Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/13536b-baf9-4b0f-ac5a-9085b4dff289/1/56I4h_kFiN6Z46l488KbJ6wR6j4.roa
File: 56I4h_kFiN6Z46l488KbJ6wR6j4.roa (raw, json)
Hash identifier: CWmXO/dItF9HeTHBktf0GqHtqr1TohVHc/SnO4ZxiAE=
Subject key identifier: E7:A2:38:87:F9:05:88:DE:99:E3:A9:78:F3:C2:9B:27:AC:11:EA:3E
Certificate issuer: /CN=f655558b616794a4f77a648fc33609d977f5a780
Certificate serial: F7A0BC
Authority key identifier: F6:55:55:8B:61:67:94:A4:F7:7A:64:8F:C3:36:09:D9:77:F5:A7:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9lVVi2FnlKT3emSPwzYJ2Xf1p4A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/13536b-baf9-4b0f-ac5a-9085b4dff289/1/56I4h_kFiN6Z46l488KbJ6wR6j4.roa
Signing time: Wed 11 May 2022 22:09:49 +0000
ROA not before: Wed 11 May 2022 22:09:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 58061
IP address blocks: 45.157.136.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16228540 (0xf7a0bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f655558b616794a4f77a648fc33609d977f5a780
Validity
Not Before: May 11 22:09:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e7a23887f90588de99e3a978f3c29b27ac11ea3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:30:89:e3:44:9e:6d:e5:4e:9a:68:d7:71:d9:
83:b5:76:43:6b:41:ca:71:85:e9:7d:3f:d3:fa:c2:
b0:19:7e:71:33:29:13:1c:53:95:7b:02:9a:53:e0:
e4:ec:fe:f9:e8:01:d9:62:15:96:0f:7d:aa:3b:30:
1b:0e:ac:73:fe:8c:35:58:3d:29:96:0c:27:a9:7f:
82:89:d7:69:4d:2a:e6:5b:cb:d9:0e:ca:74:f6:b9:
f1:b1:97:9a:33:8f:3a:e0:a3:32:94:a9:f7:34:a5:
db:39:00:cf:36:ef:2a:6b:2e:f3:b5:a1:cd:09:46:
5a:95:21:62:f3:5d:52:63:89:87:0e:33:a4:c8:b5:
34:32:b5:f5:fa:5f:55:aa:98:e2:d9:a5:8c:f9:54:
8e:8e:4f:85:b4:33:a5:19:15:93:e5:d9:d0:72:19:
1c:19:3d:7c:4f:ae:09:19:b9:08:30:8c:76:04:09:
99:a4:c3:ed:0f:4f:f9:2e:63:97:c6:f8:0f:db:72:
44:48:a7:7d:95:ec:da:c8:dc:ef:86:31:5e:8c:dc:
6d:37:1e:08:dd:95:37:cb:ec:ae:24:7c:a4:b2:32:
b4:60:c0:bd:45:23:4b:f0:e5:79:5d:37:d1:d2:b7:
84:33:ae:7f:9a:04:92:35:80:91:8f:f1:97:b3:b1:
78:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:A2:38:87:F9:05:88:DE:99:E3:A9:78:F3:C2:9B:27:AC:11:EA:3E
X509v3 Authority Key Identifier:
keyid:F6:55:55:8B:61:67:94:A4:F7:7A:64:8F:C3:36:09:D9:77:F5:A7:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9lVVi2FnlKT3emSPwzYJ2Xf1p4A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/13536b-baf9-4b0f-ac5a-9085b4dff289/1/56I4h_kFiN6Z46l488KbJ6wR6j4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/13536b-baf9-4b0f-ac5a-9085b4dff289/1/9lVVi2FnlKT3emSPwzYJ2Xf1p4A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.157.136.0/24
