Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/ZdHheKrY1swwwY05tr4wozNTSS4.roa
File: ZdHheKrY1swwwY05tr4wozNTSS4.roa (raw, json)
Hash identifier: JD/WqStqIeLAXQ8QDanjtwaZ1DfhHEQnoLoZQA75NJo=
Subject key identifier: 65:D1:E1:78:AA:D8:D6:CC:30:C1:8D:39:B6:BE:30:A3:33:53:49:2E
Certificate issuer: /CN=3a0b05f40a6916394782302d1b5660737257a48b
Certificate serial: 01856D819A231CFC9BD5C55638C17B0464B3
Authority key identifier: 3A:0B:05:F4:0A:69:16:39:47:82:30:2D:1B:56:60:73:72:57:A4:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OgsF9AppFjlHgjAtG1Zgc3JXpIs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/ZdHheKrY1swwwY05tr4wozNTSS4.roa
Signing time: Sun 01 Jan 2023 13:24:48 +0000
ROA not before: Sun 01 Jan 2023 13:24:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61135
IP address blocks: 45.158.15.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:81:9a:23:1c:fc:9b:d5:c5:56:38:c1:7b:04:64:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a0b05f40a6916394782302d1b5660737257a48b
Validity
Not Before: Jan 1 13:24:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=65d1e178aad8d6cc30c18d39b6be30a33353492e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ad:48:1a:de:8f:c0:1b:9c:44:bd:ea:ee:e4:
f8:8a:22:a1:f8:0d:67:5b:90:a5:42:d5:d2:a1:21:
f0:8d:d7:96:ff:e9:5f:95:d6:9b:1a:fd:9d:37:6c:
98:c0:04:5f:a5:26:95:f8:88:be:98:47:66:3a:82:
45:55:8b:e6:28:df:e6:20:f7:74:35:20:48:d3:0a:
49:cc:e5:a9:0e:91:3a:23:0d:99:4f:fd:a2:b3:02:
e9:58:f8:bd:cf:40:a0:dc:4a:ee:21:c1:82:66:d2:
73:55:14:df:3f:41:65:1d:e1:7f:a7:d4:c6:bb:b8:
e9:60:f7:0d:52:79:01:e7:4b:66:42:2c:eb:de:dd:
06:9f:eb:b4:f3:ff:90:b1:02:ab:34:07:dc:74:cb:
af:b0:19:0c:1f:de:6e:50:5e:8b:89:5d:29:64:af:
a6:5a:f1:0e:2d:bd:b3:89:f0:5d:a1:56:d0:ce:db:
6e:cc:3c:17:aa:8d:71:85:a9:06:2f:fe:68:cd:73:
93:bc:65:c3:4e:cc:03:8c:ad:68:5e:7f:34:56:19:
41:f1:8c:f2:29:0e:7e:66:b9:29:b7:fb:58:6f:29:
60:67:d2:c5:59:2d:78:56:5c:2f:5c:df:22:5e:49:
ca:b8:b1:47:c9:ca:42:ca:62:7d:4d:48:a1:5e:33:
90:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:D1:E1:78:AA:D8:D6:CC:30:C1:8D:39:B6:BE:30:A3:33:53:49:2E
X509v3 Authority Key Identifier:
keyid:3A:0B:05:F4:0A:69:16:39:47:82:30:2D:1B:56:60:73:72:57:A4:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OgsF9AppFjlHgjAtG1Zgc3JXpIs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/ZdHheKrY1swwwY05tr4wozNTSS4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.158.15.0/24
Signature Algorithm: sha256WithRSAEncryption
