Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/980e66-3631-4fde-8e2d-c849bc0f359b/1/dQ7PQgQCEBEpwy_WLxXRryqd5tk.roa
File: dQ7PQgQCEBEpwy_WLxXRryqd5tk.roa (raw, json)
Hash identifier: S5qkCaFaQoiq2cgXZvEG9830rDpPotFIWE/GKsgVjpk=
Subject key identifier: 75:0E:CF:42:04:02:10:11:29:C3:2F:D6:2F:15:D1:AF:2A:9D:E6:D9
Certificate issuer: /CN=75f1a763745c25dad28f4a8116688e82ce12028b
Certificate serial: 01941FFA9AA000F2259D644BF856CF8CADBB
Authority key identifier: 75:F1:A7:63:74:5C:25:DA:D2:8F:4A:81:16:68:8E:82:CE:12:02:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dfGnY3RcJdrSj0qBFmiOgs4SAos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/980e66-3631-4fde-8e2d-c849bc0f359b/1/dQ7PQgQCEBEpwy_WLxXRryqd5tk.roa
Signing time: Wed 01 Jan 2025 03:48:24 +0000
ROA not before: Wed 01 Jan 2025 03:48:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47890
IP address blocks: 45.8.44.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:9a:a0:00:f2:25:9d:64:4b:f8:56:cf:8c:ad:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75f1a763745c25dad28f4a8116688e82ce12028b
Validity
Not Before: Jan 1 03:48:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=750ecf420402101129c32fd62f15d1af2a9de6d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:80:59:d3:7f:56:20:5d:71:90:0a:b5:4a:86:
6c:81:50:a4:de:7f:5c:f3:d2:a1:7c:e6:86:44:22:
4d:00:f6:e9:8a:26:c4:92:06:ba:e7:23:01:3d:77:
dc:c2:90:f6:f8:f7:bd:fd:84:7a:69:f6:4a:37:55:
8d:a0:a9:d5:e1:08:b0:79:6b:0c:de:a1:85:5c:2c:
3e:df:8b:b3:e3:60:c8:8c:aa:69:a3:34:54:fe:99:
0b:15:d1:ba:8e:29:d8:25:9c:71:5d:fb:e8:57:d1:
2c:8b:9b:71:ae:17:58:56:86:fb:cd:04:5b:1f:af:
b4:25:2f:2d:50:f2:66:60:97:5e:f4:34:f2:99:b3:
22:3e:6b:30:12:fd:d4:e2:fd:7e:b9:41:db:2e:eb:
5f:6b:0a:7c:cd:2c:bb:e1:27:86:b5:bd:55:1e:e7:
c3:35:a6:bb:d8:28:94:45:82:6b:49:02:9d:f7:d3:
51:75:bb:a8:60:7f:9a:5a:5e:41:65:7e:84:29:13:
53:9c:fe:da:7d:0b:af:5f:b1:ca:91:55:8d:42:12:
46:89:f8:b8:2e:7a:d8:42:96:bf:da:db:cc:98:f6:
89:f8:10:fc:78:e8:e2:0b:31:4b:28:43:36:82:43:
93:3a:a3:e8:42:c2:d0:04:0b:94:4e:dd:61:1b:2c:
df:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:0E:CF:42:04:02:10:11:29:C3:2F:D6:2F:15:D1:AF:2A:9D:E6:D9
X509v3 Authority Key Identifier:
keyid:75:F1:A7:63:74:5C:25:DA:D2:8F:4A:81:16:68:8E:82:CE:12:02:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dfGnY3RcJdrSj0qBFmiOgs4SAos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/980e66-3631-4fde-8e2d-c849bc0f359b/1/dQ7PQgQCEBEpwy_WLxXRryqd5tk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/980e66-3631-4fde-8e2d-c849bc0f359b/1/dfGnY3RcJdrSj0qBFmiOgs4SAos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.44.0/24
