Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/K3Hl5h36gvPYJG2s0QIjz5DZNBk.roa
File: K3Hl5h36gvPYJG2s0QIjz5DZNBk.roa (raw, json)
Hash identifier: wvRGPaM5XxldV9VGcjf6WysB+76zeA8BCIF+w4mMVEY=
Subject key identifier: 2B:71:E5:E6:1D:FA:82:F3:D8:24:6D:AC:D1:02:23:CF:90:D9:34:19
Certificate issuer: /CN=baaa7b4c01e929c38923981ab51c9727a1f9f07e
Certificate serial: 318385
Authority key identifier: BA:AA:7B:4C:01:E9:29:C3:89:23:98:1A:B5:1C:97:27:A1:F9:F0:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uqp7TAHpKcOJI5gatRyXJ6H58H4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/K3Hl5h36gvPYJG2s0QIjz5DZNBk.roa
Signing time: Sat 01 Jan 2022 01:54:37 +0000
ROA not before: Sat 01 Jan 2022 01:54:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 268624
IP address blocks: 45.141.214.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3244933 (0x318385)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=baaa7b4c01e929c38923981ab51c9727a1f9f07e
Validity
Not Before: Jan 1 01:54:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2b71e5e61dfa82f3d8246dacd10223cf90d93419
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:26:b9:a9:b2:61:8e:55:8e:7c:0c:7d:aa:f4:
84:08:9a:05:52:79:e2:19:af:aa:53:d9:25:74:6b:
fd:27:21:29:d6:ce:e7:1d:77:c8:0a:9c:29:93:49:
c5:1d:a1:9e:e6:60:2d:c0:b1:64:a8:c4:eb:07:2f:
44:ee:e6:ff:ec:19:ed:8c:2c:49:a2:e4:89:38:62:
bc:72:2a:60:9a:f9:e9:13:f0:86:09:93:f7:92:40:
41:a0:86:89:53:ca:1a:06:ec:c9:a3:ed:c2:d1:b6:
ee:6e:4b:82:ed:66:c9:a8:88:86:60:b3:92:70:f1:
bb:61:89:82:27:6c:0c:d1:3f:05:16:9c:c6:78:fc:
7f:7f:33:d4:94:e5:1a:89:41:a9:08:b6:e6:30:8a:
d4:b6:94:6f:de:d4:c6:95:8e:00:4d:51:fc:47:c2:
fd:64:3b:d7:9a:09:2a:ef:95:6d:18:53:e0:a1:67:
6d:11:90:ad:9d:a0:3d:90:5b:f4:f0:a4:57:a6:77:
e6:71:53:8e:59:51:1c:f1:93:39:95:51:44:60:3e:
f4:48:57:60:18:28:79:23:e9:62:e2:c7:fc:bb:6c:
f9:86:36:a2:19:6d:15:b7:83:ef:ac:f1:f5:4e:dc:
87:03:c0:b1:82:8f:67:08:3e:bf:3f:d3:6d:f3:95:
64:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:71:E5:E6:1D:FA:82:F3:D8:24:6D:AC:D1:02:23:CF:90:D9:34:19
X509v3 Authority Key Identifier:
keyid:BA:AA:7B:4C:01:E9:29:C3:89:23:98:1A:B5:1C:97:27:A1:F9:F0:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqp7TAHpKcOJI5gatRyXJ6H58H4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/K3Hl5h36gvPYJG2s0QIjz5DZNBk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/uqp7TAHpKcOJI5gatRyXJ6H58H4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.214.0/24
Signature Algorithm: sha256WithRSAEncryption
