Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/ffc311-3110-47f5-8c4f-0c9f76a34005/1/SPD_l_U_WeDOp-svW2uI2BWzm5g.roa
File: SPD_l_U_WeDOp-svW2uI2BWzm5g.roa (raw, json)
Hash identifier: 61K2a/u8fXmG0qqaspLiYDmhPVxl7WHS3XI9JjxF2RI=
Subject key identifier: 48:F0:FF:97:F5:3F:59:E0:CE:A7:EB:2F:5B:6B:88:D8:15:B3:9B:98
Certificate issuer: /CN=7d47d63346951d9316bbc2578645b5eae24531b9
Certificate serial: 018CC94E38C01B7535889E88F84449D8F1DB
Authority key identifier: 7D:47:D6:33:46:95:1D:93:16:BB:C2:57:86:45:B5:EA:E2:45:31:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fUfWM0aVHZMWu8JXhkW16uJFMbk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/ffc311-3110-47f5-8c4f-0c9f76a34005/1/SPD_l_U_WeDOp-svW2uI2BWzm5g.roa
Signing time: Tue 02 Jan 2024 08:33:15 +0000
ROA not before: Tue 02 Jan 2024 08:33:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31122
IP address blocks: 45.11.168.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:38:c0:1b:75:35:88:9e:88:f8:44:49:d8:f1:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d47d63346951d9316bbc2578645b5eae24531b9
Validity
Not Before: Jan 2 08:33:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=48f0ff97f53f59e0cea7eb2f5b6b88d815b39b98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:bd:76:8c:98:2c:b5:95:25:ac:56:a1:5b:64:
df:86:c5:58:68:b6:36:11:3e:ba:21:5e:a1:0a:f1:
f2:bd:93:4a:41:88:97:fe:75:59:69:d1:80:37:5a:
76:67:97:2e:88:de:a5:a5:ab:44:a7:f7:db:4e:69:
fd:98:60:ba:88:41:07:42:e2:40:41:04:48:7a:56:
d3:4d:15:67:15:d0:18:12:86:c4:79:a5:e8:39:e1:
77:3b:2e:05:47:92:b6:22:08:6b:99:48:e2:af:51:
c5:e5:da:04:b6:fa:9f:97:06:c3:80:d7:82:75:0a:
8e:14:29:13:b4:f9:8a:30:32:6e:43:6d:5f:bc:c0:
93:28:38:c4:13:c9:e1:29:0a:f7:54:5c:fc:8a:53:
aa:4d:67:cd:1e:7a:9e:7c:a2:55:62:dd:f6:e6:5a:
42:9f:c8:50:63:82:95:74:20:b1:10:01:e1:a4:66:
13:b1:cc:e8:57:7a:42:99:ec:08:a8:57:08:84:9c:
38:92:01:8e:a8:ab:6b:ca:ed:d5:f2:09:9e:d0:bc:
64:f3:b4:22:2c:71:ef:da:48:9e:67:be:66:1c:38:
32:44:cd:1e:1d:07:ba:f5:04:cf:5d:91:a4:41:70:
28:34:d9:cb:21:25:27:7f:b8:0b:ce:07:05:a9:5d:
81:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:F0:FF:97:F5:3F:59:E0:CE:A7:EB:2F:5B:6B:88:D8:15:B3:9B:98
X509v3 Authority Key Identifier:
keyid:7D:47:D6:33:46:95:1D:93:16:BB:C2:57:86:45:B5:EA:E2:45:31:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fUfWM0aVHZMWu8JXhkW16uJFMbk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/ffc311-3110-47f5-8c4f-0c9f76a34005/1/SPD_l_U_WeDOp-svW2uI2BWzm5g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/ffc311-3110-47f5-8c4f-0c9f76a34005/1/fUfWM0aVHZMWu8JXhkW16uJFMbk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.168.0/22
