Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/CwSqtDCHnVqwPpN77pNw0m3prkw.roa
File: CwSqtDCHnVqwPpN77pNw0m3prkw.roa (raw, json)
Hash identifier: wJhxmbQ3CcgVjoKPmnDiAtvIEd9s9ARJHcYagUc9lww=
Subject key identifier: 0B:04:AA:B4:30:87:9D:5A:B0:3E:93:7B:EE:93:70:D2:6D:E9:AE:4C
Certificate issuer: /CN=13ecf10b887f085887de8b2db64917ee2e424545
Certificate serial: 01841D4C03F8A79AEAF953F3C03157A3011A
Authority key identifier: 13:EC:F1:0B:88:7F:08:58:87:DE:8B:2D:B6:49:17:EE:2E:42:45:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E-zxC4h_CFiH3osttkkX7i5CRUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/CwSqtDCHnVqwPpN77pNw0m3prkw.roa
Signing time: Fri 28 Oct 2022 06:33:51 +0000
ROA not before: Fri 28 Oct 2022 06:33:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207279
IP address blocks: 45.88.10.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:1d:4c:03:f8:a7:9a:ea:f9:53:f3:c0:31:57:a3:01:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13ecf10b887f085887de8b2db64917ee2e424545
Validity
Not Before: Oct 28 06:33:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0b04aab430879d5ab03e937bee9370d26de9ae4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:4e:aa:d0:e6:12:02:de:30:de:39:46:bf:70:
d4:c8:39:94:2a:96:ee:b7:0c:30:07:fc:0d:95:09:
35:ba:c4:c9:77:b1:4d:ed:30:49:23:14:77:ba:1b:
ae:1c:8e:6a:7f:ec:f7:e2:6c:0a:54:5f:d7:43:a9:
7b:60:2b:39:c8:be:44:60:f6:c3:80:75:30:dc:8d:
e8:41:45:2d:cd:82:bf:01:d6:64:43:52:09:4f:8c:
2f:be:67:26:27:e8:b8:09:e8:be:16:d5:07:1b:fe:
e7:14:ae:86:0b:29:ce:cd:11:b7:6d:a6:ce:08:9c:
0d:6f:a9:75:ad:03:2e:1f:71:3e:e2:71:60:9a:aa:
3e:34:c7:ef:68:67:c3:84:58:7e:ee:31:c4:de:48:
69:c2:19:3d:66:be:56:8a:dc:7d:d7:f4:f5:44:4e:
36:ac:56:a9:07:50:12:ed:37:fa:d4:8a:da:7f:53:
ab:6f:d2:18:09:b6:3d:c5:08:41:03:1f:dd:7e:70:
d9:fd:96:1b:6b:98:71:73:10:ad:c1:11:b4:76:a0:
36:1d:a5:19:73:1c:37:13:60:f3:1e:5e:f2:e6:c6:
c1:98:f5:bc:43:0b:c7:3b:06:e7:55:72:0d:e2:33:
f0:bf:e2:ea:48:bf:d7:f8:1b:1d:86:28:d7:03:e6:
d8:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:04:AA:B4:30:87:9D:5A:B0:3E:93:7B:EE:93:70:D2:6D:E9:AE:4C
X509v3 Authority Key Identifier:
keyid:13:EC:F1:0B:88:7F:08:58:87:DE:8B:2D:B6:49:17:EE:2E:42:45:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-zxC4h_CFiH3osttkkX7i5CRUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/CwSqtDCHnVqwPpN77pNw0m3prkw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/E-zxC4h_CFiH3osttkkX7i5CRUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.10.0/24
Signature Algorithm: sha256WithRSAEncryption
