Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/6aefaa-86bd-404a-9030-35b100090d4f/1/oCw27r2HF3P9IifBo64ZMJ2ZCPM.roa
File: oCw27r2HF3P9IifBo64ZMJ2ZCPM.roa (raw, json)
Hash identifier: ZSpBTRiSjUlwG40IUkClQgU62Dku0nHYhqo4qHU/l2w=
Subject key identifier: A0:2C:36:EE:BD:87:17:73:FD:22:27:C1:A3:AE:19:30:9D:99:08:F3
Certificate issuer: /CN=1f6551edd483908f99fb29d3485a619a09e33211
Certificate serial: 0300116B
Authority key identifier: 1F:65:51:ED:D4:83:90:8F:99:FB:29:D3:48:5A:61:9A:09:E3:32:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H2VR7dSDkI-Z-ynTSFphmgnjMhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/6aefaa-86bd-404a-9030-35b100090d4f/1/oCw27r2HF3P9IifBo64ZMJ2ZCPM.roa
Signing time: Mon 11 Apr 2022 08:14:22 +0000
ROA not before: Mon 11 Apr 2022 08:14:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 63473
IP address blocks: 45.132.74.0/24 maxlen: 24
45.132.75.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 50336107 (0x300116b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f6551edd483908f99fb29d3485a619a09e33211
Validity
Not Before: Apr 11 08:14:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a02c36eebd871773fd2227c1a3ae19309d9908f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:7b:35:cb:da:26:ed:7f:e3:e3:39:3e:b2:43:
08:40:c2:99:24:56:5f:d3:7e:8b:33:58:6d:c1:3f:
84:81:20:fe:30:7c:ff:93:10:07:77:51:aa:32:fe:
a1:ed:0a:dc:71:aa:55:10:f9:36:ea:85:59:cf:c9:
46:01:05:f1:8e:a3:45:e1:f4:4b:26:a1:8d:ff:85:
55:d4:3b:65:39:1f:17:14:80:c6:1b:d3:1a:ee:0e:
9c:c1:ee:4b:08:26:4a:d3:e4:19:fa:4e:87:9e:72:
d9:24:70:23:ce:d5:89:e7:d1:80:67:1b:ac:c4:3b:
d1:b9:08:cd:0b:82:7b:30:1a:56:d3:00:2e:d3:0a:
60:bd:40:22:a1:47:b6:be:02:80:b6:a4:83:29:d1:
a0:c7:5f:0a:58:25:78:4b:b0:04:4d:97:db:09:01:
ac:65:e7:be:3b:54:28:22:75:2f:3a:ca:e0:2e:9a:
0e:ca:5f:12:52:a9:18:b6:46:5e:d9:a4:c1:0d:7c:
84:16:5b:9a:99:7e:06:66:65:65:3d:0d:40:8f:7b:
0d:df:80:4f:16:87:fe:7b:38:7a:ec:55:95:db:02:
b7:f1:01:9b:5c:88:a2:62:05:0b:c3:bf:d0:93:07:
27:84:38:5f:6e:2b:64:47:cc:79:43:a5:65:37:ba:
75:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:2C:36:EE:BD:87:17:73:FD:22:27:C1:A3:AE:19:30:9D:99:08:F3
X509v3 Authority Key Identifier:
keyid:1F:65:51:ED:D4:83:90:8F:99:FB:29:D3:48:5A:61:9A:09:E3:32:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H2VR7dSDkI-Z-ynTSFphmgnjMhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6aefaa-86bd-404a-9030-35b100090d4f/1/oCw27r2HF3P9IifBo64ZMJ2ZCPM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6aefaa-86bd-404a-9030-35b100090d4f/1/H2VR7dSDkI-Z-ynTSFphmgnjMhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.74.0/23
