Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/6137b8-1383-4b71-a189-063b40174597/1/16AVPBqy4CLiJAk_oq82Ze4GFUc.roa
File: 16AVPBqy4CLiJAk_oq82Ze4GFUc.roa (raw, json)
Hash identifier: 8ne68iP0EWlMyJtqhCBtDaybFvVR1nQvVur1A40T90I=
Subject key identifier: D7:A0:15:3C:1A:B2:E0:22:E2:24:09:3F:A2:AF:36:65:EE:06:15:47
Certificate issuer: /CN=c4b21c89bc7e2b214067f30707a4a03dc346ee05
Certificate serial: 01941F8C47EB296090598E60A899724A1447
Authority key identifier: C4:B2:1C:89:BC:7E:2B:21:40:67:F3:07:07:A4:A0:3D:C3:46:EE:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xLIcibx-KyFAZ_MHB6SgPcNG7gU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/6137b8-1383-4b71-a189-063b40174597/1/16AVPBqy4CLiJAk_oq82Ze4GFUc.roa
Signing time: Wed 01 Jan 2025 01:47:54 +0000
ROA not before: Wed 01 Jan 2025 01:47:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210708
IP address blocks: 45.11.43.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:47:eb:29:60:90:59:8e:60:a8:99:72:4a:14:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4b21c89bc7e2b214067f30707a4a03dc346ee05
Validity
Not Before: Jan 1 01:47:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d7a0153c1ab2e022e224093fa2af3665ee061547
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:11:ab:c9:d7:7e:92:6e:0b:3a:49:fe:c5:f2:
a8:83:d3:1f:6a:7a:d0:70:d3:79:5f:3b:c0:0b:fb:
31:57:92:53:5a:39:5c:50:3b:ab:79:62:0b:01:4c:
8c:ed:5f:e6:bc:7e:6c:2c:0e:6e:38:6a:4d:30:3c:
59:78:1a:bf:28:58:fb:7b:08:39:9e:0f:5f:0c:f3:
8d:78:5a:d6:69:76:d4:40:cc:31:06:f7:b7:6e:39:
4e:61:58:93:44:cc:43:3f:cf:4e:46:42:a1:25:45:
05:a6:66:1e:ab:8b:80:04:8d:64:e5:27:97:f6:05:
6e:8d:98:db:b1:f7:4b:29:d4:63:4c:32:b1:e4:32:
5a:33:0e:af:02:30:8b:4f:c5:70:29:c0:52:06:00:
50:2e:94:7f:6c:3c:81:bc:bd:19:cc:05:a7:08:84:
7c:74:3d:e9:60:06:36:8f:1b:38:f2:8d:f8:6e:2c:
d3:42:5e:25:64:2e:b4:96:f2:6b:e6:4c:6f:a5:d8:
2d:32:ca:99:64:c9:99:f8:be:5a:46:be:c1:38:3d:
94:47:01:6c:32:65:10:1f:d3:89:a5:a6:52:b1:d6:
ab:3b:32:2e:36:a9:90:bb:c1:e5:50:39:73:0f:c1:
b7:3c:ca:93:9e:9b:98:db:ee:4a:0e:cb:c9:80:c6:
ae:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:A0:15:3C:1A:B2:E0:22:E2:24:09:3F:A2:AF:36:65:EE:06:15:47
X509v3 Authority Key Identifier:
keyid:C4:B2:1C:89:BC:7E:2B:21:40:67:F3:07:07:A4:A0:3D:C3:46:EE:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xLIcibx-KyFAZ_MHB6SgPcNG7gU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/6137b8-1383-4b71-a189-063b40174597/1/16AVPBqy4CLiJAk_oq82Ze4GFUc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/6137b8-1383-4b71-a189-063b40174597/1/xLIcibx-KyFAZ_MHB6SgPcNG7gU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.43.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:3b:60:5e:74:f1:18:fa:8b:50:8e:57:87:ed:65:ef:42:c9:
