Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/6c999b-90a3-4646-b1ad-42e085a885c5/1/ThPm7x0Rw3yI72rYwRZdUwNCHWs.roa
File: ThPm7x0Rw3yI72rYwRZdUwNCHWs.roa (raw, json)
Hash identifier: mwawkW0vxR8E/YyEfB80RFt66KjGuZYiGnLjGKXzI1k=
Subject key identifier: 4E:13:E6:EF:1D:11:C3:7C:88:EF:6A:D8:C1:16:5D:53:03:42:1D:6B
Certificate issuer: /CN=f86074d2b355c5761984a1d14271cf4599516eaf
Certificate serial: 01856DC1EC210586ECEE8135C5DE3DF215BE
Authority key identifier: F8:60:74:D2:B3:55:C5:76:19:84:A1:D1:42:71:CF:45:99:51:6E:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-GB00rNVxXYZhKHRQnHPRZlRbq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/6c999b-90a3-4646-b1ad-42e085a885c5/1/ThPm7x0Rw3yI72rYwRZdUwNCHWs.roa
Signing time: Sun 01 Jan 2023 14:35:03 +0000
ROA not before: Sun 01 Jan 2023 14:35:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207782
IP address blocks: 45.11.200.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:c1:ec:21:05:86:ec:ee:81:35:c5:de:3d:f2:15:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f86074d2b355c5761984a1d14271cf4599516eaf
Validity
Not Before: Jan 1 14:35:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4e13e6ef1d11c37c88ef6ad8c1165d5303421d6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:b0:ba:e6:4c:b0:26:90:76:f1:9c:7f:02:ee:
22:a9:c4:aa:36:b2:6b:3f:c2:10:51:39:64:2d:7d:
c7:ba:3d:94:ea:b9:cd:52:84:2c:9c:29:9b:b3:f5:
02:ab:50:6a:d4:f4:2d:a9:78:ef:e9:42:e2:49:38:
da:7d:86:42:df:53:f8:f9:32:0f:40:f1:74:dd:9f:
5f:be:8e:54:5d:01:16:58:cc:fc:53:53:0f:6d:58:
7b:5e:fc:e7:fc:28:1f:45:b8:f5:dd:ac:80:93:cc:
36:2e:b5:ad:28:02:64:dc:29:0f:8c:6e:72:4f:d0:
b9:03:31:19:22:c4:fd:03:6c:13:a4:aa:6c:a2:1f:
a8:f4:59:b3:e6:cb:ad:74:53:a7:27:3d:b4:d5:fc:
6e:48:cf:ba:2a:88:96:d5:29:15:b3:16:8c:28:d7:
cb:bd:d1:12:7a:3a:b4:4d:68:4c:7e:41:84:94:f8:
25:a4:05:5c:b3:cd:9e:ec:db:67:7b:eb:01:b2:33:
d0:7e:92:50:6c:af:7e:4e:0d:93:5f:09:58:04:89:
80:98:3b:e8:bf:9e:ba:29:e7:17:6f:04:7b:1d:c4:
e2:a9:78:53:4e:40:75:ec:7c:fe:7a:ce:ac:97:ae:
93:a5:09:42:95:77:aa:fe:bb:7b:3d:cf:73:16:0e:
8d:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:13:E6:EF:1D:11:C3:7C:88:EF:6A:D8:C1:16:5D:53:03:42:1D:6B
X509v3 Authority Key Identifier:
keyid:F8:60:74:D2:B3:55:C5:76:19:84:A1:D1:42:71:CF:45:99:51:6E:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-GB00rNVxXYZhKHRQnHPRZlRbq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/6c999b-90a3-4646-b1ad-42e085a885c5/1/ThPm7x0Rw3yI72rYwRZdUwNCHWs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/6c999b-90a3-4646-b1ad-42e085a885c5/1/1-GB00rNVxXYZhKHRQnHPRZlRbq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.200.0/22
