Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/1n657yI_QcKtmXVC2Uc8WPyLrk8.roa
File: 1n657yI_QcKtmXVC2Uc8WPyLrk8.roa (raw, json)
Hash identifier: rZnkgoKOfMzDKpG3FMgFoZKnkIZlDxQgrJ4+R+BGNto=
Subject key identifier: D6:7E:B9:EF:22:3F:41:C2:AD:99:75:42:D9:47:3C:58:FC:8B:AE:4F
Certificate issuer: /CN=8e1c11658d2041eaf2502fe5408ed493bbd4f318
Certificate serial: 0184A4437B5E2587366627EAB9A13AD29757
Authority key identifier: 8E:1C:11:65:8D:20:41:EA:F2:50:2F:E5:40:8E:D4:93:BB:D4:F3:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/1n657yI_QcKtmXVC2Uc8WPyLrk8.roa
Signing time: Wed 23 Nov 2022 11:33:16 +0000
ROA not before: Wed 23 Nov 2022 11:33:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 134512
IP address blocks: 45.93.151.0/24 maxlen: 24
45.93.150.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:a4:43:7b:5e:25:87:36:66:27:ea:b9:a1:3a:d2:97:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e1c11658d2041eaf2502fe5408ed493bbd4f318
Validity
Not Before: Nov 23 11:33:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d67eb9ef223f41c2ad997542d9473c58fc8bae4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:69:13:8d:5a:e9:2c:4a:74:0e:51:3a:6c:03:
9f:fd:e8:eb:a8:86:58:72:c1:1f:9d:bd:97:4c:0e:
9c:c1:fe:95:b2:b2:b2:70:ba:65:d4:a5:b7:24:29:
09:bf:00:e4:2d:1e:41:ee:cc:08:5a:4e:83:f6:92:
2a:bd:70:c8:09:ad:04:91:d3:e7:d0:12:50:fc:b0:
11:d2:70:a7:fe:24:46:77:90:27:26:ad:f6:68:35:
3f:1a:ce:ce:a4:74:5e:56:02:cb:0c:66:eb:a9:a3:
e8:6b:b2:92:3e:de:f0:20:9c:ab:f5:da:8f:03:5e:
35:1e:e7:f8:b9:94:e6:00:76:d3:6a:3d:d7:21:24:
b7:27:f0:d4:d0:b9:7b:f5:79:75:34:ce:06:01:d9:
b5:eb:01:30:71:fa:c3:a3:a4:8c:db:a6:ca:9f:86:
51:f5:07:b3:4d:26:66:04:5a:9d:8d:95:77:ae:33:
2c:1a:87:33:86:e9:79:48:08:e5:42:f5:6c:21:4b:
f5:01:af:95:fa:fe:b5:89:a8:f0:40:1b:da:9a:a4:
0f:44:c3:81:b3:bf:12:2f:46:9f:57:6a:37:de:9f:
c9:61:6f:04:c7:c2:b3:e5:06:4e:de:08:ec:49:7e:
bb:a1:3a:d5:f8:cb:e0:e8:84:fb:90:5f:8c:46:96:
ea:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:7E:B9:EF:22:3F:41:C2:AD:99:75:42:D9:47:3C:58:FC:8B:AE:4F
X509v3 Authority Key Identifier:
keyid:8E:1C:11:65:8D:20:41:EA:F2:50:2F:E5:40:8E:D4:93:BB:D4:F3:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/1n657yI_QcKtmXVC2Uc8WPyLrk8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.93.150.0/23
Signature Algorithm: sha256WithRSAEncryption
22:b4:7f:53:19:cb:c1:45:88:72:85:22:c0:bb:3f:0a:42:ab:
ea:ef:32:54:cb:22:d3:55:e9:02:1d:20:99:4b:cb:f7:76:b7:
cf:d4:2e:33:e1:00:80:1d:64:e5:f8:5e:24:87:82:a7:6f:5c:
f9:85:51:27:14:59:7b:f4:07:4f:83:02:95:58:13:92:a4:0f:
cf:14:7f:35:ca:cd:28:8e:bd:0d:39:35:75:0a:f3:e0:2c:c6:
56:a6:5d:9b:ea:9e:4b:eb:10:57:a3:c7:3d:78:7f:c1:db:73:
66:14:07:7c:d9:46:bf:93:c8:b7:f3:0c:19:3e:22:13:8e:d8:
17:90:e1:5b:37:a2:ce:ef:56:2b:ca:aa:c9:e2:9c:7e:ff:11:
cb:69:ee:42:b1:f2:fd:a2:8d:53:fe:58:78:fd:26:6a:4f:9f:
e1:d6:3c:54:43:48:7d:49:3e:c8:46:c1:5f:4e:c7:49:1b:d1:
82:ce:72:98:93:af:b7:35:04:97:b6:1e:9a:ad:a5:a1:8e:bf:
15:8a:5d:4a:f0:93:6b:05:90:2d:1e:41:83:04:5c:18:9f:8f:
c9:ee:67:b5:99:1a:86:f4:ff:34:58:b8:1b:66:22:2c:f9:da:
32:f5:3e:0e:c4:62:c7:2f:fb:da:e0:31:3a:3e:03:3e:ff:f4:
b3:5d:f7:fb
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYSkQ3teJYc2ZifquaE60pdXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlMWMxMTY1OGQyMDQxZWFmMjUwMmZlNTQwOGVkNDkzYmJk
NGYzMTgwHhcNMjIxMTIzMTEzMzE2WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNjdlYjllZjIyM2Y0MWMyYWQ5OTc1NDJkOTQ3M2M1OGZjOGJhZTRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxWkTjVrpLEp0DlE6bAOf/ejrqIZY
csEfnb2XTA6cwf6VsrKycLpl1KW3JCkJvwDkLR5B7swIWk6D9pIqvXDICa0EkdPn
0BJQ/LAR0nCn/iRGd5AnJq32aDU/Gs7OpHReVgLLDGbrqaPoa7KSPt7wIJyr9dqP
A141Huf4uZTmAHbTaj3XISS3J/DU0Ll79Xl1NM4GAdm16wEwcfrDo6SM26bKn4ZR
9QezTSZmBFqdjZV3rjMsGoczhul5SAjlQvVsIUv1Aa+V+v61iajwQBvamqQPRMOB
s78SL0afV2o33p/JYW8Ex8Kz5QZO3gjsSX67oTrV+Mvg6IT7kF+MRpbqVwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNZ+ue8iP0HCrZl1QtlHPFj8i65PMB8GA1UdIwQY
MBaAFI4cEWWNIEHq8lAv5UCO1JO71PMYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvamh3UlpZMGdRZXJ5VUNfbFFJN1VrN3ZVOHhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi83MGJmOGItZDhjNC00MGMzLTkwMjIt
NjMzNDhjZGJmMDI0LzEvMW42NTd5SV9RY0t0bVhWQzJVYzhXUHlMcms4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi83MGJmOGItZDhjNC00MGMzLTkwMjItNjMzNDhjZGJmMDI0
LzEvamh3UlpZMGdRZXJ5VUNfbFFJN1VrN3ZVOHhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLV2WMA0G
CSqGSIb3DQEBCwUAA4IBAQAitH9TGcvBRYhyhSLAuz8KQqvq7zJUyyLTVekCHSCZ
S8v3drfP1C4z4QCAHWTl+F4kh4Knb1z5hVEnFFl79AdPgwKVWBOSpA/PFH81ys0o
jr0NOTV1CvPgLMZWpl2b6p5L6xBXo8c9eH/B23NmFAd82Ua/k8i38wwZPiITjtgX
kOFbN6LO71YryqrJ4px+/xHLae5CsfL9oo1T/lh4/SZqT5/h1jxUQ0h9ST7IRsFf
TsdJG9GCznKYk6+3NQSXth6araWhjr8Vil1K8JNrBZAtHkGDBFwYn4/J7me1mRqG
9P80WLgbZiIs+doy9T4OxGLHL/va4DE6PgM+//SzXff7
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:10:36 2025 by rpki-client