Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/3L1VVPDCZZsHTnZfyZUpq3tOiaE.roa
File: 3L1VVPDCZZsHTnZfyZUpq3tOiaE.roa (raw, json)
Hash identifier: RwxbKnnDppaODzIHXVven5CfLhof0zQglcrOftSXNCo=
Subject key identifier: DC:BD:55:54:F0:C2:65:9B:07:4E:76:5F:C9:95:29:AB:7B:4E:89:A1
Certificate issuer: /CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Certificate serial: 0194258FAC6E2039E1D3F1D0A75E0CD181F4
Authority key identifier: 9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/3L1VVPDCZZsHTnZfyZUpq3tOiaE.roa
Signing time: Thu 02 Jan 2025 05:49:20 +0000
ROA not before: Thu 02 Jan 2025 05:49:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21840
IP address blocks: 45.150.53.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:ac:6e:20:39:e1:d3:f1:d0:a7:5e:0c:d1:81:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Validity
Not Before: Jan 2 05:49:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dcbd5554f0c2659b074e765fc99529ab7b4e89a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:3d:39:7b:3e:d0:ec:93:8c:29:ad:e6:21:a9:
9f:c5:29:21:21:64:a7:c2:6b:0f:5d:ba:1d:a6:ee:
57:65:cc:8b:9c:74:4d:c6:a5:ae:fd:43:7c:a9:8e:
7e:13:f8:df:29:40:e7:e8:29:c8:63:30:af:cc:a8:
10:1c:36:83:c5:47:92:a1:40:6a:79:a8:6e:71:8a:
25:9f:1b:98:a1:77:ef:5c:76:44:1f:de:e2:41:37:
a7:c1:1d:14:27:f8:32:3b:23:79:4f:f4:d8:3c:da:
2d:f4:dc:e6:e6:c9:b5:6c:7e:9e:68:8e:e6:43:4f:
7f:99:88:67:fe:fb:79:be:55:d0:cc:d7:07:5a:3e:
6b:58:f6:fd:60:01:88:07:a6:8c:63:5f:d5:30:2b:
0a:d8:2e:f1:20:3a:ba:0a:3f:60:f5:fa:6b:94:9f:
09:ce:df:be:1d:ef:79:9f:8f:f5:06:a2:c5:c9:75:
c9:de:1e:e4:a3:8a:d9:c9:af:e6:c5:81:67:54:e1:
fb:a2:f8:02:99:6e:bb:fe:cb:29:ed:a0:26:c6:67:
7f:d1:42:92:46:29:95:b0:28:46:ec:ac:65:f2:93:
17:63:bc:c6:99:cf:3c:09:a0:be:ee:67:84:90:2f:
9b:8a:f9:1c:54:af:f1:32:a2:48:04:29:9f:50:ce:
b4:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:BD:55:54:F0:C2:65:9B:07:4E:76:5F:C9:95:29:AB:7B:4E:89:A1
X509v3 Authority Key Identifier:
keyid:9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/3L1VVPDCZZsHTnZfyZUpq3tOiaE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.53.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:99:f9:55:4d:2f:66:c8:b7:a0:09:3f:8d:d6:40:ad:2a:a0:
a8:93:c0:98:cb:27:67:a2:50:e5:0f:b2:a8:1c:b9:ce:85:41:
ae:79:b6:e2:5f:19:12:81:b0:e2:02:15:b3:1e:c2:88:ed:28:
2b:68:e1:46:30:e4:08:3f:96:e1:30:fe:5f:16:f2:66:28:7f:
81:33:85:3a:70:21:09:1e:89:60:dd:25:07:8f:c2:43:5d:5c:
92:26:57:9e:cf:1e:85:40:46:1c:64:9f:9f:4d:db:c8:a6:8b:
ec:db:d9:72:42:a0:58:fd:3f:fb:ec:1a:96:57:ad:db:61:44:
fd:ba:df:5d:2c:c6:f3:1f:36:5c:69:9d:06:aa:cd:09:30:b5:
cc:a0:7a:88:0c:68:41:35:0f:1a:2d:27:ff:1b:4a:39:03:ec:
a0:18:da:aa:c0:99:46:56:18:13:72:f5:a5:bf:3b:a0:13:d5:
9d:85:53:82:8d:93:02:b3:8f:dd:55:99:60:f0:8a:31:aa:36:
88:fe:89:5c:48:de:4c:e5:17:6d:1d:8a:88:4f:20:1c:f1:43:
92:1f:a3:33:9b:24:fa:d7:36:44:3d:08:21:69:4c:0a:9b:d5:
c9:49:78:9e:2b:4a:f8:c2:9f:57:d9:a8:97:d8:17:bc:e5:40:
e0:47:0f:65
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQlj6xuIDnh0/HQp14M0YH0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliMGMwZDA0MjI1NTY2ZGI5NWU5YWQzYjJlZjYwNTAxNDk3
NWFhYTIwHhcNMjUwMTAyMDU0OTIwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkY2JkNTU1NGYwYzI2NTliMDc0ZTc2NWZjOTk1MjlhYjdiNGU4OWExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvT05ez7Q7JOMKa3mIamfxSkhIWSn
wmsPXbodpu5XZcyLnHRNxqWu/UN8qY5+E/jfKUDn6CnIYzCvzKgQHDaDxUeSoUBq
eahucYolnxuYoXfvXHZEH97iQTenwR0UJ/gyOyN5T/TYPNot9Nzm5sm1bH6eaI7m
Q09/mYhn/vt5vlXQzNcHWj5rWPb9YAGIB6aMY1/VMCsK2C7xIDq6Cj9g9fprlJ8J
zt++He95n4/1BqLFyXXJ3h7ko4rZya/mxYFnVOH7ovgCmW67/ssp7aAmxmd/0UKS
RimVsChG7Kxl8pMXY7zGmc88CaC+7meEkC+bivkcVK/xMqJIBCmfUM60eQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNy9VVTwwmWbB052X8mVKat7TomhMB8GA1UdIwQY
MBaAFJsMDQQiVWbblemtOy72BQFJdaqiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbXd3TkJDSlZadHVWNmEwN0x2WUZBVWwxcXFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC8wZWM2ZDItZjFkNy00YjBhLWFkMzMt
ZThlZjJmMDk1OThlLzEvM0wxVlZQRENaWnNIVG5aZnlaVXBxM3RPaWFFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC8wZWM2ZDItZjFkNy00YjBhLWFkMzMtZThlZjJmMDk1OThl
LzEvbXd3TkJDSlZadHVWNmEwN0x2WUZBVWwxcXFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZY1MA0G
CSqGSIb3DQEBCwUAA4IBAQBamflVTS9myLegCT+N1kCtKqCok8CYyydnolDlD7Ko
HLnOhUGuebbiXxkSgbDiAhWzHsKI7SgraOFGMOQIP5bhMP5fFvJmKH+BM4U6cCEJ
Holg3SUHj8JDXVySJleezx6FQEYcZJ+fTdvIpovs29lyQqBY/T/77BqWV63bYUT9
ut9dLMbzHzZcaZ0Gqs0JMLXMoHqIDGhBNQ8aLSf/G0o5A+ygGNqqwJlGVhgTcvWl
vzugE9WdhVOCjZMCs4/dVZlg8IoxqjaI/olcSN5M5RdtHYqITyAc8UOSH6MzmyT6
1zZEPQghaUwKm9XJSXieK0r4wp9X2aiX2Be85UDgRw9l
-----END CERTIFICATE-----
Generated at Tue May 6 22:46:22 2025 by rpki-client