Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/7ceO5tKmi9IKL9fiFp4vNmg_vCI.roa
File: 7ceO5tKmi9IKL9fiFp4vNmg_vCI.roa (raw, json)
Hash identifier: 0E62ngM0CAXXdEg3TxZHoL0iYvetE+t+/FHagmKMju4=
Subject key identifier: ED:C7:8E:E6:D2:A6:8B:D2:0A:2F:D7:E2:16:9E:2F:36:68:3F:BC:22
Certificate issuer: /CN=13ecf10b887f085887de8b2db64917ee2e424545
Certificate serial: 0185714C19974CC61C9DF350F9C61D8DB2DC
Authority key identifier: 13:EC:F1:0B:88:7F:08:58:87:DE:8B:2D:B6:49:17:EE:2E:42:45:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E-zxC4h_CFiH3osttkkX7i5CRUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/7ceO5tKmi9IKL9fiFp4vNmg_vCI.roa
Signing time: Mon 02 Jan 2023 07:04:50 +0000
ROA not before: Mon 02 Jan 2023 07:04:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211432
IP address blocks: 45.95.64.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:4c:19:97:4c:c6:1c:9d:f3:50:f9:c6:1d:8d:b2:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13ecf10b887f085887de8b2db64917ee2e424545
Validity
Not Before: Jan 2 07:04:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=edc78ee6d2a68bd20a2fd7e2169e2f36683fbc22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:b0:ea:25:1a:58:d6:6f:8e:c0:bc:e1:b4:83:
a5:d5:ba:b8:08:49:11:f1:a0:b9:25:19:2d:b9:e6:
e8:b4:44:f3:61:d7:ca:40:27:18:4f:a6:23:22:e8:
48:17:28:27:d8:b1:ff:81:5a:69:fc:50:9a:9a:2c:
a9:dd:28:dc:11:a9:95:54:d7:76:3d:c9:9d:a7:1a:
f1:ff:9a:ea:ea:9e:64:16:9c:8e:ef:a6:93:ef:e7:
cd:a7:57:52:cf:67:98:78:a0:d5:e3:ec:9a:df:49:
01:6a:9c:b4:f9:76:2a:34:da:49:0d:fa:fe:92:aa:
7e:8e:d6:ce:95:ea:72:47:33:74:03:61:70:e8:a0:
e5:6d:93:b7:c9:53:ef:a4:46:4e:b2:fe:bd:fb:7d:
c5:50:21:39:bb:06:cd:cc:ba:d7:f3:fd:e9:18:40:
26:dc:0b:a0:cc:9f:87:34:fd:af:dc:1a:52:86:45:
5d:db:cc:12:a2:c3:3e:10:58:36:83:06:c6:78:e7:
28:0d:6d:7c:33:81:f6:51:82:fb:69:99:17:76:09:
21:16:b2:29:03:d3:f7:0e:65:f5:fb:a0:39:8c:d5:
12:48:1e:9b:4a:4c:e3:d5:0c:1f:31:94:12:65:89:
ba:9e:98:75:8b:42:93:b1:af:d2:c3:89:c0:59:74:
a4:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:C7:8E:E6:D2:A6:8B:D2:0A:2F:D7:E2:16:9E:2F:36:68:3F:BC:22
X509v3 Authority Key Identifier:
keyid:13:EC:F1:0B:88:7F:08:58:87:DE:8B:2D:B6:49:17:EE:2E:42:45:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-zxC4h_CFiH3osttkkX7i5CRUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/7ceO5tKmi9IKL9fiFp4vNmg_vCI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/E-zxC4h_CFiH3osttkkX7i5CRUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.64.0/24
Signature Algorithm: sha256WithRSAEncryption
