Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/eda54a-772c-49db-a012-6100cd15e260/1/bSSHhnBC_gOuBD7K6p1shgvr_Go.roa
File: bSSHhnBC_gOuBD7K6p1shgvr_Go.roa (raw, json)
Hash identifier: mER3ID5oLS2vwody8W/yKeQutwyxBmE9Ku8C0ro8fqI=
Subject key identifier: 6D:24:87:86:70:42:FE:03:AE:04:3E:CA:EA:9D:6C:86:0B:EB:FC:6A
Certificate issuer: /CN=a1a01f76a42be8717befdce1676215988a4dfc73
Certificate serial: 01B0A650
Authority key identifier: A1:A0:1F:76:A4:2B:E8:71:7B:EF:DC:E1:67:62:15:98:8A:4D:FC:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oaAfdqQr6HF779zhZ2IVmIpN_HM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/eda54a-772c-49db-a012-6100cd15e260/1/bSSHhnBC_gOuBD7K6p1shgvr_Go.roa
Signing time: Mon 13 Jun 2022 02:23:03 +0000
ROA not before: Mon 13 Jun 2022 02:23:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 136526
IP address blocks: 45.142.155.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28354128 (0x1b0a650)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1a01f76a42be8717befdce1676215988a4dfc73
Validity
Not Before: Jun 13 02:23:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6d2487867042fe03ae043ecaea9d6c860bebfc6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:db:fb:e7:24:05:d7:d5:b8:6d:a9:33:eb:99:
32:52:20:a2:4f:11:17:4e:40:42:60:d3:dd:47:26:
65:8c:15:ea:fe:94:c8:a5:e1:ca:8e:1a:bc:40:47:
de:22:d3:63:4c:ec:35:eb:24:a2:90:66:05:f2:60:
f4:36:36:f4:c5:d5:a4:85:7c:e2:6a:5a:91:5c:9b:
6c:b4:9f:72:f2:34:e9:34:08:1c:df:3e:68:10:d6:
46:41:95:78:07:55:1e:8f:83:3b:dc:63:7b:b8:28:
00:5c:93:36:0e:aa:f2:be:45:d0:be:ba:2d:e5:ab:
08:be:df:69:38:ca:3c:85:5f:73:19:bd:32:be:74:
df:dc:b3:da:ec:e5:c1:d3:a0:b8:b0:46:cc:04:15:
a2:2e:02:35:2e:a9:26:cb:79:61:5f:2c:b1:b1:59:
8c:fe:a2:1a:b6:c7:9f:d2:de:7b:09:3b:d8:27:cf:
8d:e8:df:61:bf:eb:e0:cb:7a:8e:8a:6b:7d:74:7f:
9b:1d:5a:4b:b6:7c:bf:8e:2f:66:11:c5:ea:05:47:
54:bf:c6:4b:ca:22:22:c0:a8:da:df:ba:e0:ab:39:
a8:e4:6b:6c:c8:68:f4:35:72:35:a7:10:59:b2:6b:
5c:2c:96:b8:00:c5:d0:fa:61:7d:80:5f:1d:7a:12:
e3:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:24:87:86:70:42:FE:03:AE:04:3E:CA:EA:9D:6C:86:0B:EB:FC:6A
X509v3 Authority Key Identifier:
keyid:A1:A0:1F:76:A4:2B:E8:71:7B:EF:DC:E1:67:62:15:98:8A:4D:FC:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oaAfdqQr6HF779zhZ2IVmIpN_HM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/eda54a-772c-49db-a012-6100cd15e260/1/bSSHhnBC_gOuBD7K6p1shgvr_Go.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/eda54a-772c-49db-a012-6100cd15e260/1/oaAfdqQr6HF779zhZ2IVmIpN_HM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.155.0/24
