Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/361c57-ea42-47e2-a68f-ec967b511d7f/1/Dn9PJQBV1DBDQ0-rgh6HR3KDZu0.roa
File: Dn9PJQBV1DBDQ0-rgh6HR3KDZu0.roa (raw, json)
Hash identifier: gZf47H7ZNPeHNBxmm1n+mb7mTaHE9Uiqqc+N1w8TQc8=
Subject key identifier: 0E:7F:4F:25:00:55:D4:30:43:43:4F:AB:82:1E:87:47:72:83:66:ED
Certificate issuer: /CN=f8fbc8415821486e8fe0860b5bec3e9283b80385
Certificate serial: 01942067F203DA8AAABB0868F1EA589E002C
Authority key identifier: F8:FB:C8:41:58:21:48:6E:8F:E0:86:0B:5B:EC:3E:92:83:B8:03:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-PvIQVghSG6P4IYLW-w-koO4A4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/361c57-ea42-47e2-a68f-ec967b511d7f/1/Dn9PJQBV1DBDQ0-rgh6HR3KDZu0.roa
Signing time: Wed 01 Jan 2025 05:47:50 +0000
ROA not before: Wed 01 Jan 2025 05:47:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210150
IP address blocks: 37.18.48.0/22 maxlen: 22
37.18.52.0/22 maxlen: 22
45.144.76.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:f2:03:da:8a:aa:bb:08:68:f1:ea:58:9e:00:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8fbc8415821486e8fe0860b5bec3e9283b80385
Validity
Not Before: Jan 1 05:47:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0e7f4f250055d43043434fab821e8747728366ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:8a:cc:15:8b:a2:cb:fc:c8:f0:d7:cb:9d:5b:
0e:d8:1b:80:ed:44:ca:f0:ba:95:25:a7:27:66:d5:
03:0c:d1:ac:8c:04:23:5a:cd:15:a2:94:42:11:56:
29:2c:74:1a:7f:f0:39:92:37:7c:f7:a2:ab:b9:61:
ef:c0:a7:3e:09:3e:e1:33:a3:34:89:f5:b7:35:f9:
9d:77:a6:20:24:3a:f7:71:cf:c2:7c:41:a4:5c:51:
9c:d0:f8:ae:d3:1a:a6:76:d5:69:17:88:39:f3:8f:
c2:4e:e9:c4:c4:44:cf:a0:c9:17:c1:7c:05:a8:92:
71:60:2a:87:4f:a2:20:77:a8:00:ff:40:5a:a4:84:
01:34:88:cf:d3:e1:6d:a7:4e:0b:67:50:8f:a0:b0:
df:f5:62:21:bc:05:fe:f4:d7:19:b6:c3:d8:d6:58:
44:0a:51:f1:7b:93:87:91:aa:4f:c3:95:0a:e5:5b:
40:27:4e:37:48:e8:f0:37:25:79:54:34:ef:5a:86:
ec:6c:07:66:08:25:73:cd:d6:35:26:12:0e:e1:00:
a7:ec:05:53:ab:09:ca:18:04:13:0c:cf:18:c1:85:
53:b6:85:16:23:b9:ec:fa:c9:88:41:bc:68:b6:c7:
02:fa:67:b2:fd:8a:35:40:df:82:5c:35:37:fe:04:
3b:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:7F:4F:25:00:55:D4:30:43:43:4F:AB:82:1E:87:47:72:83:66:ED
X509v3 Authority Key Identifier:
keyid:F8:FB:C8:41:58:21:48:6E:8F:E0:86:0B:5B:EC:3E:92:83:B8:03:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-PvIQVghSG6P4IYLW-w-koO4A4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/361c57-ea42-47e2-a68f-ec967b511d7f/1/Dn9PJQBV1DBDQ0-rgh6HR3KDZu0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/361c57-ea42-47e2-a68f-ec967b511d7f/1/1-PvIQVghSG6P4IYLW-w-koO4A4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.18.48.0/21
