Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/926fd1-86fe-4c1f-bc0c-9a808f1a70b4/1/CoyIz44MUC7_1MekuKMZjQ1BQOE.roa
File: CoyIz44MUC7_1MekuKMZjQ1BQOE.roa (raw, json)
Hash identifier: 8lye4jILQ4bJ68+0d6E3mmuLcAwbAAbnGiiKc/42Gn4=
Subject key identifier: 0A:8C:88:CF:8E:0C:50:2E:FF:D4:C7:A4:B8:A3:19:8D:0D:41:40:E1
Certificate issuer: /CN=3c3f7e1e18646583c874b5affb0751aeca409c48
Certificate serial: 01856C53E75E43957D27732B32D1037E96F3
Authority key identifier: 3C:3F:7E:1E:18:64:65:83:C8:74:B5:AF:FB:07:51:AE:CA:40:9C:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PD9-HhhkZYPIdLWv-wdRrspAnEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/926fd1-86fe-4c1f-bc0c-9a808f1a70b4/1/CoyIz44MUC7_1MekuKMZjQ1BQOE.roa
Signing time: Sun 01 Jan 2023 07:55:16 +0000
ROA not before: Sun 01 Jan 2023 07:55:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204581
IP address blocks: 45.136.192.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:53:e7:5e:43:95:7d:27:73:2b:32:d1:03:7e:96:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c3f7e1e18646583c874b5affb0751aeca409c48
Validity
Not Before: Jan 1 07:55:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0a8c88cf8e0c502effd4c7a4b8a3198d0d4140e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:a1:41:5a:36:3d:61:46:d9:98:73:22:d8:74:
17:03:9c:6b:04:ac:be:1c:6b:2b:5e:1e:7d:cf:cc:
64:b7:0d:9b:77:4e:9a:c3:b2:b4:ba:6c:87:00:f8:
f9:e1:54:5d:09:1c:69:7e:31:e2:22:4d:db:78:45:
80:c9:32:53:8e:d9:fe:2d:c8:0f:da:00:0c:39:6c:
bc:47:93:ec:64:d7:6b:e0:8f:ac:25:b2:e7:84:3f:
90:de:6c:60:7a:6a:96:f0:66:dd:0f:7d:98:2f:7e:
ae:c2:b4:eb:a7:2f:6f:34:92:4d:de:db:d3:27:21:
98:82:18:6a:86:40:83:3b:14:3c:19:06:a9:03:d9:
c2:53:c1:71:3c:3e:b4:39:4f:c6:9c:1f:06:bf:0f:
a2:c7:51:06:4f:96:7e:e6:ef:95:d3:83:ac:f2:53:
23:ad:05:ea:e6:2d:4e:ea:92:0f:6c:58:2d:74:8d:
45:74:2a:cc:ed:b3:10:a1:f5:98:44:bf:86:07:ec:
54:ca:65:5f:bd:e6:65:f0:83:c2:f7:35:9e:2e:9f:
02:7b:61:48:cb:a9:48:27:75:4c:06:e7:a0:51:5c:
77:3d:a6:85:a9:7a:df:f0:24:da:af:d8:ad:6e:6f:
6c:27:7b:8e:07:01:af:91:d5:fb:d0:28:0e:c4:2d:
d5:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:8C:88:CF:8E:0C:50:2E:FF:D4:C7:A4:B8:A3:19:8D:0D:41:40:E1
X509v3 Authority Key Identifier:
keyid:3C:3F:7E:1E:18:64:65:83:C8:74:B5:AF:FB:07:51:AE:CA:40:9C:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PD9-HhhkZYPIdLWv-wdRrspAnEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/926fd1-86fe-4c1f-bc0c-9a808f1a70b4/1/CoyIz44MUC7_1MekuKMZjQ1BQOE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/926fd1-86fe-4c1f-bc0c-9a808f1a70b4/1/PD9-HhhkZYPIdLWv-wdRrspAnEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.136.192.0/22
