Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/dee578-f2c6-41c0-b728-ad163ab354c8/1/aHgUlmeQvXSLOAXmjY6OG9x7CHw.roa
File: aHgUlmeQvXSLOAXmjY6OG9x7CHw.roa (raw, json)
Hash identifier: EkeJb1vk/DYNvMk3tNYmPq0HrdN72YN06ty6+3e7rPU=
Subject key identifier: 68:78:14:96:67:90:BD:74:8B:38:05:E6:8D:8E:8E:1B:DC:7B:08:7C
Certificate issuer: /CN=27484956736549eab3b06e23aab89ca5993a8076
Certificate serial: 019421B1BEEA6CBB426372DD219E8CE9811A
Authority key identifier: 27:48:49:56:73:65:49:EA:B3:B0:6E:23:AA:B8:9C:A5:99:3A:80:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J0hJVnNlSeqzsG4jqricpZk6gHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/dee578-f2c6-41c0-b728-ad163ab354c8/1/aHgUlmeQvXSLOAXmjY6OG9x7CHw.roa
Signing time: Wed 01 Jan 2025 11:48:04 +0000
ROA not before: Wed 01 Jan 2025 11:48:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202914
IP address blocks: 45.84.100.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:be:ea:6c:bb:42:63:72:dd:21:9e:8c:e9:81:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27484956736549eab3b06e23aab89ca5993a8076
Validity
Not Before: Jan 1 11:48:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=687814966790bd748b3805e68d8e8e1bdc7b087c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:e2:ca:f9:65:b9:97:a7:b4:f2:17:19:3f:8f:
bb:b5:ed:50:68:1a:91:3b:08:d7:90:5b:5c:71:1d:
49:ff:fb:74:13:f6:54:3f:9f:66:0d:86:20:ae:3e:
22:a8:94:d5:ea:c5:30:91:56:9f:0e:f6:c4:88:1b:
03:ea:a0:53:5e:38:d6:44:af:6e:5e:95:a6:6c:46:
75:3d:70:fe:04:18:4c:59:e7:5d:9b:6d:9a:b5:61:
42:9e:de:35:b2:76:bd:b5:87:77:8a:0f:68:54:f7:
7f:30:de:f2:5d:31:9e:35:1c:04:ed:77:6d:00:04:
ed:bf:55:56:9b:d3:99:99:46:2b:ae:0a:ab:9e:3b:
4a:b1:b4:00:9d:d7:fa:21:b8:57:8e:26:e4:b2:21:
ec:03:15:cd:04:42:9a:d0:7d:d5:51:cf:02:37:96:
b6:9d:f3:4b:78:fb:3a:c4:52:d0:30:bd:58:02:9e:
b8:cf:8e:8e:b3:e8:6e:75:bf:d7:f3:f0:44:be:11:
1d:03:11:8d:7f:a6:68:cb:33:11:89:12:63:a4:68:
72:67:36:66:0e:70:d7:53:85:3e:08:9b:8f:ba:36:
d4:83:ce:ea:57:a6:04:46:66:3a:0f:d2:05:1a:da:
4b:9f:7c:98:09:ac:74:65:e1:5c:40:c0:d9:37:19:
30:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:78:14:96:67:90:BD:74:8B:38:05:E6:8D:8E:8E:1B:DC:7B:08:7C
X509v3 Authority Key Identifier:
keyid:27:48:49:56:73:65:49:EA:B3:B0:6E:23:AA:B8:9C:A5:99:3A:80:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J0hJVnNlSeqzsG4jqricpZk6gHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/dee578-f2c6-41c0-b728-ad163ab354c8/1/aHgUlmeQvXSLOAXmjY6OG9x7CHw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/dee578-f2c6-41c0-b728-ad163ab354c8/1/J0hJVnNlSeqzsG4jqricpZk6gHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.100.0/24
