Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/ec1b37-9533-43f9-938d-82b9fb9a2f50/1/J7QbNlrGkqmBPp4MAZ1qZNQ3RqE.roa
File: J7QbNlrGkqmBPp4MAZ1qZNQ3RqE.roa (raw, json)
Hash identifier: hsGg9D6LosNiQVsj8T1+xyNSQeCCAMU635i12GKF/Ys=
Subject key identifier: 27:B4:1B:36:5A:C6:92:A9:81:3E:9E:0C:01:9D:6A:64:D4:37:46:A1
Certificate issuer: /CN=3161c7bec1d71d3499213b3b0552fe6e2513a326
Certificate serial: 018691884F734E6443F2053E86F66E87374C
Authority key identifier: 31:61:C7:BE:C1:D7:1D:34:99:21:3B:3B:05:52:FE:6E:25:13:A3:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MWHHvsHXHTSZITs7BVL-biUToyY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/ec1b37-9533-43f9-938d-82b9fb9a2f50/1/J7QbNlrGkqmBPp4MAZ1qZNQ3RqE.roa
Signing time: Mon 27 Feb 2023 06:21:14 +0000
ROA not before: Mon 27 Feb 2023 06:21:14 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202352
IP address blocks: 45.93.122.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:91:88:4f:73:4e:64:43:f2:05:3e:86:f6:6e:87:37:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3161c7bec1d71d3499213b3b0552fe6e2513a326
Validity
Not Before: Feb 27 06:21:14 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=27b41b365ac692a9813e9e0c019d6a64d43746a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:05:f7:c0:b9:8f:56:53:77:4f:44:b7:2d:77:
00:f4:96:9e:05:12:b9:5e:7a:88:8a:3f:1b:15:cc:
15:65:6f:8e:85:d0:0b:0a:a2:e7:77:57:91:71:2f:
62:84:a2:dd:0a:a8:eb:78:04:4a:c3:25:da:34:47:
35:97:f4:e0:94:a8:05:e1:ab:52:97:f0:d0:04:11:
6c:f0:0d:7b:49:c7:0c:ab:f7:1a:48:21:07:e4:a7:
0f:d9:b2:01:ea:95:20:29:8f:58:40:da:95:ac:e4:
df:f8:6f:87:66:ec:04:89:fd:87:46:94:08:82:f0:
1a:19:0c:b8:60:c6:4d:9e:8f:e1:bf:6e:90:07:e9:
ff:c0:bd:b7:c6:81:c8:df:a3:d0:46:b6:a9:33:80:
58:6b:8b:b1:41:41:3b:61:a9:7e:31:b8:a9:bf:27:
6e:58:88:11:0f:c9:85:5d:17:53:0c:92:12:d9:e9:
ea:c5:4c:40:50:32:3d:10:0b:93:ca:6d:48:fd:01:
bf:08:22:cb:de:fe:0e:c4:d0:4b:bf:0b:b0:29:08:
ac:60:6e:33:65:91:4a:0c:a3:63:0e:f4:86:d1:4d:
81:45:bb:44:85:f5:c9:ca:5f:e3:60:95:3e:43:17:
19:fb:75:f8:70:4c:54:c2:5b:97:ae:c8:50:87:91:
1e:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:B4:1B:36:5A:C6:92:A9:81:3E:9E:0C:01:9D:6A:64:D4:37:46:A1
X509v3 Authority Key Identifier:
keyid:31:61:C7:BE:C1:D7:1D:34:99:21:3B:3B:05:52:FE:6E:25:13:A3:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MWHHvsHXHTSZITs7BVL-biUToyY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/ec1b37-9533-43f9-938d-82b9fb9a2f50/1/J7QbNlrGkqmBPp4MAZ1qZNQ3RqE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/ec1b37-9533-43f9-938d-82b9fb9a2f50/1/MWHHvsHXHTSZITs7BVL-biUToyY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.93.122.0/23
