Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/ce416b-6e01-4492-9817-4858f08ad8a5/1/sLQqVyoGUQsygsOUB_jn0GVYRDw.roa
File: sLQqVyoGUQsygsOUB_jn0GVYRDw.roa (raw, json)
Hash identifier: NdCcv7NoTiHIOQe1HU1yXfF5VQOSTfG6UyLbBl88Plg=
Subject key identifier: B0:B4:2A:57:2A:06:51:0B:32:82:C3:94:07:F8:E7:D0:65:58:44:3C
Certificate issuer: /CN=267c70e6375e2b2c58c28cce844558cc9b4edf56
Certificate serial: 0772F075
Authority key identifier: 26:7C:70:E6:37:5E:2B:2C:58:C2:8C:CE:84:45:58:CC:9B:4E:DF:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jnxw5jdeKyxYwozOhEVYzJtO31Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/ce416b-6e01-4492-9817-4858f08ad8a5/1/sLQqVyoGUQsygsOUB_jn0GVYRDw.roa
Signing time: Sat 01 Jan 2022 11:53:58 +0000
ROA not before: Sat 01 Jan 2022 11:53:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 45.150.116.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 124973173 (0x772f075)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=267c70e6375e2b2c58c28cce844558cc9b4edf56
Validity
Not Before: Jan 1 11:53:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b0b42a572a06510b3282c39407f8e7d06558443c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:78:fd:e6:f4:8b:7a:36:d4:02:0e:ba:14:56:
24:8b:57:a0:60:e3:04:90:2e:bc:f8:b1:4f:e3:1c:
82:dc:1d:3d:e5:f7:88:08:9b:59:db:d4:56:cd:a0:
97:57:67:c0:fa:d6:05:79:90:35:78:51:70:72:77:
b1:79:fa:fe:15:eb:f5:b7:28:4e:fc:2b:bb:1e:63:
cb:40:8c:1f:57:2a:71:c4:d5:1f:9f:a0:00:2d:b9:
84:de:f5:38:c6:77:4d:5f:a5:e4:71:e3:fb:2e:b6:
e3:1c:bb:14:92:70:11:08:01:50:eb:aa:33:88:93:
1c:19:ec:52:9d:b1:f6:66:60:3a:2b:e3:63:35:a1:
68:2f:4b:46:23:66:15:e2:b3:62:2a:86:5d:e1:01:
07:6e:8a:b6:0a:eb:17:51:72:80:c2:32:2c:b5:dc:
40:ab:ea:11:53:83:f5:95:6c:02:2c:cc:32:53:9b:
f2:ce:ce:83:d2:24:90:a1:24:4b:19:f2:73:71:66:
ee:a4:a7:26:16:48:b5:5a:a7:c3:c6:24:26:d6:77:
12:17:e3:3b:3c:fd:6f:32:d7:8f:08:89:23:b0:46:
15:9e:f9:ae:05:3a:ad:bc:da:b7:6b:11:e3:b2:e2:
98:97:46:68:7a:a8:1a:81:c7:45:4c:27:d8:d9:99:
f7:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:B4:2A:57:2A:06:51:0B:32:82:C3:94:07:F8:E7:D0:65:58:44:3C
X509v3 Authority Key Identifier:
keyid:26:7C:70:E6:37:5E:2B:2C:58:C2:8C:CE:84:45:58:CC:9B:4E:DF:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jnxw5jdeKyxYwozOhEVYzJtO31Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/ce416b-6e01-4492-9817-4858f08ad8a5/1/sLQqVyoGUQsygsOUB_jn0GVYRDw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/ce416b-6e01-4492-9817-4858f08ad8a5/1/Jnxw5jdeKyxYwozOhEVYzJtO31Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.116.0/22
