Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/22e96f-2451-4e86-a037-8db62ea50995/1/iZHSnHuWYI1XCEpCFOweQ3M3gsY.roa
File: iZHSnHuWYI1XCEpCFOweQ3M3gsY.roa (raw, json)
Hash identifier: IpBy6OmEOKPYfSE2oefsyr6eyZHHQogJuDRqXofD1lI=
Subject key identifier: 89:91:D2:9C:7B:96:60:8D:57:08:4A:42:14:EC:1E:43:73:37:82:C6
Certificate issuer: /CN=72978d1d4e7782816ac42da4788e33cbb2487859
Certificate serial: 01856F9DC24246CF2E6B7168EC8B60C8C2DD
Authority key identifier: 72:97:8D:1D:4E:77:82:81:6A:C4:2D:A4:78:8E:33:CB:B2:48:78:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cpeNHU53goFqxC2keI4zy7JIeFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/22e96f-2451-4e86-a037-8db62ea50995/1/iZHSnHuWYI1XCEpCFOweQ3M3gsY.roa
Signing time: Sun 01 Jan 2023 23:14:47 +0000
ROA not before: Sun 01 Jan 2023 23:14:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 396426
IP address blocks: 45.141.12.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:9d:c2:42:46:cf:2e:6b:71:68:ec:8b:60:c8:c2:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72978d1d4e7782816ac42da4788e33cbb2487859
Validity
Not Before: Jan 1 23:14:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8991d29c7b96608d57084a4214ec1e43733782c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:29:ef:1d:f1:9f:06:36:4e:21:14:a8:40:45:
48:5a:50:a7:9a:16:aa:31:e2:f4:be:cd:c2:6e:f2:
28:c9:ad:3b:1d:03:48:62:66:8c:9b:b3:4b:7d:52:
05:81:69:3a:0d:89:84:8f:2a:0e:fb:31:d2:74:1f:
5f:54:63:e4:69:85:0b:95:85:e7:a3:8b:16:47:26:
64:ca:3b:38:7c:cc:f0:0e:03:5c:7d:0e:e7:71:47:
95:ea:3f:52:b5:b4:e5:82:da:58:a4:22:36:a2:a9:
ca:c7:c6:fd:40:ad:f8:03:06:bb:39:11:5d:46:35:
24:c7:35:5f:be:70:f7:05:27:77:b3:db:37:6e:19:
c1:55:64:4e:e2:25:57:f9:04:60:69:65:3e:71:7a:
76:1b:fb:e1:86:bf:35:cb:f9:bc:c8:99:ff:97:f3:
9e:c4:d5:53:19:f6:c4:aa:b8:02:4e:3b:07:1d:e0:
0a:91:15:9e:7e:45:c6:97:3b:30:8d:27:29:1d:46:
35:75:39:0e:44:24:a4:26:68:c0:b5:88:cc:26:e3:
b2:50:06:ae:66:fd:b2:50:10:0e:6c:8f:65:89:ce:
a4:f8:e0:31:9c:f1:47:b0:ee:b6:d8:b9:8f:72:0a:
c9:5d:8c:47:2b:7d:ff:92:94:25:3f:ce:84:93:32:
4f:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:91:D2:9C:7B:96:60:8D:57:08:4A:42:14:EC:1E:43:73:37:82:C6
X509v3 Authority Key Identifier:
keyid:72:97:8D:1D:4E:77:82:81:6A:C4:2D:A4:78:8E:33:CB:B2:48:78:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cpeNHU53goFqxC2keI4zy7JIeFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/22e96f-2451-4e86-a037-8db62ea50995/1/iZHSnHuWYI1XCEpCFOweQ3M3gsY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/22e96f-2451-4e86-a037-8db62ea50995/1/cpeNHU53goFqxC2keI4zy7JIeFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.12.0/24
