Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/O5Sp6usIAK9ncI02o6mDoI7ZwVE.roa
File: O5Sp6usIAK9ncI02o6mDoI7ZwVE.roa (raw, json)
Hash identifier: hcdu5g9QpoO47l7r7m8Bp1dvxoOUy4XsFJJ7s3QbMEs=
Subject key identifier: 3B:94:A9:EA:EB:08:00:AF:67:70:8D:36:A3:A9:83:A0:8E:D9:C1:51
Certificate issuer: /CN=8e1c11658d2041eaf2502fe5408ed493bbd4f318
Certificate serial: 01856F42D02CE53908A887B60E4B9606DA68
Authority key identifier: 8E:1C:11:65:8D:20:41:EA:F2:50:2F:E5:40:8E:D4:93:BB:D4:F3:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/O5Sp6usIAK9ncI02o6mDoI7ZwVE.roa
Signing time: Sun 01 Jan 2023 21:35:27 +0000
ROA not before: Sun 01 Jan 2023 21:35:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 393894
IP address blocks: 45.15.196.0/22 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:42:d0:2c:e5:39:08:a8:87:b6:0e:4b:96:06:da:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e1c11658d2041eaf2502fe5408ed493bbd4f318
Validity
Not Before: Jan 1 21:35:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3b94a9eaeb0800af67708d36a3a983a08ed9c151
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:ec:5f:45:2f:8c:9a:90:27:68:3c:4c:b3:05:
79:cd:c9:12:a0:3f:ce:94:f1:0b:84:25:4a:3d:0e:
52:71:68:9e:c8:a9:e4:c1:08:00:a2:8f:ef:dd:50:
79:b6:6b:40:7a:04:ea:13:fa:b2:74:f9:32:53:7e:
de:c6:e8:1e:d7:a2:af:46:21:c2:35:62:e2:96:17:
37:b6:cd:ee:41:25:a6:5c:98:b0:f0:0c:0a:6e:66:
e3:df:a3:fd:7d:86:15:f3:98:9e:2e:ac:95:65:16:
40:4f:a8:bc:5d:74:79:f7:b3:ce:b6:3d:77:38:f4:
88:bc:c9:a2:14:cb:e3:66:d2:59:93:05:71:03:b8:
6d:99:9c:4f:c1:d2:59:b5:ab:b0:36:9d:8f:e6:00:
4b:f7:8c:8b:e4:c0:09:30:ae:ad:19:9f:01:56:59:
ef:94:d2:4f:a7:a4:7d:57:b4:a4:0c:ba:d1:d6:54:
43:8b:5d:c0:ed:13:eb:ff:ac:67:aa:9b:9c:e4:86:
e6:1e:f7:14:d7:a5:fe:a8:1b:df:fa:a6:52:3e:66:
7a:85:5b:b1:cf:aa:8f:eb:f3:3b:37:b9:4a:30:7d:
c1:62:a5:d6:ab:fb:4d:fe:06:4c:19:d9:5e:34:61:
f6:1b:bc:b1:12:ee:08:75:5f:fa:bc:86:ad:db:15:
3d:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:94:A9:EA:EB:08:00:AF:67:70:8D:36:A3:A9:83:A0:8E:D9:C1:51
X509v3 Authority Key Identifier:
keyid:8E:1C:11:65:8D:20:41:EA:F2:50:2F:E5:40:8E:D4:93:BB:D4:F3:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/O5Sp6usIAK9ncI02o6mDoI7ZwVE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.15.196.0/22
Signature Algorithm: sha256WithRSAEncryption
3e:68:eb:d6:55:81:44:51:00:06:78:3c:e8:bc:45:0f:97:45:
39:3d:38:f3:d2:f7:c9:bb:ea:53:20:98:41:b1:cf:6a:48:4d:
