Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/269486-09dc-4d49-84e5-968bc32d9adc/1/U5liV6l09xW0Ha2_3tkiMt5xkPI.roa
File: U5liV6l09xW0Ha2_3tkiMt5xkPI.roa (raw, json)
Hash identifier: szmhF84e2PlMg414xO/V3OPWnWWLBm9tDH1yQBvlfmA=
Subject key identifier: 53:99:62:57:A9:74:F7:15:B4:1D:AD:BF:DE:D9:22:32:DE:71:90:F2
Certificate issuer: /CN=9c8440d3e55babae92bc693ea39092f6e4f50c24
Certificate serial: 01833546676AA2FBCFC76743E73FC3BFA62C
Authority key identifier: 9C:84:40:D3:E5:5B:AB:AE:92:BC:69:3E:A3:90:92:F6:E4:F5:0C:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nIRA0-Vbq66SvGk-o5CS9uT1DCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/269486-09dc-4d49-84e5-968bc32d9adc/1/U5liV6l09xW0Ha2_3tkiMt5xkPI.roa
Signing time: Tue 13 Sep 2022 05:15:49 +0000
ROA not before: Tue 13 Sep 2022 05:15:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207990
IP address blocks: 45.158.212.0/22 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:35:46:67:6a:a2:fb:cf:c7:67:43:e7:3f:c3:bf:a6:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c8440d3e55babae92bc693ea39092f6e4f50c24
Validity
Not Before: Sep 13 05:15:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=53996257a974f715b41dadbfded92232de7190f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:70:d8:32:f2:21:bf:c5:7d:6d:e1:12:54:ff:
8e:08:7c:f5:3e:e6:a8:a1:37:ca:87:82:88:3f:c3:
d3:e4:9c:20:3f:a5:5f:4a:46:c4:c2:f0:3d:cf:4d:
be:51:8a:3a:f6:85:03:1d:a9:39:83:c9:69:d9:50:
a8:41:75:c9:fe:ab:92:15:6e:83:a3:7a:66:93:f0:
93:72:c3:90:a6:03:94:43:e1:ab:63:64:31:85:d2:
31:53:67:d1:1d:ae:e5:a0:75:1f:de:9e:f5:f8:26:
ac:b3:0d:41:77:69:03:96:35:82:22:f6:3c:69:2c:
09:09:56:34:9b:ad:51:9a:8a:db:e3:51:37:f5:01:
fb:f1:a2:68:b4:d6:0b:df:f7:52:32:42:ad:02:46:
55:ca:83:53:d5:b9:ad:34:69:97:29:d5:26:2a:70:
4f:32:88:70:4a:4e:53:99:4c:5c:8b:0e:3c:b0:3c:
3f:75:82:79:ad:bf:8f:02:aa:43:74:21:c5:e2:c5:
38:bf:b8:c0:6c:c5:af:94:c7:62:12:ba:94:95:f5:
64:c5:14:8c:08:b5:a8:a4:0f:8d:46:09:b3:d9:af:
ec:25:82:5f:e2:4a:5e:83:93:f9:73:12:a9:2f:5e:
a7:40:df:c7:33:27:15:4e:7a:71:e4:ff:3b:d1:be:
65:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:99:62:57:A9:74:F7:15:B4:1D:AD:BF:DE:D9:22:32:DE:71:90:F2
X509v3 Authority Key Identifier:
keyid:9C:84:40:D3:E5:5B:AB:AE:92:BC:69:3E:A3:90:92:F6:E4:F5:0C:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nIRA0-Vbq66SvGk-o5CS9uT1DCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/269486-09dc-4d49-84e5-968bc32d9adc/1/U5liV6l09xW0Ha2_3tkiMt5xkPI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/269486-09dc-4d49-84e5-968bc32d9adc/1/nIRA0-Vbq66SvGk-o5CS9uT1DCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.158.212.0/22