Signature Algorithm: sha256WithRSAEncryption
28:1e:22:a4:b4:7a:c5:a6:86:4d:41:64:4e:a4:4b:1e:c2:26:
91:39:e3:da:85:a3:83:1d:63:4c:38:34:59:c4:7a:b7:a0:ed:
ab:70:12:bd:89:f7:5c:ee:d6:f8:53:4e:b3:b4:52:de:05:74:
34:9d:5e:fc:67:f9:db:8a:ad:6b:b3:a2:ab:4b:c6:de:36:c4:
cb:0e:e5:42:83:78:39:be:a0:2d:6e:5e:ae:70:08:ff:14:7d:
c0:05:39:e5:dd:77:bf:cd:77:31:04:fd:29:85:94:ab:cc:64:
b6:74:7f:de:31:cb:50:fe:27:ea:22:2f:f5:56:74:5d:b0:0c:
11:4c:c0:57:2c:b5:e1:a0:31:ef:ff:f1:ce:2b:02:b8:75:31:
76:d4:4d:d0:51:15:0c:28:22:6f:f1:f2:9f:27:75:03:34:5d:
72:c9:96:70:69:a5:ff:3e:31:b6:3e:8e:00:69:9b:03:cf:81:
4a:9e:34:d0:17:b2:32:92:84:82:e8:a4:9b:1d:c5:14:82:28:
a3:3e:a8:1a:62:48:af:d4:0e:37:9d:76:0d:c4:97:cf:9f:38:
c4:c1:d5:ac:6e:65:84:4f:82:22:51:b0:bd:15:12:6c:67:7b:
7b:86:ac:a2:11:0d:7c:b6:90:15:82:b3:ca:f6:1c:dd:44:fd:
ed:3f:89:6a
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAbCmUDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhh
MWEwMWY3NmE0MmJlODcxN2JlZmRjZTE2NzYyMTU5ODhhNGRmYzczMB4XDTIyMDYx
MzAyMjMwM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNmQyNDg3ODY3MDQy
ZmUwM2FlMDQzZWNhZWE5ZDZjODYwYmViZmM2YTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAK/b++ckBdfVuG2pM+uZMlIgok8RF05AQmDT3UcmZYwV6v6U
yKXhyo4avEBH3iLTY0zsNeskopBmBfJg9DY29MXVpIV84mpakVybbLSfcvI06TQI
HN8+aBDWRkGVeAdVHo+DO9xje7goAFyTNg6q8r5F0L66LeWrCL7faTjKPIVfcxm9
Mr5039yz2uzlwdOguLBGzAQVoi4CNS6pJst5YV8ssbFZjP6iGrbHn9Leewk72CfP
jejfYb/r4Mt6joprfXR/mx1aS7Z8v44vZhHF6gVHVL/GS8oiIsCo2t+64Ks5qORr
bMho9DVyNacQWbJrXCyWuADF0PphfYBfHXoS4xECAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRtJIeGcEL+A64EPsrqnWyGC+v8ajAfBgNVHSMEGDAWgBShoB92pCvocXvv
3OFnYhWYik38czAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L29hQWZkcVFyNkhGNzc5emhaMklWbUlwTl9ITS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMzEvZWRhNTRhLTc3MmMtNDlkYi1hMDEyLTYxMDBjZDE1ZTI2MC8x
L2JTU0hobkJDX2dPdUJEN0s2cDFzaGd2cl9Hby5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzEv
ZWRhNTRhLTc3MmMtNDlkYi1hMDEyLTYxMDBjZDE1ZTI2MC8xL29hQWZkcVFyNkhG
Nzc5emhaMklWbUlwTl9ITS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC2OmzANBgkqhkiG9w0BAQsFAAOC
AQEAKB4ipLR6xaaGTUFkTqRLHsImkTnj2oWjgx1jTDg0WcR6t6Dtq3ASvYn3XO7W
+FNOs7RS3gV0NJ1e/Gf524qta7Oiq0vG3jbEyw7lQoN4Ob6gLW5ernAI/xR9wAU5
5d13v813MQT9KYWUq8xktnR/3jHLUP4n6iIv9VZ0XbAMEUzAVyy14aAx7//xzisC
uHUxdtRN0FEVDCgib/Hynyd1AzRdcsmWcGml/z4xtj6OAGmbA8+BSp400BeyMpKE
guikmx3FFIIooz6oGmJIr9QON512DcSXz584xMHVrG5lhE+CIlGwvRUSbGd7e4as
ohENfLaQFYKzyvYc3UT97T+Jag==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:58:32 2025 by rpki-client