Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/396e31-3b14-4e14-b2ec-1684b2f08e72/1/uY4SQVwIX0RLEtUlPlOwWVRNWZc.roa
File: uY4SQVwIX0RLEtUlPlOwWVRNWZc.roa (raw, json)
Hash identifier: vt9VkgMg0nnFtO19qMaAHftHwRmrAE4OxM0H4jw3Zo8=
Subject key identifier: B9:8E:12:41:5C:08:5F:44:4B:12:D5:25:3E:53:B0:59:54:4D:59:97
Certificate issuer: /CN=826f8bc1ec4e4dfc02eecc2de4a9edcc4697a3bd
Certificate serial: 07390EF4
Authority key identifier: 82:6F:8B:C1:EC:4E:4D:FC:02:EE:CC:2D:E4:A9:ED:CC:46:97:A3:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gm-LwexOTfwC7swt5KntzEaXo70.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/396e31-3b14-4e14-b2ec-1684b2f08e72/1/uY4SQVwIX0RLEtUlPlOwWVRNWZc.roa
Signing time: Sat 01 Jan 2022 06:59:21 +0000
ROA not before: Sat 01 Jan 2022 06:59:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208162
IP address blocks: 45.149.236.0/22 maxlen: 22
2a0f:7e00::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121179892 (0x7390ef4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=826f8bc1ec4e4dfc02eecc2de4a9edcc4697a3bd
Validity
Not Before: Jan 1 06:59:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b98e12415c085f444b12d5253e53b059544d5997
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:b3:c0:2d:38:49:3f:36:0c:4c:ce:c4:52:03:
24:1e:11:6a:6b:fb:85:32:1a:60:24:80:5c:0a:6a:
84:37:4a:a8:b0:ff:94:55:1b:aa:bf:61:83:92:67:
d9:29:4a:fa:de:75:e0:47:71:56:26:93:98:d6:32:
bc:9f:ba:5e:5c:63:e0:1b:61:9b:ce:e1:1c:e4:25:
f2:a1:74:45:6e:39:a5:65:bd:d1:0e:9c:18:53:ff:
6e:5e:1c:b0:98:c1:24:28:bb:fb:6d:b4:4c:f6:c6:
ca:da:ca:ee:0f:ac:6c:e5:35:c3:45:53:6f:92:59:
15:7f:f1:c5:7c:50:7b:fb:c6:b0:4b:e5:c0:1b:37:
c6:90:89:ec:a4:13:76:7f:c8:99:95:ae:78:64:50:
63:4b:1d:de:ba:50:cb:69:36:26:04:cc:e3:37:0c:
b5:06:f0:30:c8:52:42:68:b3:ff:64:cc:99:61:d8:
e2:03:d4:98:95:ee:aa:5f:51:d1:eb:4d:bc:9e:6f:
66:cc:b3:6b:0f:7e:9b:57:75:39:9c:2c:28:1b:8e:
bc:26:f6:29:2b:c7:b6:3f:e5:2d:c6:8e:29:4e:f9:
62:64:0c:78:98:e2:c1:6e:6b:50:52:a8:83:ae:2f:
67:30:d4:ad:99:1e:9b:81:dd:3b:8b:a5:5c:5d:a0:
82:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:8E:12:41:5C:08:5F:44:4B:12:D5:25:3E:53:B0:59:54:4D:59:97
X509v3 Authority Key Identifier:
keyid:82:6F:8B:C1:EC:4E:4D:FC:02:EE:CC:2D:E4:A9:ED:CC:46:97:A3:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gm-LwexOTfwC7swt5KntzEaXo70.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/396e31-3b14-4e14-b2ec-1684b2f08e72/1/uY4SQVwIX0RLEtUlPlOwWVRNWZc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/396e31-3b14-4e14-b2ec-1684b2f08e72/1/gm-LwexOTfwC7swt5KntzEaXo70.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.236.0/22
