Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/df21cb-08ac-4e5c-b854-e3ab9087d403/1/lCx0H2SpviByt755DhYFFB87u3g.roa
File: lCx0H2SpviByt755DhYFFB87u3g.roa (raw, json)
Hash identifier: AZWgazLt+yp5aameWZEf9hj1qI2zyq8kEBHr5Xd8xo4=
Subject key identifier: 94:2C:74:1F:64:A9:BE:20:72:B7:BE:79:0E:16:05:14:1F:3B:BB:78
Certificate issuer: /CN=9b32a2e8fcbeee63020ba93daab9076c37bc9991
Certificate serial: 01942669DEA14D8AA4529DFED1B37CD765E6
Authority key identifier: 9B:32:A2:E8:FC:BE:EE:63:02:0B:A9:3D:AA:B9:07:6C:37:BC:99:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mzKi6Py-7mMCC6k9qrkHbDe8mZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/df21cb-08ac-4e5c-b854-e3ab9087d403/1/lCx0H2SpviByt755DhYFFB87u3g.roa
Signing time: Thu 02 Jan 2025 09:47:39 +0000
ROA not before: Thu 02 Jan 2025 09:47:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57986
IP address blocks: 45.15.200.0/24 maxlen: 24
45.15.201.0/24 maxlen: 24
45.15.202.0/24 maxlen: 24
45.15.203.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:69:de:a1:4d:8a:a4:52:9d:fe:d1:b3:7c:d7:65:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b32a2e8fcbeee63020ba93daab9076c37bc9991
Validity
Not Before: Jan 2 09:47:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=942c741f64a9be2072b7be790e1605141f3bbb78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:15:68:ae:92:05:65:a8:fe:ec:7e:6a:46:61:
b9:9d:db:b7:1d:6d:e9:25:95:4e:c2:a8:46:be:7f:
a2:b2:83:6c:c9:0f:20:6c:14:1c:b7:27:cf:67:b3:
35:ac:a4:78:3e:6d:d9:ff:83:10:47:c9:ae:55:40:
61:9f:19:fb:df:07:6f:89:51:72:52:33:43:c3:72:
49:aa:dc:16:1c:64:e4:27:33:ad:8a:e1:be:58:0e:
53:3b:37:a3:25:c6:05:a7:fb:5b:51:5b:81:5a:18:
d1:8c:2f:ae:72:0e:0d:98:21:5c:73:e8:90:ee:9c:
a9:50:f7:4a:bc:e5:51:bf:94:8e:df:1d:3a:5e:ef:
88:36:5d:5a:25:00:e7:88:67:f2:d8:bb:a6:24:0c:
79:fb:e9:94:0b:3e:81:6d:2c:40:03:7f:53:9b:3a:
9e:00:a6:80:f8:27:4e:97:a4:c8:89:bd:a8:4f:4a:
77:3f:ef:42:a5:58:ea:f3:04:0d:9b:7f:fe:2b:a9:
b2:cd:d9:ae:65:c1:53:e6:e0:62:28:b9:44:9b:da:
b6:04:72:0e:fb:86:e4:9c:83:e9:c6:03:83:b9:15:
38:2e:7b:16:c5:fb:06:27:f1:b9:df:37:e0:df:5d:
e3:5e:71:a3:44:59:1a:2e:a3:e0:0c:6f:b8:c3:3f:
9b:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:2C:74:1F:64:A9:BE:20:72:B7:BE:79:0E:16:05:14:1F:3B:BB:78
X509v3 Authority Key Identifier:
keyid:9B:32:A2:E8:FC:BE:EE:63:02:0B:A9:3D:AA:B9:07:6C:37:BC:99:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mzKi6Py-7mMCC6k9qrkHbDe8mZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/df21cb-08ac-4e5c-b854-e3ab9087d403/1/lCx0H2SpviByt755DhYFFB87u3g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/df21cb-08ac-4e5c-b854-e3ab9087d403/1/mzKi6Py-7mMCC6k9qrkHbDe8mZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.15.200.0/22