45.144.76.0/22
Signature Algorithm: sha256WithRSAEncryption
a0:80:0c:9b:dd:58:7c:ab:57:8a:1d:a9:e6:52:1a:b3:84:5a:
10:08:88:0c:2e:67:f4:9c:17:20:9d:83:06:98:59:5e:0a:d7:
3d:8f:8b:7d:4f:e0:ce:4f:c5:ea:b7:6f:29:e6:a6:dd:36:c3:
25:06:76:45:73:23:03:df:9b:31:e8:d5:9a:ac:19:e2:0b:29:
6b:0f:3d:3e:a3:57:64:00:cc:c4:d8:fc:7a:a8:a3:fe:aa:5f:
23:f5:d7:c7:16:ff:85:65:57:d8:83:0f:1a:a4:1d:06:18:ea:
51:3c:11:74:51:25:df:e5:2e:da:1a:b2:04:22:ce:4c:59:65:
a8:20:77:20:9b:b6:b2:fa:9f:d4:c3:53:7a:4b:7d:4f:f9:fc:
d2:1e:a0:c7:14:44:6a:b1:83:49:6a:31:d0:2b:e0:b8:83:b0:
0e:b4:dc:2d:f2:11:22:7a:42:ff:ee:31:e1:e0:14:aa:be:9a:
84:ec:22:2b:9c:1b:db:6f:d5:01:43:66:7c:de:30:1e:16:f7:
f6:ff:f1:dd:85:f6:80:d9:f0:12:0d:6c:e9:06:8a:ef:6c:17:
8c:51:c7:4c:02:b5:21:b6:23:a9:d1:91:d5:c9:48:76:e7:5d:
29:35:01:00:0e:1c:1c:1c:5a:9e:97:c0:1f:8c:38:36:78:a0:
e8:31:64:2f
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZQgZ/ID2oqquwho8epYngAsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4ZmJjODQxNTgyMTQ4NmU4ZmUwODYwYjViZWMzZTkyODNi
ODAzODUwHhcNMjUwMTAxMDU0NzUwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZTdmNGYyNTAwNTVkNDMwNDM0MzRmYWI4MjFlODc0NzcyODM2NmVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtYrMFYuiy/zI8NfLnVsO2BuA7UTK
8LqVJacnZtUDDNGsjAQjWs0VopRCEVYpLHQaf/A5kjd896KruWHvwKc+CT7hM6M0
ifW3Nfmdd6YgJDr3cc/CfEGkXFGc0Piu0xqmdtVpF4g584/CTunExETPoMkXwXwF
qJJxYCqHT6Igd6gA/0BapIQBNIjP0+Ftp04LZ1CPoLDf9WIhvAX+9NcZtsPY1lhE
ClHxe5OHkapPw5UK5VtAJ043SOjwNyV5VDTvWobsbAdmCCVzzdY1JhIO4QCn7AVT
qwnKGAQTDM8YwYVTtoUWI7ns+smIQbxotscC+mey/Yo1QN+CXDU3/gQ7SQIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFA5/TyUAVdQwQ0NPq4Ieh0dyg2btMB8GA1UdIwQY
MBaAFPj7yEFYIUhuj+CGC1vsPpKDuAOFMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1QdklRVmdoU0c2UDRJWUxXLXcta29PNEE0VS5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGEvMzYxYzU3LWVhNDItNDdlMi1hNjhm
LWVjOTY3YjUxMWQ3Zi8xL0RuOVBKUUJWMURCRFEwLXJnaDZIUjNLRFp1MC5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvMGEvMzYxYzU3LWVhNDItNDdlMi1hNjhmLWVjOTY3YjUxMWQ3
Zi8xLzEtUHZJUVZnaFNHNlA0SVlMVy13LWtvTzRBNFUuY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwDBAMlEjAD
BAItkEwwDQYJKoZIhvcNAQELBQADggEBAKCADJvdWHyrV4odqeZSGrOEWhAIiAwu
Z/ScFyCdgwaYWV4K1z2Pi31P4M5Pxeq3bynmpt02wyUGdkVzIwPfmzHo1ZqsGeIL
KWsPPT6jV2QAzMTY/Hqoo/6qXyP118cW/4VlV9iDDxqkHQYY6lE8EXRRJd/lLtoa
sgQizkxZZaggdyCbtrL6n9TDU3pLfU/5/NIeoMcURGqxg0lqMdAr4LiDsA603C3y
ESJ6Qv/uMeHgFKq+moTsIiucG9tv1QFDZnzeMB4W9/b/8d2F9oDZ8BINbOkGiu9s
F4xRx0wCtSG2I6nRkdXJSHbnXSk1AQAOHBwcWp6XwB+MODZ4oOgxZC8=
-----END CERTIFICATE-----
Generated at Fri Apr 25 08:45:30 2025 by rpki-client