Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/9aa500-f3bd-477b-9082-aa0b11564a32/1/qM70OFh0XBAZboBSeshC4p0dhQk.roa
File: qM70OFh0XBAZboBSeshC4p0dhQk.roa (raw, json)
Hash identifier: cRvivKBSHIE+V3XELq/g3J1PJ+3PPIi1cDAQrztFeuE=
Subject key identifier: A8:CE:F4:38:58:74:5C:10:19:6E:80:52:7A:C8:42:E2:9D:1D:85:09
Certificate issuer: /CN=45dab507c08976cc29d177373de627a1ce86efae
Certificate serial: 01856F022566DF9714F00B38CBF3D10D1F2B
Authority key identifier: 45:DA:B5:07:C0:89:76:CC:29:D1:77:37:3D:E6:27:A1:CE:86:EF:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rdq1B8CJdswp0Xc3PeYnoc6G764.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/9aa500-f3bd-477b-9082-aa0b11564a32/1/qM70OFh0XBAZboBSeshC4p0dhQk.roa
Signing time: Sun 01 Jan 2023 20:24:49 +0000
ROA not before: Sun 01 Jan 2023 20:24:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44568
IP address blocks: 83.217.252.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:02:25:66:df:97:14:f0:0b:38:cb:f3:d1:0d:1f:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45dab507c08976cc29d177373de627a1ce86efae
Validity
Not Before: Jan 1 20:24:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a8cef43858745c10196e80527ac842e29d1d8509
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:c6:3f:ed:15:82:fb:26:34:31:02:70:81:1b:
ce:8f:f2:96:b7:69:9a:e6:c2:78:18:91:8a:01:64:
6e:4d:e8:95:97:16:cf:fd:5f:f6:94:f1:25:d9:f6:
31:e9:f8:3c:f4:8d:72:f9:67:ed:47:10:37:eb:74:
65:27:86:a2:c8:60:d2:89:89:ac:72:d9:73:82:77:
6e:d9:ac:97:58:7c:16:12:c8:01:b5:a8:b6:59:2b:
7f:c2:a8:f2:9d:f9:b5:df:52:f0:5e:df:d1:5f:cd:
8f:9b:dd:82:a6:a9:3f:41:b9:be:7d:e1:6e:2f:51:
06:0b:bc:74:e7:0c:55:81:ab:85:d8:6d:f4:33:a8:
de:48:83:3b:36:d7:50:f4:d8:0c:1b:a3:b2:e5:29:
b5:be:5c:97:cc:58:b8:eb:ec:9d:f1:78:0b:90:c2:
2b:06:be:61:dc:96:92:ac:c7:3e:6a:49:4f:5d:fb:
a1:ee:f6:0a:d0:d2:69:78:9d:31:aa:cd:ce:ab:e2:
c0:4f:dd:23:b0:57:d7:a0:7a:5c:9b:61:3c:6d:81:
97:da:d0:cf:7f:8e:8b:a9:3d:f9:51:b7:55:10:be:
d2:55:a9:5a:96:e5:8c:ec:1d:28:2d:ee:45:98:1e:
49:7a:8c:88:87:18:f2:1b:ca:0b:c5:0f:38:c0:b2:
44:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:CE:F4:38:58:74:5C:10:19:6E:80:52:7A:C8:42:E2:9D:1D:85:09
X509v3 Authority Key Identifier:
keyid:45:DA:B5:07:C0:89:76:CC:29:D1:77:37:3D:E6:27:A1:CE:86:EF:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rdq1B8CJdswp0Xc3PeYnoc6G764.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9aa500-f3bd-477b-9082-aa0b11564a32/1/qM70OFh0XBAZboBSeshC4p0dhQk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9aa500-f3bd-477b-9082-aa0b11564a32/1/Rdq1B8CJdswp0Xc3PeYnoc6G764.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.217.252.0/22
