Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/28eeb6-eb48-4ff8-8741-bcfe3ad387ce/1/d2hr0pHHIb2j2ec6gvu36_cpbPw.roa
File: d2hr0pHHIb2j2ec6gvu36_cpbPw.roa (raw, json)
Hash identifier: jc4XIb7FDS9N2TD9hPswSv8o+WQzbQbclxlPYsHdj3U=
Subject key identifier: 77:68:6B:D2:91:C7:21:BD:A3:D9:E7:3A:82:FB:B7:EB:F7:29:6C:FC
Certificate issuer: /CN=b8e4f734fde71ac421957f27c8499496f4440d7c
Certificate serial: 0194206817BFA15431D05BA0DE1A7CF11D09
Authority key identifier: B8:E4:F7:34:FD:E7:1A:C4:21:95:7F:27:C8:49:94:96:F4:44:0D:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uOT3NP3nGsQhlX8nyEmUlvREDXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/28eeb6-eb48-4ff8-8741-bcfe3ad387ce/1/d2hr0pHHIb2j2ec6gvu36_cpbPw.roa
Signing time: Wed 01 Jan 2025 05:48:00 +0000
ROA not before: Wed 01 Jan 2025 05:48:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208948
IP address blocks: 45.134.132.0/24 maxlen: 29
45.134.133.0/24 maxlen: 29
45.134.134.0/24 maxlen: 29
45.134.135.0/24 maxlen: 30
2a0d:d9c0::/32 maxlen: 64
2a0d:d9c3::/32 maxlen: 64
2a0d:d9c4::/32 maxlen: 64
2a0d:d9c5::/32 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:17:bf:a1:54:31:d0:5b:a0:de:1a:7c:f1:1d:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8e4f734fde71ac421957f27c8499496f4440d7c
Validity
Not Before: Jan 1 05:48:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=77686bd291c721bda3d9e73a82fbb7ebf7296cfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a6:4e:eb:e0:0f:e9:67:49:96:8f:e6:f4:e2:
58:66:80:8e:44:7d:8d:45:33:e7:69:72:ec:bd:8a:
fb:b9:87:13:db:6a:6c:0b:03:27:a0:f4:14:75:a9:
18:6b:de:70:f1:5e:a8:e2:fd:9e:62:3b:02:a4:da:
05:70:d6:be:75:b0:d6:ee:8f:39:e4:07:9a:d7:bc:
b1:35:c8:b6:c8:84:34:54:55:a3:21:21:6e:d9:bd:
34:86:94:98:f4:bd:c3:ea:b9:4c:0f:5c:16:02:40:
35:40:8b:7b:1a:52:ba:25:a2:4b:10:3c:e9:88:4a:
19:ef:15:30:e6:91:ac:d7:b7:67:d7:69:81:03:af:
f0:2f:26:e5:7e:0a:e1:e9:c5:a8:3d:e0:46:72:c8:
9a:94:ab:5c:8a:ff:77:a7:09:b0:7f:e7:15:2e:a2:
a7:cf:05:92:b6:ec:a3:68:cf:8c:eb:c4:aa:44:c5:
13:9a:76:9a:79:ba:05:86:4c:15:f0:e8:56:94:f0:
ed:23:8d:b9:64:34:ab:29:06:64:c9:33:b7:bc:e9:
13:9e:5c:33:52:2a:1f:b7:ed:96:31:6c:99:00:d1:
d2:ba:40:ae:ec:9e:d2:59:ba:76:01:a4:8a:04:b7:
7c:19:d7:c1:52:bf:69:6e:d6:a2:2c:dc:c1:a7:5f:
c6:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:68:6B:D2:91:C7:21:BD:A3:D9:E7:3A:82:FB:B7:EB:F7:29:6C:FC
X509v3 Authority Key Identifier:
keyid:B8:E4:F7:34:FD:E7:1A:C4:21:95:7F:27:C8:49:94:96:F4:44:0D:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uOT3NP3nGsQhlX8nyEmUlvREDXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/28eeb6-eb48-4ff8-8741-bcfe3ad387ce/1/d2hr0pHHIb2j2ec6gvu36_cpbPw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/28eeb6-eb48-4ff8-8741-bcfe3ad387ce/1/uOT3NP3nGsQhlX8nyEmUlvREDXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.134.132.0/22
