Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/1-0u_g-RWO-iWWqBI3oUjQB5rF7w.roa
File: 1-0u_g-RWO-iWWqBI3oUjQB5rF7w.roa (raw, json)
Hash identifier: NPO08lVLHiJSXm3V8V/QMhiHIlVTsNNsr4ZjcrlwHmA=
Subject key identifier: FB:4B:BF:83:E4:56:3B:E8:96:5A:A0:48:DE:85:23:40:1E:6B:17:BC
Certificate issuer: /CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Certificate serial: 0183C070CF174FDE5A6317A7B02F2B2B216B
Authority key identifier: 82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/1-0u_g-RWO-iWWqBI3oUjQB5rF7w.roa
Signing time: Mon 10 Oct 2022 05:49:22 +0000
ROA not before: Mon 10 Oct 2022 05:49:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212335
IP address blocks: 45.142.238.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:c0:70:cf:17:4f:de:5a:63:17:a7:b0:2f:2b:2b:21:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Validity
Not Before: Oct 10 05:49:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fb4bbf83e4563be8965aa048de8523401e6b17bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f8:5c:5e:15:ee:48:f3:8c:36:1d:10:98:48:
e3:6f:4d:35:ae:5a:5e:52:82:55:d0:f2:35:61:0e:
db:c0:10:a8:5e:bd:10:3e:bf:4b:8d:c1:fc:e2:9c:
c2:8d:9f:b8:ef:52:ee:c1:7d:19:16:f7:13:64:2a:
1a:e4:f1:7d:89:7c:79:f7:3d:61:65:39:e0:33:8a:
1a:1f:ef:48:6a:ab:2e:20:a4:af:20:4d:68:77:4c:
0c:3e:a6:85:ff:3b:34:b5:ce:b5:c4:de:b0:79:3c:
52:ac:8b:5a:77:a9:99:ea:5f:27:67:21:8a:a9:f3:
e3:80:de:4f:49:e1:03:60:30:2f:ef:62:b6:f6:06:
66:c3:4a:5e:13:98:6f:64:61:2e:d4:50:c8:bd:02:
ec:1e:08:14:61:40:99:51:81:40:71:ab:0c:76:1b:
c2:23:f7:73:71:41:1b:c4:3c:de:9f:ac:f5:61:08:
41:3d:45:e0:7f:21:a4:87:7a:64:d3:f3:2c:6f:80:
fa:9e:68:d9:b0:ea:21:65:f2:76:ab:90:c6:e6:e1:
8f:62:c1:f3:71:f5:bb:82:fd:68:87:8c:bd:86:0b:
d6:f7:f9:76:e5:00:a2:64:6b:27:db:88:96:44:f9:
d5:66:3b:ce:c3:01:20:16:9d:f0:fe:c7:d9:f6:2a:
a2:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:4B:BF:83:E4:56:3B:E8:96:5A:A0:48:DE:85:23:40:1E:6B:17:BC
X509v3 Authority Key Identifier:
keyid:82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/1-0u_g-RWO-iWWqBI3oUjQB5rF7w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/gu1KL7GA31-Z1L-Md8yaBu8mBYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.238.0/23
Signature Algorithm: sha256WithRSAEncryption
87:1b:17:5f:83:84:2d:d6:2b:84:53:2e:03:6d:de:cf:df:62:
76:69:b5:66:ec:a4:49:58:23:1b:a7:a8:3b:9f:d4:53:c8:60:
