Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/6b5f99-2c5f-40b8-9c89-395b0e7702cc/1/3d1kGLXPeHw-Bym6jHqXU_gU9BI.roa
File: 3d1kGLXPeHw-Bym6jHqXU_gU9BI.roa (raw, json)
Hash identifier: 6PX+nGVwBNVSW6SsnnVAp5sRv/tfbPXO9pTNi8tXbBU=
Subject key identifier: DD:DD:64:18:B5:CF:78:7C:3E:07:29:BA:8C:7A:97:53:F8:14:F4:12
Certificate issuer: /CN=ec11b6d0ee6b9eccfe34ec506a275078c39eccb3
Certificate serial: 0185708CD36C07548634CBC3CBBF2C795F51
Authority key identifier: EC:11:B6:D0:EE:6B:9E:CC:FE:34:EC:50:6A:27:50:78:C3:9E:CC:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7BG20O5rnsz-NOxQaidQeMOezLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/6b5f99-2c5f-40b8-9c89-395b0e7702cc/1/3d1kGLXPeHw-Bym6jHqXU_gU9BI.roa
Signing time: Mon 02 Jan 2023 03:35:55 +0000
ROA not before: Mon 02 Jan 2023 03:35:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209076
IP address blocks: 45.156.62.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:8c:d3:6c:07:54:86:34:cb:c3:cb:bf:2c:79:5f:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec11b6d0ee6b9eccfe34ec506a275078c39eccb3
Validity
Not Before: Jan 2 03:35:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dddd6418b5cf787c3e0729ba8c7a9753f814f412
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:be:e6:dc:74:0c:70:b2:d2:f3:55:d2:19:25:
7e:c9:f6:5c:85:83:d3:cd:61:f8:fb:38:0f:70:0b:
44:f1:53:d3:46:cf:b0:a1:05:a5:0b:46:84:8c:58:
94:75:75:a7:09:6c:28:e2:ef:af:51:b4:fb:88:b9:
b3:26:76:25:3c:7e:17:5c:47:c7:b0:cf:ef:16:0e:
6c:d0:2f:6a:7a:41:10:5a:c2:a1:c8:14:d1:06:0c:
97:85:c9:84:f7:9c:71:34:9b:33:0e:3d:16:a8:d5:
ee:74:ff:07:9b:0b:e1:af:d2:d5:df:de:bc:0d:27:
12:60:7a:d9:e3:f0:0d:e3:e6:3a:89:4e:89:d3:b9:
8a:b0:e6:1f:64:08:5d:09:ac:82:85:1a:cb:98:87:
73:d7:30:30:c5:01:26:91:94:f9:4f:59:25:a3:4e:
c3:a9:b5:fe:6e:8e:e4:1a:0d:27:51:21:3b:9f:b1:
5f:ea:0e:65:8e:31:51:dc:18:ad:6b:74:34:a7:96:
3b:c2:80:4a:f6:10:b5:65:7e:ea:b4:9a:f3:2c:ec:
11:4a:c1:be:09:ef:5b:fe:ca:2c:81:6f:55:9d:1c:
6a:c0:0e:4b:84:7d:ec:5f:62:3f:95:86:a5:b5:1d:
2a:0b:55:c7:52:b0:9f:18:09:8a:22:29:b2:5e:8c:
1d:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:DD:64:18:B5:CF:78:7C:3E:07:29:BA:8C:7A:97:53:F8:14:F4:12
X509v3 Authority Key Identifier:
keyid:EC:11:B6:D0:EE:6B:9E:CC:FE:34:EC:50:6A:27:50:78:C3:9E:CC:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7BG20O5rnsz-NOxQaidQeMOezLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/6b5f99-2c5f-40b8-9c89-395b0e7702cc/1/3d1kGLXPeHw-Bym6jHqXU_gU9BI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/6b5f99-2c5f-40b8-9c89-395b0e7702cc/1/7BG20O5rnsz-NOxQaidQeMOezLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.156.62.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:69:71:50:56:df:94:a2:8d:70:95:51:e5:84:bd:89:64:3d:
