Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/mQAyTylwR8snqsrqlqWJ_oFHuBo.roa
File: mQAyTylwR8snqsrqlqWJ_oFHuBo.roa (raw, json)
Hash identifier: MJZkjWNM57Qae1JmddGVLOoT+ZO+sSMDPLoAj3VJyZI=
Subject key identifier: 99:00:32:4F:29:70:47:CB:27:AA:CA:EA:96:A5:89:FE:81:47:B8:1A
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 01942143F8AF0B0BA5EC69A7550E57CFB76E
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/mQAyTylwR8snqsrqlqWJ_oFHuBo.roa
Signing time: Wed 01 Jan 2025 09:48:10 +0000
ROA not before: Wed 01 Jan 2025 09:48:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34882
IP address blocks: 45.151.28.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:f8:af:0b:0b:a5:ec:69:a7:55:0e:57:cf:b7:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Jan 1 09:48:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9900324f297047cb27aacaea96a589fe8147b81a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:95:79:06:1a:f1:31:21:f5:cc:0a:d1:bc:ef:
dd:8c:5d:fa:8c:49:2c:4b:98:83:91:86:29:2c:3d:
ff:93:d1:f9:15:64:b5:fb:90:de:e3:5d:df:80:86:
0c:fa:f0:2c:ec:84:84:23:7c:8c:7a:17:83:6d:b4:
e3:47:43:d4:54:4b:7b:5e:2a:48:71:48:ba:a2:a7:
c4:3c:a7:a7:31:83:04:ad:22:d6:96:85:a2:23:56:
42:23:56:9c:61:33:7c:00:b8:6b:c3:1e:6d:63:44:
47:dd:90:6c:22:3b:a8:58:08:cc:0f:2b:8a:86:ba:
24:63:3f:ad:36:06:56:cf:2a:8e:5f:a9:bd:8e:38:
6a:63:bb:04:f8:11:fb:73:c9:96:74:53:4b:b6:bf:
0b:e4:f5:6b:3f:97:76:03:49:01:83:72:7e:33:d9:
f7:b2:bc:04:bd:1f:06:e0:f2:28:75:e5:ff:36:fe:
35:7b:67:e2:2f:1c:2a:cf:07:8b:9a:c5:8b:0e:26:
53:89:b2:9a:45:5c:66:08:e2:e5:ef:95:97:bb:07:
86:90:57:23:4c:32:12:a0:91:11:2c:89:34:0c:70:
31:81:2e:2f:54:cf:5c:84:42:7b:e3:40:f8:a7:b4:
c1:1b:d9:ce:cd:f3:0a:76:5c:93:49:1b:7d:50:37:
84:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:00:32:4F:29:70:47:CB:27:AA:CA:EA:96:A5:89:FE:81:47:B8:1A
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/mQAyTylwR8snqsrqlqWJ_oFHuBo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.28.0/24
Signature Algorithm: sha256WithRSAEncryption
29:4f:40:b3:d4:a7:12:de:55:21:12:72:8e:a4:45:51:f1:59:
a9:e5:83:38:ff:37:0f:95:9c:cf:26:9e:f5:5a:d1:0e:24:00:
3d:53:f8:00:b4:17:4c:5a:5b:24:ce:23:ee:ba:86:81:2d:cc:
61:31:df:0f:82:ee:4c:9c:b2:95:dd:56:58:b4:61:ee:b0:12:
df:d7:3c:47:13:b4:f0:4d:3e:fc:8b:8b:69:85:84:7b:34:e3:
ab:9d:40:db:fd:b7:73:61:a8:f8:52:c4:fb:83:72:96:d6:ea:
a1:e6:00:3e:8b:0c:1a:bf:e3:e4:a0:01:49:ae:db:1b:e5:f0:
f4:d4:9a:96:57:9a:1f:ce:8e:a8:db:9e:75:7e:23:71:10:b0:
b4:55:09:76:b7:da:70:89:f8:6a:66:14:0a:18:ec:d8:dd:d4:
8d:e7:9f:51:d8:e4:8c:46:99:7c:77:07:9d:b3:30:4b:64:12:
7a:d6:e4:39:7c:38:3f:db:39:c3:6f:c5:92:17:46:d4:a1:a2:
1a:38:45:df:6c:ae:42:a2:2c:87:65:df:a9:94:6b:a8:81:04:
15:7d:e3:96:e0:66:18:67:e8:ec:11:dc:c4:60:cf:bf:a2:e3:
94:fe:f3:cd:21:e8:33:c3:d3:56:b0:4c:0d:80:26:34:27:4f:
b1:d4:ff:52
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQhQ/ivCwul7GmnVQ5Xz7duMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5MzM1M2MxZmFiZTg5NmFmOGI4NWZlNzYwMGU0NjM0OTY4
ZmNjNGMwHhcNMjUwMTAxMDk0ODEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5OTAwMzI0ZjI5NzA0N2NiMjdhYWNhZWE5NmE1ODlmZTgxNDdiODFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApJV5BhrxMSH1zArRvO/djF36jEks
S5iDkYYpLD3/k9H5FWS1+5De413fgIYM+vAs7ISEI3yMeheDbbTjR0PUVEt7XipI
cUi6oqfEPKenMYMErSLWloWiI1ZCI1acYTN8ALhrwx5tY0RH3ZBsIjuoWAjMDyuK
hrokYz+tNgZWzyqOX6m9jjhqY7sE+BH7c8mWdFNLtr8L5PVrP5d2A0kBg3J+M9n3
srwEvR8G4PIodeX/Nv41e2fiLxwqzweLmsWLDiZTibKaRVxmCOLl75WXuweGkFcj
TDISoJERLIk0DHAxgS4vVM9chEJ740D4p7TBG9nOzfMKdlyTSRt9UDeEuwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJkAMk8pcEfLJ6rK6palif6BR7gaMB8GA1UdIwQY
MBaAFAkzU8H6volq+Lhf52AORjSWj8xMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGIt
MjM5ZDJmZTM5OGIxLzEvbVFBeVR5bHdSOHNucXNycWxxV0pfb0ZIdUJvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGItMjM5ZDJmZTM5OGIx
LzEvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZccMA0G
CSqGSIb3DQEBCwUAA4IBAQApT0Cz1KcS3lUhEnKOpEVR8Vmp5YM4/zcPlZzPJp71
WtEOJAA9U/gAtBdMWlskziPuuoaBLcxhMd8Pgu5MnLKV3VZYtGHusBLf1zxHE7Tw
TT78i4tphYR7NOOrnUDb/bdzYaj4UsT7g3KW1uqh5gA+iwwav+PkoAFJrtsb5fD0
1JqWV5ofzo6o2551fiNxELC0VQl2t9pwifhqZhQKGOzY3dSN559R2OSMRpl8dwed
szBLZBJ61uQ5fDg/2znDb8WSF0bUoaIaOEXfbK5CoiyHZd+plGuogQQVfeOW4GYY
Z+jsEdzEYM+/ouOU/vPNIegzw9NWsEwNgCY0J0+x1P9S
-----END CERTIFICATE-----
Generated at Fri Apr 25 14:00:43 2025 by rpki-client