Signature Algorithm: sha256WithRSAEncryption
0b:43:c0:17:a6:f7:b2:fc:dc:91:23:2a:2d:e4:e2:b8:78:2c:
93:00:b9:f3:db:d4:d3:98:67:9e:8d:0b:24:a5:67:3c:71:34:
7f:2a:be:28:50:8e:d5:e5:ee:03:95:a4:e4:93:41:93:20:0f:
26:3c:2d:4f:fb:7f:66:e3:cb:31:0f:6b:06:1d:1a:0f:2d:4c:
72:00:85:30:93:19:64:6d:95:86:f8:18:2a:c3:50:1d:56:92:
ab:24:12:51:a9:ff:64:b9:7c:96:d8:6d:ce:46:a6:16:0b:05:
66:7c:8d:68:15:fe:12:b3:15:c6:06:86:f7:e3:c9:96:98:b4:
c2:60:1b:ff:6c:44:a1:18:2c:c9:f8:d2:3d:23:b3:7b:7d:68:
46:58:34:20:a4:71:d7:d8:a8:4c:f0:dc:5a:c5:4d:30:c9:e5:
5e:c9:fd:06:1e:05:a9:3e:0f:d7:ae:45:83:4b:b1:97:66:f0:
08:35:ec:59:1b:ce:21:ff:c5:5b:9f:a9:39:97:b4:5b:84:a6:
b8:e2:94:8e:db:27:66:85:7c:b6:3e:d4:0a:e9:ce:f1:e6:79:
88:7f:aa:31:10:e3:19:81:23:7e:5f:31:e0:30:98:5e:96:41:
39:45:cf:2f:94:7c:99:b1:bc:3b:00:27:fd:e9:17:28:96:06:
09:8f:94:ab
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQmad6hTYqkUp3+0bN812XmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliMzJhMmU4ZmNiZWVlNjMwMjBiYTkzZGFhYjkwNzZjMzdi
Yzk5OTEwHhcNMjUwMTAyMDk0NzM5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NDJjNzQxZjY0YTliZTIwNzJiN2JlNzkwZTE2MDUxNDFmM2JiYjc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtBVorpIFZaj+7H5qRmG5ndu3HW3p
JZVOwqhGvn+isoNsyQ8gbBQctyfPZ7M1rKR4Pm3Z/4MQR8muVUBhnxn73wdviVFy
UjNDw3JJqtwWHGTkJzOtiuG+WA5TOzejJcYFp/tbUVuBWhjRjC+ucg4NmCFcc+iQ
7pypUPdKvOVRv5SO3x06Xu+INl1aJQDniGfy2LumJAx5++mUCz6BbSxAA39Tmzqe
AKaA+CdOl6TIib2oT0p3P+9CpVjq8wQNm3/+K6myzdmuZcFT5uBiKLlEm9q2BHIO
+4bknIPpxgODuRU4LnsWxfsGJ/G53zfg313jXnGjRFkaLqPgDG+4wz+bKQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJQsdB9kqb4gcre+eQ4WBRQfO7t4MB8GA1UdIwQY
MBaAFJsyouj8vu5jAgupPaq5B2w3vJmRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbXpLaTZQeS03bU1DQzZrOXFya0hiRGU4bVpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS9kZjIxY2ItMDhhYy00ZTVjLWI4NTQt
ZTNhYjkwODdkNDAzLzEvbEN4MEgyU3B2aUJ5dDc1NURoWUZGQjg3dTNnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS9kZjIxY2ItMDhhYy00ZTVjLWI4NTQtZTNhYjkwODdkNDAz
LzEvbXpLaTZQeS03bU1DQzZrOXFya0hiRGU4bVpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLQ/IMA0G
CSqGSIb3DQEBCwUAA4IBAQALQ8AXpvey/NyRIyot5OK4eCyTALnz29TTmGeejQsk
pWc8cTR/Kr4oUI7V5e4DlaTkk0GTIA8mPC1P+39m48sxD2sGHRoPLUxyAIUwkxlk
bZWG+Bgqw1AdVpKrJBJRqf9kuXyW2G3ORqYWCwVmfI1oFf4SsxXGBob348mWmLTC
YBv/bEShGCzJ+NI9I7N7fWhGWDQgpHHX2KhM8NxaxU0wyeVeyf0GHgWpPg/XrkWD
S7GXZvAINexZG84h/8Vbn6k5l7RbhKa44pSO2ydmhXy2PtQK6c7x5nmIf6oxEOMZ
gSN+XzHgMJhelkE5Rc8vlHyZsbw7ACf96RcolgYJj5Sr
-----END CERTIFICATE-----
Generated at Fri Apr 25 03:59:06 2025 by rpki-client