Signature Algorithm: sha256WithRSAEncryption
76:a0:66:e3:2c:b8:c1:cf:d6:65:83:48:aa:f0:fe:7c:25:24:
fb:29:43:d5:6b:99:96:28:d4:35:bd:69:9b:d4:0c:d5:72:d0:
f8:64:46:68:82:8e:67:73:be:ad:56:a2:57:cd:7a:8a:19:52:
92:f5:fa:24:4c:1c:2a:0d:8d:9e:08:8b:bd:d1:4b:ae:68:cd:
0d:65:f2:ba:55:6f:d9:81:b5:e4:18:0e:a5:39:57:5e:a1:35:
95:fa:13:61:5d:36:a2:41:e5:50:b8:1a:29:32:e1:f4:9f:4d:
f9:90:81:7b:ac:ad:88:3c:bc:4a:1e:d8:21:36:79:73:95:cf:
10:cb:ea:10:49:61:30:8d:ce:10:39:6a:35:65:06:cf:69:89:
7b:b3:09:06:2f:22:40:d0:8b:cf:8f:36:62:35:f7:ed:ae:b9:
4c:6f:a3:9c:a2:e6:db:85:fc:97:58:25:ea:4d:f0:25:28:7c:
be:fb:fa:75:e6:56:f0:fd:18:1f:c6:2c:c5:b7:3c:b5:64:94:
c6:84:a0:e4:19:f2:7f:db:c2:37:6a:98:41:90:6f:23:69:5e:
e0:df:21:09:15:0d:f0:0c:93:19:de:60:79:2c:4c:73:5e:b6:
c9:c8:b9:31:34:8b:1c:6c:55:e1:fe:70:df:d7:5e:76:6a:53:
25:d8:cb:96
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYM1RmdqovvPx2dD5z/Dv6YsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljODQ0MGQzZTU1YmFiYWU5MmJjNjkzZWEzOTA5MmY2ZTRm
NTBjMjQwHhcNMjIwOTEzMDUxNTQ5WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1Mzk5NjI1N2E5NzRmNzE1YjQxZGFkYmZkZWQ5MjIzMmRlNzE5MGYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmXDYMvIhv8V9beESVP+OCHz1Puao
oTfKh4KIP8PT5JwgP6VfSkbEwvA9z02+UYo69oUDHak5g8lp2VCoQXXJ/quSFW6D
o3pmk/CTcsOQpgOUQ+GrY2QxhdIxU2fRHa7loHUf3p71+Cassw1Bd2kDljWCIvY8
aSwJCVY0m61Rmorb41E39QH78aJotNYL3/dSMkKtAkZVyoNT1bmtNGmXKdUmKnBP
MohwSk5TmUxciw48sDw/dYJ5rb+PAqpDdCHF4sU4v7jAbMWvlMdiErqUlfVkxRSM
CLWopA+NRgmz2a/sJYJf4kpeg5P5cxKpL16nQN/HMycVTnpx5P870b5lYQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFOZYlepdPcVtB2tv97ZIjLecZDyMB8GA1UdIwQY
MBaAFJyEQNPlW6uukrxpPqOQkvbk9QwkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbklSQTAtVmJxNjZTdkdrLW81Q1M5dVQxRENRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi8yNjk0ODYtMDlkYy00ZDQ5LTg0ZTUt
OTY4YmMzMmQ5YWRjLzEvVTVsaVY2bDA5eFcwSGEyXzN0a2lNdDV4a1BJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi8yNjk0ODYtMDlkYy00ZDQ5LTg0ZTUtOTY4YmMzMmQ5YWRj
LzEvbklSQTAtVmJxNjZTdkdrLW81Q1M5dVQxRENRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLZ7UMA0G
CSqGSIb3DQEBCwUAA4IBAQB2oGbjLLjBz9Zlg0iq8P58JST7KUPVa5mWKNQ1vWmb
1AzVctD4ZEZogo5nc76tVqJXzXqKGVKS9fokTBwqDY2eCIu90UuuaM0NZfK6VW/Z
gbXkGA6lOVdeoTWV+hNhXTaiQeVQuBopMuH0n035kIF7rK2IPLxKHtghNnlzlc8Q
y+oQSWEwjc4QOWo1ZQbPaYl7swkGLyJA0IvPjzZiNfftrrlMb6OcoubbhfyXWCXq
TfAlKHy++/p15lbw/RgfxizFtzy1ZJTGhKDkGfJ/28I3aphBkG8jaV7g3yEJFQ3w
DJMZ3mB5LExzXrbJyLkxNIscbFXh/nDf1152alMl2MuW
-----END CERTIFICATE-----
Generated at Thu Apr 17 09:11:26 2025 by rpki-client