Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/dee578-f2c6-41c0-b728-ad163ab354c8/1/hOUd1wZ_zMaTKuCxsCn2r2bH2BU.roa
File: hOUd1wZ_zMaTKuCxsCn2r2bH2BU.roa (raw, json)
Hash identifier: bxwt1u/r3VzOjW3gEkeatdflQyeXrR7mqzyeYNfcLHY=
Subject key identifier: 84:E5:1D:D7:06:7F:CC:C6:93:2A:E0:B1:B0:29:F6:AF:66:C7:D8:15
Certificate issuer: /CN=27484956736549eab3b06e23aab89ca5993a8076
Certificate serial: 019421B1BE87091AA360440856051F99B03E
Authority key identifier: 27:48:49:56:73:65:49:EA:B3:B0:6E:23:AA:B8:9C:A5:99:3A:80:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J0hJVnNlSeqzsG4jqricpZk6gHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/dee578-f2c6-41c0-b728-ad163ab354c8/1/hOUd1wZ_zMaTKuCxsCn2r2bH2BU.roa
Signing time: Wed 01 Jan 2025 11:48:04 +0000
ROA not before: Wed 01 Jan 2025 11:48:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 137409
IP address blocks: 45.84.102.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:be:87:09:1a:a3:60:44:08:56:05:1f:99:b0:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27484956736549eab3b06e23aab89ca5993a8076
Validity
Not Before: Jan 1 11:48:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=84e51dd7067fccc6932ae0b1b029f6af66c7d815
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ad:7c:0e:c0:2d:2d:00:c9:7f:10:5c:84:1e:
4d:13:af:cb:ab:f4:12:2f:96:01:7e:2a:13:73:b1:
a0:70:1d:6e:81:66:dc:ae:27:61:98:78:ac:f1:6a:
b9:d3:14:f7:29:32:24:e9:7a:37:11:72:70:41:87:
45:ba:c3:69:d1:42:55:66:c0:8f:b2:a1:55:58:00:
d3:e2:78:95:62:e1:a6:81:8e:98:df:06:b5:95:15:
01:df:3a:08:82:51:b6:05:81:f9:98:51:c4:8b:b8:
54:8a:7b:de:97:94:31:c4:9b:54:27:ec:28:1e:2a:
59:11:5e:6e:ba:da:ba:61:f8:85:ad:5a:34:5b:72:
a5:89:67:73:06:28:79:f6:e3:a3:47:45:b0:51:92:
a5:8f:57:28:32:ab:8f:ea:ee:f6:30:ae:28:b2:d5:
6b:77:b6:35:29:d8:07:9a:34:09:a4:6e:73:7d:04:
0c:e2:ae:85:76:f4:8f:33:f0:50:e3:73:24:94:10:
c0:b3:a9:b9:b4:2c:c1:b8:b6:82:13:42:25:b0:81:
59:46:ed:e7:02:65:eb:6c:83:1f:f4:7a:c5:43:b1:
7d:6e:d9:f0:86:01:8c:cb:36:7e:3e:73:f1:ef:d1:
dc:e6:1a:3e:2e:bd:e6:3f:22:cf:6f:85:41:0d:55:
69:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:E5:1D:D7:06:7F:CC:C6:93:2A:E0:B1:B0:29:F6:AF:66:C7:D8:15
X509v3 Authority Key Identifier:
keyid:27:48:49:56:73:65:49:EA:B3:B0:6E:23:AA:B8:9C:A5:99:3A:80:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J0hJVnNlSeqzsG4jqricpZk6gHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/dee578-f2c6-41c0-b728-ad163ab354c8/1/hOUd1wZ_zMaTKuCxsCn2r2bH2BU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/dee578-f2c6-41c0-b728-ad163ab354c8/1/J0hJVnNlSeqzsG4jqricpZk6gHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.102.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:e9:21:67:09:7b:d4:e0:7c:13:1b:1f:33:86:ee:2c:03:ea:
f9:c3:7a:6f:8a:09:c8:b3:76:42:f7:de:31:6d:78:ec:be:f7:
38:a5:c8:82:e4:fe:b7:66:ef:7d:3c:14:04:bd:9e:2e:57:f3:
4f:96:f3:76:c0:19:f6:58:48:bb:3a:5b:a4:bf:da:7c:3d:0a:
8d:9d:eb:ab:f0:0b:61:72:4a:c2:13:31:9e:7b:7c:cc:7c:57:
fe:7b:b3:51:cb:35:c6:cd:fb:2d:45:72:32:2f:56:03:8d:6c:
48:48:8d:b8:3e:c1:88:52:f1:7c:1b:60:5d:a1:ac:d1:e5:e7:
01:2b:7e:da:b0:61:09:a3:1d:1d:af:89:65:2d:75:bc:6c:02:
18:a9:60:09:88:ab:46:c5:5d:00:8e:08:32:e7:84:de:05:1a:
0e:06:c9:43:da:bf:f1:6c:8a:81:c3:ed:22:43:d5:67:f6:14:
a2:87:dd:04:fc:18:24:94:b7:f4:ed:d4:c2:a4:d9:66:50:0b:
c2:bf:22:12:6d:46:7c:a6:fe:33:08:56:81:7b:73:19:b5:c7:
f5:cf:d6:66:c1:35:12:b0:79:7f:9a:ec:64:f1:1f:8b:9b:31:
7f:36:51:1f:03:8a:88:c0:9f:c3:f2:5d:71:f9:1a:ec:fb:ca:
58:d4:9b:de
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQhsb6HCRqjYEQIVgUfmbA+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3NDg0OTU2NzM2NTQ5ZWFiM2IwNmUyM2FhYjg5Y2E1OTkz
YTgwNzYwHhcNMjUwMTAxMTE0ODA0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NGU1MWRkNzA2N2ZjY2M2OTMyYWUwYjFiMDI5ZjZhZjY2YzdkODE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzq18DsAtLQDJfxBchB5NE6/Lq/QS
L5YBfioTc7GgcB1ugWbcridhmHis8Wq50xT3KTIk6Xo3EXJwQYdFusNp0UJVZsCP
sqFVWADT4niVYuGmgY6Y3wa1lRUB3zoIglG2BYH5mFHEi7hUinvel5QxxJtUJ+wo
HipZEV5uutq6YfiFrVo0W3KliWdzBih59uOjR0WwUZKlj1coMquP6u72MK4ostVr
d7Y1KdgHmjQJpG5zfQQM4q6FdvSPM/BQ43MklBDAs6m5tCzBuLaCE0IlsIFZRu3n
AmXrbIMf9HrFQ7F9btnwhgGMyzZ+PnPx79Hc5ho+Lr3mPyLPb4VBDVVp8QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFITlHdcGf8zGkyrgsbAp9q9mx9gVMB8GA1UdIwQY
MBaAFCdISVZzZUnqs7BuI6q4nKWZOoB2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjBoSlZuTmxTZXF6c0c0anFyaWNwWms2Z0hZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9kZWU1NzgtZjJjNi00MWMwLWI3Mjgt
YWQxNjNhYjM1NGM4LzEvaE9VZDF3Wl96TWFUS3VDeHNDbjJyMmJIMkJVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC9kZWU1NzgtZjJjNi00MWMwLWI3MjgtYWQxNjNhYjM1NGM4
LzEvSjBoSlZuTmxTZXF6c0c0anFyaWNwWms2Z0hZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALVRmMA0G
CSqGSIb3DQEBCwUAA4IBAQBe6SFnCXvU4HwTGx8zhu4sA+r5w3pvignIs3ZC994x
bXjsvvc4pciC5P63Zu99PBQEvZ4uV/NPlvN2wBn2WEi7Olukv9p8PQqNneur8Ath
ckrCEzGee3zMfFf+e7NRyzXGzfstRXIyL1YDjWxISI24PsGIUvF8G2BdoazR5ecB
K37asGEJox0dr4llLXW8bAIYqWAJiKtGxV0Ajggy54TeBRoOBslD2r/xbIqBw+0i
Q9Vn9hSih90E/BgklLf07dTCpNlmUAvCvyISbUZ8pv4zCFaBe3MZtcf1z9ZmwTUS
sHl/muxk8R+LmzF/NlEfA4qIwJ/D8l1x+Rrs+8pY1Jve
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:53:22 2025 by rpki-client