Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/1182cb-5f95-4cd4-b72f-46b46fc0e496/1/1-ltIqDmdRri_JzK-WP35nYk2cQM.roa
File: 1-ltIqDmdRri_JzK-WP35nYk2cQM.roa (raw, json)
Hash identifier: 0bK+rteLcuTEscCNCfYnJ6bFxtebRlZJOqtPYrohMPw=
Subject key identifier: FA:5B:48:A8:39:9D:46:B8:BF:27:32:BE:58:FD:F9:9D:89:36:71:03
Certificate issuer: /CN=b2ed1d6066f4e4654ef5f3cc70a5d905a9af8290
Certificate serial: 019423D7ED3B35C785CB6A85E3ECE6D947CE
Authority key identifier: B2:ED:1D:60:66:F4:E4:65:4E:F5:F3:CC:70:A5:D9:05:A9:AF:82:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/su0dYGb05GVO9fPMcKXZBamvgpA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/1182cb-5f95-4cd4-b72f-46b46fc0e496/1/1-ltIqDmdRri_JzK-WP35nYk2cQM.roa
Signing time: Wed 01 Jan 2025 21:49:01 +0000
ROA not before: Wed 01 Jan 2025 21:49:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 19905
IP address blocks: 217.145.160.0/20 maxlen: 24
217.145.162.0/24 maxlen: 24
217.145.164.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:ed:3b:35:c7:85:cb:6a:85:e3:ec:e6:d9:47:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2ed1d6066f4e4654ef5f3cc70a5d905a9af8290
Validity
Not Before: Jan 1 21:49:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fa5b48a8399d46b8bf2732be58fdf99d89367103
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:d7:0e:b6:ad:2a:fe:93:32:90:97:10:dd:c6:
4c:b8:b9:9d:7d:5a:7f:72:a4:0d:d9:ac:d1:4c:7c:
91:3e:d8:c7:c2:86:b9:3d:3a:5c:8d:4b:73:f1:b6:
d1:a8:bd:d1:2b:97:ad:5e:0b:52:53:2f:0e:64:a0:
fc:c9:41:9a:82:2c:9c:55:73:bd:c2:9a:de:b4:18:
d5:28:15:9a:8f:39:2c:79:ba:ba:94:38:aa:2a:48:
52:96:c3:b4:13:cd:a2:a8:75:04:28:c7:5d:3f:89:
7f:33:31:37:51:c1:e6:7d:ec:5f:75:74:b1:9b:8a:
fd:e2:a4:e9:81:48:2d:40:45:b4:81:70:b6:25:8e:
53:b5:de:0a:63:6d:52:e5:bd:bd:af:f3:98:8c:b7:
8e:77:ad:31:49:ac:35:57:75:81:6d:6e:92:fe:15:
be:c4:8e:e5:ba:16:d6:a6:30:db:11:7b:c3:6d:ef:
08:14:7e:22:f1:1e:5c:75:21:7a:17:0f:9b:52:70:
a4:e7:20:d2:4a:7c:a2:e8:95:ac:31:4d:e8:6f:0b:
33:74:c6:5e:77:62:91:dc:49:d9:72:35:dd:fb:56:
46:d6:5f:f1:42:6d:b8:fa:8f:84:fb:5a:b1:67:e1:
2a:6a:18:31:fe:d9:32:7a:83:56:39:e7:bc:f4:ca:
14:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:5B:48:A8:39:9D:46:B8:BF:27:32:BE:58:FD:F9:9D:89:36:71:03
X509v3 Authority Key Identifier:
keyid:B2:ED:1D:60:66:F4:E4:65:4E:F5:F3:CC:70:A5:D9:05:A9:AF:82:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/su0dYGb05GVO9fPMcKXZBamvgpA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/1182cb-5f95-4cd4-b72f-46b46fc0e496/1/1-ltIqDmdRri_JzK-WP35nYk2cQM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/1182cb-5f95-4cd4-b72f-46b46fc0e496/1/su0dYGb05GVO9fPMcKXZBamvgpA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.145.160.0/20
