Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/gwvccKHg-sCxMtRMpZ-g7-xkhS0.roa
File: gwvccKHg-sCxMtRMpZ-g7-xkhS0.roa (raw, json)
Hash identifier: 8QdBRq0GHGqpE8qbYM4oe/h2Uvr08hzjo/0JMG+9m8U=
Subject key identifier: 83:0B:DC:70:A1:E0:FA:C0:B1:32:D4:4C:A5:9F:A0:EF:EC:64:85:2D
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01942824B48C4EB583E902234E7C8A74AEDE
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/gwvccKHg-sCxMtRMpZ-g7-xkhS0.roa
Signing time: Thu 02 Jan 2025 17:51:21 +0000
ROA not before: Thu 02 Jan 2025 17:51:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207957
IP address blocks: 45.149.235.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:b4:8c:4e:b5:83:e9:02:23:4e:7c:8a:74:ae:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 17:51:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=830bdc70a1e0fac0b132d44ca59fa0efec64852d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:65:16:1e:8f:86:5a:53:4c:e6:2e:e5:f2:68:
01:58:8d:59:8c:1a:d4:ce:01:e6:0c:61:2c:71:2c:
9b:9a:eb:ae:d4:eb:97:ce:fc:6e:75:fa:dc:85:5c:
c5:cd:34:1d:66:0e:6b:57:1e:41:6c:01:6f:7d:30:
3c:50:52:a4:b8:29:93:5b:8a:33:79:97:3c:2a:e4:
41:10:78:14:f9:70:75:47:aa:ee:27:b1:60:49:8f:
79:18:ad:29:a7:f2:43:56:5a:63:82:a7:09:15:11:
ab:24:b1:2d:e2:56:94:00:51:61:6f:21:b2:56:0c:
22:19:3b:29:8a:b0:73:0a:fb:e3:b0:92:97:8d:31:
97:4b:2c:73:79:2e:cd:75:c8:f0:5c:46:fe:7a:23:
83:b2:10:aa:f2:89:a0:9b:20:a6:77:e4:f2:92:3a:
c2:db:b0:be:6b:0f:7f:3b:2f:66:62:a4:69:e1:72:
e5:e6:90:bc:7d:75:8e:99:3b:d7:85:1e:57:dd:e7:
09:42:bf:29:82:00:c8:5c:b5:08:33:a1:5a:c3:66:
e7:46:d3:3b:3a:83:37:3f:d6:e6:76:ba:61:b6:0e:
3d:7b:dc:c2:9a:59:9a:00:71:6a:e7:72:56:db:f9:
e0:a3:e4:e7:c5:aa:1e:76:6e:db:d7:10:f2:0a:92:
63:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:0B:DC:70:A1:E0:FA:C0:B1:32:D4:4C:A5:9F:A0:EF:EC:64:85:2D
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/gwvccKHg-sCxMtRMpZ-g7-xkhS0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.235.0/24
Signature Algorithm: sha256WithRSAEncryption
35:85:40:b5:cf:98:e4:25:6c:39:a6:21:b2:d6:e6:38:31:dd:
59:3a:e0:68:dc:c6:97:da:6e:b5:d5:aa:e9:ae:f6:2b:a0:bb:
a1:cb:e1:dc:cd:ff:8e:d9:c8:1e:93:ec:95:7a:eb:63:24:47:
77:4e:fa:1a:9f:d5:3c:21:1d:44:de:f1:a1:d7:63:2b:58:ac:
56:6f:39:ab:2a:ca:61:35:ee:6e:d8:dc:44:70:2b:42:36:6f:
72:a4:fb:47:03:37:27:93:29:43:fd:4d:67:3e:5d:80:d4:8c:
c4:45:21:7f:a0:1d:52:e1:cd:eb:99:f2:17:c6:f0:98:e0:25:
11:4d:0c:3d:a5:3c:8a:60:9b:09:9e:69:7d:82:a4:2b:bf:7f:
65:ca:25:8a:73:48:9d:9f:e3:1c:86:e4:39:16:5a:f9:4e:58:
66:dd:bf:c6:b4:a0:74:08:b0:4d:6c:21:27:e4:f9:df:f2:d8:
60:32:3d:22:95:9f:57:0d:ea:c3:8c:29:87:a1:00:a0:e0:47:
65:f3:c0:d0:08:05:e6:a1:a9:b9:24:7e:d8:aa:b5:f8:37:eb:
7b:31:74:b4:3c:cd:11:b5:c9:0d:69:e2:22:b1:0f:81:8d:11:
a4:4d:7a:e8:2b:5a:f8:a0:16:8b:48:56:b1:5e:bb:e8:0b:1c:
65:aa:15:3d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQoJLSMTrWD6QIjTnyKdK7eMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjUwMTAyMTc1MTIxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MzBiZGM3MGExZTBmYWMwYjEzMmQ0NGNhNTlmYTBlZmVjNjQ4NTJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy2UWHo+GWlNM5i7l8mgBWI1ZjBrU
zgHmDGEscSybmuuu1OuXzvxudfrchVzFzTQdZg5rVx5BbAFvfTA8UFKkuCmTW4oz
eZc8KuRBEHgU+XB1R6ruJ7FgSY95GK0pp/JDVlpjgqcJFRGrJLEt4laUAFFhbyGy
VgwiGTspirBzCvvjsJKXjTGXSyxzeS7NdcjwXEb+eiODshCq8omgmyCmd+TykjrC
27C+aw9/Oy9mYqRp4XLl5pC8fXWOmTvXhR5X3ecJQr8pggDIXLUIM6Faw2bnRtM7
OoM3P9bmdrphtg49e9zCmlmaAHFq53JW2/ngo+Tnxaoedm7b1xDyCpJjyQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIML3HCh4PrAsTLUTKWfoO/sZIUtMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvZ3d2Y2NLSGctc0N4TXRSTXBaLWc3LXhraFMwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZXrMA0G
CSqGSIb3DQEBCwUAA4IBAQA1hUC1z5jkJWw5piGy1uY4Md1ZOuBo3MaX2m611arp
rvYroLuhy+Hczf+O2cgek+yVeutjJEd3Tvoan9U8IR1E3vGh12MrWKxWbzmrKsph
Ne5u2NxEcCtCNm9ypPtHAzcnkylD/U1nPl2A1IzERSF/oB1S4c3rmfIXxvCY4CUR
TQw9pTyKYJsJnml9gqQrv39lyiWKc0idn+MchuQ5Flr5Tlhm3b/GtKB0CLBNbCEn
5Pnf8thgMj0ilZ9XDerDjCmHoQCg4Edl88DQCAXmoam5JH7YqrX4N+t7MXS0PM0R
tckNaeIisQ+BjRGkTXroK1r4oBaLSFaxXrvoCxxlqhU9
-----END CERTIFICATE-----
Generated at Fri Apr 25 08:54:30 2025 by rpki-client