Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/mzpUhiV2AWVFhRyJBhQoCk0xfK4.roa
File: mzpUhiV2AWVFhRyJBhQoCk0xfK4.roa (raw, json)
Hash identifier: lfB/qooTQC73l1pzUn7GEPRJN3n2onM5OJIZ+s9JO3U=
Subject key identifier: 9B:3A:54:86:25:76:01:65:45:85:1C:89:06:14:28:0A:4D:31:7C:AE
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019483DD015A1081B79FE85FB243366B91C8
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/mzpUhiV2AWVFhRyJBhQoCk0xfK4.roa
Signing time: Mon 20 Jan 2025 13:18:06 +0000
ROA not before: Mon 20 Jan 2025 13:18:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208959
IP address blocks: 45.9.118.0/24 maxlen: 24
45.12.61.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:83:dd:01:5a:10:81:b7:9f:e8:5f:b2:43:36:6b:91:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jan 20 13:18:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9b3a54862576016545851c890614280a4d317cae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:93:2c:73:24:da:2b:03:5b:f7:88:7c:74:7f:
f3:b4:0d:78:f9:34:6d:1e:1a:0f:67:a9:81:36:be:
32:5a:30:0f:92:41:44:e8:d6:6c:be:4c:ca:ab:ae:
1c:7b:6c:5f:82:5e:03:16:6f:d5:0e:03:43:f5:33:
9f:30:96:d1:65:40:29:6e:6c:8f:88:eb:04:fc:5d:
b3:6a:4f:de:1a:1b:08:cb:86:e1:2b:5b:a0:bf:ce:
03:9a:f4:25:8f:ef:da:5f:80:2f:43:f0:6e:da:a7:
f7:a2:0c:ee:fb:cf:ec:3f:cb:88:99:f2:02:99:c1:
25:f7:30:1c:20:69:02:1e:a8:fe:90:3e:33:c0:b5:
b6:68:94:7e:a8:b2:d6:91:3d:dd:c5:03:02:1b:aa:
ae:55:9e:af:76:6b:43:e5:3b:9b:14:6c:c4:68:3a:
6d:f8:26:5e:73:52:3e:af:91:82:9b:b1:ab:90:2b:
dd:5a:08:c5:61:e1:d2:87:98:c1:b8:0d:be:4c:c5:
c8:53:5c:a5:4d:4c:11:90:4e:61:78:83:a8:1c:e2:
0d:80:fc:6b:f9:22:13:a4:ac:b5:03:8f:05:b9:78:
7d:a9:fe:f9:86:0a:f4:e8:6e:3a:ec:04:8a:10:e7:
aa:b0:b4:6c:2a:ec:6e:18:78:31:1d:df:19:30:3c:
0e:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:3A:54:86:25:76:01:65:45:85:1C:89:06:14:28:0A:4D:31:7C:AE
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/mzpUhiV2AWVFhRyJBhQoCk0xfK4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.118.0/24
45.12.61.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:e9:57:ba:67:a4:2e:df:60:fb:dd:ad:1f:81:2f:de:ff:ad:
cc:4e:44:5b:5f:ed:e7:41:b0:c5:f7:f5:76:ec:a4:73:4b:9e:
de:99:68:99:2c:9f:40:d1:17:8a:20:5c:e9:72:3e:be:bc:9c:
db:b3:38:62:01:f9:eb:92:03:da:bf:bc:37:7c:17:03:74:3d:
d3:ec:ed:3d:3e:4d:e2:a0:78:6e:92:a5:cd:5c:50:bf:16:1f:
4f:93:4d:f8:37:2e:56:f1:d4:3f:1e:0e:3e:0e:3e:29:4c:5e:
1b:aa:da:52:5a:9f:71:a9:c5:e1:3d:13:cc:00:7d:d1:00:7e:
05:44:b1:2f:13:b0:96:e2:b8:6f:af:28:87:c1:53:2f:bc:3c:
90:00:a4:38:04:47:a3:a0:07:85:25:06:4f:1d:80:a6:63:df:
d4:aa:ad:2f:54:45:38:7b:b2:a9:e3:0d:1a:8c:5d:3c:13:1c:
8e:fb:6c:5b:97:4c:ae:4f:c0:ff:84:95:4e:32:e2:20:d2:f4:
04:15:fb:86:18:96:57:17:af:fe:56:13:80:67:ca:4b:91:3d:
c6:5a:de:f8:fc:11:da:7c:85:44:30:47:8e:9e:be:dd:de:49:
45:bf:e1:9f:0d:85:97:8e:45:5d:48:8c:f1:22:d6:10:b6:37:
42:e4:1d:f1
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZSD3QFaEIG3n+hfskM2a5HIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz
ZTRjMjYwHhcNMjUwMTIwMTMxODA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YjNhNTQ4NjI1NzYwMTY1NDU4NTFjODkwNjE0MjgwYTRkMzE3Y2FlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA45MscyTaKwNb94h8dH/ztA14+TRt
HhoPZ6mBNr4yWjAPkkFE6NZsvkzKq64ce2xfgl4DFm/VDgND9TOfMJbRZUApbmyP
iOsE/F2zak/eGhsIy4bhK1ugv84DmvQlj+/aX4AvQ/Bu2qf3ogzu+8/sP8uImfIC
mcEl9zAcIGkCHqj+kD4zwLW2aJR+qLLWkT3dxQMCG6quVZ6vdmtD5TubFGzEaDpt
+CZec1I+r5GCm7GrkCvdWgjFYeHSh5jBuA2+TMXIU1ylTUwRkE5heIOoHOINgPxr
+SITpKy1A48FuXh9qf75hgr06G467ASKEOeqsLRsKuxuGHgxHd8ZMDwOywIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFJs6VIYldgFlRYUciQYUKApNMXyuMB8GA1UdIwQY
MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt
OGM1MDA3YzJhNGI2LzEvbXpwVWhpVjJBV1ZGaFJ5SkJoUW9DazB4Zks0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2
LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALQl2AwQA
LQw9MA0GCSqGSIb3DQEBCwUAA4IBAQCq6Ve6Z6Qu32D73a0fgS/e/63MTkRbX+3n
QbDF9/V27KRzS57emWiZLJ9A0ReKIFzpcj6+vJzbszhiAfnrkgPav7w3fBcDdD3T
7O09Pk3ioHhukqXNXFC/Fh9Pk034Ny5W8dQ/Hg4+Dj4pTF4bqtpSWp9xqcXhPRPM
AH3RAH4FRLEvE7CW4rhvryiHwVMvvDyQAKQ4BEejoAeFJQZPHYCmY9/Uqq0vVEU4
e7Kp4w0ajF08ExyO+2xbl0yuT8D/hJVOMuIg0vQEFfuGGJZXF6/+VhOAZ8pLkT3G
Wt74/BHafIVEMEeOnr7d3klFv+GfDYWXjkVdSIzxItYQtjdC5B3x
-----END CERTIFICATE-----
Generated at Fri Apr 25 13:04:54 2025 by rpki-client