Signature Algorithm: sha256WithRSAEncryption
31:4e:a8:23:0f:53:a6:c5:3a:21:fb:92:fa:97:9b:3b:05:cc:
fe:18:93:75:21:b5:7d:86:68:cb:3f:02:eb:f7:ee:7d:d6:ea:
09:4b:a8:54:b1:5c:70:e4:89:a8:12:92:f2:d4:bc:71:b8:de:
da:d0:79:45:45:d1:81:40:23:4c:80:9b:41:1d:35:c2:bb:5c:
3b:02:f5:c4:39:85:30:a5:4f:7f:28:2b:47:39:b8:98:48:a2:
3b:71:28:cd:4f:08:55:ca:b0:63:70:92:87:84:99:4a:1d:76:
23:1a:7e:3b:9b:c3:01:45:cc:a9:ee:41:6b:da:39:31:a6:75:
ee:7e:02:9f:09:9a:cd:a0:c8:c4:12:a2:45:7e:7f:71:24:65:
e5:94:76:75:12:8d:f4:b1:5c:70:74:6f:d8:6b:c9:1e:88:ce:
fc:89:09:ec:9d:57:e5:c7:f5:97:a2:bb:18:ef:a2:cb:54:ad:
ed:69:dc:fa:0b:f3:45:99:15:f2:05:bf:83:c5:89:fa:9a:e8:
b0:67:02:ab:d3:cd:59:fd:46:40:e4:e1:e7:95:34:e9:36:df:
0f:b9:2e:ca:eb:01:06:78:78:08:2d:8e:dc:b9:fa:fe:84:fa:
dc:b8:10:c8:38:46:c3:f0:65:18:41:10:a0:07:d9:18:ec:8a:
d1:af:bd:fa
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVsU+deQ5V9J3MrMtEDfpbzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjM2Y3ZTFlMTg2NDY1ODNjODc0YjVhZmZiMDc1MWFlY2E0
MDljNDgwHhcNMjMwMTAxMDc1NTE2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYThjODhjZjhlMGM1MDJlZmZkNGM3YTRiOGEzMTk4ZDBkNDE0MGUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkqFBWjY9YUbZmHMi2HQXA5xrBKy+
HGsrXh59z8xktw2bd06aw7K0umyHAPj54VRdCRxpfjHiIk3beEWAyTJTjtn+LcgP
2gAMOWy8R5PsZNdr4I+sJbLnhD+Q3mxgemqW8GbdD32YL36uwrTrpy9vNJJN3tvT
JyGYghhqhkCDOxQ8GQapA9nCU8FxPD60OU/GnB8Gvw+ix1EGT5Z+5u+V04Os8lMj
rQXq5i1O6pIPbFgtdI1FdCrM7bMQofWYRL+GB+xUymVfveZl8IPC9zWeLp8Ce2FI
y6lIJ3VMBuegUVx3PaaFqXrf8CTar9itbm9sJ3uOBwGvkdX70CgOxC3VwQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAqMiM+ODFAu/9THpLijGY0NQUDhMB8GA1UdIwQY
MBaAFDw/fh4YZGWDyHS1r/sHUa7KQJxIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUEQ5LUhoaGtaWVBJZExXdi13ZFJyc3BBbkVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi85MjZmZDEtODZmZS00YzFmLWJjMGMt
OWE4MDhmMWE3MGI0LzEvQ295SXo0NE1VQzdfMU1la3VLTVpqUTFCUU9FLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZi85MjZmZDEtODZmZS00YzFmLWJjMGMtOWE4MDhmMWE3MGI0
LzEvUEQ5LUhoaGtaWVBJZExXdi13ZFJyc3BBbkVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLYjAMA0G
CSqGSIb3DQEBCwUAA4IBAQAxTqgjD1OmxToh+5L6l5s7Bcz+GJN1IbV9hmjLPwLr
9+591uoJS6hUsVxw5ImoEpLy1LxxuN7a0HlFRdGBQCNMgJtBHTXCu1w7AvXEOYUw
pU9/KCtHObiYSKI7cSjNTwhVyrBjcJKHhJlKHXYjGn47m8MBRcyp7kFr2jkxpnXu
fgKfCZrNoMjEEqJFfn9xJGXllHZ1Eo30sVxwdG/Ya8keiM78iQnsnVflx/WXorsY
76LLVK3tadz6C/NFmRXyBb+DxYn6muiwZwKr081Z/UZA5OHnlTTpNt8PuS7K6wEG
eHgILY7cufr+hPrcuBDIOEbD8GUYQRCgB9kY7IrRr736
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:28:22 2025 by rpki-client