Signature Algorithm: sha256WithRSAEncryption
54:92:a7:9d:d0:bd:2d:ca:37:26:a3:39:0c:a8:fa:7c:15:db:
a2:25:c6:f9:79:b2:0b:be:4d:23:aa:dd:e4:aa:ec:da:2e:b8:
c8:6b:b4:c8:4b:7c:a5:0c:60:5c:ed:a0:8c:dd:3a:e1:10:8d:
1e:7d:c2:44:7e:b1:50:ea:e8:d3:72:2c:8e:c4:6d:c8:fc:a5:
2a:72:f5:6a:e4:19:6b:dc:fd:f1:25:10:b4:01:4a:67:42:9a:
9a:eb:63:35:7f:93:3d:0f:75:59:8f:c8:bb:72:df:b7:44:c6:
f7:20:c3:57:77:50:c1:60:b8:0f:fc:42:4e:40:39:f8:f6:3f:
ae:a9:37:af:b6:82:5d:e2:8d:2d:dd:77:37:b1:aa:1f:03:63:
82:92:d8:fc:fa:62:32:e3:c0:ba:3c:22:2a:ca:09:f8:27:1f:
ee:a0:3c:52:a9:c3:2d:bc:d3:2e:bd:39:91:83:a9:8f:56:6d:
1b:c1:9f:10:45:9b:49:ae:02:17:d8:c8:98:36:d0:f1:c0:2d:
7c:39:be:5b:43:fc:e9:fa:d8:6b:96:1f:77:69:c5:a4:20:a9:
66:05:66:68:34:45:0b:cb:57:0f:24:93:c7:bf:5b:77:b1:75:
82:af:1c:3d:a6:9a:1e:5e:75:a0:24:c1:fb:4b:47:ac:66:65:
c1:44:40:1c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVvncJCRs8ua3Fo7ItgyMLdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyOTc4ZDFkNGU3NzgyODE2YWM0MmRhNDc4OGUzM2NiYjI0
ODc4NTkwHhcNMjMwMTAxMjMxNDQ3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4OTkxZDI5YzdiOTY2MDhkNTcwODRhNDIxNGVjMWU0MzczMzc4MmM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArynvHfGfBjZOIRSoQEVIWlCnmhaq
MeL0vs3CbvIoya07HQNIYmaMm7NLfVIFgWk6DYmEjyoO+zHSdB9fVGPkaYULlYXn
o4sWRyZkyjs4fMzwDgNcfQ7ncUeV6j9StbTlgtpYpCI2oqnKx8b9QK34Awa7ORFd
RjUkxzVfvnD3BSd3s9s3bhnBVWRO4iVX+QRgaWU+cXp2G/vhhr81y/m8yJn/l/Oe
xNVTGfbEqrgCTjsHHeAKkRWefkXGlzswjScpHUY1dTkORCSkJmjAtYjMJuOyUAau
Zv2yUBAObI9lic6k+OAxnPFHsO622LmPcgrJXYxHK33/kpQlP86EkzJPIwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFImR0px7lmCNVwhKQhTsHkNzN4LGMB8GA1UdIwQY
MBaAFHKXjR1Od4KBasQtpHiOM8uySHhZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3BlTkhVNTNnb0ZxeEMya2VJNHp5N0pJZUZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC8yMmU5NmYtMjQ1MS00ZTg2LWEwMzct
OGRiNjJlYTUwOTk1LzEvaVpIU25IdVdZSTFYQ0VwQ0ZPd2VRM00zZ3NZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC8yMmU5NmYtMjQ1MS00ZTg2LWEwMzctOGRiNjJlYTUwOTk1
LzEvY3BlTkhVNTNnb0ZxeEMya2VJNHp5N0pJZUZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALY0MMA0G
CSqGSIb3DQEBCwUAA4IBAQBUkqed0L0tyjcmozkMqPp8FduiJcb5ebILvk0jqt3k
quzaLrjIa7TIS3ylDGBc7aCM3TrhEI0efcJEfrFQ6ujTciyOxG3I/KUqcvVq5Blr
3P3xJRC0AUpnQpqa62M1f5M9D3VZj8i7ct+3RMb3IMNXd1DBYLgP/EJOQDn49j+u
qTevtoJd4o0t3Xc3saofA2OCktj8+mIy48C6PCIqygn4Jx/uoDxSqcMtvNMuvTmR
g6mPVm0bwZ8QRZtJrgIX2MiYNtDxwC18Ob5bQ/zp+thrlh93acWkIKlmBWZoNEUL
y1cPJJPHv1t3sXWCrxw9ppoeXnWgJMH7S0esZmXBREAc
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:53:04 2025 by rpki-client