a5:85:f2:a4:6e:56:a4:b9:53:b8:fb:65:d9:cf:f9:86:71:56:
fa:bf:69:40:ef:d7:48:02:b3:6d:7b:e2:c5:4f:f1:bf:e4:0e:
90:06:62:4f:46:26:aa:fa:69:7b:7f:a4:65:cb:0e:2f:66:f0:
8f:9f:75:26:6f:b0:78:04:e3:6b:42:8f:ff:d8:c2:d7:3d:26:
2a:b7:91:dc:df:15:a3:bd:f5:5e:c8:11:93:e1:9d:d4:20:11:
99:93:c4:4c:b9:02:a4:60:1c:d6:61:2e:72:ee:06:c7:f1:ae:
3a:5e:24:c2:5b:8e:7b:76:39:b7:01:93:a1:ff:63:d5:19:5b:
57:c4:c3:b4:c1:af:c0:fb:66:1b:00:b4:61:2d:5b:73:e9:b3:
c6:e6:fe:79:7b:62:db:bc:03:6b:f3:66:55:4b:6c:0a:64:25:
9c:38:f8:6e:a6:9f:a7:52:bb:b0:a6:bd:60:ee:cc:69:fd:44:
c0:8d:f2:2e:7a:36:14:1e:39:9a:09:45:46:64:b4:86:a5:fb:
69:e5:4d:c6:d5:e1:fc:ba:c7:c8:31:d7:f8:d8:05:eb:f8:3e:
8d:36:91:58
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVvQtAs5TkIqIe2DkuWBtpoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlMWMxMTY1OGQyMDQxZWFmMjUwMmZlNTQwOGVkNDkzYmJk
NGYzMTgwHhcNMjMwMTAxMjEzNTI3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYjk0YTllYWViMDgwMGFmNjc3MDhkMzZhM2E5ODNhMDhlZDljMTUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi+xfRS+MmpAnaDxMswV5zckSoD/O
lPELhCVKPQ5ScWieyKnkwQgAoo/v3VB5tmtAegTqE/qydPkyU37exuge16KvRiHC
NWLilhc3ts3uQSWmXJiw8AwKbmbj36P9fYYV85ieLqyVZRZAT6i8XXR597POtj13
OPSIvMmiFMvjZtJZkwVxA7htmZxPwdJZtauwNp2P5gBL94yL5MAJMK6tGZ8BVlnv
lNJPp6R9V7SkDLrR1lRDi13A7RPr/6xnqpuc5IbmHvcU16X+qBvf+qZSPmZ6hVux
z6qP6/M7N7lKMH3BYqXWq/tN/gZMGdleNGH2G7yxEu4IdV/6vIat2xU95wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDuUqerrCACvZ3CNNqOpg6CO2cFRMB8GA1UdIwQY
MBaAFI4cEWWNIEHq8lAv5UCO1JO71PMYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvamh3UlpZMGdRZXJ5VUNfbFFJN1VrN3ZVOHhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi83MGJmOGItZDhjNC00MGMzLTkwMjIt
NjMzNDhjZGJmMDI0LzEvTzVTcDZ1c0lBSzluY0kwMm82bURvSTdad1ZFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi83MGJmOGItZDhjNC00MGMzLTkwMjItNjMzNDhjZGJmMDI0
LzEvamh3UlpZMGdRZXJ5VUNfbFFJN1VrN3ZVOHhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLQ/EMA0G
CSqGSIb3DQEBCwUAA4IBAQA+aOvWVYFEUQAGeDzovEUPl0U5PTjz0vfJu+pTIJhB
sc9qSE2lhfKkblakuVO4+2XZz/mGcVb6v2lA79dIArNte+LFT/G/5A6QBmJPRiaq
+ml7f6Rlyw4vZvCPn3Umb7B4BONrQo//2MLXPSYqt5Hc3xWjvfVeyBGT4Z3UIBGZ
k8RMuQKkYBzWYS5y7gbH8a46XiTCW457djm3AZOh/2PVGVtXxMO0wa/A+2YbALRh
LVtz6bPG5v55e2LbvANr82ZVS2wKZCWcOPhupp+nUruwpr1g7sxp/UTAjfIuejYU
HjmaCUVGZLSGpftp5U3G1eH8usfIMdf42AXr+D6NNpFY
-----END CERTIFICATE-----
Generated at Wed Feb 19 21:59:39 2025 by rpki-client