Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/1b8d92-e157-4141-82c9-87e1f3866362/1/RTZF1pckQ5UHtLDFfMIz6CKlCQM.roa
File: RTZF1pckQ5UHtLDFfMIz6CKlCQM.roa (raw, json)
Hash identifier: OSpIkZE/LwbO5i/Rwo6y7sjYoRsMMhhcextuc6NzOpA=
Subject key identifier: 45:36:45:D6:97:24:43:95:07:B4:B0:C5:7C:C2:33:E8:22:A5:09:03
Certificate issuer: /CN=d34ffee7e762f9a06fe2f47e7a1e52d9eba7fafd
Certificate serial: 019424B3283E41300B2418F7F6E7B29578E3
Authority key identifier: D3:4F:FE:E7:E7:62:F9:A0:6F:E2:F4:7E:7A:1E:52:D9:EB:A7:FA:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/00_-5-di-aBv4vR-eh5S2eun-v0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/1b8d92-e157-4141-82c9-87e1f3866362/1/RTZF1pckQ5UHtLDFfMIz6CKlCQM.roa
Signing time: Thu 02 Jan 2025 01:48:28 +0000
ROA not before: Thu 02 Jan 2025 01:48:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208704
IP address blocks: 45.87.176.0/22 maxlen: 22
45.87.176.0/24 maxlen: 24
45.87.177.0/24 maxlen: 24
45.87.178.0/24 maxlen: 24
45.87.179.0/24 maxlen: 24
193.56.184.0/24 maxlen: 24
2a02:f2c0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:28:3e:41:30:0b:24:18:f7:f6:e7:b2:95:78:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d34ffee7e762f9a06fe2f47e7a1e52d9eba7fafd
Validity
Not Before: Jan 2 01:48:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=453645d69724439507b4b0c57cc233e822a50903
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:88:85:8f:3d:d1:39:48:e5:e6:9c:a4:1f:11:
d6:01:a3:3c:0a:70:f0:38:8d:be:4c:a9:42:af:d5:
88:f6:fc:26:93:a9:df:78:55:90:7d:d4:ed:52:61:
8f:1e:0e:5e:44:cd:8e:44:e4:63:d4:ed:d9:5d:f6:
70:ce:8a:37:f5:f4:49:b1:de:19:58:51:6e:86:90:
6f:5c:d1:9d:5e:90:f2:96:7f:b5:e6:b4:8b:52:70:
4f:9d:8c:d9:16:8f:6f:d0:c7:66:d4:d1:4f:42:90:
0d:d2:1d:d5:f2:fb:83:be:b7:e6:ed:10:3d:61:63:
ff:e4:18:b5:f6:5b:a0:36:b2:b3:4a:dd:58:c8:ff:
72:cb:7c:88:1b:16:e8:45:8d:f8:dd:ce:cd:2c:1e:
5d:c7:77:dd:07:f0:2c:da:fa:70:98:10:95:be:6d:
43:90:d9:9c:85:03:46:c2:82:ec:bf:33:47:8a:48:
ba:23:16:fc:1e:13:3c:97:d5:4d:96:77:54:e3:4f:
66:70:39:44:28:39:7e:86:83:2c:c8:75:0c:1d:97:
05:c2:60:d7:df:06:13:4b:d8:8b:4b:aa:35:25:e8:
35:bb:d3:df:0e:38:e2:4a:4d:9b:04:4b:3c:e8:1f:
98:84:9c:95:de:fc:85:26:81:69:ec:a6:07:d1:e9:
2c:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:36:45:D6:97:24:43:95:07:B4:B0:C5:7C:C2:33:E8:22:A5:09:03
X509v3 Authority Key Identifier:
keyid:D3:4F:FE:E7:E7:62:F9:A0:6F:E2:F4:7E:7A:1E:52:D9:EB:A7:FA:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/00_-5-di-aBv4vR-eh5S2eun-v0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/1b8d92-e157-4141-82c9-87e1f3866362/1/RTZF1pckQ5UHtLDFfMIz6CKlCQM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/1b8d92-e157-4141-82c9-87e1f3866362/1/00_-5-di-aBv4vR-eh5S2eun-v0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.87.176.0/22
