYa1JKbVlyVlhZOEdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9jNTE1YzktZGYwOC00MjZjLTgwZTYt
MDM2NzI2OGZmODcxLzEvekNKTndBSEJULU91RDhKU3dMbFdtSGVxMmkwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy9jNTE1YzktZGYwOC00MjZjLTgwZTYtMDM2NzI2OGZmODcx
LzEvQ0J0Nkl1VWMtNXo0UWdYa1JKbVlyVlhZOEdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALQn/MA0G
CSqGSIb3DQEBCwUAA4IBAQAJtVkc5PC9T+GN+FPbN3ZnFsGNXmSI4bomo1mOaXq7
e23c5LMJDzyXYtPIojLC2eb36c3EpV48234l2QGjUu61DtDP4x5nRD2fWUqBZsxv
wqrTRzVaVvpcKcLyDxYbsjNlEfQz4xt+0Kw5gAD3zAOVR4EgGU+/JE4sk4yuvVYc
YaBpKkTlLjCscjfkj0VyKFq7TSnwBye5BiQvVCFF4GKQCi6r4xb4cykKVKVuqRhi
lnvSYbGcsoom7KvZhNBSwO/r72BgXpem5S+3U6fzr/N1g+6jJ95lF26B1DqqcbHH
71E2KMmg3CZFh+NJtZzBJqsx8/RLgmFSVbnXsMLukV3e
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:26 2025 by rpki-client on console.sobornost.net