Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/_LfCjVL2aUy3C05dgM65wfSAqG8.roa
File: _LfCjVL2aUy3C05dgM65wfSAqG8.roa (raw, json)
Hash identifier: W5FLNM3UnQwWsi8Fsqqk6dRVpG7KckQ7yMc9OaZwhNA=
Subject key identifier: FC:B7:C2:8D:52:F6:69:4C:B7:0B:4E:5D:80:CE:B9:C1:F4:80:A8:6F
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0194252283441D44E822C806C80B7370F2D8
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/_LfCjVL2aUy3C05dgM65wfSAqG8.roa
Signing time: Thu 02 Jan 2025 03:50:06 +0000
ROA not before: Thu 02 Jan 2025 03:50:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215137
IP address blocks: 45.136.138.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:83:44:1d:44:e8:22:c8:06:c8:0b:73:70:f2:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 03:50:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fcb7c28d52f6694cb70b4e5d80ceb9c1f480a86f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:26:9a:35:07:1c:1f:90:cd:94:35:c9:2a:66:
e0:39:5a:0b:f4:8b:3d:d4:65:f3:e6:a7:76:b6:e6:
94:5a:13:a3:79:31:b1:52:92:7a:05:b6:a0:6c:1e:
e4:8e:95:9f:c6:7b:52:84:50:dc:aa:ae:f8:9e:8d:
6f:0a:71:de:c9:35:46:63:9c:3e:a3:7e:85:b7:57:
b6:2b:7f:0e:77:7e:c9:99:7f:c5:0d:cc:94:77:95:
02:f1:4f:fc:2f:72:30:6c:52:29:69:0b:97:62:79:
45:0e:a0:ff:8a:e2:8c:4e:59:a4:9d:88:7f:d5:61:
b3:72:06:35:ed:9b:26:ed:de:3e:4e:d7:37:3d:20:
ef:48:2e:1f:6e:63:ee:ee:54:6a:99:8b:2f:44:4c:
30:84:85:e7:de:21:35:ae:66:0f:29:55:e9:ef:b0:
4c:62:d0:bf:d7:7e:ed:06:d2:92:c7:bf:1e:2f:6d:
0e:37:f4:54:ff:a9:00:b2:2e:64:a1:31:94:3b:54:
2b:f6:c6:54:0e:40:36:b7:f9:59:6b:9b:2e:3f:6d:
53:a4:bb:57:53:00:74:4e:cf:c4:08:22:5f:5c:6f:
87:27:74:86:1c:c4:f4:d5:0f:6e:c5:50:9f:d1:cf:
b6:2e:c2:7d:71:f8:bd:a7:89:57:e4:9d:c4:18:23:
71:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:B7:C2:8D:52:F6:69:4C:B7:0B:4E:5D:80:CE:B9:C1:F4:80:A8:6F
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/_LfCjVL2aUy3C05dgM65wfSAqG8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.136.138.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:d2:e1:4e:41:ab:10:1c:ee:83:fa:eb:76:1a:dc:66:f4:4a:
4d:ca:b8:dc:d2:0d:70:ad:45:77:98:24:f3:b2:2e:8b:a8:1c:
10:d9:df:94:33:82:00:6e:3d:1c:9a:bb:dd:e2:32:c6:ac:da:
62:c8:5b:02:5a:15:ac:d6:70:c3:85:a2:26:2e:eb:cc:8f:05:
58:31:26:4f:2c:ab:0f:f5:63:22:68:ae:85:dc:49:4b:af:bd:
83:f7:e4:ca:55:89:a8:59:e8:24:9c:84:ad:7d:6a:4c:5e:a4:
71:38:41:0f:11:6b:b3:82:76:d0:a7:36:8f:c3:6e:a8:27:02:
a7:e8:2c:42:c5:95:23:18:69:fe:86:b7:82:97:ef:30:d6:df:
5c:af:a8:96:d1:98:fd:8c:c0:04:57:dd:2f:c1:46:af:0e:e5:
1a:f3:d0:23:cb:85:8c:d2:4e:ab:23:05:d1:36:aa:d6:7e:3e:
78:4f:0b:a9:1d:52:82:18:68:6b:2e:dc:e7:ee:0a:88:67:21:
10:6a:f8:84:18:ea:b4:6f:20:0e:b2:e8:96:a1:ca:65:5c:5b:
d4:74:74:09:a5:6c:22:ca:2e:fc:4c:4e:b2:73:c9:e3:50:b5:
a7:43:d4:11:71:c4:cf:60:4b:cb:ce:b3:3d:56:c4:6b:62:37:
26:f7:04:be
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQlIoNEHUToIsgGyAtzcPLYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjUwMTAyMDM1MDA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmY2I3YzI4ZDUyZjY2OTRjYjcwYjRlNWQ4MGNlYjljMWY0ODBhODZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0CaaNQccH5DNlDXJKmbgOVoL9Is9
1GXz5qd2tuaUWhOjeTGxUpJ6BbagbB7kjpWfxntShFDcqq74no1vCnHeyTVGY5w+
o36Ft1e2K38Od37JmX/FDcyUd5UC8U/8L3IwbFIpaQuXYnlFDqD/iuKMTlmknYh/
1WGzcgY17Zsm7d4+Ttc3PSDvSC4fbmPu7lRqmYsvREwwhIXn3iE1rmYPKVXp77BM
YtC/137tBtKSx78eL20ON/RU/6kAsi5koTGUO1Qr9sZUDkA2t/lZa5suP21TpLtX
UwB0Ts/ECCJfXG+HJ3SGHMT01Q9uxVCf0c+2LsJ9cfi9p4lX5J3EGCNxcwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPy3wo1S9mlMtwtOXYDOucH0gKhvMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvX0xmQ2pWTDJhVXkzQzA1ZGdNNjV3ZlNBcUc4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYiKMA0G
CSqGSIb3DQEBCwUAA4IBAQBb0uFOQasQHO6D+ut2Gtxm9EpNyrjc0g1wrUV3mCTz
si6LqBwQ2d+UM4IAbj0cmrvd4jLGrNpiyFsCWhWs1nDDhaImLuvMjwVYMSZPLKsP
9WMiaK6F3ElLr72D9+TKVYmoWegknIStfWpMXqRxOEEPEWuzgnbQpzaPw26oJwKn
6CxCxZUjGGn+hreCl+8w1t9cr6iW0Zj9jMAEV90vwUavDuUa89Ajy4WM0k6rIwXR
NqrWfj54TwupHVKCGGhrLtzn7gqIZyEQaviEGOq0byAOsuiWocplXFvUdHQJpWwi
yi78TE6yc8njULWnQ9QRccTPYEvLzrM9VsRrYjcm9wS+
-----END CERTIFICATE-----
Generated at Fri Apr 25 14:26:05 2025 by rpki-client