Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/gd3QgfVHbMB6HwektGL-V761ov0.roa
File: gd3QgfVHbMB6HwektGL-V761ov0.roa (raw, json)
Hash identifier: 7JtdDEdrp8YQmcqivFxwKLPFrUDDhxI5jq3K3e/YSDQ=
Subject key identifier: 81:DD:D0:81:F5:47:6C:C0:7A:1F:07:A4:B4:62:FE:57:BE:B5:A2:FD
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01942824C7F3ED453F5B3487AAB305CBFD72
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/gd3QgfVHbMB6HwektGL-V761ov0.roa
Signing time: Thu 02 Jan 2025 17:51:26 +0000
ROA not before: Thu 02 Jan 2025 17:51:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214668
IP address blocks: 45.8.92.0/24 maxlen: 24
193.37.41.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:c7:f3:ed:45:3f:5b:34:87:aa:b3:05:cb:fd:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 17:51:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=81ddd081f5476cc07a1f07a4b462fe57beb5a2fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:0b:fd:d8:55:e6:87:64:c6:ed:2b:bc:8b:24:
56:de:ad:94:2b:7b:49:d5:c4:94:75:ec:cb:47:59:
1c:57:db:b7:09:e5:3b:82:ac:34:7c:70:bb:f1:4b:
16:7a:31:2e:99:ee:7f:1f:1e:68:b8:81:4e:16:c1:
13:1f:2a:b5:9a:6e:2b:dd:e0:a9:a4:e6:9f:fb:49:
ba:20:c6:b4:a9:1a:fd:7f:4e:ab:82:1f:47:5d:86:
7d:57:ce:a1:6e:2a:e5:70:b9:38:02:98:91:9d:3e:
e1:8e:9d:93:49:c6:6c:bb:6b:b4:86:7e:50:a8:a6:
42:b0:bb:42:3f:3b:7f:8a:02:d4:30:03:7d:48:5b:
e0:70:f2:35:05:ae:f2:8e:43:3f:0f:ca:90:e1:00:
9d:54:e3:23:24:a1:0a:c7:d3:31:ba:f1:3b:0c:3f:
a0:71:2e:78:fc:9a:e5:19:4d:74:9d:23:99:d0:ca:
ee:28:bc:14:84:91:57:6e:65:50:74:4f:62:f8:fd:
50:1a:df:dd:c3:ae:a8:fd:b0:3b:45:61:09:b8:44:
a9:d6:25:f9:60:c2:14:e0:eb:e8:ea:3f:48:78:04:
5f:a7:fe:2e:8d:b5:ea:ec:92:61:24:d8:b4:2b:55:
6c:23:b3:49:1f:3f:a6:19:e8:93:58:88:1a:38:2b:
68:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:DD:D0:81:F5:47:6C:C0:7A:1F:07:A4:B4:62:FE:57:BE:B5:A2:FD
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/gd3QgfVHbMB6HwektGL-V761ov0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.92.0/24
193.37.41.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:8a:0f:14:18:7b:80:6b:77:64:68:10:eb:aa:65:99:f1:ab:
fe:70:44:6d:6e:76:09:d0:1d:7e:04:d8:31:1d:d5:74:26:22:
13:a9:f3:f0:8c:0e:1b:74:fe:a4:ba:93:ce:2f:c9:65:67:b4:
02:79:4e:cb:0b:25:f8:56:09:df:44:4e:cf:a9:6c:57:1a:42:
9b:a5:bb:31:e1:cb:3b:a5:e0:2a:2b:12:12:ba:f1:90:62:b0:
35:02:2d:11:1f:fc:ce:6b:63:0b:f5:69:42:fe:a8:b8:6b:d8:
67:48:80:21:22:ab:76:7e:3a:cc:d8:9a:26:09:8c:3c:41:f7:
e7:77:f7:ff:a4:ec:1b:01:6a:f8:8c:3c:2c:58:bc:bc:d0:43:
ff:32:0b:86:17:9a:bc:fc:92:a9:b4:60:bf:be:ab:b5:91:3f:
1e:ac:83:d6:6b:57:62:7c:f4:af:5e:22:6b:d5:8a:b3:60:76:
1d:16:8c:0d:b9:63:60:30:99:ce:8b:0f:96:b5:68:1d:fa:d6:
70:f0:6e:2e:2c:b8:84:c3:59:7e:e9:9e:53:69:72:09:72:54:
e5:30:5b:b3:5a:09:07:01:39:81:46:9c:60:dc:1b:0d:f6:19:
9e:38:5b:33:cd:e3:0e:28:40:65:f2:1f:dc:9f:31:15:7b:3b:
2b:4f:ad:f8
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQoJMfz7UU/WzSHqrMFy/1yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjUwMTAyMTc1MTI2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MWRkZDA4MWY1NDc2Y2MwN2ExZjA3YTRiNDYyZmU1N2JlYjVhMmZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxAv92FXmh2TG7Su8iyRW3q2UK3tJ
1cSUdezLR1kcV9u3CeU7gqw0fHC78UsWejEume5/Hx5ouIFOFsETHyq1mm4r3eCp
pOaf+0m6IMa0qRr9f06rgh9HXYZ9V86hbirlcLk4ApiRnT7hjp2TScZsu2u0hn5Q
qKZCsLtCPzt/igLUMAN9SFvgcPI1Ba7yjkM/D8qQ4QCdVOMjJKEKx9MxuvE7DD+g
cS54/JrlGU10nSOZ0MruKLwUhJFXbmVQdE9i+P1QGt/dw66o/bA7RWEJuESp1iX5
YMIU4Ovo6j9IeARfp/4ujbXq7JJhJNi0K1VsI7NJHz+mGeiTWIgaOCtoHQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFIHd0IH1R2zAeh8HpLRi/le+taL9MB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvZ2QzUWdmVkhiTUI2SHdla3RHTC1WNzYxb3YwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALQhcAwQA
wSUpMA0GCSqGSIb3DQEBCwUAA4IBAQCsig8UGHuAa3dkaBDrqmWZ8av+cERtbnYJ
0B1+BNgxHdV0JiITqfPwjA4bdP6kupPOL8llZ7QCeU7LCyX4VgnfRE7PqWxXGkKb
pbsx4cs7peAqKxISuvGQYrA1Ai0RH/zOa2ML9WlC/qi4a9hnSIAhIqt2fjrM2Jom
CYw8Qffnd/f/pOwbAWr4jDwsWLy80EP/MguGF5q8/JKptGC/vqu1kT8erIPWa1di
fPSvXiJr1YqzYHYdFowNuWNgMJnOiw+WtWgd+tZw8G4uLLiEw1l+6Z5TaXIJclTl
MFuzWgkHATmBRpxg3BsN9hmeOFszzeMOKEBl8h/cnzEVezsrT634
-----END CERTIFICATE-----
Generated at Fri Apr 25 08:51:12 2025 by rpki-client