Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/374fd1-02c2-4671-bdc9-c3cc5de1ece9/1/UbRiiNRPdI8MdUZD3H45dXG9KbE.roa
File: UbRiiNRPdI8MdUZD3H45dXG9KbE.roa (raw, json)
Hash identifier: ++edDwYhafn/DmjVTYR5FglX/ixBfBBX5Ov1+q3i1ek=
Subject key identifier: 51:B4:62:88:D4:4F:74:8F:0C:75:46:43:DC:7E:39:75:71:BD:29:B1
Certificate issuer: /CN=8bdac18a7ad501ba7ea13567909f17e4f7327413
Certificate serial: 019422FC1BA0FA471CFB72A977EF59044E03
Authority key identifier: 8B:DA:C1:8A:7A:D5:01:BA:7E:A1:35:67:90:9F:17:E4:F7:32:74:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i9rBinrVAbp-oTVnkJ8X5PcydBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/374fd1-02c2-4671-bdc9-c3cc5de1ece9/1/UbRiiNRPdI8MdUZD3H45dXG9KbE.roa
Signing time: Wed 01 Jan 2025 17:48:54 +0000
ROA not before: Wed 01 Jan 2025 17:48:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198433
IP address blocks: 45.9.163.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:1b:a0:fa:47:1c:fb:72:a9:77:ef:59:04:4e:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bdac18a7ad501ba7ea13567909f17e4f7327413
Validity
Not Before: Jan 1 17:48:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=51b46288d44f748f0c754643dc7e397571bd29b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:90:70:44:7e:6e:2e:82:53:f5:2e:43:73:ad:
57:d3:bb:22:37:f6:f1:05:38:f3:fd:83:9b:57:89:
1f:09:57:5f:c2:5d:28:5b:87:1b:96:ed:84:33:91:
e8:c3:09:2b:f3:dc:3f:02:06:53:c9:fc:57:97:90:
04:dc:44:73:30:6b:53:87:4d:b0:c2:1d:82:c0:af:
8e:b6:cd:13:c1:1e:87:7d:09:27:45:4e:13:1a:a8:
28:ab:2b:04:1b:50:48:e4:21:72:be:2a:a9:af:de:
28:3b:fa:af:ef:c9:25:82:52:bb:04:25:76:bd:2b:
a6:60:7b:ed:e6:5f:63:9c:16:d5:0b:5c:b3:d1:33:
ee:51:3d:e1:22:41:a9:83:30:0f:2a:b3:ca:5f:d8:
8e:41:14:46:ad:a6:80:c7:63:fd:7f:57:1c:fe:57:
b8:aa:42:35:ec:ac:a4:96:3f:fa:13:1c:b6:1c:94:
b4:e1:a4:92:a9:ea:b0:fd:93:c6:f4:69:e3:69:3c:
1a:9d:e2:1e:3d:dc:b1:36:79:37:79:6e:91:93:d1:
fb:60:ed:05:5d:dc:56:70:81:a6:93:76:a1:3b:84:
aa:c4:f6:2a:dd:41:9f:3f:51:3d:38:fd:8d:61:14:
c0:e8:18:75:ba:c8:c1:5b:ef:44:af:bd:50:28:f7:
8e:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:B4:62:88:D4:4F:74:8F:0C:75:46:43:DC:7E:39:75:71:BD:29:B1
X509v3 Authority Key Identifier:
keyid:8B:DA:C1:8A:7A:D5:01:BA:7E:A1:35:67:90:9F:17:E4:F7:32:74:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i9rBinrVAbp-oTVnkJ8X5PcydBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/374fd1-02c2-4671-bdc9-c3cc5de1ece9/1/UbRiiNRPdI8MdUZD3H45dXG9KbE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/374fd1-02c2-4671-bdc9-c3cc5de1ece9/1/i9rBinrVAbp-oTVnkJ8X5PcydBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.163.0/24