IPv6:
2a0f:7e00::/29
Signature Algorithm: sha256WithRSAEncryption
8b:26:31:f4:3c:f4:4a:49:e2:42:75:fb:10:aa:99:43:81:c3:
7c:3c:80:fc:0f:d7:f9:21:79:b7:b7:e7:b9:00:51:af:d6:3b:
d9:73:f1:1e:cb:e8:2f:23:4e:4d:8e:d3:01:77:d4:08:e3:1d:
4b:d8:31:8a:96:ca:80:e8:46:9e:eb:1f:89:b2:32:6e:a5:96:
13:0e:97:9f:0b:aa:7a:5f:2a:cb:73:3b:31:74:79:c4:37:13:
bb:a8:38:45:b8:5b:96:de:5c:e2:8a:b8:79:65:87:d8:cf:ac:
d1:88:4d:ec:1c:58:82:86:3a:ca:b5:f1:30:3e:49:a6:62:1e:
11:bf:d1:2e:af:b4:73:d3:25:df:b0:e9:9f:11:56:68:6b:aa:
0e:30:77:30:b1:6b:3d:80:2f:ac:ce:87:74:55:df:e4:1b:5a:
97:f3:38:97:8d:e4:33:34:69:1c:bf:ac:03:eb:35:3c:64:9e:
ce:86:dd:51:04:01:60:00:16:a3:54:b6:b7:05:73:b5:95:c2:
b2:68:87:b0:ea:3e:41:6f:fd:df:da:d8:32:be:9d:60:cd:08:
e8:24:e4:df:79:0a:04:a7:12:fb:ca:24:e3:73:73:95:cd:50:
b4:2c:3a:5e:dd:07:c9:be:f1:c9:b2:25:46:ed:3a:5f:60:2a:
d2:32:a0:39
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgIEBzkO9DANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4
MjZmOGJjMWVjNGU0ZGZjMDJlZWNjMmRlNGE5ZWRjYzQ2OTdhM2JkMB4XDTIyMDEw
MTA2NTkyMVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYjk4ZTEyNDE1YzA4
NWY0NDRiMTJkNTI1M2U1M2IwNTk1NDRkNTk5NzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANmzwC04ST82DEzOxFIDJB4Ramv7hTIaYCSAXApqhDdKqLD/
lFUbqr9hg5Jn2SlK+t514EdxViaTmNYyvJ+6Xlxj4Bthm87hHOQl8qF0RW45pWW9
0Q6cGFP/bl4csJjBJCi7+220TPbGytrK7g+sbOU1w0VTb5JZFX/xxXxQe/vGsEvl
wBs3xpCJ7KQTdn/ImZWueGRQY0sd3rpQy2k2JgTM4zcMtQbwMMhSQmiz/2TMmWHY
4gPUmJXuql9R0etNvJ5vZsyzaw9+m1d1OZwsKBuOvCb2KSvHtj/lLcaOKU75YmQM
eJjiwW5rUFKog64vZzDUrZkem4HdO4ulXF2ggnUCAwEAAaOCAhgwggIUMB0GA1Ud
DgQWBBS5jhJBXAhfREsS1SU+U7BZVE1ZlzAfBgNVHSMEGDAWgBSCb4vB7E5N/ALu
zC3kqe3MRpejvTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2dtLUx3ZXhPVGZ3Qzdzd3Q1S250ekVhWG83MC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMDkvMzk2ZTMxLTNiMTQtNGUxNC1iMmVjLTE2ODRiMmYwOGU3Mi8x
L3VZNFNRVndJWDBSTEV0VWxQbE93V1ZSTldaYy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDkv
Mzk2ZTMxLTNiMTQtNGUxNC1iMmVjLTE2ODRiMmYwOGU3Mi8xL2dtLUx3ZXhPVGZ3
Qzdzd3Q1S250ekVhWG83MC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAi2V7DANBAIAAjAHAwUDKg9+ADAN
BgkqhkiG9w0BAQsFAAOCAQEAiyYx9Dz0SkniQnX7EKqZQ4HDfDyA/A/X+SF5t7fn
uQBRr9Y72XPxHsvoLyNOTY7TAXfUCOMdS9gxipbKgOhGnusfibIybqWWEw6Xnwuq
el8qy3M7MXR5xDcTu6g4Rbhblt5c4oq4eWWH2M+s0YhN7BxYgoY6yrXxMD5JpmIe
Eb/RLq+0c9Ml37DpnxFWaGuqDjB3MLFrPYAvrM6HdFXf5Btal/M4l43kMzRpHL+s
A+s1PGSezobdUQQBYAAWo1S2twVztZXCsmiHsOo+QW/939rYMr6dYM0I6CTk33kK
BKcS+8ok43Nzlc1QtCw6Xt0Hyb7xybIlRu06X2Aq0jKgOQ==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:31:02 2025 by rpki-client