Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/f678bd-4fe0-4ae0-80d7-53f0788e1a1b/1/1IAFExdXlp2_5O-yOhsTYDJhBnw.roa
File: 1IAFExdXlp2_5O-yOhsTYDJhBnw.roa (raw, json)
Hash identifier: 4Fei/WsenifuKtbF4czSX0SveZUVAkHxfLFN3ha0MUI=
Subject key identifier: D4:80:05:13:17:57:96:9D:BF:E4:EF:B2:3A:1B:13:60:32:61:06:7C
Certificate issuer: /CN=dfd703b60ac6873256e6b4826ba27a9deeca2f0a
Certificate serial: C79C21
Authority key identifier: DF:D7:03:B6:0A:C6:87:32:56:E6:B4:82:6B:A2:7A:9D:EE:CA:2F:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/39cDtgrGhzJW5rSCa6J6ne7KLwo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/f678bd-4fe0-4ae0-80d7-53f0788e1a1b/1/1IAFExdXlp2_5O-yOhsTYDJhBnw.roa
Signing time: Sat 01 Jan 2022 13:07:41 +0000
ROA not before: Sat 01 Jan 2022 13:07:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50304
IP address blocks: 45.15.19.0/24 maxlen: 24
2a0e:1c80:7::/48 maxlen: 48
2a0e:1c80:2::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13081633 (0xc79c21)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfd703b60ac6873256e6b4826ba27a9deeca2f0a
Validity
Not Before: Jan 1 13:07:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d48005131757969dbfe4efb23a1b13603261067c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:54:4f:ab:39:7b:17:98:6e:c6:79:4e:73:13:
32:97:c7:20:c2:a0:16:e4:20:75:c2:5a:67:78:68:
c6:6b:b3:36:2d:c7:99:3a:24:f0:45:d0:5c:5a:a4:
65:8c:b2:64:14:c2:48:a5:58:5a:a7:4f:c8:26:30:
95:0d:79:98:3c:41:0f:b9:14:a9:f0:88:94:c3:e2:
7d:71:9b:6c:8b:8c:56:69:59:44:bf:44:f1:11:e0:
f1:43:57:8d:2d:b8:95:58:e7:0a:a3:83:6a:67:c4:
43:c0:8f:1e:bd:00:17:93:23:45:90:53:14:77:7c:
74:ba:54:b4:60:b4:67:45:74:24:94:12:cf:d0:e9:
a5:82:62:61:ce:68:bc:e0:d9:db:8f:19:3c:bc:ad:
8d:47:59:aa:8a:1f:8b:3a:f6:fa:5e:6b:74:48:68:
86:83:f8:74:28:4f:83:82:8d:ed:e0:1f:a2:4d:d2:
5d:9b:ab:50:0c:f6:1a:ef:e2:cf:de:61:98:71:0d:
a2:4c:60:bf:3a:45:46:00:a3:6d:ef:85:f6:99:72:
f0:60:bd:f1:e2:6d:86:3c:77:bc:0b:68:de:bb:03:
3f:45:3d:f2:a0:91:9b:6f:73:1b:a4:ad:d2:b8:5f:
ce:27:15:2e:3e:b4:44:be:e7:ce:d9:fc:8a:2e:68:
bf:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:80:05:13:17:57:96:9D:BF:E4:EF:B2:3A:1B:13:60:32:61:06:7C
X509v3 Authority Key Identifier:
keyid:DF:D7:03:B6:0A:C6:87:32:56:E6:B4:82:6B:A2:7A:9D:EE:CA:2F:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/39cDtgrGhzJW5rSCa6J6ne7KLwo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/f678bd-4fe0-4ae0-80d7-53f0788e1a1b/1/1IAFExdXlp2_5O-yOhsTYDJhBnw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/f678bd-4fe0-4ae0-80d7-53f0788e1a1b/1/39cDtgrGhzJW5rSCa6J6ne7KLwo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.15.19.0/24
