Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/8ab976-e53a-4c43-a8e8-2014fe0a1611/1/nG0u5JVbsOz2NWyBPT2f0id55qg.roa
File: nG0u5JVbsOz2NWyBPT2f0id55qg.roa (raw, json)
Hash identifier: rcOcuJUXRrdjca7vuzAqSL0w9cdWcN3PeqOknKKlStg=
Subject key identifier: 9C:6D:2E:E4:95:5B:B0:EC:F6:35:6C:81:3D:3D:9F:D2:27:79:E6:A8
Certificate issuer: /CN=323e300a7b63ad4fefbae671f51abc24f1128719
Certificate serial: 019423D765A5E7FCC6E06DD7148A890A064B
Authority key identifier: 32:3E:30:0A:7B:63:AD:4F:EF:BA:E6:71:F5:1A:BC:24:F1:12:87:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mj4wCntjrU_vuuZx9Rq8JPEShxk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/8ab976-e53a-4c43-a8e8-2014fe0a1611/1/nG0u5JVbsOz2NWyBPT2f0id55qg.roa
Signing time: Wed 01 Jan 2025 21:48:26 +0000
ROA not before: Wed 01 Jan 2025 21:48:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208418
IP address blocks: 45.81.52.0/22 maxlen: 22
45.81.52.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:65:a5:e7:fc:c6:e0:6d:d7:14:8a:89:0a:06:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=323e300a7b63ad4fefbae671f51abc24f1128719
Validity
Not Before: Jan 1 21:48:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9c6d2ee4955bb0ecf6356c813d3d9fd22779e6a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:1d:8f:b7:6e:ef:33:cd:9e:dd:b5:2f:f1:7e:
4c:c9:55:e4:0f:fb:25:0b:a0:73:95:c1:43:6b:3d:
a5:8e:c9:f5:bf:c3:db:8c:f2:73:44:37:bb:08:86:
e0:1a:36:44:9b:94:4a:4a:0d:59:c9:e0:3b:9b:1c:
d4:be:00:56:7d:f6:b5:be:6f:e6:2a:0e:13:44:ab:
3a:29:df:e3:08:89:a0:af:a2:fa:4c:08:4a:37:fe:
5f:15:ce:71:31:b1:39:1b:6d:2c:d1:af:86:44:89:
8a:38:bc:0f:ac:11:50:ab:5a:5c:b2:1e:58:17:17:
c5:15:1d:bb:dc:bd:55:4f:9e:de:ea:c1:75:c2:5e:
71:9b:1a:66:e7:d3:e7:28:29:99:19:3b:44:42:ca:
17:d4:79:20:b3:57:a6:ae:65:b4:7f:65:18:b4:28:
5f:5a:b3:4e:4b:1c:46:a9:fb:5c:f4:96:72:f2:c8:
8c:7d:59:33:b9:e6:d5:c3:7b:35:c3:55:6c:6a:e1:
1a:18:bc:ff:76:4b:11:e9:7e:60:e1:3c:a1:80:9f:
e2:38:9f:33:0b:5a:7f:c4:99:da:0c:34:1c:79:5a:
1c:2c:68:e1:81:a0:02:33:98:78:67:51:07:a6:fe:
1b:7a:a3:3e:fd:d7:48:b0:ca:b2:d7:1b:03:a4:95:
52:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:6D:2E:E4:95:5B:B0:EC:F6:35:6C:81:3D:3D:9F:D2:27:79:E6:A8
X509v3 Authority Key Identifier:
keyid:32:3E:30:0A:7B:63:AD:4F:EF:BA:E6:71:F5:1A:BC:24:F1:12:87:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mj4wCntjrU_vuuZx9Rq8JPEShxk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/8ab976-e53a-4c43-a8e8-2014fe0a1611/1/nG0u5JVbsOz2NWyBPT2f0id55qg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/8ab976-e53a-4c43-a8e8-2014fe0a1611/1/Mj4wCntjrU_vuuZx9Rq8JPEShxk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.52.0/22