Signature Algorithm: sha256WithRSAEncryption
50:12:22:fa:d5:3d:fd:ec:1a:ca:c1:f9:e3:39:c6:41:24:e1:
37:b2:77:3a:58:71:e0:85:2f:a3:86:84:b7:6e:a4:d0:8d:a8:
14:37:e4:86:4c:38:db:16:e5:d3:31:d5:a3:36:0a:67:8a:8d:
7f:de:2c:cf:84:62:5a:bc:33:df:fc:34:73:9c:d7:93:a5:d1:
cf:a8:db:dc:46:42:91:ee:25:9b:55:b4:79:cb:54:f9:f6:c3:
af:e1:b0:65:cd:3c:ea:db:b5:2b:ea:ed:e2:e3:82:d4:b6:2e:
df:17:8b:69:b4:79:f2:e5:86:6c:c2:ae:31:12:5b:68:46:0f:
d8:07:80:bc:f5:f1:0c:70:29:8f:02:fc:b9:ca:fa:f5:8b:25:
82:56:38:0d:9e:cf:0f:a3:6c:28:45:18:44:aa:7a:a8:64:47:
44:5a:3a:93:6e:27:61:de:04:14:b6:7e:3b:ab:82:a6:6d:29:
24:91:f1:33:41:50:50:d8:a6:be:32:ea:42:de:15:71:6b:e6:
60:1d:d6:0a:e3:45:41:05:de:05:5d:09:1f:91:ec:d9:56:58:
15:4a:d4:f5:fb:fa:69:df:a1:4d:dc:e9:8c:5a:a4:ae:1d:ac:
59:00:42:ff:34:20:55:ca:46:54:0d:04:91:7e:a6:50:4d:13:
07:ad:9b:f7
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAPegvDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhm
NjU1NTU4YjYxNjc5NGE0Zjc3YTY0OGZjMzM2MDlkOTc3ZjVhNzgwMB4XDTIyMDUx
MTIyMDk0OVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZTdhMjM4ODdmOTA1
ODhkZTk5ZTNhOTc4ZjNjMjliMjdhYzExZWEzZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJgwieNEnm3lTppo13HZg7V2Q2tBynGF6X0/0/rCsBl+cTMp
ExxTlXsCmlPg5Oz++egB2WIVlg99qjswGw6sc/6MNVg9KZYMJ6l/gonXaU0q5lvL
2Q7KdPa58bGXmjOPOuCjMpSp9zSl2zkAzzbvKmsu87WhzQlGWpUhYvNdUmOJhw4z
pMi1NDK19fpfVaqY4tmljPlUjo5PhbQzpRkVk+XZ0HIZHBk9fE+uCRm5CDCMdgQJ
maTD7Q9P+S5jl8b4D9tyREinfZXs2sjc74YxXozcbTceCN2VN8vsriR8pLIytGDA
vUUjS/DleV030dK3hDOuf5oEkjWAkY/xl7OxeOsCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTnojiH+QWI3pnjqXjzwpsnrBHqPjAfBgNVHSMEGDAWgBT2VVWLYWeUpPd6
ZI/DNgnZd/WngDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzlsVlZpMkZubEtUM2VtU1B3ellKMlhmMXA0QS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNGIvMTM1MzZiLWJhZjktNGIwZi1hYzVhLTkwODViNGRmZjI4OS8x
LzU2STRoX2tGaU42WjQ2bDQ4OEtiSjZ3UjZqNC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGIv
MTM1MzZiLWJhZjktNGIwZi1hYzVhLTkwODViNGRmZjI4OS8xLzlsVlZpMkZubEtU
M2VtU1B3ellKMlhmMXA0QS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC2diDANBgkqhkiG9w0BAQsFAAOC
AQEAUBIi+tU9/ewaysH54znGQSThN7J3Olhx4IUvo4aEt26k0I2oFDfkhkw42xbl
0zHVozYKZ4qNf94sz4RiWrwz3/w0c5zXk6XRz6jb3EZCke4lm1W0ectU+fbDr+Gw
Zc086tu1K+rt4uOC1LYu3xeLabR58uWGbMKuMRJbaEYP2AeAvPXxDHApjwL8ucr6
9YslglY4DZ7PD6NsKEUYRKp6qGRHRFo6k24nYd4EFLZ+O6uCpm0pJJHxM0FQUNim
vjLqQt4VcWvmYB3WCuNFQQXeBV0JH5Hs2VZYFUrU9fv6ad+hTdzpjFqkrh2sWQBC
/zQgVcpGVA0EkX6mUE0TB62b9w==
-----END CERTIFICATE-----
Generated at Thu Apr 17 09:11:19 2025 by rpki-client