Signature Algorithm: sha256WithRSAEncryption
1e:19:9e:bd:9e:40:4a:37:32:0b:f9:c4:c9:ae:c9:9c:53:28:
36:6f:2a:3b:88:c5:ab:1e:cf:d6:f5:6c:d0:41:41:af:49:8f:
b7:d5:23:3a:d5:f2:af:eb:d6:e6:a1:ba:5d:ad:b3:5f:d8:bf:
a8:d7:3d:d6:a7:76:07:48:a4:24:e4:7a:e3:e3:f3:ab:08:6c:
e4:f2:91:77:ff:35:56:21:c9:43:9d:27:a4:1d:82:e2:73:c3:
5c:4b:f1:b5:16:2a:c9:42:29:47:d6:90:cd:57:2c:de:89:01:
6b:c6:d8:28:69:8b:47:6a:ca:8f:7c:ee:8a:74:10:96:34:1e:
f3:5e:9f:d9:76:e8:af:fe:e2:b7:a2:33:1b:7e:94:42:9b:df:
74:46:5a:50:42:4b:4b:d7:9f:d2:dc:ad:21:d8:50:73:fc:32:
5b:6e:79:c2:17:0a:84:10:0a:ef:3c:04:7d:60:0d:ef:60:2c:
e0:74:b9:8e:65:da:70:58:cf:30:be:34:6f:e2:4b:e2:8c:f4:
cf:56:64:96:ff:ef:dc:36:27:2b:4b:7a:bc:14:c3:78:9f:a6:
fa:f3:13:b9:0e:72:02:83:57:a5:33:5e:07:67:7c:6d:85:6d:
f0:2a:78:23:3f:78:d5:6b:80:b9:11:d8:99:8f:4f:35:5e:36:
da:5e:53:56
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZQj1+07NceFy2qF4+zm2UfOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyZWQxZDYwNjZmNGU0NjU0ZWY1ZjNjYzcwYTVkOTA1YTlh
ZjgyOTAwHhcNMjUwMTAxMjE0OTAxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYTViNDhhODM5OWQ0NmI4YmYyNzMyYmU1OGZkZjk5ZDg5MzY3MTAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA89cOtq0q/pMykJcQ3cZMuLmdfVp/
cqQN2azRTHyRPtjHwoa5PTpcjUtz8bbRqL3RK5etXgtSUy8OZKD8yUGagiycVXO9
wpretBjVKBWajzksebq6lDiqKkhSlsO0E82iqHUEKMddP4l/MzE3UcHmfexfdXSx
m4r94qTpgUgtQEW0gXC2JY5Ttd4KY21S5b29r/OYjLeOd60xSaw1V3WBbW6S/hW+
xI7luhbWpjDbEXvDbe8IFH4i8R5cdSF6Fw+bUnCk5yDSSnyi6JWsMU3obwszdMZe
d2KR3EnZcjXd+1ZG1l/xQm24+o+E+1qxZ+Eqahgx/tkyeoNWOee89MoUawIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFPpbSKg5nUa4vycyvlj9+Z2JNnEDMB8GA1UdIwQY
MBaAFLLtHWBm9ORlTvXzzHCl2QWpr4KQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc3UwZFlHYjA1R1ZPOWZQTWNLWFpCYW12Z3BBLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS8xMTgyY2ItNWY5NS00Y2Q0LWI3MmYt
NDZiNDZmYzBlNDk2LzEvMS1sdElxRG1kUnJpX0p6Sy1XUDM1bllrMmNRTS5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvMzUvMTE4MmNiLTVmOTUtNGNkNC1iNzJmLTQ2YjQ2ZmMwZTQ5
Ni8xL3N1MGRZR2IwNUdWTzlmUE1jS1haQmFtdmdwQS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBNmRoDAN
BgkqhkiG9w0BAQsFAAOCAQEAHhmevZ5ASjcyC/nEya7JnFMoNm8qO4jFqx7P1vVs
0EFBr0mPt9UjOtXyr+vW5qG6Xa2zX9i/qNc91qd2B0ikJOR64+Pzqwhs5PKRd/81
ViHJQ50npB2C4nPDXEvxtRYqyUIpR9aQzVcs3okBa8bYKGmLR2rKj3zuinQQljQe
816f2Xbor/7it6IzG36UQpvfdEZaUEJLS9ef0tytIdhQc/wyW255whcKhBAK7zwE
fWAN72As4HS5jmXacFjPML40b+JL4oz0z1Zklv/v3DYnK0t6vBTDeJ+m+vMTuQ5y
AoNXpTNeB2d8bYVt8Cp4Iz941WuAuRHYmY9PNV422l5TVg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 08:53:44 2025 by rpki-client