Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/_QdSXTg7B4sq40aw1d-jsGFCbRw.roa
File: _QdSXTg7B4sq40aw1d-jsGFCbRw.roa (raw, json)
Hash identifier: kIKYsxZEHUXI5On+omF7Vcr9nuNt9lBbZDuiSTiMZyU=
Subject key identifier: FD:07:52:5D:38:3B:07:8B:2A:E3:46:B0:D5:DF:A3:B0:61:42:6D:1C
Certificate issuer: /CN=13ecf10b887f085887de8b2db64917ee2e424545
Certificate serial: 0185714C154DE85F0812712E91460723CFAC
Authority key identifier: 13:EC:F1:0B:88:7F:08:58:87:DE:8B:2D:B6:49:17:EE:2E:42:45:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E-zxC4h_CFiH3osttkkX7i5CRUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/_QdSXTg7B4sq40aw1d-jsGFCbRw.roa
Signing time: Mon 02 Jan 2023 07:04:49 +0000
ROA not before: Mon 02 Jan 2023 07:04:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201949
IP address blocks: 45.88.8.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:4c:15:4d:e8:5f:08:12:71:2e:91:46:07:23:cf:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13ecf10b887f085887de8b2db64917ee2e424545
Validity
Not Before: Jan 2 07:04:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fd07525d383b078b2ae346b0d5dfa3b061426d1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:74:1c:1e:98:e8:8d:26:5a:d0:8a:41:ac:66:
0b:b0:64:e3:ae:81:f5:c1:a9:3e:1b:54:e9:30:f2:
95:42:34:54:e7:50:9f:20:ae:dd:1b:e5:e7:18:3f:
00:ff:8a:59:d0:64:0c:cd:66:44:81:16:d9:78:00:
23:aa:19:a6:75:4f:fb:a5:0c:a6:9b:ed:65:be:36:
33:8c:e5:d6:78:ab:a1:dd:b7:e8:48:34:6e:b4:ab:
81:05:e0:5d:3a:46:21:4f:e9:b2:63:57:43:69:86:
a4:95:f4:f6:a2:65:10:ab:8e:ca:a1:4b:91:a6:88:
70:19:89:2a:79:d5:3c:98:2f:3a:59:19:3c:1b:2d:
db:a5:d0:9e:35:7c:fe:49:c1:ee:07:81:58:ba:ae:
34:87:6d:b0:41:3f:1b:36:38:f0:1c:1f:24:f0:4d:
18:aa:d1:24:47:25:e1:8f:74:f3:fb:27:75:54:e0:
6f:8d:9f:bb:d7:35:17:71:cf:db:24:9e:75:6f:4a:
58:ca:b4:d9:03:ae:74:2e:c5:b7:1c:67:66:8b:06:
d0:82:80:d3:98:43:82:96:97:10:b3:2b:d8:82:7d:
ab:2d:83:f8:83:e5:3b:d6:9b:6b:2a:ee:e3:da:41:
6b:b7:2b:0d:cc:da:a7:08:f5:33:f3:48:e1:e9:84:
b9:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:07:52:5D:38:3B:07:8B:2A:E3:46:B0:D5:DF:A3:B0:61:42:6D:1C
X509v3 Authority Key Identifier:
keyid:13:EC:F1:0B:88:7F:08:58:87:DE:8B:2D:B6:49:17:EE:2E:42:45:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-zxC4h_CFiH3osttkkX7i5CRUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/_QdSXTg7B4sq40aw1d-jsGFCbRw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/E-zxC4h_CFiH3osttkkX7i5CRUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.8.0/24
Signature Algorithm: sha256WithRSAEncryption