57:a2:63:06:71:1c:48:47:3d:fb:9b:2b:cb:23:61:29:79:bd:
92:bc:59:2d:54:49:7e:53:39:95:68:f8:30:a8:23:8e:f6:95:
36:dd:69:07:af:57:cf:95:b3:9d:10:bc:45:07:0c:14:ca:63:
1e:1b:73:f2:28:da:22:86:32:cc:4c:99:78:9f:7a:4e:00:08:
5b:e2:08:cd:30:bc:2f:2e:a3:cf:99:e6:78:d6:5e:ed:f6:be:
98:1a:89:e8:9e:29:14:9b:08:a2:e7:3a:31:90:e6:87:5f:9d:
99:37:ba:a6:01:fa:96:5b:92:4b:ff:65:fe:39:f7:65:37:65:
a7:ac:ab:2f:bd:2f:0d:2a:03:a3:cb:78:53:31:f0:1a:00:26:
d7:42:37:1d:28:a7:a8:80:f1:8e:81:5d:7e:75:55:08:5f:a6:
53:5f:5e:89:7d:6f:57:86:df:f1:92:c2:08:bf:58:db:9b:c9:
b5:ac:2f:0e:81:76:af:a5:08:5f:04:00:27:25:2a:5c:2a:42:
1f:25:af:50:86:45:fc:8e:54:32:07:12:0b:ba:e6:b1:0a:d0:
e1:5c:29:fa:58:a4:8d:ee:92:9f:05:57:f3:c6:cd:b7:e2:6b:
4a:58:43:fa:d5:89:5e:58:c8:c1:b8:05:a6:72:d7:0c:d5:8c:
c3:33:07:52
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgIDMYOFMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGJh
YWE3YjRjMDFlOTI5YzM4OTIzOTgxYWI1MWM5NzI3YTFmOWYwN2UwHhcNMjIwMTAx
MDE1NDM3WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEygyYjcxZTVlNjFkZmE4
MmYzZDgyNDZkYWNkMTAyMjNjZjkwZDkzNDE5MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAjya5qbJhjlWOfAx9qvSECJoFUnniGa+qU9kldGv9JyEp1s7n
HXfICpwpk0nFHaGe5mAtwLFkqMTrBy9E7ub/7BntjCxJouSJOGK8cipgmvnpE/CG
CZP3kkBBoIaJU8oaBuzJo+3C0bbubkuC7WbJqIiGYLOScPG7YYmCJ2wM0T8FFpzG
ePx/fzPUlOUaiUGpCLbmMIrUtpRv3tTGlY4ATVH8R8L9ZDvXmgkq75VtGFPgoWdt
EZCtnaA9kFv08KRXpnfmcVOOWVEc8ZM5lVFEYD70SFdgGCh5I+li4sf8u2z5hjai
GW0Vt4PvrPH1TtyHA8Cxgo9nCD6/P9Nt85VkPQIDAQABo4ICCTCCAgUwHQYDVR0O
BBYEFCtx5eYd+oLz2CRtrNECI8+Q2TQZMB8GA1UdIwQYMBaAFLqqe0wB6SnDiSOY
GrUclyeh+fB+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
dXFwN1RBSHBLY09KSTVnYXRSeVhKNkg1OEg0LmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC8wYy9hYjllNzAtNDg5YS00MDg4LWIyOGUtZTY4ZjZjZjJjMGQyLzEv
SzNIbDVoMzZndlBZSkcyczBRSWp6NURaTkJrLnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9h
YjllNzAtNDg5YS00MDg4LWIyOGUtZTY4ZjZjZjJjMGQyLzEvdXFwN1RBSHBLY09K
STVnYXRSeVhKNkg1OEg0LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALY3WMA0GCSqGSIb3DQEBCwUAA4IB
AQBXomMGcRxIRz37myvLI2Epeb2SvFktVEl+UzmVaPgwqCOO9pU23WkHr1fPlbOd
ELxFBwwUymMeG3PyKNoihjLMTJl4n3pOAAhb4gjNMLwvLqPPmeZ41l7t9r6YGono
nikUmwii5zoxkOaHX52ZN7qmAfqWW5JL/2X+OfdlN2WnrKsvvS8NKgOjy3hTMfAa
ACbXQjcdKKeogPGOgV1+dVUIX6ZTX16JfW9Xht/xksIIv1jbm8m1rC8OgXavpQhf
BAAnJSpcKkIfJa9QhkX8jlQyBxILuuaxCtDhXCn6WKSN7pKfBVfzxs234mtKWEP6
1YleWMjBuAWmctcM1YzDMwdS
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:35:33 2025 by rpki-client