Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/EvwTbMoXuajv5Ywub2diXcul6lE.roa
File: EvwTbMoXuajv5Ywub2diXcul6lE.roa (raw, json)
Hash identifier: l/cPSqwZE44bgCQyt2ZyIwKx+PFRJ7AWupVrJMxjVhU=
Subject key identifier: 12:FC:13:6C:CA:17:B9:A8:EF:E5:8C:2E:6F:67:62:5D:CB:A5:EA:51
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 0194266BBE69D31140D401390F3B8A08ABC7
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/EvwTbMoXuajv5Ywub2diXcul6lE.roa
Signing time: Thu 02 Jan 2025 09:49:42 +0000
ROA not before: Thu 02 Jan 2025 09:49:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34661
IP address blocks: 45.149.24.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:be:69:d3:11:40:d4:01:39:0f:3b:8a:08:ab:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Jan 2 09:49:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=12fc136cca17b9a8efe58c2e6f67625dcba5ea51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:08:c8:9c:92:39:7a:bf:b8:63:6e:f2:bd:74:
55:99:22:05:89:24:6d:47:e1:4c:da:c3:5e:f3:31:
4f:2e:d1:68:03:07:aa:55:3f:fd:85:8f:01:93:71:
45:5d:9b:f6:e7:a7:44:5e:53:95:06:d7:57:4d:07:
09:45:8e:e9:79:ea:f7:44:6b:93:ec:e9:d7:87:14:
35:14:22:15:b0:ac:95:15:e1:bc:48:0d:29:5e:d9:
f1:1b:e9:b5:e4:0d:9d:a3:ff:02:81:31:35:b8:7e:
13:c4:2b:b7:6a:77:7c:d1:c5:96:b4:f4:30:2c:71:
7f:ed:c2:8a:c7:2d:d5:7c:76:21:a0:9a:80:ac:e2:
c4:c3:37:d3:0e:b4:c0:06:75:8a:f5:d0:97:0b:c1:
c4:38:17:ff:60:b8:34:32:92:6f:bc:cc:9d:3f:1a:
cd:93:65:49:4f:f5:68:3e:4f:ea:5e:3a:b3:e7:48:
70:90:f4:05:40:92:7e:24:0e:0d:39:17:1c:c0:7b:
bb:c9:f2:27:9c:3b:06:99:ff:fa:61:b7:9e:8f:6c:
21:a6:87:e6:88:04:d8:89:f5:a3:a3:48:29:3e:5f:
b7:b3:21:c5:c3:4b:c2:7e:5e:e6:45:4d:cc:19:12:
60:dc:af:5c:fb:d9:2d:64:07:2e:17:a9:aa:79:54:
fd:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:FC:13:6C:CA:17:B9:A8:EF:E5:8C:2E:6F:67:62:5D:CB:A5:EA:51
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/EvwTbMoXuajv5Ywub2diXcul6lE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.24.0/22
Signature Algorithm: sha256WithRSAEncryption
8a:a2:2e:50:b8:35:aa:09:23:0f:0e:b6:00:24:83:3f:3b:d9:
0f:39:f7:76:7b:e6:00:58:b5:e4:fc:5d:77:83:30:b9:83:8e:
bb:b3:30:8a:21:f0:7c:4c:04:69:65:6c:d9:f1:2c:60:fb:54:
8f:8f:eb:3e:32:20:af:42:f3:d7:97:c6:75:bb:09:81:4d:1e:
b5:28:ed:c1:e7:4b:1a:85:4e:7c:ec:4c:14:8b:df:86:7d:87:
fc:1f:8c:2f:ba:18:30:fb:31:c0:82:22:8b:4a:b6:24:a6:9b:
47:25:87:01:d9:f7:6f:66:c6:fc:0f:88:f3:4b:c6:6a:c9:c1:
d3:79:b1:47:10:b5:48:b1:d4:3f:84:1c:40:a2:76:c9:c5:2e:
04:74:56:54:88:9a:a0:bd:b2:69:97:2d:fa:ed:7a:b6:11:cb:
22:37:02:b5:57:dd:97:d7:1c:3e:30:32:1d:12:15:91:fa:4b:
3c:0d:0c:e0:63:05:55:32:30:8a:fd:62:4f:75:e2:3d:49:1d:
75:8d:23:ee:d6:ed:06:6f:69:4b:84:a7:f6:f8:3f:a2:3f:40:
86:15:f5:6d:fb:4b:73:4b:b1:34:6d:4d:a7:a2:7e:d3:95:4b:
a4:2d:81:02:78:29:ca:60:31:30:14:2b:84:34:56:e9:6e:ea:
31:f5:af:dc
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQma75p0xFA1AE5DzuKCKvHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzM2UzZjVlZjgyNTU1NmIwMTRhMDg1ZDMyNTY1YmIwY2Jj
NWFjOGQwHhcNMjUwMTAyMDk0OTQyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMmZjMTM2Y2NhMTdiOWE4ZWZlNThjMmU2ZjY3NjI1ZGNiYTVlYTUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApAjInJI5er+4Y27yvXRVmSIFiSRt
R+FM2sNe8zFPLtFoAweqVT/9hY8Bk3FFXZv256dEXlOVBtdXTQcJRY7peer3RGuT
7OnXhxQ1FCIVsKyVFeG8SA0pXtnxG+m15A2do/8CgTE1uH4TxCu3and80cWWtPQw
LHF/7cKKxy3VfHYhoJqArOLEwzfTDrTABnWK9dCXC8HEOBf/YLg0MpJvvMydPxrN
k2VJT/VoPk/qXjqz50hwkPQFQJJ+JA4NORccwHu7yfInnDsGmf/6Ybeej2whpofm
iATYifWjo0gpPl+3syHFw0vCfl7mRU3MGRJg3K9c+9ktZAcuF6mqeVT9eQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBL8E2zKF7mo7+WMLm9nYl3LpepRMB8GA1UdIwQY
MBaAFIM+P174JVVrAUoIXTJWW7DLxayNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3o0X1h2Z2xWV3NCU2doZE1sWmJzTXZGckkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9kMjY2MTgtYjM0MC00ZjUwLWIzMzAt
MzE4YTI2ZDRhOGM5LzEvRXZ3VGJNb1h1YWp2NVl3dWIyZGlYY3VsNmxFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy9kMjY2MTgtYjM0MC00ZjUwLWIzMzAtMzE4YTI2ZDRhOGM5
LzEvZ3o0X1h2Z2xWV3NCU2doZE1sWmJzTXZGckkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLZUYMA0G
CSqGSIb3DQEBCwUAA4IBAQCKoi5QuDWqCSMPDrYAJIM/O9kPOfd2e+YAWLXk/F13
gzC5g467szCKIfB8TARpZWzZ8Sxg+1SPj+s+MiCvQvPXl8Z1uwmBTR61KO3B50sa
hU587EwUi9+GfYf8H4wvuhgw+zHAgiKLSrYkpptHJYcB2fdvZsb8D4jzS8ZqycHT
ebFHELVIsdQ/hBxAonbJxS4EdFZUiJqgvbJply367Xq2EcsiNwK1V92X1xw+MDId
EhWR+ks8DQzgYwVVMjCK/WJPdeI9SR11jSPu1u0Gb2lLhKf2+D+iP0CGFfVt+0tz
S7E0bU2non7TlUukLYECeCnKYDEwFCuENFbpbuox9a/c
-----END CERTIFICATE-----
Generated at Fri Apr 25 06:55:09 2025 by rpki-client