Signature Algorithm: sha256WithRSAEncryption
d5:f9:d6:bc:48:a7:be:55:23:2c:1a:81:01:03:5c:a1:8a:78:
4c:f4:af:18:b4:53:22:d4:c8:b7:c7:e5:24:97:91:db:cb:29:
80:b4:6f:d2:c0:bc:f3:c9:69:ac:c6:f4:19:e8:60:d9:20:3d:
28:a1:21:95:25:e3:4d:3c:3b:4c:5b:fe:1b:cb:96:50:7e:aa:
16:41:97:e6:fe:8a:c7:d3:e4:f8:50:55:5f:27:8f:be:2c:ef:
76:43:1f:9d:74:86:e0:c9:a7:7e:8e:58:79:f4:30:25:f3:6d:
92:f1:e9:2e:e2:e0:50:91:ce:f9:e5:9b:18:e0:32:2d:79:6c:
3f:78:ed:64:9d:a1:22:77:a3:77:c2:bb:31:17:17:f9:57:23:
1c:b6:1d:b9:a7:67:48:00:de:75:50:e5:d3:48:17:74:c6:a4:
2f:e9:5c:0c:a8:b0:f8:e6:64:29:cb:f8:d3:52:59:58:7b:04:
24:ff:dc:fc:6c:0e:a5:ab:00:90:67:1c:37:43:9a:bd:7a:43:
e3:c2:80:c5:35:13:bb:69:c8:7d:b6:8e:ff:f4:8f:6e:fc:e6:
7c:5b:b2:e1:87:39:7d:05:8a:b8:ed:63:d4:0e:4d:59:f3:91:
65:8b:bd:61:10:59:f2:a0:b6:75:a7:e2:0f:fd:b7:24:a5:3a:
ff:21:a4:ea
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQf+pqgAPIlnWRL+FbPjK27MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1ZjFhNzYzNzQ1YzI1ZGFkMjhmNGE4MTE2Njg4ZTgyY2Ux
MjAyOGIwHhcNMjUwMTAxMDM0ODI0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NTBlY2Y0MjA0MDIxMDExMjljMzJmZDYyZjE1ZDFhZjJhOWRlNmQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh4BZ039WIF1xkAq1SoZsgVCk3n9c
89KhfOaGRCJNAPbpiibEkga65yMBPXfcwpD2+Pe9/YR6afZKN1WNoKnV4QiweWsM
3qGFXCw+34uz42DIjKppozRU/pkLFdG6jinYJZxxXfvoV9Esi5txrhdYVob7zQRb
H6+0JS8tUPJmYJde9DTymbMiPmswEv3U4v1+uUHbLutfawp8zSy74SeGtb1VHufD
Naa72CiURYJrSQKd99NRdbuoYH+aWl5BZX6EKRNTnP7afQuvX7HKkVWNQhJGifi4
LnrYQpa/2tvMmPaJ+BD8eOjiCzFLKEM2gkOTOqPoQsLQBAuUTt1hGyzfMQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHUOz0IEAhARKcMv1i8V0a8qnebZMB8GA1UdIwQY
MBaAFHXxp2N0XCXa0o9KgRZojoLOEgKLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGZHblkzUmNKZHJTajBxQkZtaU9nczRTQW9zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi85ODBlNjYtMzYzMS00ZmRlLThlMmQt
Yzg0OWJjMGYzNTliLzEvZFE3UFFnUUNFQkVwd3lfV0x4WFJyeXFkNXRrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi85ODBlNjYtMzYzMS00ZmRlLThlMmQtYzg0OWJjMGYzNTli
LzEvZGZHblkzUmNKZHJTajBxQkZtaU9nczRTQW9zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALQgsMA0G
CSqGSIb3DQEBCwUAA4IBAQDV+da8SKe+VSMsGoEBA1yhinhM9K8YtFMi1Mi3x+Uk
l5HbyymAtG/SwLzzyWmsxvQZ6GDZID0ooSGVJeNNPDtMW/4by5ZQfqoWQZfm/orH
0+T4UFVfJ4++LO92Qx+ddIbgyad+jlh59DAl822S8eku4uBQkc755ZsY4DIteWw/
eO1knaEid6N3wrsxFxf5VyMcth25p2dIAN51UOXTSBd0xqQv6VwMqLD45mQpy/jT
UllYewQk/9z8bA6lqwCQZxw3Q5q9ekPjwoDFNRO7ach9to7/9I9u/OZ8W7Lhhzl9
BYq47WPUDk1Z85Fli71hEFnyoLZ1p+IP/bckpTr/IaTq
-----END CERTIFICATE-----
Generated at Fri Apr 25 05:55:16 2025 by rpki-client