37:e9:4c:f5:d7:77:02:82:2f:ab:c1:b6:92:a7:fc:bc:2e:15:
a6:2d:90:67:53:53:ef:a0:5d:e3:31:54:53:2e:47:97:27:9a:
3d:97:ed:03:13:aa:e3:35:1d:98:10:2d:9e:31:be:89:15:b6:
92:4d:c8:98:70:65:a9:2e:13:70:38:d9:65:49:88:d3:66:a2:
f7:3b:1b:67:80:ef:50:fc:8d:45:1a:6f:41:61:65:43:38:ad:
ee:b1:83:70:31:f7:75:68:60:7b:d9:d0:c2:48:ba:e6:2f:6d:
fd:62:35:d0:26:80:ba:d7:ee:36:26:a6:a2:c0:86:03:dc:85:
59:cf:77:bd:e0:08:b1:57:58:a6:15:fb:60:8c:a1:4d:f9:43:
b3:78:6c:bb:14:36:e4:85:11:ed:b8:3d:6b:0a:ca:41:d1:98:
2d:6b:1d:72:8a:3a:59:1a:63:0a:20:9a:cc:fa:23:17:d7:68:
55:59:9b:62:9a:09:60:4f:62:14:ea:ff:a4:68:f7:ac:7d:33:
97:c0:d0:a4:6c:aa:e0:b1:31:11:72:91:05:12:36:c0:28:1f:
66:ac:5f:97:eb:9d:17:68:bf:28:eb:6e:c9:7e:99:aa:e3:72:
59:a8:3d:d3:cc:f5:d6:34:fe:40:4b:4b:78:b0:e9:7a:06:3e:
ac:84:ac:7d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVtgZojHPyb1cVWOMF7BGSzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhMGIwNWY0MGE2OTE2Mzk0NzgyMzAyZDFiNTY2MDczNzI1
N2E0OGIwHhcNMjMwMTAxMTMyNDQ4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NWQxZTE3OGFhZDhkNmNjMzBjMThkMzliNmJlMzBhMzMzNTM0OTJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq61IGt6PwBucRL3q7uT4iiKh+A1n
W5ClQtXSoSHwjdeW/+lfldabGv2dN2yYwARfpSaV+Ii+mEdmOoJFVYvmKN/mIPd0
NSBI0wpJzOWpDpE6Iw2ZT/2iswLpWPi9z0Cg3EruIcGCZtJzVRTfP0FlHeF/p9TG
u7jpYPcNUnkB50tmQizr3t0Gn+u08/+QsQKrNAfcdMuvsBkMH95uUF6LiV0pZK+m
WvEOLb2zifBdoVbQzttuzDwXqo1xhakGL/5ozXOTvGXDTswDjK1oXn80VhlB8Yzy
KQ5+Zrkpt/tYbylgZ9LFWS14VlwvXN8iXknKuLFHycpCymJ9TUihXjOQfwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGXR4Xiq2NbMMMGNOba+MKMzU0kuMB8GA1UdIwQY
MBaAFDoLBfQKaRY5R4IwLRtWYHNyV6SLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT2dzRjlBcHBGamxIZ2pBdEcxWmdjM0pYcElzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC83NTgzY2ItZDMxZS00ZTAzLWIxNGIt
YjIwZTI4ZjUxODhmLzEvWmRIaGVLclkxc3d3d1kwNXRyNHdvek5UU1M0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC83NTgzY2ItZDMxZS00ZTAzLWIxNGItYjIwZTI4ZjUxODhm
LzEvT2dzRjlBcHBGamxIZ2pBdEcxWmdjM0pYcElzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZ4PMA0G
CSqGSIb3DQEBCwUAA4IBAQA36Uz113cCgi+rwbaSp/y8LhWmLZBnU1PvoF3jMVRT
LkeXJ5o9l+0DE6rjNR2YEC2eMb6JFbaSTciYcGWpLhNwONllSYjTZqL3OxtngO9Q
/I1FGm9BYWVDOK3usYNwMfd1aGB72dDCSLrmL239YjXQJoC61+42JqaiwIYD3IVZ
z3e94AixV1imFftgjKFN+UOzeGy7FDbkhRHtuD1rCspB0Zgtax1yijpZGmMKIJrM
+iMX12hVWZtimglgT2IU6v+kaPesfTOXwNCkbKrgsTERcpEFEjbAKB9mrF+X650X
aL8o627Jfpmq43JZqD3TzPXWNP5AS0t4sOl6Bj6shKx9
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:13:47 2025 by rpki-client