Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/aeea10-7208-4d5c-85b9-9e35089fa78f/1/1xaPHhNNTp-VT6UTzDqitksEWZs.roa
File: 1xaPHhNNTp-VT6UTzDqitksEWZs.roa (raw, json)
Hash identifier: zBWwK04hbWzAE6apXImCwmx5LP/q5fJnVlhZQIDd4qc=
Subject key identifier: D7:16:8F:1E:13:4D:4E:9F:95:4F:A5:13:CC:3A:A2:B6:4B:04:59:9B
Certificate issuer: /CN=727b4876a2d11058c2e6a779fceac5f04083b4c2
Certificate serial: 018964895B211A59AB899EA9B4FF47909745
Authority key identifier: 72:7B:48:76:A2:D1:10:58:C2:E6:A7:79:FC:EA:C5:F0:40:83:B4:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cntIdqLREFjC5qd5_OrF8ECDtMI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/aeea10-7208-4d5c-85b9-9e35089fa78f/1/1xaPHhNNTp-VT6UTzDqitksEWZs.roa
Signing time: Mon 17 Jul 2023 15:47:50 +0000
ROA not before: Mon 17 Jul 2023 15:47:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62240
IP address blocks: 45.129.198.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:64:89:5b:21:1a:59:ab:89:9e:a9:b4:ff:47:90:97:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=727b4876a2d11058c2e6a779fceac5f04083b4c2
Validity
Not Before: Jul 17 15:47:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d7168f1e134d4e9f954fa513cc3aa2b64b04599b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:58:07:bd:1d:35:bb:22:76:66:94:0a:fa:ba:
ec:49:b5:5a:e1:54:0b:f6:c3:96:7e:6e:50:c1:e8:
88:63:89:c4:4f:c9:5a:86:88:e9:fc:92:cd:f7:8a:
53:80:62:dd:9d:88:af:5e:6a:08:a0:35:6b:c1:91:
bc:d6:8a:8b:b1:ee:e3:52:46:07:14:f4:7a:f1:29:
bb:7d:f9:7f:1a:11:ed:bc:4c:07:8f:d4:60:2c:bc:
fd:41:9b:7f:32:e3:16:3a:5e:06:b5:5e:38:8a:07:
6e:b9:b9:61:3b:15:e4:23:32:ee:1c:08:69:d8:0f:
7e:f7:6a:62:fc:b1:12:bc:ff:3b:17:b7:3c:14:e1:
12:a2:a3:d8:20:c3:ae:ad:6f:6d:0a:c6:11:d4:e3:
c8:a0:a9:87:37:c3:40:32:10:68:7a:36:51:e2:35:
dd:c9:26:3e:c3:42:53:d2:d5:7d:96:0e:8e:7d:b0:
e0:9a:70:de:c5:e0:25:1e:8f:80:23:33:e1:73:b8:
0d:a0:1d:af:1d:7a:89:9b:0f:67:db:0b:38:f9:77:
2c:60:f0:b9:c9:8c:99:6b:96:7e:0a:77:a6:54:1d:
e1:a0:5a:95:e1:f4:0e:b9:29:3d:2a:6c:41:59:4a:
b8:43:2b:11:e3:dd:5e:69:88:8b:59:de:f6:61:83:
2b:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:16:8F:1E:13:4D:4E:9F:95:4F:A5:13:CC:3A:A2:B6:4B:04:59:9B
X509v3 Authority Key Identifier:
keyid:72:7B:48:76:A2:D1:10:58:C2:E6:A7:79:FC:EA:C5:F0:40:83:B4:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cntIdqLREFjC5qd5_OrF8ECDtMI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/aeea10-7208-4d5c-85b9-9e35089fa78f/1/1xaPHhNNTp-VT6UTzDqitksEWZs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/aeea10-7208-4d5c-85b9-9e35089fa78f/1/cntIdqLREFjC5qd5_OrF8ECDtMI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.198.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:d0:ba:7e:7e:91:a6:31:4d:d3:50:15:83:f3:fa:09:58:88:
07:20:a1:16:87:2e:62:a7:38:a8:5c:77:c5:dc:1a:8a:79:41:
68:91:89:7b:14:9b:fb:d9:b2:c7:b3:b0:ab:48:04:7a:f1:03:
b4:a4:bc:f4:67:0e:eb:13:09:5f:3e:4d:0c:80:68:0f:f2:dd:
b9:62:d4:65:c8:86:12:00:3b:c7:5a:df:95:c5:bd:35:b4:8b:
a1:b9:77:a2:14:79:c0:d4:8a:30:1c:89:01:38:5a:18:89:77:
07:4b:d7:74:8e:66:d8:c7:22:96:9c:b2:22:01:d7:a5:6f:ce:
e5:d8:5a:ba:8b:76:e7:f6:71:f2:3a:43:5a:04:41:4e:a7:45:
5e:8b:2b:d9:02:ba:47:8b:89:f7:3a:63:af:9a:8a:7e:73:1e:
a0:fa:17:39:e3:60:1f:6a:e4:41:06:d3:ed:5a:c9:8e:3d:be:
5c:e2:45:3d:8f:7a:c0:99:b6:df:ce:62:7f:e4:e1:66:0f:d5:
1f:49:1b:e3:13:72:37:7f:4f:fc:bb:f8:8b:df:66:b5:6d:c1:
3c:21:eb:49:15:e4:96:c0:6d:22:50:27:7c:0f:ce:bf:e9:f3:
95:ee:b1:c1:a2:21:05:68:79:0b:0a:da:b3:8e:18:9c:6d:ca:
3c:71:bf:48
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYlkiVshGlmriZ6ptP9HkJdFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyN2I0ODc2YTJkMTEwNThjMmU2YTc3OWZjZWFjNWYwNDA4
M2I0YzIwHhcNMjMwNzE3MTU0NzUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNzE2OGYxZTEzNGQ0ZTlmOTU0ZmE1MTNjYzNhYTJiNjRiMDQ1OTliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoFgHvR01uyJ2ZpQK+rrsSbVa4VQL
9sOWfm5QweiIY4nET8lahojp/JLN94pTgGLdnYivXmoIoDVrwZG81oqLse7jUkYH
FPR68Sm7ffl/GhHtvEwHj9RgLLz9QZt/MuMWOl4GtV44igduublhOxXkIzLuHAhp
2A9+92pi/LESvP87F7c8FOESoqPYIMOurW9tCsYR1OPIoKmHN8NAMhBoejZR4jXd
ySY+w0JT0tV9lg6OfbDgmnDexeAlHo+AIzPhc7gNoB2vHXqJmw9n2ws4+XcsYPC5
yYyZa5Z+CnemVB3hoFqV4fQOuSk9KmxBWUq4QysR491eaYiLWd72YYMr8wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNcWjx4TTU6flU+lE8w6orZLBFmbMB8GA1UdIwQY
MBaAFHJ7SHai0RBYwuanefzqxfBAg7TCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY250SWRxTFJFRmpDNXFkNV9PckY4RUNEdE1JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC9hZWVhMTAtNzIwOC00ZDVjLTg1Yjkt
OWUzNTA4OWZhNzhmLzEvMXhhUEhoTk5UcC1WVDZVVHpEcWl0a3NFV1pzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC9hZWVhMTAtNzIwOC00ZDVjLTg1YjktOWUzNTA4OWZhNzhm
LzEvY250SWRxTFJFRmpDNXFkNV9PckY4RUNEdE1JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYHGMA0G
CSqGSIb3DQEBCwUAA4IBAQA/0Lp+fpGmMU3TUBWD8/oJWIgHIKEWhy5ipzioXHfF
3BqKeUFokYl7FJv72bLHs7CrSAR68QO0pLz0Zw7rEwlfPk0MgGgP8t25YtRlyIYS
ADvHWt+Vxb01tIuhuXeiFHnA1IowHIkBOFoYiXcHS9d0jmbYxyKWnLIiAdelb87l
2Fq6i3bn9nHyOkNaBEFOp0VeiyvZArpHi4n3OmOvmop+cx6g+hc542AfauRBBtPt
WsmOPb5c4kU9j3rAmbbfzmJ/5OFmD9UfSRvjE3I3f0/8u/iL32a1bcE8IetJFeSW
wG0iUCd8D86/6fOV7rHBoiEFaHkLCtqzjhicbco8cb9I
-----END CERTIFICATE-----
Generated at Sat Apr 19 15:15:24 2025 by rpki-client