IPv6:
2a0e:1c80:2::/48
2a0e:1c80:7::/48
Signature Algorithm: sha256WithRSAEncryption
49:c7:00:5a:e5:68:fb:45:1a:35:b5:e4:6d:8f:8f:41:43:a7:
72:bd:99:25:b1:d2:61:56:d4:33:be:22:8c:7d:cf:78:cd:6d:
fd:42:13:f5:79:a1:9c:65:de:27:89:11:05:d5:f8:c1:52:18:
e5:ff:03:24:02:2a:de:71:b9:91:62:10:78:2a:d8:2d:af:bd:
17:f8:ab:f1:61:0b:fa:8a:2f:d7:06:14:f9:84:02:a0:cf:40:
ef:75:88:07:14:02:bf:14:6b:8b:2f:1f:02:ee:5b:6a:85:54:
ac:a8:f1:a1:3d:43:52:18:44:8f:c9:77:75:78:ad:e1:1d:a8:
21:75:76:6d:a3:59:22:8a:e7:0a:ec:37:c4:db:7f:71:6d:e2:
73:32:08:78:f5:04:58:01:ed:15:96:5f:8e:e8:bb:8c:fe:f4:
95:16:82:b9:1a:2d:a4:08:43:9c:9e:0d:2c:d4:c1:9b:fe:b8:
6b:35:03:f3:ba:3d:5c:58:ae:b1:cc:ed:f3:e8:a2:09:ef:f3:
d8:c6:08:f5:62:4e:b1:48:17:3d:dd:2d:47:a2:95:c0:22:6e:
fe:75:b2:c4:55:1e:2a:d0:d6:9d:aa:13:e8:91:5e:6b:8d:ee:
94:16:70:90:29:a1:82:64:ec:ab:3b:4c:62:5f:c8:2a:15:26:
eb:1d:7b:4c
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgIEAMecITANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhk
ZmQ3MDNiNjBhYzY4NzMyNTZlNmI0ODI2YmEyN2E5ZGVlY2EyZjBhMB4XDTIyMDEw
MTEzMDc0MVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZDQ4MDA1MTMxNzU3
OTY5ZGJmZTRlZmIyM2ExYjEzNjAzMjYxMDY3YzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKZUT6s5exeYbsZ5TnMTMpfHIMKgFuQgdcJaZ3hoxmuzNi3H
mTok8EXQXFqkZYyyZBTCSKVYWqdPyCYwlQ15mDxBD7kUqfCIlMPifXGbbIuMVmlZ
RL9E8RHg8UNXjS24lVjnCqODamfEQ8CPHr0AF5MjRZBTFHd8dLpUtGC0Z0V0JJQS
z9DppYJiYc5ovODZ248ZPLytjUdZqoofizr2+l5rdEhohoP4dChPg4KN7eAfok3S
XZurUAz2Gu/iz95hmHENokxgvzpFRgCjbe+F9ply8GC98eJthjx3vAto3rsDP0U9
8qCRm29zG6St0rhfzicVLj60RL7nztn8ii5ov4kCAwEAAaOCAiMwggIfMB0GA1Ud
DgQWBBTUgAUTF1eWnb/k77I6GxNgMmEGfDAfBgNVHSMEGDAWgBTf1wO2CsaHMlbm
tIJronqd7sovCjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzM5Y0R0Z3JHaHpKVzVyU0NhNko2bmU3S0x3by5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNjQvZjY3OGJkLTRmZTAtNGFlMC04MGQ3LTUzZjA3ODhlMWExYi8x
LzFJQUZFeGRYbHAyXzVPLXlPaHNUWURKaEJudy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjQv
ZjY3OGJkLTRmZTAtNGFlMC04MGQ3LTUzZjA3ODhlMWExYi8xLzM5Y0R0Z3JHaHpK
VzVyU0NhNko2bmU3S0x3by5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA5
BggrBgEFBQcBBwEB/wQqMCgwDAQCAAEwBgMEAC0PEzAYBAIAAjASAwcAKg4cgAAC
AwcAKg4cgAAHMA0GCSqGSIb3DQEBCwUAA4IBAQBJxwBa5Wj7RRo1teRtj49BQ6dy
vZklsdJhVtQzviKMfc94zW39QhP1eaGcZd4niREF1fjBUhjl/wMkAirecbmRYhB4
Ktgtr70X+KvxYQv6ii/XBhT5hAKgz0DvdYgHFAK/FGuLLx8C7ltqhVSsqPGhPUNS
GESPyXd1eK3hHaghdXZto1kiiucK7DfE239xbeJzMgh49QRYAe0Vll+O6LuM/vSV
FoK5Gi2kCEOcng0s1MGb/rhrNQPzuj1cWK6xzO3z6KIJ7/PYxgj1Yk6xSBc93S1H
opXAIm7+dbLEVR4q0NadqhPokV5rje6UFnCQKaGCZOyrO0xiX8gqFSbrHXtM
-----END CERTIFICATE-----
Generated at Tue Apr 29 23:16:13 2025 by rpki-client