Signature Algorithm: sha256WithRSAEncryption
21:46:af:0e:59:8b:f6:c0:32:a7:39:95:03:37:4d:c3:d4:f5:
bc:a2:22:60:2c:e3:5c:41:21:46:cf:b2:80:1e:79:84:33:0d:
bb:13:42:1f:0d:e3:7c:c4:95:7e:69:ef:71:bb:0c:59:7c:1a:
02:c6:27:e8:95:36:f6:e5:bd:3a:58:22:df:85:a1:3d:e1:ca:
ba:00:b7:9a:78:43:36:85:4b:11:01:b7:34:04:88:43:ca:a6:
ae:e5:9b:f3:38:52:18:1f:8a:09:fd:45:3c:73:01:86:fa:61:
67:1a:dc:5b:91:da:6c:e1:e6:ca:89:41:63:16:cf:2d:04:a6:
ee:20:2c:28:74:fd:ad:13:6d:c2:88:b5:6a:45:dc:1d:ba:18:
9d:03:28:fa:91:37:b5:13:36:13:28:b9:73:27:a5:2f:39:ff:
c1:f5:46:31:cf:05:b8:53:97:80:f1:e0:f5:ae:49:ba:a5:b6:
0b:fc:0a:91:d6:ff:b7:19:c1:10:39:ea:42:d1:2b:5f:00:69:
d6:6f:be:bf:54:62:a7:e9:b8:e2:0a:bc:fc:12:7a:d5:ec:c9:
79:44:7f:af:bd:4b:6f:84:b9:47:14:c1:01:56:b8:02:2e:33:
d0:2f:96:24:29:4e:8f:2c:e2:39:bf:06:91:9a:7d:e1:5a:89:
e2:1d:9b:ee
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzJTjjAG3U1iJ6I+ERJ2PHbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNDdkNjMzNDY5NTFkOTMxNmJiYzI1Nzg2NDViNWVhZTI0
NTMxYjkwHhcNMjQwMTAyMDgzMzE1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0OGYwZmY5N2Y1M2Y1OWUwY2VhN2ViMmY1YjZiODhkODE1YjM5Yjk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnr12jJgstZUlrFahW2TfhsVYaLY2
ET66IV6hCvHyvZNKQYiX/nVZadGAN1p2Z5cuiN6lpatEp/fbTmn9mGC6iEEHQuJA
QQRIelbTTRVnFdAYEobEeaXoOeF3Oy4FR5K2IghrmUjir1HF5doEtvqflwbDgNeC
dQqOFCkTtPmKMDJuQ21fvMCTKDjEE8nhKQr3VFz8ilOqTWfNHnqefKJVYt325lpC
n8hQY4KVdCCxEAHhpGYTsczoV3pCmewIqFcIhJw4kgGOqKtryu3V8gme0Lxk87Qi
LHHv2kieZ75mHDgyRM0eHQe69QTPXZGkQXAoNNnLISUnf7gLzgcFqV2BJwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEjw/5f1P1ngzqfrL1triNgVs5uYMB8GA1UdIwQY
MBaAFH1H1jNGlR2TFrvCV4ZFteriRTG5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlVmV00wYVZIWk1XdThKWGhrVzE2dUpGTWJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi9mZmMzMTEtMzExMC00N2Y1LThjNGYt
MGM5Zjc2YTM0MDA1LzEvU1BEX2xfVV9XZURPcC1zdlcydUkyQld6bTVnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi9mZmMzMTEtMzExMC00N2Y1LThjNGYtMGM5Zjc2YTM0MDA1
LzEvZlVmV00wYVZIWk1XdThKWGhrVzE2dUpGTWJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLQuoMA0G
CSqGSIb3DQEBCwUAA4IBAQAhRq8OWYv2wDKnOZUDN03D1PW8oiJgLONcQSFGz7KA
HnmEMw27E0IfDeN8xJV+ae9xuwxZfBoCxifolTb25b06WCLfhaE94cq6ALeaeEM2
hUsRAbc0BIhDyqau5ZvzOFIYH4oJ/UU8cwGG+mFnGtxbkdps4ebKiUFjFs8tBKbu
ICwodP2tE23CiLVqRdwduhidAyj6kTe1EzYTKLlzJ6UvOf/B9UYxzwW4U5eA8eD1
rkm6pbYL/AqR1v+3GcEQOepC0StfAGnWb76/VGKn6bjiCrz8EnrV7Ml5RH+vvUtv
hLlHFMEBVrgCLjPQL5YkKU6PLOI5vwaRmn3hWoniHZvu
-----END CERTIFICATE-----
Generated at Sat Apr 19 16:00:47 2025 by rpki-client