17:ed:92:e6:80:d3:ba:43:f1:d7:da:23:59:85:47:ff:b1:e3:
1b:e7:2f:38:46:96:30:72:75:8c:32:ec:18:b3:72:50:82:69:
74:e5:6f:de:49:df:fe:7d:f9:02:c7:35:94:fa:1c:8f:e3:02:
fa:f0:96:50:13:b6:82:6f:fd:4c:48:00:e3:d7:7d:7b:4c:07:
03:83:a1:b0:c0:ae:cd:e6:30:8f:af:9a:70:1b:3d:0c:59:22:
c6:2d:45:1c:ef:34:d3:2e:67:3c:be:9a:55:77:61:52:4f:8a:
3f:ea:3c:06:bb:8f:42:95:83:f3:7d:5c:0f:6c:84:bc:cf:27:
47:65:da:d0:13:13:4c:7e:f5:c9:49:82:97:69:15:d5:ab:25:
8d:ae:81:8d:3b:82:56:19:ca:b7:1b:63:cc:af:ba:f4:4b:ed:
2a:57:44:44:83:70:49:60:a1:fc:83:0c:6d:23:26:87:68:01:
67:5b:25:ae:ef:2b:f6:62:d2:48:f2:30:85:9f:98:0e:35:34:
29:96:da:60:26:25:dc:4d:b1:31:5c:28:b7:cd:b7:31:01:e3:
5f:a6:9b:ea:42:04:cf:cf:8c:8a:65:f3:fa:db:eb:0d:a8:48:
ae:b9:3b:77:c2:25:db:75:17:2b:1d:75:1a:68:9f:cf:30:e2:
cd:75:c9:02
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYQdTAP4p5rq+VPzwDFXowEaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzZWNmMTBiODg3ZjA4NTg4N2RlOGIyZGI2NDkxN2VlMmU0
MjQ1NDUwHhcNMjIxMDI4MDYzMzUxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYjA0YWFiNDMwODc5ZDVhYjAzZTkzN2JlZTkzNzBkMjZkZTlhZTRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjU6q0OYSAt4w3jlGv3DUyDmUKpbu
twwwB/wNlQk1usTJd7FN7TBJIxR3uhuuHI5qf+z34mwKVF/XQ6l7YCs5yL5EYPbD
gHUw3I3oQUUtzYK/AdZkQ1IJT4wvvmcmJ+i4Cei+FtUHG/7nFK6GCynOzRG3babO
CJwNb6l1rQMuH3E+4nFgmqo+NMfvaGfDhFh+7jHE3khpwhk9Zr5Witx91/T1RE42
rFapB1AS7Tf61Iraf1Orb9IYCbY9xQhBAx/dfnDZ/ZYba5hxcxCtwRG0dqA2HaUZ
cxw3E2DzHl7y5sbBmPW8QwvHOwbnVXIN4jPwv+LqSL/X+BsdhijXA+bYCQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAsEqrQwh51asD6Te+6TcNJt6a5MMB8GA1UdIwQY
MBaAFBPs8QuIfwhYh96LLbZJF+4uQkVFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRS16eEM0aF9DRmlIM29zdHRra1g3aTVDUlVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9jNDVhOWItNTA5Ni00ZTc1LTkzODkt
YmQ5YjQyZjQ4ZGRlLzEvQ3dTcXREQ0huVnF3UHBONzdwTncwbTNwcmt3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS9jNDVhOWItNTA5Ni00ZTc1LTkzODktYmQ5YjQyZjQ4ZGRl
LzEvRS16eEM0aF9DRmlIM29zdHRra1g3aTVDUlVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALVgKMA0G
CSqGSIb3DQEBCwUAA4IBAQAX7ZLmgNO6Q/HX2iNZhUf/seMb5y84RpYwcnWMMuwY
s3JQgml05W/eSd/+ffkCxzWU+hyP4wL68JZQE7aCb/1MSADj1317TAcDg6GwwK7N
5jCPr5pwGz0MWSLGLUUc7zTTLmc8vppVd2FST4o/6jwGu49ClYPzfVwPbIS8zydH
ZdrQExNMfvXJSYKXaRXVqyWNroGNO4JWGcq3G2PMr7r0S+0qV0REg3BJYKH8gwxt
IyaHaAFnWyWu7yv2YtJI8jCFn5gONTQpltpgJiXcTbExXCi3zbcxAeNfppvqQgTP
z4yKZfP62+sNqEiuuTt3wiXbdRcrHXUaaJ/PMOLNdckC
-----END CERTIFICATE-----
Generated at Sun Apr 6 00:06:34 2025 by rpki-client