Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/c57839-5b81-4df4-88f0-149d8a8e1fcd/1/2x4E6YstLUuWXn6QFoP-W3I2teI.roa
File: 2x4E6YstLUuWXn6QFoP-W3I2teI.roa (raw, json)
Hash identifier: 9ANkRtMj5BPxRqmlqPUwT3a2guyeET7hU0CBSohtEbg=
Subject key identifier: DB:1E:04:E9:8B:2D:2D:4B:96:5E:7E:90:16:83:FE:5B:72:36:B5:E2
Certificate issuer: /CN=37a8b5a1895c5088205095c2f7a5efe91d539e45
Certificate serial: 0182929C72B9F6BABA45303112DE01D9A0AC
Authority key identifier: 37:A8:B5:A1:89:5C:50:88:20:50:95:C2:F7:A5:EF:E9:1D:53:9E:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N6i1oYlcUIggUJXC96Xv6R1TnkU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/c57839-5b81-4df4-88f0-149d8a8e1fcd/1/2x4E6YstLUuWXn6QFoP-W3I2teI.roa
Signing time: Fri 12 Aug 2022 15:11:42 +0000
ROA not before: Fri 12 Aug 2022 15:11:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207326
IP address blocks: 45.128.235.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:92:9c:72:b9:f6:ba:ba:45:30:31:12:de:01:d9:a0:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37a8b5a1895c5088205095c2f7a5efe91d539e45
Validity
Not Before: Aug 12 15:11:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=db1e04e98b2d2d4b965e7e901683fe5b7236b5e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:4f:0f:12:09:70:4b:87:bc:c0:51:e5:1e:33:
6b:70:33:45:6c:69:b9:17:5e:9f:a2:82:b8:22:37:
36:6c:35:3d:16:c5:e7:59:d6:b4:fc:23:58:b3:71:
2d:14:9e:28:79:1c:05:fe:45:d4:ff:a9:b8:28:73:
d3:0e:5d:cb:1a:1f:a2:9f:35:ef:6d:06:61:f1:15:
44:0e:59:a3:ad:2a:e8:c9:d6:81:47:bd:fa:fa:da:
e8:fb:3e:ea:78:9d:2f:d1:45:6c:0a:b7:01:64:cd:
cf:68:70:30:00:54:e4:01:2d:1c:7c:6a:97:48:dc:
bb:1c:f5:d2:8f:77:93:b6:08:c6:ab:ae:2e:bf:df:
8d:21:c6:8b:b1:9a:fa:40:f6:84:14:dd:41:e7:ab:
29:46:57:7e:62:75:d9:d9:1a:0d:e2:08:05:4a:d4:
0c:27:18:fa:77:f5:3f:41:24:9a:53:47:8c:da:2e:
cf:88:2d:cd:a4:e0:d7:f7:a3:93:84:13:e7:f5:a3:
df:e4:56:56:8b:25:af:13:c1:7c:df:74:4a:5d:60:
78:ba:ec:54:42:9b:60:45:c4:f6:10:f9:21:b8:d3:
82:9a:21:22:d7:52:af:06:1f:5a:ef:f4:69:f8:90:
d3:70:90:04:00:65:ba:f6:9d:8c:c2:4d:b9:e1:29:
a3:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:1E:04:E9:8B:2D:2D:4B:96:5E:7E:90:16:83:FE:5B:72:36:B5:E2
X509v3 Authority Key Identifier:
keyid:37:A8:B5:A1:89:5C:50:88:20:50:95:C2:F7:A5:EF:E9:1D:53:9E:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N6i1oYlcUIggUJXC96Xv6R1TnkU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/c57839-5b81-4df4-88f0-149d8a8e1fcd/1/2x4E6YstLUuWXn6QFoP-W3I2teI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/c57839-5b81-4df4-88f0-149d8a8e1fcd/1/N6i1oYlcUIggUJXC96Xv6R1TnkU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.235.0/24
