Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/Bowjj6IDHIGTJ85QFz2Kn7-Oq6Q.roa
File: Bowjj6IDHIGTJ85QFz2Kn7-Oq6Q.roa (raw, json)
Hash identifier: DmcrsUYIKtf7qmUGT0MxeHbDRo4r1s4NFc/lWSXJ614=
Subject key identifier: 06:8C:23:8F:A2:03:1C:81:93:27:CE:50:17:3D:8A:9F:BF:8E:AB:A4
Certificate issuer: /CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Certificate serial: 0184A550A52169D515863AC244263139067E
Authority key identifier: 82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/Bowjj6IDHIGTJ85QFz2Kn7-Oq6Q.roa
Signing time: Wed 23 Nov 2022 16:27:16 +0000
ROA not before: Wed 23 Nov 2022 16:27:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51765
IP address blocks: 45.142.236.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:a5:50:a5:21:69:d5:15:86:3a:c2:44:26:31:39:06:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Validity
Not Before: Nov 23 16:27:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=068c238fa2031c819327ce50173d8a9fbf8eaba4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:41:ad:b4:d6:09:53:e0:2c:f8:5d:0a:f7:ad:
3f:72:fc:26:20:65:98:6a:58:d8:28:ad:d7:c1:4a:
a5:46:fb:73:3e:b8:5d:20:17:71:59:53:84:74:0d:
4e:43:33:4b:0c:2f:87:91:b1:eb:65:36:13:c6:05:
c7:d4:7e:fd:38:e3:77:2c:85:c7:7f:f6:a0:98:65:
8f:e6:a1:c2:76:41:c8:fb:6e:4d:e6:73:88:57:72:
b5:e4:81:c8:5f:b1:9d:6d:cc:1a:d2:db:f0:46:7f:
7a:b0:aa:61:bd:10:55:88:72:46:c0:37:d4:18:c6:
a3:99:0f:2b:ab:73:58:81:70:4c:46:75:05:d3:d2:
89:60:a5:7e:56:e7:37:a4:67:c4:8f:dd:06:8e:65:
19:93:8e:f1:b6:ab:5a:1c:7e:79:10:ef:33:95:86:
6b:2d:ab:bf:10:0d:c2:f3:8f:c3:2f:a7:ed:51:88:
a6:95:7a:6e:0c:7f:8b:0b:71:44:c8:c1:c4:7b:7c:
4b:1c:a8:80:70:18:eb:31:47:00:fb:58:b0:5c:05:
a0:b0:4b:cd:fb:b4:5a:c7:04:45:f8:dc:d8:94:53:
07:af:44:25:c2:99:f8:5c:29:d1:6f:7d:fc:09:fc:
88:74:07:3e:25:12:29:98:17:00:7d:41:b0:72:41:
3a:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:8C:23:8F:A2:03:1C:81:93:27:CE:50:17:3D:8A:9F:BF:8E:AB:A4
X509v3 Authority Key Identifier:
keyid:82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/Bowjj6IDHIGTJ85QFz2Kn7-Oq6Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/gu1KL7GA31-Z1L-Md8yaBu8mBYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.236.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:1c:81:ab:ee:09:a4:e7:96:63:4e:2b:00:86:63:a1:b9:b7:
53:0d:31:b6:8d:bc:96:4e:e5:14:93:39:14:87:5d:11:6c:d7:
d2:36:5a:b7:5f:d4:56:3b:1a:49:1d:20:bf:88:38:fd:d9:97:
68:0f:8b:8e:2f:4c:b1:58:6e:78:70:22:14:da:a7:ee:c3:e6:
ae:e7:ad:8c:72:fc:f1:87:80:71:6d:e3:b8:6f:ff:f0:c1:ae:
c5:63:ce:4d:62:3f:43:f5:b0:5c:e5:e0:a2:ea:68:e9:d4:6d:
8c:8b:c2:e2:ec:9f:46:ae:ac:a5:53:bf:2e:c5:d5:c7:a3:e7:
58:54:12:14:56:b1:2a:71:f3:01:dd:82:e0:d5:7c:70:04:2e:
58:19:64:1f:b0:93:e4:07:30:df:02:f3:3a:23:3e:bf:5d:31:
0a:73:47:de:74:60:b2:a3:5e:8c:5b:cd:bf:4e:9e:5e:54:82:
b6:ca:4a:c1:4f:0f:57:b0:87:e7:d6:0b:3c:ef:08:90:f0:9f:
aa:8f:8a:5f:bc:2f:c1:78:05:ed:d9:7e:25:78:67:e7:74:bb:
1d:e9:ac:a6:d4:5a:1e:6c:99:91:0a:7a:5c:e3:96:dc:b6:e9:
aa:18:d9:d2:fa:dd:dd:1c:33:79:53:da:c3:90:52:6a:c8:e0:
7c:9a:f8:cc
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYSlUKUhadUVhjrCRCYxOQZ+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyZWQ0YTJmYjE4MGRmNWY5OWQ0YmY4Yzc3Y2M5YTA2ZWYy
NjA1OGMwHhcNMjIxMTIzMTYyNzE2WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNjhjMjM4ZmEyMDMxYzgxOTMyN2NlNTAxNzNkOGE5ZmJmOGVhYmE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhkGttNYJU+As+F0K960/cvwmIGWY
aljYKK3XwUqlRvtzPrhdIBdxWVOEdA1OQzNLDC+HkbHrZTYTxgXH1H79OON3LIXH
f/agmGWP5qHCdkHI+25N5nOIV3K15IHIX7Gdbcwa0tvwRn96sKphvRBViHJGwDfU
GMajmQ8rq3NYgXBMRnUF09KJYKV+Vuc3pGfEj90GjmUZk47xtqtaHH55EO8zlYZr
Lau/EA3C84/DL6ftUYimlXpuDH+LC3FEyMHEe3xLHKiAcBjrMUcA+1iwXAWgsEvN
+7RaxwRF+NzYlFMHr0Qlwpn4XCnRb338CfyIdAc+JRIpmBcAfUGwckE6PQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAaMI4+iAxyBkyfOUBc9ip+/jqukMB8GA1UdIwQY
MBaAFILtSi+xgN9fmdS/jHfMmgbvJgWMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3UxS0w3R0EzMS1aMUwtTWQ4eWFCdThtQll3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS8wMzAxYmMtYzdmZS00NmU5LWI3YTAt
NDUyNmY2MjYzYmNlLzEvQm93amo2SURISUdUSjg1UUZ6MktuNy1PcTZRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS8wMzAxYmMtYzdmZS00NmU5LWI3YTAtNDUyNmY2MjYzYmNl
LzEvZ3UxS0w3R0EzMS1aMUwtTWQ4eWFCdThtQll3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALY7sMA0G
CSqGSIb3DQEBCwUAA4IBAQCrHIGr7gmk55ZjTisAhmOhubdTDTG2jbyWTuUUkzkU
h10RbNfSNlq3X9RWOxpJHSC/iDj92ZdoD4uOL0yxWG54cCIU2qfuw+au562Mcvzx
h4BxbeO4b//wwa7FY85NYj9D9bBc5eCi6mjp1G2Mi8Li7J9GrqylU78uxdXHo+dY
VBIUVrEqcfMB3YLg1XxwBC5YGWQfsJPkBzDfAvM6Iz6/XTEKc0fedGCyo16MW82/
Tp5eVIK2ykrBTw9XsIfn1gs87wiQ8J+qj4pfvC/BeAXt2X4leGfndLsd6aym1Foe
bJmRCnpc45bctumqGNnS+t3dHDN5U9rDkFJqyOB8mvjM
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:20:43 2025 by rpki-client