88:a4:58:b8:59:65:f9:70:50:60:c1:e3:1e:e6:68:e3:0a:40:
a6:33:19:5b:8d:94:db:06:4a:cf:10:02:bd:fb:03:db:b3:39:
da:de:10:fb:23:12:6d:b2:ee:63:c0:48:74:0f:24:a4:3f:53:
ee:10:3d:e8:39:4a:5a:21:4d:75:aa:3a:e6:47:8e:0e:3b:45:
b9:62:83:2e:ae:e0:14:17:76:94:a8:8b:da:58:66:53:02:6c:
da:77:ac:ef:fb:63:48:78:2e:97:e1:89:7c:81:c3:35:3b:e2:
22:e2:f8:db:bc:80:c8:ea:4a:ae:e2:a0:e2:f3:53:70:d2:38:
dd:a8:ee:67:c7:0d:f5:07:be:f7:a6:3a:fc:cb:62:9f:7a:97:
b4:86:ba:c1:23:25:68:23:df:3b:11:fa:b3:6a:f6:43:a8:5f:
46:3b:43:a6:f5:fe:2a:0e:9b:73:68:95:98:03:94:5e:56:8c:
c5:17:8a:02:79:a8:e5:c4:10:b9:ea:f1:5a:98:8e:1e:86:7c:
ad:ca:7f:37:22:ad:80:e5:b3:f5:a8:7f:d7:cf:3a:6a:0e:36:
8b:60:35:13:9a:97:27:5e:97:f8:db:5c:09:43:db:c3:e6:cb:
d8:5d:92:88:47:bc:a5:17:eb:bb:ed:3a:36:b9:c4:9a:f9:8c:
3f:0e:3b:cb
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVxTBmXTMYcnfNQ+cYdjbLcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzZWNmMTBiODg3ZjA4NTg4N2RlOGIyZGI2NDkxN2VlMmU0
MjQ1NDUwHhcNMjMwMTAyMDcwNDUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZGM3OGVlNmQyYTY4YmQyMGEyZmQ3ZTIxNjllMmYzNjY4M2ZiYzIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjbDqJRpY1m+OwLzhtIOl1bq4CEkR
8aC5JRktuebotETzYdfKQCcYT6YjIuhIFygn2LH/gVpp/FCamiyp3SjcEamVVNd2
Pcmdpxrx/5rq6p5kFpyO76aT7+fNp1dSz2eYeKDV4+ya30kBapy0+XYqNNpJDfr+
kqp+jtbOlepyRzN0A2Fw6KDlbZO3yVPvpEZOsv69+33FUCE5uwbNzLrX8/3pGEAm
3AugzJ+HNP2v3BpShkVd28wSosM+EFg2gwbGeOcoDW18M4H2UYL7aZkXdgkhFrIp
A9P3DmX1+6A5jNUSSB6bSkzj1QwfMZQSZYm6nph1i0KTsa/Sw4nAWXSkKQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFO3HjubSpovSCi/X4haeLzZoP7wiMB8GA1UdIwQY
MBaAFBPs8QuIfwhYh96LLbZJF+4uQkVFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRS16eEM0aF9DRmlIM29zdHRra1g3aTVDUlVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9jNDVhOWItNTA5Ni00ZTc1LTkzODkt
YmQ5YjQyZjQ4ZGRlLzEvN2NlTzV0S21pOUlLTDlmaUZwNHZObWdfdkNJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS9jNDVhOWItNTA5Ni00ZTc1LTkzODktYmQ5YjQyZjQ4ZGRl
LzEvRS16eEM0aF9DRmlIM29zdHRra1g3aTVDUlVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALV9AMA0G
CSqGSIb3DQEBCwUAA4IBAQCIpFi4WWX5cFBgweMe5mjjCkCmMxlbjZTbBkrPEAK9
+wPbszna3hD7IxJtsu5jwEh0DySkP1PuED3oOUpaIU11qjrmR44OO0W5YoMuruAU
F3aUqIvaWGZTAmzad6zv+2NIeC6X4Yl8gcM1O+Ii4vjbvIDI6kqu4qDi81Nw0jjd
qO5nxw31B773pjr8y2Kfepe0hrrBIyVoI987EfqzavZDqF9GO0Om9f4qDptzaJWY
A5ReVozFF4oCeajlxBC56vFamI4ehnytyn83Iq2A5bP1qH/XzzpqDjaLYDUTmpcn
Xpf421wJQ9vD5svYXZKIR7ylF+u77To2ucSa+Yw/DjvL
-----END CERTIFICATE-----
Generated at Sun Apr 6 11:10:42 2025 by rpki-client