Signature Algorithm: sha256WithRSAEncryption
06:85:77:56:87:c9:9b:b0:a0:32:5b:d2:22:fc:bb:e0:ae:e4:
4f:44:bd:8f:a9:8c:1c:5a:40:be:5f:6a:b2:fc:5b:89:1d:16:
16:74:f1:0d:a0:e1:d3:56:3f:53:ef:65:54:51:10:c4:22:19:
b3:82:16:e6:1b:33:7f:a7:cb:1d:8f:51:64:58:c5:18:c5:0d:
5a:84:d7:b8:d2:a3:c0:72:f7:63:9a:31:15:f3:be:45:a8:f2:
0a:63:ed:ca:ed:a4:b9:d6:34:94:df:1c:4c:65:af:51:87:97:
43:9e:21:e3:0d:6b:ea:50:45:36:4d:43:54:68:43:ea:30:ee:
4c:ca:ea:0c:3d:c2:c6:f1:11:6a:b7:aa:10:f3:2c:59:03:59:
ae:17:c8:ca:75:0d:96:f7:93:03:d6:4b:aa:dd:2e:91:d2:d0:
20:55:1a:f4:99:39:94:4f:63:b7:61:5f:a3:98:83:89:92:b4:
3e:22:b4:a7:80:77:03:a3:07:c6:72:6b:86:86:4b:8f:42:9b:
bc:4b:8a:1e:fe:ab:70:85:ce:5f:ef:ca:72:46:ea:a1:26:4a:
0a:59:41:85:5f:32:92:0a:e3:52:5e:ae:70:a5:05:16:c1:d1:
18:15:9b:19:35:ae:25:a2:f5:6a:2e:70:1d:1e:52:6f:ff:e4:
1d:b9:28:d6
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAwARazANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygx
ZjY1NTFlZGQ0ODM5MDhmOTlmYjI5ZDM0ODVhNjE5YTA5ZTMzMjExMB4XDTIyMDQx
MTA4MTQyMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYTAyYzM2ZWViZDg3
MTc3M2ZkMjIyN2MxYTNhZTE5MzA5ZDk5MDhmMzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJR7NcvaJu1/4+M5PrJDCEDCmSRWX9N+izNYbcE/hIEg/jB8
/5MQB3dRqjL+oe0K3HGqVRD5NuqFWc/JRgEF8Y6jReH0Syahjf+FVdQ7ZTkfFxSA
xhvTGu4OnMHuSwgmStPkGfpOh55y2SRwI87ViefRgGcbrMQ70bkIzQuCezAaVtMA
LtMKYL1AIqFHtr4CgLakgynRoMdfClgleEuwBE2X2wkBrGXnvjtUKCJ1LzrK4C6a
DspfElKpGLZGXtmkwQ18hBZbmpl+BmZlZT0NQI97Dd+ATxaH/ns4euxVldsCt/EB
m1yIomIFC8O/0JMHJ4Q4X24rZEfMeUOlZTe6de0CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSgLDbuvYcXc/0iJ8GjrhkwnZkI8zAfBgNVHSMEGDAWgBQfZVHt1IOQj5n7
KdNIWmGaCeMyETAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0gyVlI3ZFNEa0ktWi15blRTRnBobWduak1oRS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMzAvNmFlZmFhLTg2YmQtNDA0YS05MDMwLTM1YjEwMDA5MGQ0Zi8x
L29DdzI3cjJIRjNQOUlpZkJvNjRaTUoyWkNQTS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzAv
NmFlZmFhLTg2YmQtNDA0YS05MDMwLTM1YjEwMDA5MGQ0Zi8xL0gyVlI3ZFNEa0kt
Wi15blRTRnBobWduak1oRS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAS2ESjANBgkqhkiG9w0BAQsFAAOC
AQEABoV3VofJm7CgMlvSIvy74K7kT0S9j6mMHFpAvl9qsvxbiR0WFnTxDaDh01Y/
U+9lVFEQxCIZs4IW5hszf6fLHY9RZFjFGMUNWoTXuNKjwHL3Y5oxFfO+RajyCmPt
yu2kudY0lN8cTGWvUYeXQ54h4w1r6lBFNk1DVGhD6jDuTMrqDD3CxvERareqEPMs
WQNZrhfIynUNlveTA9ZLqt0ukdLQIFUa9Jk5lE9jt2Ffo5iDiZK0PiK0p4B3A6MH
xnJrhoZLj0KbvEuKHv6rcIXOX+/KckbqoSZKCllBhV8ykgrjUl6ucKUFFsHRGBWb
GTWuJaL1ai5wHR5Sb//kHbko1g==
-----END CERTIFICATE-----
Generated at Mon Apr 21 02:10:38 2025 by rpki-client