25:00:ca:1d:ec:fd:52:75:87:8a:4a:ad:a3:7d:17:5b:57:00:
1e:70:d2:4e:6c:5a:24:b5:21:d1:35:5b:4a:96:58:e2:da:a7:
7f:02:be:51:3a:a0:30:8d:e6:5e:d5:59:02:f3:37:14:d6:e9:
ab:bc:72:a5:df:4c:45:ea:df:f5:45:fd:58:a1:75:d8:19:17:
62:20:18:73:21:50:5e:f1:8b:56:f9:95:d2:06:34:dd:92:f1:
e7:73:f5:c5:eb:1a:62:31:4a:e7:d5:c4:e0:e9:4d:86:ff:65:
93:9d:1c:b8:ef:a7:b0:86:31:c2:8c:c1:ad:77:7e:08:2a:9b:
8f:23:6a:5b:f9:aa:79:8d:14:19:13:59:20:c3:ac:65:24:dd:
fa:c3:38:3c:00:9c:7c:f2:13:9e:71:65:cc:54:26:ee:f9:e8:
c8:01:ef:83:86:90:d0:40:15:58:99:5d:6c:69:aa:ae:d4:55:
66:1a:ce:5b:ac:02:0d:68:28:fd:6b:80:37:fd:18:38:70:19:
29:ad:a4:38:0a:87:f7:90:b5:31:0d:75:a6:df:89:e4:32:14:
be:92:13:01:ad:39:9a:44:0e:a1:75:7c:cb:47:de:2b:20:74:
cb:ee:6c:b5
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVwjNNsB1SGNMvDy78seV9RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjMTFiNmQwZWU2YjllY2NmZTM0ZWM1MDZhMjc1MDc4YzM5
ZWNjYjMwHhcNMjMwMTAyMDMzNTU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZGRkNjQxOGI1Y2Y3ODdjM2UwNzI5YmE4YzdhOTc1M2Y4MTRmNDEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApb7m3HQMcLLS81XSGSV+yfZchYPT
zWH4+zgPcAtE8VPTRs+woQWlC0aEjFiUdXWnCWwo4u+vUbT7iLmzJnYlPH4XXEfH
sM/vFg5s0C9qekEQWsKhyBTRBgyXhcmE95xxNJszDj0WqNXudP8Hmwvhr9LV3968
DScSYHrZ4/AN4+Y6iU6J07mKsOYfZAhdCayChRrLmIdz1zAwxQEmkZT5T1klo07D
qbX+bo7kGg0nUSE7n7Ff6g5ljjFR3Bita3Q0p5Y7woBK9hC1ZX7qtJrzLOwRSsG+
Ce9b/sosgW9VnRxqwA5LhH3sX2I/lYaltR0qC1XHUrCfGAmKIimyXowd4wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFN3dZBi1z3h8Pgcpuox6l1P4FPQSMB8GA1UdIwQY
MBaAFOwRttDua57M/jTsUGonUHjDnsyzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN0JHMjBPNXJuc3otTk94UWFpZFFlTU9lekxNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS82YjVmOTktMmM1Zi00MGI4LTljODkt
Mzk1YjBlNzcwMmNjLzEvM2Qxa0dMWFBlSHctQnltNmpIcVhVX2dVOUJJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS82YjVmOTktMmM1Zi00MGI4LTljODktMzk1YjBlNzcwMmNj
LzEvN0JHMjBPNXJuc3otTk94UWFpZFFlTU9lekxNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZw+MA0G
CSqGSIb3DQEBCwUAA4IBAQCcaXFQVt+Uoo1wlVHlhL2JZD0lAMod7P1SdYeKSq2j
fRdbVwAecNJObFoktSHRNVtKllji2qd/Ar5ROqAwjeZe1VkC8zcU1umrvHKl30xF
6t/1Rf1YoXXYGRdiIBhzIVBe8YtW+ZXSBjTdkvHnc/XF6xpiMUrn1cTg6U2G/2WT
nRy476ewhjHCjMGtd34IKpuPI2pb+ap5jRQZE1kgw6xlJN36wzg8AJx88hOecWXM
VCbu+ejIAe+DhpDQQBVYmV1saaqu1FVmGs5brAINaCj9a4A3/Rg4cBkpraQ4Cof3
kLUxDXWm34nkMhS+khMBrTmaRA6hdXzLR94rIHTL7my1
-----END CERTIFICATE-----
Generated at Thu Mar 13 20:34:31 2025 by rpki-client