Signature Algorithm: sha256WithRSAEncryption
37:d6:b8:7f:00:62:72:c1:c1:41:73:54:2a:92:0f:a1:17:05:
57:48:24:76:60:8f:d9:a5:4e:e0:38:05:29:40:c6:1a:66:c4:
5b:76:ab:47:c3:66:b5:cc:b4:bf:d0:f7:92:cf:23:c3:50:87:
d3:b2:00:e9:28:27:2a:6e:af:7c:79:59:06:99:cd:b5:8d:f6:
a2:78:04:fc:4d:e2:e7:ee:49:32:5f:19:d2:4f:e1:3f:d5:06:
18:80:ad:23:6e:87:19:bc:42:f4:59:e8:5b:85:a8:79:92:35:
63:09:a4:6d:22:88:d3:a9:3f:c2:12:d1:2f:fa:9c:f9:67:4d:
85:15:e0:8c:02:4b:17:e2:ea:de:3a:ee:ae:e4:e6:0a:1e:0d:
65:63:f4:64:2d:e7:db:b2:28:5d:d6:cd:d9:cc:bd:6b:68:53:
81:76:3b:4f:c0:d8:24:38:39:00:c7:2f:0c:49:db:62:99:99:
65:57:27:9f:4d:4c:0d:1e:ad:c5:b0:16:9c:f8:80:5a:44:8f:
a4:c0:49:6c:16:9c:96:66:f9:2c:87:26:d3:9f:e4:7f:a3:6e:
72:6d:71:f4:c6:09:c4:18:12:1b:f6:18:f9:77:ed:99:33:04:
eb:61:1c:e6:d4:68:b4:be:8e:2d:03:b7:97:46:8b:17:e2:f0:
5d:9b:e4:bc
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYaRiE9zTmRD8gU+hvZuhzdMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxNjFjN2JlYzFkNzFkMzQ5OTIxM2IzYjA1NTJmZTZlMjUx
M2EzMjYwHhcNMjMwMjI3MDYyMTE0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyN2I0MWIzNjVhYzY5MmE5ODEzZTllMGMwMTlkNmE2NGQ0Mzc0NmExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArAX3wLmPVlN3T0S3LXcA9JaeBRK5
XnqIij8bFcwVZW+OhdALCqLnd1eRcS9ihKLdCqjreARKwyXaNEc1l/TglKgF4atS
l/DQBBFs8A17SccMq/caSCEH5KcP2bIB6pUgKY9YQNqVrOTf+G+HZuwEif2HRpQI
gvAaGQy4YMZNno/hv26QB+n/wL23xoHI36PQRrapM4BYa4uxQUE7Yal+Mbipvydu
WIgRD8mFXRdTDJIS2enqxUxAUDI9EAuTym1I/QG/CCLL3v4OxNBLvwuwKQisYG4z
ZZFKDKNjDvSG0U2BRbtEhfXJyl/jYJU+QxcZ+3X4cExUwluXrshQh5Ee3wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCe0GzZaxpKpgT6eDAGdamTUN0ahMB8GA1UdIwQY
MBaAFDFhx77B1x00mSE7OwVS/m4lE6MmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTVdISHZzSFhIVFNaSVRzN0JWTC1iaVVUb3lZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9lYzFiMzctOTUzMy00M2Y5LTkzOGQt
ODJiOWZiOWEyZjUwLzEvSjdRYk5sckdrcW1CUHA0TUFaMXFaTlEzUnFFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS9lYzFiMzctOTUzMy00M2Y5LTkzOGQtODJiOWZiOWEyZjUw
LzEvTVdISHZzSFhIVFNaSVRzN0JWTC1iaVVUb3lZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLV16MA0G
CSqGSIb3DQEBCwUAA4IBAQA31rh/AGJywcFBc1Qqkg+hFwVXSCR2YI/ZpU7gOAUp
QMYaZsRbdqtHw2a1zLS/0PeSzyPDUIfTsgDpKCcqbq98eVkGmc21jfaieAT8TeLn
7kkyXxnST+E/1QYYgK0jbocZvEL0Wehbhah5kjVjCaRtIojTqT/CEtEv+pz5Z02F
FeCMAksX4ureOu6u5OYKHg1lY/RkLefbsihd1s3ZzL1raFOBdjtPwNgkODkAxy8M
SdtimZllVyefTUwNHq3FsBac+IBaRI+kwElsFpyWZvkshybTn+R/o25ybXH0xgnE
GBIb9hj5d+2ZMwTrYRzm1Gi0vo4tA7eXRosX4vBdm+S8
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:04:21 2025 by rpki-client