95:1c:ae:f4:68:21:23:c2:f0:39:11:83:52:e8:bf:65:00:7b:
97:16:f1:6a:d9:88:a1:a3:9c:d5:c5:d7:16:63:12:a1:be:10:
6c:88:2b:6b:20:62:ab:c8:40:f0:53:01:9c:9f:92:1e:27:87:
5c:9c:c0:3d:15:05:4c:f8:fc:14:fb:20:59:76:a1:e5:5a:f2:
13:68:b6:ff:5e:31:f8:33:e4:fe:d7:33:1c:03:91:1d:a7:9c:
df:a1:eb:ee:0f:f0:f3:dd:13:7f:1d:f3:30:ef:5f:a4:9a:0a:
62:66:6c:8b:42:bf:6b:12:3b:f3:40:46:66:da:74:65:a5:6a:
d5:31:21:d3:5c:b9:58:66:ee:f9:68:a1:5c:47:af:db:e1:d1:
db:da:ad:9d:f0:77:aa:ff:82:ee:f6:10:af:33:90:e6:1f:f8:
3e:9f:00:7d:62:39:0f:2e:cc:33:73:69:ae:e5:50:75:56:e4:
30:12:04:23:2d:fb:5e:6d:ad:69:c4:5a:6e:bf:2f:ea:be:19:
00:5b:8f:34:44:f9:e7:49:dc:8f:16:db:93:e9:b3:13:33:f9:
fb:51:67:b2:01:f1:66:3b:d8:4f:be:4f:70:48:c8:53:c3:85:
6a:ef:00:cb:7c:e5:db:4f:81:e2:bd:5c:26:fd:53:eb:c2:5e:
cf:a8:40:cb
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVxTBVN6F8IEnEukUYHI8+sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzZWNmMTBiODg3ZjA4NTg4N2RlOGIyZGI2NDkxN2VlMmU0
MjQ1NDUwHhcNMjMwMTAyMDcwNDQ5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZDA3NTI1ZDM4M2IwNzhiMmFlMzQ2YjBkNWRmYTNiMDYxNDI2ZDFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhnQcHpjojSZa0IpBrGYLsGTjroH1
wak+G1TpMPKVQjRU51CfIK7dG+XnGD8A/4pZ0GQMzWZEgRbZeAAjqhmmdU/7pQym
m+1lvjYzjOXWeKuh3bfoSDRutKuBBeBdOkYhT+myY1dDaYaklfT2omUQq47KoUuR
pohwGYkqedU8mC86WRk8Gy3bpdCeNXz+ScHuB4FYuq40h22wQT8bNjjwHB8k8E0Y
qtEkRyXhj3Tz+yd1VOBvjZ+71zUXcc/bJJ51b0pYyrTZA650LsW3HGdmiwbQgoDT
mEOClpcQsyvYgn2rLYP4g+U71ptrKu7j2kFrtysNzNqnCPUz80jh6YS5mQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFP0HUl04OweLKuNGsNXfo7BhQm0cMB8GA1UdIwQY
MBaAFBPs8QuIfwhYh96LLbZJF+4uQkVFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRS16eEM0aF9DRmlIM29zdHRra1g3aTVDUlVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9jNDVhOWItNTA5Ni00ZTc1LTkzODkt
YmQ5YjQyZjQ4ZGRlLzEvX1FkU1hUZzdCNHNxNDBhdzFkLWpzR0ZDYlJ3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS9jNDVhOWItNTA5Ni00ZTc1LTkzODktYmQ5YjQyZjQ4ZGRl
LzEvRS16eEM0aF9DRmlIM29zdHRra1g3aTVDUlVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALVgIMA0G
CSqGSIb3DQEBCwUAA4IBAQCVHK70aCEjwvA5EYNS6L9lAHuXFvFq2Yiho5zVxdcW
YxKhvhBsiCtrIGKryEDwUwGcn5IeJ4dcnMA9FQVM+PwU+yBZdqHlWvITaLb/XjH4
M+T+1zMcA5Edp5zfoevuD/Dz3RN/HfMw71+kmgpiZmyLQr9rEjvzQEZm2nRlpWrV
MSHTXLlYZu75aKFcR6/b4dHb2q2d8Heq/4Lu9hCvM5DmH/g+nwB9YjkPLswzc2mu
5VB1VuQwEgQjLfteba1pxFpuvy/qvhkAW480RPnnSdyPFtuT6bMTM/n7UWeyAfFm
O9hPvk9wSMhTw4Vq7wDLfOXbT4HivVwm/VPrwl7PqEDL
-----END CERTIFICATE-----
Generated at Sun Apr 6 07:33:46 2025 by rpki-client