Signature Algorithm: sha256WithRSAEncryption
96:f9:2c:1c:14:49:ec:9b:e2:16:14:e6:4e:22:3d:a9:7e:79:
93:1e:aa:6b:24:ef:60:68:04:61:07:33:66:e6:2b:cc:68:d8:
b9:20:37:be:86:51:cd:d1:6c:4d:17:f0:4f:d1:9e:d7:8d:f3:
73:d4:28:eb:5c:f9:1e:58:be:28:48:65:35:1c:24:cb:0b:d8:
b1:4f:0e:3a:f0:14:4b:da:e1:41:a2:76:61:49:0b:dc:84:69:
45:30:b1:52:ab:47:93:f8:00:1f:8a:6c:8c:21:5f:c3:b4:20:
7a:77:ce:41:93:db:05:d5:5c:0d:cf:f1:e4:f8:99:e3:cb:ca:
78:3e:ff:4a:85:89:ae:1d:d9:74:d9:70:96:dd:8e:1f:2d:59:
ec:26:5d:88:52:f2:5d:d6:2c:96:db:5c:ed:4f:8b:39:6c:33:
d6:66:90:66:0f:2c:9b:35:82:c6:a8:3b:57:26:c1:85:2d:f1:
62:c1:b3:37:22:8f:ec:b1:67:e9:1d:9e:5d:90:b5:31:9c:8e:
44:a9:2b:ed:3e:d8:d3:b9:22:3d:15:a0:4f:bd:ab:f3:b6:93:
21:11:2f:5e:84:9a:74:9b:65:4a:af:8c:66:09:db:9b:00:c9:
ea:e7:83:15:08:0c:b1:48:9f:9c:7c:83:d6:20:d5:74:7e:48:
fa:6a:fd:d0
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAYVtwewhBYbs7oE1xd498hW+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4NjA3NGQyYjM1NWM1NzYxOTg0YTFkMTQyNzFjZjQ1OTk1
MTZlYWYwHhcNMjMwMTAxMTQzNTAzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZTEzZTZlZjFkMTFjMzdjODhlZjZhZDhjMTE2NWQ1MzAzNDIxZDZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAorC65kywJpB28Zx/Au4iqcSqNrJr
P8IQUTlkLX3Huj2U6rnNUoQsnCmbs/UCq1Bq1PQtqXjv6ULiSTjafYZC31P4+TIP
QPF03Z9fvo5UXQEWWMz8U1MPbVh7Xvzn/CgfRbj13ayAk8w2LrWtKAJk3CkPjG5y
T9C5AzEZIsT9A2wTpKpsoh+o9Fmz5sutdFOnJz201fxuSM+6KoiW1SkVsxaMKNfL
vdESejq0TWhMfkGElPglpAVcs82e7Ntne+sBsjPQfpJQbK9+Tg2TXwlYBImAmDvo
v566KecXbwR7HcTiqXhTTkB17Hz+es6sl66TpQlClXeq/rt7Pc9zFg6NSQIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFE4T5u8dEcN8iO9q2MEWXVMDQh1rMB8GA1UdIwQY
MBaAFPhgdNKzVcV2GYSh0UJxz0WZUW6vMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1HQjAwck5WeFhZWmhLSFJRbkhQUlpsUmJxOC5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGIvNmM5OTliLTkwYTMtNDY0Ni1iMWFk
LTQyZTA4NWE4ODVjNS8xL1RoUG03eDBSdzN5STcycll3UlpkVXdOQ0hXcy5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvOGIvNmM5OTliLTkwYTMtNDY0Ni1iMWFkLTQyZTA4NWE4ODVj
NS8xLzEtR0IwMHJOVnhYWVpoS0hSUW5IUFJabFJicTguY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAItC8gw
DQYJKoZIhvcNAQELBQADggEBAJb5LBwUSeyb4hYU5k4iPal+eZMeqmsk72BoBGEH
M2bmK8xo2LkgN76GUc3RbE0X8E/RnteN83PUKOtc+R5YvihIZTUcJMsL2LFPDjrw
FEva4UGidmFJC9yEaUUwsVKrR5P4AB+KbIwhX8O0IHp3zkGT2wXVXA3P8eT4mePL
yng+/0qFia4d2XTZcJbdjh8tWewmXYhS8l3WLJbbXO1PizlsM9ZmkGYPLJs1gsao
O1cmwYUt8WLBszcij+yxZ+kdnl2QtTGcjkSpK+0+2NO5Ij0VoE+9q/O2kyERL16E
mnSbZUqvjGYJ25sAyerngxUIDLFIn5x8g9Yg1XR+SPpq/dA=
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:29:40 2025 by rpki-client