Signature Algorithm: sha256WithRSAEncryption
46:d2:15:31:9a:97:76:3c:18:b5:62:9a:c1:82:ca:1f:14:60:
58:c0:7f:6b:ff:f7:38:4b:36:c6:72:9e:5e:d8:26:52:18:fc:
18:84:cf:f6:ca:f5:c4:93:3e:e3:ac:d3:97:bb:1b:22:fd:1e:
cf:94:ef:17:34:e3:dd:3e:c4:3a:e9:77:e8:7a:a6:44:2f:7b:
de:ad:4f:11:2a:56:61:41:6f:a6:01:4d:c4:d5:18:0c:11:70:
41:12:f9:4c:9c:c6:ed:0d:c0:69:d9:26:b7:31:2b:50:93:fe:
66:dc:16:f5:68:da:8e:88:f1:bc:ec:77:07:d8:e7:63:60:e9:
5d:01:7b:60:f3:32:63:ce:65:69:c7:db:09:47:e3:f4:a9:ed:
6e:f0:d9:88:e6:32:65:7a:54:0e:9a:d9:1e:79:d9:dc:85:39:
52:3c:2b:90:42:d9:bb:95:cd:8a:d1:cd:76:af:9e:63:b9:02:
50:7f:69:5d:ca:b7:51:fb:16:da:6e:de:92:24:3d:5c:24:63:
22:5f:88:2c:68:95:7e:4a:f2:5b:09:1e:20:a8:2a:c8:dd:c4:
ac:d8:8d:36:f2:90:c7:0c:7c:f6:0a:94:28:e2:cf:73:2e:3a:
34:53:9c:a5:b1:f3:7e:a9:85:35:84:5c:4b:40:e4:1f:83:17:
84:58:f3:19
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQj12Wl5/zG4G3XFIqJCgZLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyM2UzMDBhN2I2M2FkNGZlZmJhZTY3MWY1MWFiYzI0ZjEx
Mjg3MTkwHhcNMjUwMTAxMjE0ODI2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YzZkMmVlNDk1NWJiMGVjZjYzNTZjODEzZDNkOWZkMjI3NzllNmE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsR2Pt27vM82e3bUv8X5MyVXkD/sl
C6BzlcFDaz2ljsn1v8PbjPJzRDe7CIbgGjZEm5RKSg1ZyeA7mxzUvgBWffa1vm/m
Kg4TRKs6Kd/jCImgr6L6TAhKN/5fFc5xMbE5G20s0a+GRImKOLwPrBFQq1pcsh5Y
FxfFFR273L1VT57e6sF1wl5xmxpm59PnKCmZGTtEQsoX1Hkgs1emrmW0f2UYtChf
WrNOSxxGqftc9JZy8siMfVkzuebVw3s1w1VsauEaGLz/dksR6X5g4TyhgJ/iOJ8z
C1p/xJnaDDQceVocLGjhgaACM5h4Z1EHpv4beqM+/ddIsMqy1xsDpJVS0QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJxtLuSVW7Ds9jVsgT09n9IneeaoMB8GA1UdIwQY
MBaAFDI+MAp7Y61P77rmcfUavCTxEocZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWo0d0NudGpyVV92dXVaeDlScThKUEVTaHhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC84YWI5NzYtZTUzYS00YzQzLWE4ZTgt
MjAxNGZlMGExNjExLzEvbkcwdTVKVmJzT3oyTld5QlBUMmYwaWQ1NXFnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC84YWI5NzYtZTUzYS00YzQzLWE4ZTgtMjAxNGZlMGExNjEx
LzEvTWo0d0NudGpyVV92dXVaeDlScThKUEVTaHhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLVE0MA0G
CSqGSIb3DQEBCwUAA4IBAQBG0hUxmpd2PBi1YprBgsofFGBYwH9r//c4SzbGcp5e
2CZSGPwYhM/2yvXEkz7jrNOXuxsi/R7PlO8XNOPdPsQ66XfoeqZEL3verU8RKlZh
QW+mAU3E1RgMEXBBEvlMnMbtDcBp2Sa3MStQk/5m3Bb1aNqOiPG87HcH2OdjYOld
AXtg8zJjzmVpx9sJR+P0qe1u8NmI5jJlelQOmtkeednchTlSPCuQQtm7lc2K0c12
r55juQJQf2ldyrdR+xbabt6SJD1cJGMiX4gsaJV+SvJbCR4gqCrI3cSs2I028pDH
DHz2CpQo4s9zLjo0U5ylsfN+qYU1hFxLQOQfgxeEWPMZ
-----END CERTIFICATE-----
Generated at Fri Apr 25 08:58:23 2025 by rpki-client