97:ba:ec:79:37:e3:af:e5:d8:91:ee:1a:b9:40:cf:c4:0a:39:
a9:44:45:9c:b3:2f:c1:b1:1e:eb:80:46:56:da:ce:f8:8b:82:
75:d2:26:0a:c9:6d:db:4e:a5:81:8a:03:ad:13:65:39:72:8a:
d2:a9:c4:44:e1:2e:b0:4d:59:55:2e:db:64:3b:ef:02:1d:cb:
46:04:d4:52:4a:f2:a7:34:50:25:93:00:e5:6e:90:a7:73:ad:
7d:ee:3b:a7:d8:53:17:6f:c6:87:d4:62:c4:47:35:14:91:27:
9a:9a:52:40:07:a7:2f:f2:95:89:94:5b:01:3c:03:b1:06:f2:
d4:93:45:e8:94:84:7a:b2:54:66:58:db:19:65:bd:46:e3:c7:
b9:57:3c:68:fd:08:4d:77:48:89:f1:b0:93:64:c5:2a:cd:f1:
bf:c2:b8:2f:ac:b4:04:3d:15:d9:91:8e:3d:85:19:dc:b7:82:
15:09:cc:b8:55:83:69:c3:db:b8:a1:b6:3e:a8:6e:4a:77:fb:
5a:82:58:6d:c0:66:15:78:a9:0c:b7:51:f9:0b:af:9d:8d:6e:
ed:11:1b:3d
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYPAcM8XT95aYxensC8rKyFrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyZWQ0YTJmYjE4MGRmNWY5OWQ0YmY4Yzc3Y2M5YTA2ZWYy
NjA1OGMwHhcNMjIxMDEwMDU0OTIyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYjRiYmY4M2U0NTYzYmU4OTY1YWEwNDhkZTg1MjM0MDFlNmIxN2JjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApPhcXhXuSPOMNh0QmEjjb001rlpe
UoJV0PI1YQ7bwBCoXr0QPr9LjcH84pzCjZ+471LuwX0ZFvcTZCoa5PF9iXx59z1h
ZTngM4oaH+9IaqsuIKSvIE1od0wMPqaF/zs0tc61xN6weTxSrItad6mZ6l8nZyGK
qfPjgN5PSeEDYDAv72K29gZmw0peE5hvZGEu1FDIvQLsHggUYUCZUYFAcasMdhvC
I/dzcUEbxDzen6z1YQhBPUXgfyGkh3pk0/Msb4D6nmjZsOohZfJ2q5DG5uGPYsHz
cfW7gv1oh4y9hgvW9/l25QCiZGsn24iWRPnVZjvOwwEgFp3w/sfZ9iqimQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFPtLv4PkVjvollqgSN6FI0Aeaxe8MB8GA1UdIwQY
MBaAFILtSi+xgN9fmdS/jHfMmgbvJgWMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3UxS0w3R0EzMS1aMUwtTWQ4eWFCdThtQll3LmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS8wMzAxYmMtYzdmZS00NmU5LWI3YTAt
NDUyNmY2MjYzYmNlLzEvMS0wdV9nLVJXTy1pV1dxQkkzb1VqUUI1ckY3dy5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvMmUvMDMwMWJjLWM3ZmUtNDZlOS1iN2EwLTQ1MjZmNjI2M2Jj
ZS8xL2d1MUtMN0dBMzEtWjFMLU1kOHlhQnU4bUJZdy5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAS2O7jAN
BgkqhkiG9w0BAQsFAAOCAQEAhxsXX4OELdYrhFMuA23ez99idmm1ZuykSVgjG6eo
O5/UU8hgl7rseTfjr+XYke4auUDPxAo5qURFnLMvwbEe64BGVtrO+IuCddImCslt
206lgYoDrRNlOXKK0qnEROEusE1ZVS7bZDvvAh3LRgTUUkrypzRQJZMA5W6Qp3Ot
fe47p9hTF2/Gh9RixEc1FJEnmppSQAenL/KViZRbATwDsQby1JNF6JSEerJUZljb
GWW9RuPHuVc8aP0ITXdIifGwk2TFKs3xv8K4L6y0BD0V2ZGOPYUZ3LeCFQnMuFWD
acPbuKG2PqhuSnf7WoJYbcBmFXipDLdR+QuvnY1u7REbPQ==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:25:41 2025 by rpki-client