Signature Algorithm: sha256WithRSAEncryption
ac:57:bc:36:03:4d:5c:77:84:79:c2:db:9a:5b:9c:8c:c5:a8:
f4:d1:6a:bb:f9:c0:ca:67:12:51:fd:e1:89:2a:d4:4c:b4:67:
fb:2f:a1:31:18:b4:75:0a:b8:4a:2a:15:3a:43:80:70:77:9b:
7f:bf:0e:4f:83:47:87:80:d3:31:22:6f:ad:da:67:05:4e:cf:
6b:e5:cd:6a:86:1a:d2:fb:61:0f:bf:61:7c:4f:7e:74:bd:71:
ad:14:a7:c9:82:42:ca:36:22:d7:96:6f:ff:0e:b0:43:cf:ea:
b7:87:f6:aa:18:0d:c0:de:b9:97:cb:12:b4:27:3a:c5:fb:b3:
00:5e:a6:1a:2d:1d:86:35:85:78:07:08:3a:61:43:d0:51:49:
8d:3f:4d:df:dd:f5:0a:9c:0b:5b:df:db:ed:42:30:9e:2c:9b:
0a:71:e0:5f:91:7e:05:25:79:0e:2b:9f:97:3c:87:49:b1:cd:
b0:7c:8a:3e:bc:44:62:9e:68:b1:d6:5c:91:9b:66:d5:2c:49:
95:51:e6:2e:63:83:54:26:c5:fd:14:c0:0c:a3:c1:44:09:39:
fb:5e:66:75:73:87:24:77:26:79:85:43:d9:7a:a5:2d:b8:51:
e6:3b:51:46:fd:2a:59:23:4a:67:e1:90:2d:01:5f:3c:d7:b5:
8f:9f:7f:da
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEB3LwdTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygy
NjdjNzBlNjM3NWUyYjJjNThjMjhjY2U4NDQ1NThjYzliNGVkZjU2MB4XDTIyMDEw
MTExNTM1OFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYjBiNDJhNTcyYTA2
NTEwYjMyODJjMzk0MDdmOGU3ZDA2NTU4NDQzYzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALV4/eb0i3o21AIOuhRWJItXoGDjBJAuvPixT+McgtwdPeX3
iAibWdvUVs2gl1dnwPrWBXmQNXhRcHJ3sXn6/hXr9bcoTvwrux5jy0CMH1cqccTV
H5+gAC25hN71OMZ3TV+l5HHj+y624xy7FJJwEQgBUOuqM4iTHBnsUp2x9mZgOivj
YzWhaC9LRiNmFeKzYiqGXeEBB26KtgrrF1FygMIyLLXcQKvqEVOD9ZVsAizMMlOb
8s7Og9IkkKEkSxnyc3Fm7qSnJhZItVqnw8YkJtZ3EhfjOzz9bzLXjwiJI7BGFZ75
rgU6rbzat2sR47LimJdGaHqoGoHHRUwn2NmZ930CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSwtCpXKgZRCzKCw5QH+OfQZVhEPDAfBgNVHSMEGDAWgBQmfHDmN14rLFjC
jM6ERVjMm07fVjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0pueHc1amRlS3l4WXdvek9oRVZZekp0TzMxWS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNDYvY2U0MTZiLTZlMDEtNDQ5Mi05ODE3LTQ4NThmMDhhZDhhNS8x
L3NMUXFWeW9HVVFzeWdzT1VCX2puMEdWWVJEdy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDYv
Y2U0MTZiLTZlMDEtNDQ5Mi05ODE3LTQ4NThmMDhhZDhhNS8xL0pueHc1amRlS3l4
WXdvek9oRVZZekp0TzMxWS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAi2WdDANBgkqhkiG9w0BAQsFAAOC
AQEArFe8NgNNXHeEecLbmlucjMWo9NFqu/nAymcSUf3hiSrUTLRn+y+hMRi0dQq4
SioVOkOAcHebf78OT4NHh4DTMSJvrdpnBU7Pa+XNaoYa0vthD79hfE9+dL1xrRSn
yYJCyjYi15Zv/w6wQ8/qt4f2qhgNwN65l8sStCc6xfuzAF6mGi0dhjWFeAcIOmFD
0FFJjT9N3931CpwLW9/b7UIwniybCnHgX5F+BSV5DiuflzyHSbHNsHyKPrxEYp5o
sdZckZtm1SxJlVHmLmODVCbF/RTADKPBRAk5+15mdXOHJHcmeYVD2XqlLbhR5jtR
Rv0qWSNKZ+GQLQFfPNe1j59/2g==
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:29:41 2025 by rpki-client