Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/7d8cfd-8830-4fe3-bf75-bc64d3e62382/1/cghCPjU4Nn1XuRGuDaF_hfq3hSs.roa
File: cghCPjU4Nn1XuRGuDaF_hfq3hSs.roa (raw, json)
Hash identifier: M+JJNBGWF+moDhVJbDtXDdK8KfAjwVQ+YdlALSvI7pk=
Subject key identifier: 72:08:42:3E:35:38:36:7D:57:B9:11:AE:0D:A1:7F:85:FA:B7:85:2B
Certificate issuer: /CN=d32f876231dcb5dfd7af4523120565d98006474a
Certificate serial: 018457DE663E339D4B4324CA952247B242D5
Authority key identifier: D3:2F:87:62:31:DC:B5:DF:D7:AF:45:23:12:05:65:D9:80:06:47:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0y-HYjHctd_Xr0UjEgVl2YAGR0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/7d8cfd-8830-4fe3-bf75-bc64d3e62382/1/cghCPjU4Nn1XuRGuDaF_hfq3hSs.roa
Signing time: Tue 08 Nov 2022 15:31:43 +0000
ROA not before: Tue 08 Nov 2022 15:31:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204843
IP address blocks: 45.143.5.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:57:de:66:3e:33:9d:4b:43:24:ca:95:22:47:b2:42:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d32f876231dcb5dfd7af4523120565d98006474a
Validity
Not Before: Nov 8 15:31:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7208423e3538367d57b911ae0da17f85fab7852b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:1d:f1:74:9c:04:4a:f3:65:38:74:1b:7c:15:
26:ab:f1:44:7d:f0:47:6a:2c:28:18:2e:1a:72:da:
51:8a:8b:2f:5b:76:2e:39:36:ed:13:42:f0:8b:08:
a9:f1:73:b0:87:90:a1:fc:6e:68:8a:b7:83:59:be:
41:ed:ea:55:97:2c:35:c1:02:f2:3d:ec:14:4a:c1:
87:04:18:4d:73:4f:c2:fe:7b:c4:0e:8c:d9:2d:d8:
0d:38:b0:9b:95:90:d3:ef:b3:34:ca:0e:19:02:77:
f0:74:0c:31:a3:42:b5:e0:08:0d:f5:a8:36:a0:9e:
8f:84:a0:9a:e5:89:f2:f0:ad:0f:f1:b3:ab:48:3e:
2c:2d:02:ca:ed:61:23:3b:a1:03:a2:01:ca:2e:06:
d7:14:00:51:dd:40:bd:c1:76:18:98:fb:8d:b4:fb:
b4:c5:bf:4b:57:52:d1:7c:90:85:7e:37:dd:53:75:
8c:c0:72:e2:41:55:46:8d:59:73:35:4d:a6:d6:e1:
70:b1:cf:bb:00:a4:7d:dc:29:ee:1c:23:9f:81:9c:
d0:d8:18:d0:84:36:7b:c3:e9:41:9c:f7:b6:c1:f7:
88:3e:55:c9:db:40:e3:41:62:52:11:92:c8:84:ed:
ee:c0:02:ba:a3:d6:e2:1c:dd:46:fc:32:ee:6e:ff:
3e:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:08:42:3E:35:38:36:7D:57:B9:11:AE:0D:A1:7F:85:FA:B7:85:2B
X509v3 Authority Key Identifier:
keyid:D3:2F:87:62:31:DC:B5:DF:D7:AF:45:23:12:05:65:D9:80:06:47:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0y-HYjHctd_Xr0UjEgVl2YAGR0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/7d8cfd-8830-4fe3-bf75-bc64d3e62382/1/cghCPjU4Nn1XuRGuDaF_hfq3hSs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/7d8cfd-8830-4fe3-bf75-bc64d3e62382/1/0y-HYjHctd_Xr0UjEgVl2YAGR0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.143.5.0/24