Signature Algorithm: sha256WithRSAEncryption
84:d6:b8:2c:1d:07:88:c9:b5:d8:03:3e:28:b6:c9:c9:e0:60:
ee:2a:3b:49:51:92:18:69:b0:6e:ef:3d:07:47:46:77:5e:80:
20:57:fd:d9:49:3d:ae:96:5b:d2:bc:d7:01:4d:24:54:87:56:
88:79:e1:ee:07:ca:2b:78:14:4d:30:1f:a6:da:ce:32:01:34:
44:71:0d:6e:63:e9:f7:3b:da:1e:e1:21:b3:63:40:37:15:1f:
49:e1:c7:fe:e0:b5:c5:fe:9c:3e:7e:62:b9:70:1e:0b:6d:91:
78:f6:d3:d0:e5:45:3d:ab:e0:d5:77:2a:4c:4b:6e:a0:e1:18:
5d:fd:62:d5:8c:07:bc:25:f5:d3:00:de:14:c0:20:0f:56:cb:
2d:b3:ca:30:cf:f9:f1:15:b5:70:c0:df:92:79:34:3e:78:cd:
f1:9a:cc:31:5a:3d:dd:66:e4:2b:42:c1:bc:b4:89:c4:79:74:
cc:bb:c9:c7:16:66:5e:71:00:37:2e:af:8a:2e:3b:0f:f1:67:
4e:ba:ae:6e:14:ad:0a:a6:ec:f0:05:16:c3:35:9b:45:6b:8d:
d7:3b:f4:64:78:88:b2:45:d9:0c:8a:1a:60:2d:11:4c:6f:2b:
07:15:76:d3:31:61:b5:b2:17:ed:75:6b:c3:d6:af:60:7f:e1:
e0:7f:f3:aa
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQhsb7qbLtCY3LdIZ6M6YEaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3NDg0OTU2NzM2NTQ5ZWFiM2IwNmUyM2FhYjg5Y2E1OTkz
YTgwNzYwHhcNMjUwMTAxMTE0ODA0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ODc4MTQ5NjY3OTBiZDc0OGIzODA1ZTY4ZDhlOGUxYmRjN2IwODdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmuLK+WW5l6e08hcZP4+7te1QaBqR
OwjXkFtccR1J//t0E/ZUP59mDYYgrj4iqJTV6sUwkVafDvbEiBsD6qBTXjjWRK9u
XpWmbEZ1PXD+BBhMWeddm22atWFCnt41sna9tYd3ig9oVPd/MN7yXTGeNRwE7Xdt
AATtv1VWm9OZmUYrrgqrnjtKsbQAndf6IbhXjibksiHsAxXNBEKa0H3VUc8CN5a2
nfNLePs6xFLQML1YAp64z46Os+hudb/X8/BEvhEdAxGNf6ZoyzMRiRJjpGhyZzZm
DnDXU4U+CJuPujbUg87qV6YERmY6D9IFGtpLn3yYCax0ZeFcQMDZNxkwWwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGh4FJZnkL10izgF5o2Ojhvcewh8MB8GA1UdIwQY
MBaAFCdISVZzZUnqs7BuI6q4nKWZOoB2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjBoSlZuTmxTZXF6c0c0anFyaWNwWms2Z0hZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9kZWU1NzgtZjJjNi00MWMwLWI3Mjgt
YWQxNjNhYjM1NGM4LzEvYUhnVWxtZVF2WFNMT0FYbWpZNk9HOXg3Q0h3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC9kZWU1NzgtZjJjNi00MWMwLWI3MjgtYWQxNjNhYjM1NGM4
LzEvSjBoSlZuTmxTZXF6c0c0anFyaWNwWms2Z0hZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALVRkMA0G
CSqGSIb3DQEBCwUAA4IBAQCE1rgsHQeIybXYAz4otsnJ4GDuKjtJUZIYabBu7z0H
R0Z3XoAgV/3ZST2ullvSvNcBTSRUh1aIeeHuB8oreBRNMB+m2s4yATREcQ1uY+n3
O9oe4SGzY0A3FR9J4cf+4LXF/pw+fmK5cB4LbZF49tPQ5UU9q+DVdypMS26g4Rhd
/WLVjAe8JfXTAN4UwCAPVssts8owz/nxFbVwwN+SeTQ+eM3xmswxWj3dZuQrQsG8
tInEeXTMu8nHFmZecQA3Lq+KLjsP8WdOuq5uFK0KpuzwBRbDNZtFa43XO/RkeIiy
RdkMihpgLRFMbysHFXbTMWG1shftdWvD1q9gf+Hgf/Oq
-----END CERTIFICATE-----
Generated at Sat Apr 26 04:05:27 2025 by rpki-client