Signature Algorithm: sha256WithRSAEncryption
2e:1a:c7:5c:df:45:4e:e0:ad:ae:6a:0e:42:15:00:15:be:c4:
26:bb:81:46:95:ca:88:cf:46:5a:89:e0:d5:ac:da:c0:26:39:
79:c5:26:4c:81:4e:45:16:42:ea:b4:bd:00:fb:a0:17:4e:b6:
ee:56:4e:4a:26:a9:31:b8:d4:9a:ae:43:9a:74:09:8d:e5:d9:
22:61:e5:e0:bf:bd:c5:ad:8c:50:9a:90:9b:3a:a1:a3:3b:9e:
69:55:7b:ef:74:88:bd:ed:16:3c:f3:9c:a4:e7:14:56:0c:a3:
50:30:0f:0d:2c:89:1a:00:f1:2c:5b:25:28:4d:25:3f:36:86:
ae:2e:25:d9:49:d2:cf:11:0b:cf:36:e5:be:bf:4b:6c:03:98:
9e:a7:47:5b:d0:b7:90:8f:71:f7:ea:45:65:35:91:5d:f0:2d:
11:de:29:99:e9:1e:3e:a5:2a:b8:5d:76:62:11:79:f7:77:f8:
98:c4:d1:34:c3:99:56:a3:74:fc:2d:ec:37:3d:aa:a9:a6:a7:
fe:15:20:c6:d1:63:db:50:f6:77:ca:03:ca:f9:fa:02:43:d5:
11:20:3c:67:70:92:18:ac:10:3a:0c:d2:79:e7:45:de:9d:56:
fe:7b:0e:af:a1:21:1b:d3:11:86:f2:80:6b:f6:19:67:6d:d5:
bf:99:9c:3c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVvAiVm35cU8As4y/PRDR8rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1ZGFiNTA3YzA4OTc2Y2MyOWQxNzczNzNkZTYyN2ExY2U4
NmVmYWUwHhcNMjMwMTAxMjAyNDQ5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhOGNlZjQzODU4NzQ1YzEwMTk2ZTgwNTI3YWM4NDJlMjlkMWQ4NTA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnMY/7RWC+yY0MQJwgRvOj/KWt2ma
5sJ4GJGKAWRuTeiVlxbP/V/2lPEl2fYx6fg89I1y+WftRxA363RlJ4aiyGDSiYms
ctlzgndu2ayXWHwWEsgBtai2WSt/wqjynfm131LwXt/RX82Pm92Cpqk/Qbm+feFu
L1EGC7x05wxVgauF2G30M6jeSIM7NtdQ9NgMG6Oy5Sm1vlyXzFi46+yd8XgLkMIr
Br5h3JaSrMc+aklPXfuh7vYK0NJpeJ0xqs3Oq+LAT90jsFfXoHpcm2E8bYGX2tDP
f46LqT35UbdVEL7SValaluWM7B0oLe5FmB5JeoyIhxjyG8oLxQ84wLJExQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKjO9DhYdFwQGW6AUnrIQuKdHYUJMB8GA1UdIwQY
MBaAFEXatQfAiXbMKdF3Nz3mJ6HOhu+uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUmRxMUI4Q0pkc3dwMFhjM1BlWW5vYzZHNzY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC85YWE1MDAtZjNiZC00NzdiLTkwODIt
YWEwYjExNTY0YTMyLzEvcU03ME9GaDBYQkFaYm9CU2VzaEM0cDBkaFFrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC85YWE1MDAtZjNiZC00NzdiLTkwODItYWEwYjExNTY0YTMy
LzEvUmRxMUI4Q0pkc3dwMFhjM1BlWW5vYzZHNzY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCU9n8MA0G
CSqGSIb3DQEBCwUAA4IBAQAuGsdc30VO4K2uag5CFQAVvsQmu4FGlcqIz0ZaieDV
rNrAJjl5xSZMgU5FFkLqtL0A+6AXTrbuVk5KJqkxuNSarkOadAmN5dkiYeXgv73F
rYxQmpCbOqGjO55pVXvvdIi97RY885yk5xRWDKNQMA8NLIkaAPEsWyUoTSU/Noau
LiXZSdLPEQvPNuW+v0tsA5iep0db0LeQj3H36kVlNZFd8C0R3imZ6R4+pSq4XXZi
EXn3d/iYxNE0w5lWo3T8Lew3Paqppqf+FSDG0WPbUPZ3ygPK+foCQ9URIDxncJIY
rBA6DNJ550XenVb+ew6voSEb0xGG8oBr9hlnbdW/mZw8
-----END CERTIFICATE-----
Generated at Mon Apr 21 02:11:04 2025 by rpki-client