Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/_OpN9g8qttW3ie-cD6cEz1ZM3Yo.roa
File: _OpN9g8qttW3ie-cD6cEz1ZM3Yo.roa (raw, json)
Hash identifier: X/0hM//gGgQN/q0HU8oREeLMbhWzDJu5vi86rV16x4s=
Subject key identifier: FC:EA:4D:F6:0F:2A:B6:D5:B7:89:EF:9C:0F:A7:04:CF:56:4C:DD:8A
Certificate issuer: /CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Certificate serial: 019420D5D918069F88792F3451299C68AD19
Authority key identifier: 62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/_OpN9g8qttW3ie-cD6cEz1ZM3Yo.roa
Signing time: Wed 01 Jan 2025 07:47:53 +0000
ROA not before: Wed 01 Jan 2025 07:47:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197309
IP address blocks: 45.136.204.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:d9:18:06:9f:88:79:2f:34:51:29:9c:68:ad:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Validity
Not Before: Jan 1 07:47:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fcea4df60f2ab6d5b789ef9c0fa704cf564cdd8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:0b:c0:30:97:c9:f6:46:ad:86:97:7c:cb:e9:
01:ab:9f:1a:d6:08:87:c7:61:3f:ac:27:0d:2c:61:
09:14:cd:19:5c:4e:08:23:8a:80:da:59:35:6b:27:
63:4f:db:3e:86:0a:72:74:d5:81:3d:f3:8d:f6:9a:
bd:c5:3f:55:14:7d:27:85:14:05:b9:79:46:36:ff:
c9:f9:a4:87:24:92:71:64:04:0d:79:3d:16:cf:b4:
bf:cc:85:e3:80:82:85:88:b1:a6:60:cb:fe:cd:45:
eb:58:9f:c8:72:a8:c0:89:29:31:37:5e:3a:ca:02:
22:8f:95:07:ab:84:30:84:b2:4b:5a:73:bf:f0:76:
3c:08:cd:ef:ed:87:57:5c:e0:d1:84:c3:19:97:c2:
9c:da:58:ff:76:86:67:80:6f:74:a4:70:6a:b2:ed:
b1:ff:b1:4e:50:c2:e0:fd:b1:66:1a:09:0c:38:12:
c6:ec:ec:ab:3c:37:8a:8b:f1:2c:9b:d5:93:a0:cb:
f1:d8:45:57:b1:80:e6:71:54:4b:57:70:27:66:fe:
43:94:72:e8:d2:2e:b4:e1:16:82:db:a4:c1:f8:d1:
b3:c2:5f:1d:82:18:0e:4a:e4:f2:53:97:44:ce:c4:
b8:4a:2e:db:92:cb:c9:9a:58:8c:34:02:3c:2a:7c:
d5:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:EA:4D:F6:0F:2A:B6:D5:B7:89:EF:9C:0F:A7:04:CF:56:4C:DD:8A
X509v3 Authority Key Identifier:
keyid:62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/_OpN9g8qttW3ie-cD6cEz1ZM3Yo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.136.204.0/23
Signature Algorithm: sha256WithRSAEncryption
75:a3:c4:64:9c:07:cf:1e:9e:41:af:cc:37:61:cd:84:eb:bd:
0c:66:ac:33:5f:d6:77:10:3b:34:7e:75:fd:ad:3e:40:6c:1d:
c9:d7:6a:d0:8e:48:2f:37:5e:99:bf:3e:c9:77:c2:fb:17:44:
9d:69:9f:df:12:97:00:75:54:9f:1f:34:d3:71:74:d3:f1:2a:
82:db:4c:af:42:b7:c7:dc:da:7a:5c:94:20:fe:77:8f:9f:89:
36:79:48:37:2f:83:d6:fc:73:e8:93:30:6a:25:26:b1:6d:9c:
fd:29:b9:78:3d:94:67:57:3a:aa:6d:35:74:f8:5a:77:69:a6:
2e:2c:bb:b5:40:06:12:4d:89:d8:36:3a:ec:d8:b3:2d:5b:92:
3a:4c:5f:fb:37:21:ab:01:79:f3:da:cb:e0:f3:82:69:28:bf:
db:27:ca:77:8d:59:7e:89:59:34:9b:2d:6f:55:f3:36:fa:36:
08:78:7c:9d:f8:0f:73:e2:74:79:57:1a:f5:35:1e:f3:16:61:
ed:35:1d:58:f7:60:44:a5:b3:f2:1c:0f:7d:94:ca:6a:64:64:
ca:48:9f:a2:06:c7:c0:82:a5:87:ea:93:88:37:4c:cd:cc:a4:
a1:0c:14:b8:07:4f:cc:ea:6e:ea:11:80:21:32:80:9b:1e:9b:
bf:91:a2:cc
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQg1dkYBp+IeS80USmcaK0ZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyMjJlMWMyYTUzMTUzMzRiNjZkODBmNzhkNWI1MGI0MmU0
ODBiOWMwHhcNMjUwMTAxMDc0NzUzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmY2VhNGRmNjBmMmFiNmQ1Yjc4OWVmOWMwZmE3MDRjZjU2NGNkZDhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0AvAMJfJ9kathpd8y+kBq58a1giH
x2E/rCcNLGEJFM0ZXE4II4qA2lk1aydjT9s+hgpydNWBPfON9pq9xT9VFH0nhRQF
uXlGNv/J+aSHJJJxZAQNeT0Wz7S/zIXjgIKFiLGmYMv+zUXrWJ/IcqjAiSkxN146
ygIij5UHq4QwhLJLWnO/8HY8CM3v7YdXXODRhMMZl8Kc2lj/doZngG90pHBqsu2x
/7FOUMLg/bFmGgkMOBLG7OyrPDeKi/Esm9WToMvx2EVXsYDmcVRLV3AnZv5DlHLo
0i604RaC26TB+NGzwl8dghgOSuTyU5dEzsS4Si7bksvJmliMNAI8KnzV1wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPzqTfYPKrbVt4nvnA+nBM9WTN2KMB8GA1UdIwQY
MBaAFGIi4cKlMVM0tm2A941bULQuSAucMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWlMaHdxVXhVelMyYllEM2pWdFF0QzVJQzV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS85OTliOTctYzczMS00MTkyLTg1ZjEt
NTczNzAxYzg0ODMzLzEvX09wTjlnOHF0dFczaWUtY0Q2Y0V6MVpNM1lvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS85OTliOTctYzczMS00MTkyLTg1ZjEtNTczNzAxYzg0ODMz
LzEvWWlMaHdxVXhVelMyYllEM2pWdFF0QzVJQzV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLYjMMA0G
CSqGSIb3DQEBCwUAA4IBAQB1o8RknAfPHp5Br8w3Yc2E670MZqwzX9Z3EDs0fnX9
rT5AbB3J12rQjkgvN16Zvz7Jd8L7F0SdaZ/fEpcAdVSfHzTTcXTT8SqC20yvQrfH
3Np6XJQg/nePn4k2eUg3L4PW/HPokzBqJSaxbZz9Kbl4PZRnVzqqbTV0+Fp3aaYu
LLu1QAYSTYnYNjrs2LMtW5I6TF/7NyGrAXnz2svg84JpKL/bJ8p3jVl+iVk0my1v
VfM2+jYIeHyd+A9z4nR5Vxr1NR7zFmHtNR1Y92BEpbPyHA99lMpqZGTKSJ+iBsfA
gqWH6pOIN0zNzKShDBS4B0/M6m7qEYAhMoCbHpu/kaLM
-----END CERTIFICATE-----
Generated at Mon Apr 7 18:50:41 2025 by rpki-client