Signature Algorithm: sha256WithRSAEncryption
79:a0:a3:45:48:04:de:ee:62:c1:94:f7:7b:57:5a:aa:d2:f4:
bb:49:f8:fd:7c:81:79:6b:19:d3:8c:33:df:80:26:0a:fc:17:
bc:d4:d3:b1:e1:63:f2:84:35:63:52:0e:f8:46:cc:5d:f2:61:
af:7c:6a:67:e3:86:ac:40:11:4c:86:0f:e6:23:02:8f:c2:f1:
24:ed:40:ae:f8:14:fe:e0:1d:49:62:29:21:9a:da:b3:67:1d:
c0:51:88:7d:d0:76:44:bf:2f:61:e9:9e:87:9c:40:61:9d:bd:
2e:fb:c9:9c:9f:b3:28:b9:fc:30:35:7f:d0:78:2f:f8:96:3b:
57:d8:d2:52:6d:5c:20:b8:f8:6e:cd:17:62:a1:18:90:8b:d2:
f6:87:76:26:9e:33:ad:44:35:c3:5f:2b:23:c1:37:26:ca:3f:
52:6b:6d:42:2a:68:cf:84:87:3d:de:ac:7d:6d:dc:eb:e4:a6:
c3:2c:c2:f7:6b:da:9a:d4:79:bd:81:9b:4d:4b:f2:56:a9:d3:
50:d9:7b:a4:0e:39:9d:3b:b3:a2:f5:26:56:ed:06:bd:ea:60:
d9:58:d7:98:42:1b:aa:d7:b6:12:32:81:1a:29:98:12:08:38:
17:0a:e2:1b:83:ff:8e:87:91:7a:38:77:36:c0:73:80:ec:f3:
1b:f8:2f:65
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYKSnHK59rq6RTAxEt4B2aCsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3YThiNWExODk1YzUwODgyMDUwOTVjMmY3YTVlZmU5MWQ1
MzllNDUwHhcNMjIwODEyMTUxMTQyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYjFlMDRlOThiMmQyZDRiOTY1ZTdlOTAxNjgzZmU1YjcyMzZiNWUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr08PEglwS4e8wFHlHjNrcDNFbGm5
F16fooK4Ijc2bDU9FsXnWda0/CNYs3EtFJ4oeRwF/kXU/6m4KHPTDl3LGh+inzXv
bQZh8RVEDlmjrSroydaBR736+tro+z7qeJ0v0UVsCrcBZM3PaHAwAFTkAS0cfGqX
SNy7HPXSj3eTtgjGq64uv9+NIcaLsZr6QPaEFN1B56spRld+YnXZ2RoN4ggFStQM
Jxj6d/U/QSSaU0eM2i7PiC3NpODX96OThBPn9aPf5FZWiyWvE8F833RKXWB4uuxU
QptgRcT2EPkhuNOCmiEi11KvBh9a7/Rp+JDTcJAEAGW69p2Mwk254Smj8wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNseBOmLLS1Lll5+kBaD/ltyNrXiMB8GA1UdIwQY
MBaAFDeotaGJXFCIIFCVwvel7+kdU55FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTjZpMW9ZbGNVSWdnVUpYQzk2WHY2UjFUbmtVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9jNTc4MzktNWI4MS00ZGY0LTg4ZjAt
MTQ5ZDhhOGUxZmNkLzEvMng0RTZZc3RMVXVXWG42UUZvUC1XM0kydGVJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9jNTc4MzktNWI4MS00ZGY0LTg4ZjAtMTQ5ZDhhOGUxZmNk
LzEvTjZpMW9ZbGNVSWdnVUpYQzk2WHY2UjFUbmtVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYDrMA0G
CSqGSIb3DQEBCwUAA4IBAQB5oKNFSATe7mLBlPd7V1qq0vS7Sfj9fIF5axnTjDPf
gCYK/Be81NOx4WPyhDVjUg74Rsxd8mGvfGpn44asQBFMhg/mIwKPwvEk7UCu+BT+
4B1JYikhmtqzZx3AUYh90HZEvy9h6Z6HnEBhnb0u+8mcn7MoufwwNX/QeC/4ljtX
2NJSbVwguPhuzRdioRiQi9L2h3YmnjOtRDXDXysjwTcmyj9Sa21CKmjPhIc93qx9
bdzr5KbDLML3a9qa1Hm9gZtNS/JWqdNQ2XukDjmdO7Oi9SZW7Qa96mDZWNeYQhuq
17YSMoEaKZgSCDgXCuIbg/+Oh5F6OHc2wHOA7PMb+C9l
-----END CERTIFICATE-----
Generated at Mon Apr 21 22:24:47 2025 by rpki-client