Signature Algorithm: sha256WithRSAEncryption
66:2c:c6:11:28:a5:c6:a0:d8:5d:dc:a8:fb:e0:a6:7c:98:20:
36:3b:83:e4:69:6c:eb:16:c5:4a:76:8b:f1:c0:de:0e:d4:20:
e9:e7:ff:b7:f5:e5:60:01:1d:33:ba:9a:ca:75:2d:6e:3b:1e:
6c:66:05:06:9e:57:d3:16:5e:b7:73:71:25:a3:4b:8a:f6:08:
6b:ee:23:58:25:30:1d:50:af:71:29:04:ba:92:4d:de:3a:82:
8b:5a:c2:94:58:36:cd:f4:9f:5e:cf:61:e7:49:49:8a:59:db:
b3:65:a8:64:fb:db:5f:51:0c:b7:26:e8:07:71:a7:e4:5c:b7:
69:25:dd:ff:5b:ab:7c:8e:07:b0:d0:9d:f4:c0:51:24:79:0e:
e0:98:16:86:0f:b8:82:b7:69:db:71:1a:b7:4f:d5:4f:61:5d:
72:fa:ef:c1:77:48:df:3c:ee:10:ee:e0:19:87:c9:b5:e5:dd:
41:3b:34:37:ad:fd:19:6d:25:58:16:ad:1f:1d:99:8d:99:21:
b2:e6:97:c5:3b:2e:3a:16:4e:70:ce:56:e1:25:0d:25:9a:39:
66:c7:7e:ad:22:bd:6d:a9:fe:23:71:60:d9:d7:5c:e1:18:72:
6b:92:a1:4f:cd:9e:76:0b:7e:c0:58:1d:f3:56:f7:54:43:fd:
2c:c3:f5:c2
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQi/Bug+kcc+3Kpd+9ZBE4DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiZGFjMThhN2FkNTAxYmE3ZWExMzU2NzkwOWYxN2U0Zjcz
Mjc0MTMwHhcNMjUwMTAxMTc0ODU0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MWI0NjI4OGQ0NGY3NDhmMGM3NTQ2NDNkYzdlMzk3NTcxYmQyOWIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh5BwRH5uLoJT9S5Dc61X07siN/bx
BTjz/YObV4kfCVdfwl0oW4cblu2EM5Howwkr89w/AgZTyfxXl5AE3ERzMGtTh02w
wh2CwK+Ots0TwR6HfQknRU4TGqgoqysEG1BI5CFyviqpr94oO/qv78klglK7BCV2
vSumYHvt5l9jnBbVC1yz0TPuUT3hIkGpgzAPKrPKX9iOQRRGraaAx2P9f1cc/le4
qkI17Kyklj/6Exy2HJS04aSSqeqw/ZPG9GnjaTwaneIePdyxNnk3eW6Rk9H7YO0F
XdxWcIGmk3ahO4SqxPYq3UGfP1E9OP2NYRTA6Bh1usjBW+9Er71QKPeOWQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFG0YojUT3SPDHVGQ9x+OXVxvSmxMB8GA1UdIwQY
MBaAFIvawYp61QG6fqE1Z5CfF+T3MnQTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTlyQmluclZBYnAtb1RWbmtKOFg1UGN5ZEJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS8zNzRmZDEtMDJjMi00NjcxLWJkYzkt
YzNjYzVkZTFlY2U5LzEvVWJSaWlOUlBkSThNZFVaRDNINDVkWEc5S2JFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS8zNzRmZDEtMDJjMi00NjcxLWJkYzktYzNjYzVkZTFlY2U5
LzEvaTlyQmluclZBYnAtb1RWbmtKOFg1UGN5ZEJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALQmjMA0G
CSqGSIb3DQEBCwUAA4IBAQBmLMYRKKXGoNhd3Kj74KZ8mCA2O4PkaWzrFsVKdovx
wN4O1CDp5/+39eVgAR0zuprKdS1uOx5sZgUGnlfTFl63c3Elo0uK9ghr7iNYJTAd
UK9xKQS6kk3eOoKLWsKUWDbN9J9ez2HnSUmKWduzZahk+9tfUQy3JugHcafkXLdp
Jd3/W6t8jgew0J30wFEkeQ7gmBaGD7iCt2nbcRq3T9VPYV1y+u/Bd0jfPO4Q7uAZ
h8m15d1BOzQ3rf0ZbSVYFq0fHZmNmSGy5pfFOy46Fk5wzlbhJQ0lmjlmx36tIr1t
qf4jcWDZ11zhGHJrkqFPzZ52C37AWB3zVvdUQ/0sw/XC
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:41:48 2025 by rpki-client