Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/mCBeStbxQGWa37iI8rFzYl111gI.roa
File: mCBeStbxQGWa37iI8rFzYl111gI.roa (raw, json)
Hash identifier: VuS2v73M+IAYMNQz0G93Qu3csaiCxEREGTQqrxvjXOw=
Subject key identifier: 98:20:5E:4A:D6:F1:40:65:9A:DF:B8:88:F2:B1:73:62:5D:75:D6:02
Certificate issuer: /CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Certificate serial: 019428239A73C98466E150A63B6829BB37FB
Authority key identifier: D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/mCBeStbxQGWa37iI8rFzYl111gI.roa
Signing time: Thu 02 Jan 2025 17:50:09 +0000
ROA not before: Thu 02 Jan 2025 17:50:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 400039
IP address blocks: 45.11.189.0/24 maxlen: 24
45.154.158.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:9a:73:c9:84:66:e1:50:a6:3b:68:29:bb:37:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Validity
Not Before: Jan 2 17:50:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=98205e4ad6f140659adfb888f2b173625d75d602
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f3:54:ad:8f:42:db:33:80:42:af:af:d7:a3:
30:ef:00:f3:6c:9b:eb:62:d2:31:34:10:59:c6:df:
88:4d:4e:27:5b:03:fb:4f:3d:76:47:4e:19:3b:c9:
24:31:8a:e0:57:a3:f2:18:8c:62:1a:70:e9:3a:4d:
9e:75:7c:40:c7:de:73:fb:54:b2:d8:f3:1c:9a:27:
90:c0:dc:ca:a1:af:3b:88:7b:d6:fd:73:41:55:6d:
ec:f0:b5:be:20:91:b5:f0:ae:a1:5d:8a:39:b8:34:
fe:86:44:96:7c:79:c4:07:6a:e2:3f:c3:bc:5f:fb:
8d:95:fb:d7:b4:7f:7c:78:b6:a4:f4:f4:ec:fc:ce:
35:6a:04:a4:e1:9e:3b:c7:d0:5d:07:af:ce:63:e4:
3b:99:ff:76:bb:e6:78:f7:87:fc:75:1d:b3:d7:3e:
f8:27:30:4f:c4:ab:da:57:01:b4:d5:ad:df:69:86:
69:1f:8e:62:1a:34:18:46:54:17:97:1f:56:03:ff:
76:93:84:11:ab:c1:fa:95:1c:dd:35:d0:9b:cb:39:
22:57:06:1e:97:50:84:0a:a9:c2:c1:4e:aa:94:b8:
38:1e:52:e8:bc:aa:96:0f:fb:2b:6b:a6:1a:76:89:
e0:25:b4:4f:2f:95:5b:d6:55:a7:ce:5f:27:ee:2a:
be:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:20:5E:4A:D6:F1:40:65:9A:DF:B8:88:F2:B1:73:62:5D:75:D6:02
X509v3 Authority Key Identifier:
keyid:D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/mCBeStbxQGWa37iI8rFzYl111gI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.189.0/24
45.154.158.0/24
Signature Algorithm: sha256WithRSAEncryption
55:16:05:83:61:f2:9e:ee:fe:f9:ea:aa:17:f0:7e:98:e8:bf:
8e:fd:b6:67:7c:c0:01:8a:1d:90:24:9b:12:d8:5d:e6:87:cc:
26:38:36:ea:de:bd:51:9f:51:a4:62:c7:a9:95:a8:15:3b:eb:
79:85:3d:44:28:9a:bc:3c:9f:ea:2b:f1:6c:0f:50:9f:51:1c:
cc:4d:0d:fb:32:c4:65:f9:0f:33:3c:69:ad:f8:91:a3:4c:9d:
f3:dd:d1:bd:7c:a2:ae:88:17:31:01:2d:f3:57:9e:44:9e:c4:
8c:1f:9b:b1:d5:71:35:8a:be:14:56:d3:5d:40:98:d6:08:7f:
5f:17:76:e6:05:9b:c5:79:16:43:08:4e:3b:a4:aa:e2:7f:66:
b9:b7:76:a4:b3:28:f7:56:14:21:98:cb:02:f9:82:d9:30:31:
c4:35:fd:38:f9:a9:65:bf:86:a5:70:f9:0f:56:e0:77:89:c7:
a8:d8:3c:a9:0f:2f:81:96:0c:d1:f2:01:42:b9:27:43:84:6b:
97:d7:9e:2f:99:4f:c0:a9:b4:c2:97:b7:64:70:45:c2:5a:b4:
6d:94:73:23:d3:28:9c:d5:e2:74:fb:29:c8:54:f6:65:8d:aa:
fd:db:89:73:07:a5:e0:c8:1a:6d:ab:00:26:e3:a9:a7:ad:5a:
da:bd:3c:48
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQoI5pzyYRm4VCmO2gpuzf7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5M2RhMjAxOTkwOWQ5ZmMzNzgyOWZkOWVjMjlkOTQ4ZWNm
ZjdjOTIwHhcNMjUwMTAyMTc1MDA5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ODIwNWU0YWQ2ZjE0MDY1OWFkZmI4ODhmMmIxNzM2MjVkNzVkNjAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtPNUrY9C2zOAQq+v16Mw7wDzbJvr
YtIxNBBZxt+ITU4nWwP7Tz12R04ZO8kkMYrgV6PyGIxiGnDpOk2edXxAx95z+1Sy
2PMcmieQwNzKoa87iHvW/XNBVW3s8LW+IJG18K6hXYo5uDT+hkSWfHnEB2riP8O8
X/uNlfvXtH98eLak9PTs/M41agSk4Z47x9BdB6/OY+Q7mf92u+Z494f8dR2z1z74
JzBPxKvaVwG01a3faYZpH45iGjQYRlQXlx9WA/92k4QRq8H6lRzdNdCbyzkiVwYe
l1CECqnCwU6qlLg4HlLovKqWD/sra6YadongJbRPL5Vb1lWnzl8n7iq+HQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFJggXkrW8UBlmt+4iPKxc2JdddYCMB8GA1UdIwQY
MBaAFNk9ogGZCdn8N4Kf2ewp2Ujs/3ySMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMlQyaUFaa0oyZnczZ3BfWjdDblpTT3pfZkpJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi80N2FmYTMtY2UzMS00MDYwLWEwNzgt
ZjVhZGRkZGYxZWM1LzEvbUNCZVN0YnhRR1dhMzdpSThyRnpZbDExMWdJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi80N2FmYTMtY2UzMS00MDYwLWEwNzgtZjVhZGRkZGYxZWM1
LzEvMlQyaUFaa0oyZnczZ3BfWjdDblpTT3pfZkpJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALQu9AwQA
LZqeMA0GCSqGSIb3DQEBCwUAA4IBAQBVFgWDYfKe7v756qoX8H6Y6L+O/bZnfMAB
ih2QJJsS2F3mh8wmODbq3r1Rn1GkYseplagVO+t5hT1EKJq8PJ/qK/FsD1CfURzM
TQ37MsRl+Q8zPGmt+JGjTJ3z3dG9fKKuiBcxAS3zV55EnsSMH5ux1XE1ir4UVtNd
QJjWCH9fF3bmBZvFeRZDCE47pKrif2a5t3aksyj3VhQhmMsC+YLZMDHENf04+all
v4alcPkPVuB3iceo2DypDy+BlgzR8gFCuSdDhGuX154vmU/AqbTCl7dkcEXCWrRt
lHMj0yic1eJ0+ynIVPZljar924lzB6XgyBptqwAm46mnrVravTxI
-----END CERTIFICATE-----
Generated at Sat Apr 26 05:33:49 2025 by rpki-client