Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/2697ab-5b41-4963-b9d4-7a3300cd7e92/1/fCONQXjUFz4B3PQkudcr95U3X7o.roa
File: fCONQXjUFz4B3PQkudcr95U3X7o.roa (raw, json)
Hash identifier: 4sLguvP/mlK/NOvhcBqsUyk+mFzoR6as/nE9feowuEk=
Subject key identifier: 7C:23:8D:41:78:D4:17:3E:01:DC:F4:24:B9:D7:2B:F7:95:37:5F:BA
Certificate issuer: /CN=c1cf253735a3fd62ce84928d7ff6bb5626cc887b
Certificate serial: 05B265D7
Authority key identifier: C1:CF:25:37:35:A3:FD:62:CE:84:92:8D:7F:F6:BB:56:26:CC:88:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wc8lNzWj_WLOhJKNf_a7VibMiHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/2697ab-5b41-4963-b9d4-7a3300cd7e92/1/fCONQXjUFz4B3PQkudcr95U3X7o.roa
Signing time: Sat 01 Jan 2022 01:01:57 +0000
ROA not before: Sat 01 Jan 2022 01:01:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49761
IP address blocks: 45.131.34.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95577559 (0x5b265d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1cf253735a3fd62ce84928d7ff6bb5626cc887b
Validity
Not Before: Jan 1 01:01:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7c238d4178d4173e01dcf424b9d72bf795375fba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:02:7f:62:09:82:d4:0e:98:e7:eb:89:5f:00:
40:6a:b6:9e:78:a7:52:81:ba:f9:2c:84:42:72:99:
67:f9:f5:89:e5:7c:22:20:73:f0:f8:25:39:6a:d4:
f2:48:0a:14:75:78:9e:58:2f:56:1d:61:24:b6:2c:
56:1e:dd:7b:02:10:d8:41:dd:c7:99:2c:57:5c:e4:
46:c3:9e:70:00:98:13:fd:f9:19:5b:ae:68:c5:aa:
59:03:34:53:90:b2:08:0a:b0:19:af:0e:49:06:d0:
2c:74:12:78:c5:08:d4:fd:f7:b9:df:c1:eb:51:da:
e4:ee:04:45:19:f9:10:b6:7c:26:86:13:30:f3:10:
a4:d8:7c:c5:ee:09:e1:13:e9:87:2c:8e:d2:16:82:
18:21:ab:df:94:d9:34:22:0b:9b:10:4a:74:fb:8a:
be:6a:6a:b8:66:3b:38:24:2e:1d:c3:d1:f6:50:77:
82:b7:e0:88:c8:dd:4e:16:fc:ef:e8:23:db:d9:35:
77:09:8a:40:5c:f7:ff:b1:52:0d:8f:28:38:26:6c:
74:b9:e5:51:46:1b:69:cd:ca:e1:03:c0:f9:89:f6:
84:bf:83:4a:50:e7:ab:ab:f3:1b:12:9b:eb:6a:0a:
a2:67:13:74:31:7b:36:62:5e:69:3c:9b:69:83:5a:
2e:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:23:8D:41:78:D4:17:3E:01:DC:F4:24:B9:D7:2B:F7:95:37:5F:BA
X509v3 Authority Key Identifier:
keyid:C1:CF:25:37:35:A3:FD:62:CE:84:92:8D:7F:F6:BB:56:26:CC:88:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wc8lNzWj_WLOhJKNf_a7VibMiHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/2697ab-5b41-4963-b9d4-7a3300cd7e92/1/fCONQXjUFz4B3PQkudcr95U3X7o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/2697ab-5b41-4963-b9d4-7a3300cd7e92/1/wc8lNzWj_WLOhJKNf_a7VibMiHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.131.34.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:94:e1:c2:bf:f8:dc:b7:df:16:0a:67:c0:cd:45:72:c5:be:
73:66:83:bc:93:d8:90:be:23:3a:05:dc:15:24:1c:5e:34:87:
fe:ca:15:9b:33:ba:ed:79:89:5f:6d:7c:79:26:32:65:53:5e:
4c:b4:c6:8b:67:60:67:8c:94:d4:3a:1b:3b:34:da:fc:37:6f:
12:a6:0e:c1:9a:ef:2a:1d:1f:a1:2e:43:8d:51:31:6a:1c:1a:
28:32:3a:4a:ca:05:33:f5:3a:8e:9e:68:9c:cd:f7:6b:24:5b:
49:3a:67:da:9a:05:a3:cd:2d:c4:05:82:f0:52:70:44:1a:09:
8d:f3:b2:48:3f:81:84:80:cc:eb:97:4d:c3:0d:f6:99:39:8e:
19:cb:01:e3:48:b8:b8:28:de:c6:26:ad:f5:80:6b:c5:d0:f0:
94:ef:a3:9b:08:60:41:dd:2d:b3:ef:c5:e8:78:d3:a3:02:37:
e7:11:98:37:26:6b:fd:97:cd:65:cf:3a:4f:ee:59:5d:6d:07:
10:f6:a6:a7:48:2a:cc:20:8e:0f:cc:c5:b8:c7:ef:ed:1a:91:
08:61:20:6c:bf:d0:2a:1a:3b:46:01:c1:b6:a8:a4:1b:45:7a:
02:51:34:00:19:45:ab:a6:2a:45:7b:84:95:15:8f:6d:d8:48:
f0:34:4a:35
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBbJl1zANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhj
MWNmMjUzNzM1YTNmZDYyY2U4NDkyOGQ3ZmY2YmI1NjI2Y2M4ODdiMB4XDTIyMDEw
MTAxMDE1N1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoN2MyMzhkNDE3OGQ0
MTczZTAxZGNmNDI0YjlkNzJiZjc5NTM3NWZiYTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKYCf2IJgtQOmOfriV8AQGq2nninUoG6+SyEQnKZZ/n1ieV8
IiBz8PglOWrU8kgKFHV4nlgvVh1hJLYsVh7dewIQ2EHdx5ksV1zkRsOecACYE/35
GVuuaMWqWQM0U5CyCAqwGa8OSQbQLHQSeMUI1P33ud/B61Ha5O4ERRn5ELZ8JoYT
MPMQpNh8xe4J4RPphyyO0haCGCGr35TZNCILmxBKdPuKvmpquGY7OCQuHcPR9lB3
grfgiMjdThb87+gj29k1dwmKQFz3/7FSDY8oOCZsdLnlUUYbac3K4QPA+Yn2hL+D
SlDnq6vzGxKb62oKomcTdDF7NmJeaTybaYNaLnkCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBR8I41BeNQXPgHc9CS51yv3lTdfujAfBgNVHSMEGDAWgBTBzyU3NaP9Ys6E
ko1/9rtWJsyIezAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3djOGxOeldqX1dMT2hKS05mX2E3VmliTWlIcy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvOTQvMjY5N2FiLTViNDEtNDk2My1iOWQ0LTdhMzMwMGNkN2U5Mi8x
L2ZDT05RWGpVRno0QjNQUWt1ZGNyOTVVM1g3by5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTQv
MjY5N2FiLTViNDEtNDk2My1iOWQ0LTdhMzMwMGNkN2U5Mi8xL3djOGxOeldqX1dM
T2hKS05mX2E3VmliTWlIcy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC2DIjANBgkqhkiG9w0BAQsFAAOC
AQEAbJThwr/43LffFgpnwM1FcsW+c2aDvJPYkL4jOgXcFSQcXjSH/soVmzO67XmJ
X218eSYyZVNeTLTGi2dgZ4yU1DobOzTa/DdvEqYOwZrvKh0foS5DjVExahwaKDI6
SsoFM/U6jp5onM33ayRbSTpn2poFo80txAWC8FJwRBoJjfOySD+BhIDM65dNww32
mTmOGcsB40i4uCjexiat9YBrxdDwlO+jmwhgQd0ts+/F6HjTowI35xGYNyZr/ZfN
Zc86T+5ZXW0HEPamp0gqzCCOD8zFuMfv7RqRCGEgbL/QKho7RgHBtqikG0V6AlE0
ABlFq6YqRXuElRWPbdhI8DRKNQ==
-----END CERTIFICATE-----
Generated at Tue Apr 22 03:30:34 2025 by rpki-client