IPv6:
2a0d:d9c0::/32
2a0d:d9c3::-2a0d:d9c5:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
23:87:ca:f3:10:db:05:95:54:2d:cd:70:07:9d:fc:0a:21:c6:
1e:90:c7:f1:40:a6:1a:d7:78:6f:b3:4c:2f:79:ac:6c:58:74:
5d:b6:4a:73:43:32:98:8d:f4:d3:8d:c8:61:c5:c4:c3:e3:a4:
94:ce:22:63:a0:d5:65:2b:35:44:bd:55:c9:d7:44:2d:05:07:
dc:de:00:9c:f8:76:ba:a6:9b:9b:a3:94:3c:4d:b0:17:c0:f0:
05:59:cd:c7:0c:32:c6:3d:50:d5:55:46:ad:5c:c0:d5:b6:23:
d3:49:ef:11:4f:fc:d2:df:d5:bc:e4:c3:52:48:9a:bf:5f:9f:
ec:bb:f7:93:fe:6f:42:20:d7:e1:18:1b:bf:ae:1f:7b:64:7a:
7a:87:26:06:3b:f9:34:33:01:9d:9a:98:d3:d8:97:0d:84:8c:
0f:c7:f8:46:a1:e8:3c:4a:7c:20:d2:9c:f2:88:0b:e3:8f:12:
78:ec:5d:92:eb:b7:53:b1:0a:d0:60:34:5f:2e:d7:53:a4:97:
0d:d3:ea:fa:7c:36:8a:a7:57:39:50:b4:4c:4f:e8:ab:25:c5:
68:d9:b9:8e:3e:73:67:fa:85:cb:93:ae:6e:f2:dc:bf:49:dd:
eb:c9:78:66:a7:7a:72:e9:a4:44:6b:41:da:d4:39:da:97:0b:
0c:5f:e0:97
-----BEGIN CERTIFICATE-----
MIIFHDCCBASgAwIBAgISAZQgaBe/oVQx0Fug3hp88R0JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI4ZTRmNzM0ZmRlNzFhYzQyMTk1N2YyN2M4NDk5NDk2ZjQ0
NDBkN2MwHhcNMjUwMTAxMDU0ODAwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NzY4NmJkMjkxYzcyMWJkYTNkOWU3M2E4MmZiYjdlYmY3Mjk2Y2ZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvaZO6+AP6WdJlo/m9OJYZoCORH2N
RTPnaXLsvYr7uYcT22psCwMnoPQUdakYa95w8V6o4v2eYjsCpNoFcNa+dbDW7o85
5Aea17yxNci2yIQ0VFWjISFu2b00hpSY9L3D6rlMD1wWAkA1QIt7GlK6JaJLEDzp
iEoZ7xUw5pGs17dn12mBA6/wLyblfgrh6cWoPeBGcsialKtciv93pwmwf+cVLqKn
zwWStuyjaM+M68SqRMUTmnaaeboFhkwV8OhWlPDtI425ZDSrKQZkyTO3vOkTnlwz
Uioft+2WMWyZANHSukCu7J7SWbp2AaSKBLd8GdfBUr9pbtaiLNzBp1/G3wIDAQAB
o4ICKDCCAiQwHQYDVR0OBBYEFHdoa9KRxyG9o9nnOoL7t+v3KWz8MB8GA1UdIwQY
MBaAFLjk9zT95xrEIZV/J8hJlJb0RA18MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdU9UM05QM25Hc1FobFg4bnlFbVVsdlJFRFh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi8yOGVlYjYtZWI0OC00ZmY4LTg3NDEt
YmNmZTNhZDM4N2NlLzEvZDJocjBwSEhJYjJqMmVjNmd2dTM2X2NwYlB3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi8yOGVlYjYtZWI0OC00ZmY4LTg3NDEtYmNmZTNhZDM4N2Nl
LzEvdU9UM05QM25Hc1FobFg4bnlFbVVsdlJFRFh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD4GCCsGAQUFBwEHAQH/BC8wLTAMBAIAATAGAwQCLYaEMB0E
AgACMBcDBQAqDdnAMA4DBQAqDdnDAwUBKg3ZxDANBgkqhkiG9w0BAQsFAAOCAQEA
I4fK8xDbBZVULc1wB538CiHGHpDH8UCmGtd4b7NML3msbFh0XbZKc0MymI30043I
YcXEw+OklM4iY6DVZSs1RL1VyddELQUH3N4AnPh2uqabm6OUPE2wF8DwBVnNxwwy
xj1Q1VVGrVzA1bYj00nvEU/80t/VvOTDUkiav1+f7Lv3k/5vQiDX4Rgbv64fe2R6
eocmBjv5NDMBnZqY09iXDYSMD8f4RqHoPEp8INKc8ogL448SeOxdkuu3U7EK0GA0
Xy7XU6SXDdPq+nw2iqdXOVC0TE/oqyXFaNm5jj5zZ/qFy5OubvLcv0nd68l4Zqd6
cumkRGtB2tQ52pcLDF/glw==
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:59:25 2025 by rpki-client