b6:db:fc:a8:2d:e3:a3:11:82:54:26:eb:4a:04:b0:16:c9:6a:
69:60:0c:a4:2e:16:8b:5b:87:08:ee:53:f4:e1:c8:39:2b:c1:
06:82:4b:05:b2:3f:62:e0:63:9f:4f:f8:d2:3c:be:89:76:35:
da:65:b9:33:0c:72:17:95:e5:86:77:80:ed:b8:e8:ef:ed:d4:
04:b5:a1:ae:d4:eb:a1:40:50:28:32:69:78:bc:32:78:8e:1e:
a6:7c:e0:22:72:a0:0b:af:6b:a4:8f:cb:f2:ea:54:6b:a9:31:
9b:b4:c2:42:fd:2c:c0:2f:c2:f3:32:c0:5d:07:94:00:7d:4e:
b6:3f:85:52:0e:08:72:07:f9:d4:c4:67:ec:db:7a:96:21:84:
f2:11:be:12:23:9f:65:6d:b0:5b:46:89:cc:f4:ce:25:6a:98:
b4:85:8a:5a:12:b8:ae:8b:0f:70:63:ef:00:53:84:8e:32:96:
50:16:45:9f:91:0e:f3:1f:9e:de:a2:79:98:58:60:e5:01:10:
f4:c0:de:b5:b6:6c:41:4b:ed:fa:3f:a1:94:c5:b5:fb:6f:49:
be:43:c0:74:bb:f9:4e:42:16:fd:40:c8:c5:43:1b:a8:a9:16:
b3:2c:8c:c7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQfjEfrKWCQWY5gqJlyShRHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0YjIxYzg5YmM3ZTJiMjE0MDY3ZjMwNzA3YTRhMDNkYzM0
NmVlMDUwHhcNMjUwMTAxMDE0NzU0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkN2EwMTUzYzFhYjJlMDIyZTIyNDA5M2ZhMmFmMzY2NWVlMDYxNTQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmhGrydd+km4LOkn+xfKog9MfanrQ
cNN5XzvAC/sxV5JTWjlcUDureWILAUyM7V/mvH5sLA5uOGpNMDxZeBq/KFj7ewg5
ng9fDPONeFrWaXbUQMwxBve3bjlOYViTRMxDP89ORkKhJUUFpmYeq4uABI1k5SeX
9gVujZjbsfdLKdRjTDKx5DJaMw6vAjCLT8VwKcBSBgBQLpR/bDyBvL0ZzAWnCIR8
dD3pYAY2jxs48o34bizTQl4lZC60lvJr5kxvpdgtMsqZZMmZ+L5aRr7BOD2URwFs
MmUQH9OJpaZSsdarOzIuNqmQu8HlUDlzD8G3PMqTnpuY2+5KDsvJgMaunwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNegFTwasuAi4iQJP6KvNmXuBhVHMB8GA1UdIwQY
MBaAFMSyHIm8fishQGfzBwekoD3DRu4FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveExJY2lieC1LeUZBWl9NSEI2U2dQY05HN2dVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi82MTM3YjgtMTM4My00YjcxLWExODkt
MDYzYjQwMTc0NTk3LzEvMTZBVlBCcXk0Q0xpSkFrX29xODJaZTRHRlVjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi82MTM3YjgtMTM4My00YjcxLWExODktMDYzYjQwMTc0NTk3
LzEveExJY2lieC1LeUZBWl9NSEI2U2dQY05HN2dVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALQsrMA0G
CSqGSIb3DQEBCwUAA4IBAQA6O2BedPEY+otQjleH7WXvQsm22/yoLeOjEYJUJutK
BLAWyWppYAykLhaLW4cI7lP04cg5K8EGgksFsj9i4GOfT/jSPL6JdjXaZbkzDHIX
leWGd4DtuOjv7dQEtaGu1OuhQFAoMml4vDJ4jh6mfOAicqALr2ukj8vy6lRrqTGb
tMJC/SzAL8LzMsBdB5QAfU62P4VSDghyB/nUxGfs23qWIYTyEb4SI59lbbBbRonM
9M4lapi0hYpaEriuiw9wY+8AU4SOMpZQFkWfkQ7zH57eonmYWGDlARD0wN61tmxB
S+36P6GUxbX7b0m+Q8B0u/lOQhb9QMjFQxuoqRazLIzH
-----END CERTIFICATE-----
Generated at Thu Feb 20 03:14:42 2025 by rpki-client