Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/384f29-fd4d-436a-b85b-00403b64055a/1/8K5eZmO6X2MbGoBeK8qQvKjxcoU.roa
File: 8K5eZmO6X2MbGoBeK8qQvKjxcoU.roa (raw, json)
Hash identifier: KbO6Ab2C27LaWeTnTdU2aLz+mT2b0V6KrOUj4Nm0t/k=
Subject key identifier: F0:AE:5E:66:63:BA:5F:63:1B:1A:80:5E:2B:CA:90:BC:A8:F1:72:85
Certificate issuer: /CN=498fe5b282b1c7db00f67bb4a13d9f79520508b7
Certificate serial: 01942369E09BE763798B794920B91BAC2012
Authority key identifier: 49:8F:E5:B2:82:B1:C7:DB:00:F6:7B:B4:A1:3D:9F:79:52:05:08:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SY_lsoKxx9sA9nu0oT2feVIFCLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/384f29-fd4d-436a-b85b-00403b64055a/1/8K5eZmO6X2MbGoBeK8qQvKjxcoU.roa
Signing time: Wed 01 Jan 2025 19:48:48 +0000
ROA not before: Wed 01 Jan 2025 19:48:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51889
IP address blocks: 45.147.76.0/22 maxlen: 22
45.147.76.0/23 maxlen: 23
45.147.76.0/24 maxlen: 24
45.147.77.0/24 maxlen: 24
45.147.78.0/23 maxlen: 23
45.147.78.0/24 maxlen: 24
45.147.79.0/24 maxlen: 24
91.226.246.0/24 maxlen: 24
2a13:1740::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:e0:9b:e7:63:79:8b:79:49:20:b9:1b:ac:20:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=498fe5b282b1c7db00f67bb4a13d9f79520508b7
Validity
Not Before: Jan 1 19:48:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f0ae5e6663ba5f631b1a805e2bca90bca8f17285
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:96:5d:5b:d7:ac:54:2a:2d:f5:3c:a6:d8:57:
63:07:da:63:fe:6f:d0:e0:ae:8d:36:e1:d5:37:07:
68:d7:58:42:e7:4d:92:37:63:d8:47:ba:9a:11:b9:
19:58:45:42:0f:49:a3:05:04:8d:22:28:00:b5:bc:
8c:8a:ea:d8:98:29:51:f7:e8:c4:47:28:2e:51:8e:
6b:30:9e:e2:00:78:5a:45:76:d0:28:1a:db:2a:bf:
5a:68:d1:a4:f1:59:00:db:55:da:04:d4:fe:5d:60:
56:74:ec:51:22:c1:1a:ab:07:3c:a5:8b:23:d0:3e:
77:e9:98:33:8e:ac:c1:19:5e:54:67:6d:eb:f5:cd:
4f:38:b1:b9:ec:e8:50:e4:a7:26:86:49:6e:f5:e8:
3f:16:05:21:50:a2:29:03:fb:bb:c6:0b:fc:83:1d:
02:a4:38:b5:44:72:91:b9:64:9e:cb:e8:dc:bc:09:
2b:b0:81:8f:45:af:42:61:18:60:6c:37:c6:c9:48:
fa:61:af:e1:97:2f:de:26:a4:c3:9c:e8:c0:50:62:
bc:2b:7c:f3:4e:f6:36:01:43:da:31:e6:31:3b:c2:
36:d8:bd:fb:de:15:bf:a6:d4:3a:6e:9e:66:55:9a:
47:90:e0:43:22:aa:d5:04:3c:3e:28:bb:ad:e6:9a:
1c:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:AE:5E:66:63:BA:5F:63:1B:1A:80:5E:2B:CA:90:BC:A8:F1:72:85
X509v3 Authority Key Identifier:
keyid:49:8F:E5:B2:82:B1:C7:DB:00:F6:7B:B4:A1:3D:9F:79:52:05:08:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SY_lsoKxx9sA9nu0oT2feVIFCLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/384f29-fd4d-436a-b85b-00403b64055a/1/8K5eZmO6X2MbGoBeK8qQvKjxcoU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/384f29-fd4d-436a-b85b-00403b64055a/1/SY_lsoKxx9sA9nu0oT2feVIFCLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.147.76.0/22