Signature Algorithm: sha256WithRSAEncryption
78:9d:a8:a6:ee:54:94:4d:df:a6:7f:bc:06:40:ba:f6:ae:f7:
66:34:0f:78:9e:f3:41:15:e0:5d:09:72:71:f6:8a:b8:58:81:
cd:70:18:25:f3:1e:33:7d:8d:17:c1:c6:71:2d:f6:95:b9:e4:
dc:35:58:0f:f2:e0:9b:a7:d4:20:e0:ae:60:ce:81:73:74:19:
64:65:ed:42:45:28:cd:62:ee:bb:b1:58:1e:60:4f:6b:cf:c3:
78:ac:4a:97:6a:0b:bd:5b:9e:ab:ee:a2:96:0d:23:f2:31:de:
c2:e0:56:1d:34:d4:ce:36:17:93:52:7e:5c:c7:dd:e2:a9:4e:
6b:db:7a:a7:5b:32:46:ea:ca:7a:43:12:a9:03:f8:2c:f1:cc:
34:c7:87:3d:de:07:fe:21:86:7a:d4:5e:74:32:b8:ac:80:e2:
20:c4:44:8e:7b:05:58:f2:bb:0a:44:c3:8a:26:e9:06:86:c1:
57:f4:d9:c3:74:89:05:80:ec:11:6b:35:77:74:a6:29:b8:be:
95:3a:d2:51:99:bb:a8:35:0e:54:10:1b:33:c7:78:52:75:20:
bc:c4:a1:e5:4e:24:bb:aa:8e:c4:84:85:ba:dc:d2:83:7f:f9:
9f:e7:6d:d3:95:11:91:86:cc:18:ba:80:40:9f:19:b9:ed:90:
6d:d4:a8:04
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYRX3mY+M51LQyTKlSJHskLVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzMmY4NzYyMzFkY2I1ZGZkN2FmNDUyMzEyMDU2NWQ5ODAw
NjQ3NGEwHhcNMjIxMTA4MTUzMTQzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MjA4NDIzZTM1MzgzNjdkNTdiOTExYWUwZGExN2Y4NWZhYjc4NTJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoR3xdJwESvNlOHQbfBUmq/FEffBH
aiwoGC4actpRiosvW3YuOTbtE0Lwiwip8XOwh5Ch/G5oireDWb5B7epVlyw1wQLy
PewUSsGHBBhNc0/C/nvEDozZLdgNOLCblZDT77M0yg4ZAnfwdAwxo0K14AgN9ag2
oJ6PhKCa5Yny8K0P8bOrSD4sLQLK7WEjO6EDogHKLgbXFABR3UC9wXYYmPuNtPu0
xb9LV1LRfJCFfjfdU3WMwHLiQVVGjVlzNU2m1uFwsc+7AKR93CnuHCOfgZzQ2BjQ
hDZ7w+lBnPe2wfeIPlXJ20DjQWJSEZLIhO3uwAK6o9biHN1G/DLubv8+OwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHIIQj41ODZ9V7kRrg2hf4X6t4UrMB8GA1UdIwQY
MBaAFNMvh2Ix3LXf169FIxIFZdmABkdKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMHktSFlqSGN0ZF9YcjBVakVnVmwyWUFHUjBvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS83ZDhjZmQtODgzMC00ZmUzLWJmNzUt
YmM2NGQzZTYyMzgyLzEvY2doQ1BqVTRObjFYdVJHdURhRl9oZnEzaFNzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS83ZDhjZmQtODgzMC00ZmUzLWJmNzUtYmM2NGQzZTYyMzgy
LzEvMHktSFlqSGN0ZF9YcjBVakVnVmwyWUFHUjBvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALY8FMA0G
CSqGSIb3DQEBCwUAA4IBAQB4naim7lSUTd+mf7wGQLr2rvdmNA94nvNBFeBdCXJx
9oq4WIHNcBgl8x4zfY0XwcZxLfaVueTcNVgP8uCbp9Qg4K5gzoFzdBlkZe1CRSjN
Yu67sVgeYE9rz8N4rEqXagu9W56r7qKWDSPyMd7C4FYdNNTONheTUn5cx93iqU5r
23qnWzJG6sp6QxKpA/gs8cw0x4c93gf+IYZ61F50MrisgOIgxESOewVY8rsKRMOK
JukGhsFX9NnDdIkFgOwRazV3dKYpuL6VOtJRmbuoNQ5UEBszx3hSdSC8xKHlTiS7
qo7EhIW63NKDf/mf523TlRGRhswYuoBAnxm57ZBt1KgE
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:35:55 2025 by rpki-client