193.56.184.0/24
IPv6:
2a02:f2c0::/29
Signature Algorithm: sha256WithRSAEncryption
1d:3f:5a:69:12:0f:98:25:5c:77:ec:a6:0d:42:ff:ae:d3:58:
b7:d0:3b:78:bf:72:a1:f5:7b:6c:1c:e1:f8:09:66:ab:61:24:
63:21:2b:f0:ec:e3:34:ce:17:67:2b:88:fa:87:df:8e:49:d9:
04:4f:10:bd:f3:a3:71:6f:ff:54:57:fc:9f:4d:2d:6b:ed:6e:
bd:f8:bc:28:0c:66:aa:b8:3f:82:4c:f1:b8:1f:09:5d:fc:06:
a7:ad:fe:eb:cb:8b:da:27:64:19:c4:42:f0:27:25:b3:86:f2:
d6:b5:85:f1:f0:84:e5:e0:74:44:d9:5c:ce:d1:17:d0:b4:a3:
1e:e4:d3:eb:6b:b6:45:c2:cf:3b:46:5b:95:fd:69:8a:c8:cc:
ce:8b:6c:2c:a2:4a:42:4a:b5:04:9b:42:46:8d:48:52:4d:a6:
3a:23:e9:ff:1b:65:54:6b:96:b4:50:6f:b0:7c:e0:c2:74:51:
38:b9:65:75:dc:c9:ab:d1:aa:bb:f1:18:65:0e:4f:67:52:5e:
7f:14:b7:43:9b:a8:c6:78:b4:4a:90:68:29:67:0a:1b:46:d4:
29:3b:9c:31:e3:69:b5:f3:41:f6:ab:f2:3f:b2:72:4f:fe:93:
10:17:0a:6f:04:6b:50:71:77:95:df:2c:9f:de:01:5e:33:83:
ab:ed:ac:3f
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAZQksyg+QTALJBj39ueylXjjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzNGZmZWU3ZTc2MmY5YTA2ZmUyZjQ3ZTdhMWU1MmQ5ZWJh
N2ZhZmQwHhcNMjUwMTAyMDE0ODI4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NTM2NDVkNjk3MjQ0Mzk1MDdiNGIwYzU3Y2MyMzNlODIyYTUwOTAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA54iFjz3ROUjl5pykHxHWAaM8CnDw
OI2+TKlCr9WI9vwmk6nfeFWQfdTtUmGPHg5eRM2ORORj1O3ZXfZwzoo39fRJsd4Z
WFFuhpBvXNGdXpDyln+15rSLUnBPnYzZFo9v0Mdm1NFPQpAN0h3V8vuDvrfm7RA9
YWP/5Bi19lugNrKzSt1YyP9yy3yIGxboRY343c7NLB5dx3fdB/As2vpwmBCVvm1D
kNmchQNGwoLsvzNHiki6Ixb8HhM8l9VNlndU409mcDlEKDl+hoMsyHUMHZcFwmDX
3wYTS9iLS6o1Jeg1u9PfDjjiSk2bBEs86B+YhJyV3vyFJoFp7KYH0eksuQIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFEU2RdaXJEOVB7SwxXzCM+gipQkDMB8GA1UdIwQY
MBaAFNNP/ufnYvmgb+L0fnoeUtnrp/r9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDBfLTUtZGktYUJ2NHZSLWVoNVMyZXVuLXYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi8xYjhkOTItZTE1Ny00MTQxLTgyYzkt
ODdlMWYzODY2MzYyLzEvUlRaRjFwY2tRNVVIdExERmZNSXo2Q0tsQ1FNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi8xYjhkOTItZTE1Ny00MTQxLTgyYzktODdlMWYzODY2MzYy
LzEvMDBfLTUtZGktYUJ2NHZSLWVoNVMyZXVuLXYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCLVewAwQA
wTi4MA0EAgACMAcDBQMqAvLAMA0GCSqGSIb3DQEBCwUAA4IBAQAdP1ppEg+YJVx3
7KYNQv+u01i30Dt4v3Kh9XtsHOH4CWarYSRjISvw7OM0zhdnK4j6h9+OSdkETxC9
86Nxb/9UV/yfTS1r7W69+LwoDGaquD+CTPG4Hwld/Aanrf7ry4vaJ2QZxELwJyWz
hvLWtYXx8ITl4HRE2VzO0RfQtKMe5NPra7ZFws87RluV/WmKyMzOi2wsokpCSrUE
m0JGjUhSTaY6I+n/G2VUa5a0UG+wfODCdFE4uWV13Mmr0aq78RhlDk9nUl5/FLdD
m6jGeLRKkGgpZwobRtQpO5wx42m180H2q/I/snJP/pMQFwpvBGtQcXeV3yyf3gFe
M4Or7aw/
-----END CERTIFICATE-----
Generated at Fri Apr 25 07:57:09 2025 by rpki-client