91.226.246.0/24
IPv6:
2a13:1740::/29
Signature Algorithm: sha256WithRSAEncryption
85:3a:22:5a:03:9a:dc:bf:13:cb:45:44:39:a3:82:2f:6a:6c:
4d:1a:df:d3:a5:83:74:b4:fd:dc:c3:a7:8e:79:19:bc:aa:24:
ad:52:b8:ce:87:f6:7d:26:96:78:78:13:ac:f0:ad:71:4c:db:
43:05:3d:d2:46:00:61:6a:26:7c:01:4c:c8:a1:71:a4:c2:7a:
53:43:86:1e:e8:94:34:d6:51:19:3e:12:2e:f4:99:16:d2:21:
a3:e9:62:bf:9a:0a:74:62:44:7e:0e:eb:9b:ca:39:8f:8f:28:
49:28:72:61:76:df:15:8c:e6:a6:9c:ff:e8:b7:99:ea:b8:54:
09:a1:5c:e4:e2:47:53:58:12:c6:e6:19:ea:2b:ca:a5:93:2e:
79:0f:10:5e:e3:85:29:fd:5f:3b:fe:26:93:4b:05:42:b7:a2:
0c:86:8d:ee:6a:7d:3d:0a:c3:b6:7e:08:09:43:09:8a:53:f9:
b7:de:6d:40:2a:a8:66:9f:63:f7:da:4a:fb:62:79:8d:fa:54:
ac:89:24:f8:ad:12:23:cc:bf:1a:e7:26:ca:14:c3:c0:c1:04:
6e:33:ba:ff:3c:13:3e:36:2d:10:62:15:62:77:ab:10:a4:86:
ab:89:11:7f:4d:62:7b:a1:4f:10:e2:0a:7f:7e:27:de:15:75:
26:5e:52:45
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAZQjaeCb52N5i3lJILkbrCASMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5OGZlNWIyODJiMWM3ZGIwMGY2N2JiNGExM2Q5Zjc5NTIw
NTA4YjcwHhcNMjUwMTAxMTk0ODQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMGFlNWU2NjYzYmE1ZjYzMWIxYTgwNWUyYmNhOTBiY2E4ZjE3Mjg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgpZdW9esVCot9Tym2FdjB9pj/m/Q
4K6NNuHVNwdo11hC502SN2PYR7qaEbkZWEVCD0mjBQSNIigAtbyMiurYmClR9+jE
RyguUY5rMJ7iAHhaRXbQKBrbKr9aaNGk8VkA21XaBNT+XWBWdOxRIsEaqwc8pYsj
0D536ZgzjqzBGV5UZ23r9c1POLG57OhQ5Kcmhklu9eg/FgUhUKIpA/u7xgv8gx0C
pDi1RHKRuWSey+jcvAkrsIGPRa9CYRhgbDfGyUj6Ya/hly/eJqTDnOjAUGK8K3zz
TvY2AUPaMeYxO8I22L373hW/ptQ6bp5mVZpHkOBDIqrVBDw+KLut5pocEQIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFPCuXmZjul9jGxqAXivKkLyo8XKFMB8GA1UdIwQY
MBaAFEmP5bKCscfbAPZ7tKE9n3lSBQi3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU1lfbHNvS3h4OXNBOW51MG9UMmZlVklGQ0xjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zODRmMjktZmQ0ZC00MzZhLWI4NWIt
MDA0MDNiNjQwNTVhLzEvOEs1ZVptTzZYMk1iR29CZUs4cVF2S2p4Y29VLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8zODRmMjktZmQ0ZC00MzZhLWI4NWItMDA0MDNiNjQwNTVh
LzEvU1lfbHNvS3h4OXNBOW51MG9UMmZlVklGQ0xjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCLZNMAwQA
W+L2MA0EAgACMAcDBQMqExdAMA0GCSqGSIb3DQEBCwUAA4IBAQCFOiJaA5rcvxPL
RUQ5o4IvamxNGt/TpYN0tP3cw6eOeRm8qiStUrjOh/Z9JpZ4eBOs8K1xTNtDBT3S
RgBhaiZ8AUzIoXGkwnpTQ4Ye6JQ01lEZPhIu9JkW0iGj6WK/mgp0YkR+DuubyjmP
jyhJKHJhdt8VjOamnP/ot5nquFQJoVzk4kdTWBLG5hnqK8qlky55DxBe44Up/V87
/iaTSwVCt6IMho3uan09CsO2fggJQwmKU/m33m1AKqhmn2P32kr7YnmN+lSsiST4
rRIjzL8a5ybKFMPAwQRuM7r/PBM+Ni0QYhVid6sQpIariRF/TWJ7oU8Q4gp/fife
FXUmXlJF
-----END CERTIFICATE-----
Generated at Sun Apr 27 01:22:31 2025 by rpki-client