Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/6b5f99-2c5f-40b8-9c89-395b0e7702cc/1/cWWInKCcUSfTdVXi_-zRgM3o8rA.roa
File: cWWInKCcUSfTdVXi_-zRgM3o8rA.roa (raw, json)
Hash identifier: 6q5Ng0Irz+T/zuZuwXm0bPUmd1B6ozBT/oni9kAwNEA=
Subject key identifier: 71:65:88:9C:A0:9C:51:27:D3:75:55:E2:FF:EC:D1:80:CD:E8:F2:B0
Certificate issuer: /CN=ec11b6d0ee6b9eccfe34ec506a275078c39eccb3
Certificate serial: 0185708CD3DD0C302AF431ED17E143FEE30D
Authority key identifier: EC:11:B6:D0:EE:6B:9E:CC:FE:34:EC:50:6A:27:50:78:C3:9E:CC:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7BG20O5rnsz-NOxQaidQeMOezLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/6b5f99-2c5f-40b8-9c89-395b0e7702cc/1/cWWInKCcUSfTdVXi_-zRgM3o8rA.roa
Signing time: Mon 02 Jan 2023 03:35:55 +0000
ROA not before: Mon 02 Jan 2023 03:35:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210687
IP address blocks: 45.156.61.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:8c:d3:dd:0c:30:2a:f4:31:ed:17:e1:43:fe:e3:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec11b6d0ee6b9eccfe34ec506a275078c39eccb3
Validity
Not Before: Jan 2 03:35:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7165889ca09c5127d37555e2ffecd180cde8f2b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:a7:d3:1b:28:ec:36:08:6c:50:2b:d2:c0:76:
9d:83:e9:48:a9:77:1c:9a:85:2c:0a:44:61:f0:52:
bd:4f:8f:47:6b:4c:99:cf:b9:89:02:c9:55:48:49:
9b:ef:fc:70:55:4b:2a:4d:65:ef:24:f8:a1:d9:b4:
19:18:67:25:88:b0:1d:07:d2:b4:05:6a:6b:bc:45:
cf:8c:82:8e:54:12:82:48:76:20:35:4c:17:d3:f0:
c5:9c:77:98:ae:4a:7b:28:46:ca:5c:72:98:f6:14:
30:99:5c:e6:05:49:7c:8b:85:59:ff:11:07:55:5d:
fe:16:9e:e2:d5:3c:32:d5:2a:ac:0d:cc:68:ca:a5:
55:7a:56:b9:b8:c7:52:5d:db:3d:58:12:a9:75:06:
9f:85:fe:04:62:53:2f:e3:17:59:09:93:ba:77:ee:
f7:6d:b6:22:37:e0:06:a3:71:ca:35:5b:b8:48:e2:
4a:e6:38:c8:fe:3c:3e:5f:0c:d9:28:06:2f:ad:89:
d3:80:7b:13:d8:39:b2:bb:0f:fe:d1:9a:7c:e2:b1:
78:b9:4c:f3:f0:c2:be:f2:f0:4a:29:11:fd:33:f1:
3a:70:ef:eb:3f:ce:9b:13:26:3f:6c:79:af:a6:cf:
8a:f4:2f:1b:d3:1a:9e:a4:2f:9b:7a:40:5f:5a:bc:
ca:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:65:88:9C:A0:9C:51:27:D3:75:55:E2:FF:EC:D1:80:CD:E8:F2:B0
X509v3 Authority Key Identifier:
keyid:EC:11:B6:D0:EE:6B:9E:CC:FE:34:EC:50:6A:27:50:78:C3:9E:CC:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7BG20O5rnsz-NOxQaidQeMOezLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/6b5f99-2c5f-40b8-9c89-395b0e7702cc/1/cWWInKCcUSfTdVXi_-zRgM3o8rA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/6b5f99-2c5f-40b8-9c89-395b0e7702cc/1/7BG20O5rnsz-NOxQaidQeMOezLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.156.61.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:46:76:81:10:b2:ae:2c:c6:2d:37:86:66:b3:f3:41:2f:00:
6d:95:93:a1:b6:26:e8:30:94:d2:19:3e:9e:5e:68:fb:83:38:
17:5d:cf:f8:f4:3c:bc:85:46:eb:f2:6e:32:4d:61:7a:dc:7d:
52:ab:c7:8b:44:6f:58:01:62:a5:a5:c9:18:f8:e0:93:50:5c:
36:f9:52:ce:e8:45:41:da:44:be:33:ef:69:3a:9c:a8:11:c1:
91:8f:fe:97:49:95:97:4c:04:01:43:aa:b3:f2:29:ad:73:2f:
73:05:35:6f:ff:09:c2:04:e5:af:9d:58:ce:8d:1f:45:30:e8:
c0:28:8a:d5:7b:88:e1:0e:75:be:90:a2:a8:73:5c:85:43:05:
0f:44:8b:af:c0:3c:63:c3:a3:31:7d:43:42:dc:7f:33:25:b3:
8a:37:ab:52:f6:22:5f:28:1a:02:e8:e0:87:5a:43:0d:0a:a5:
6e:49:36:75:ee:71:25:7f:91:5d:aa:66:af:e0:df:64:97:b7:
69:1e:9d:03:c9:f3:89:92:3d:29:09:04:98:56:2e:91:2c:ac:
c9:b8:3a:6f:00:66:47:f7:20:46:ba:59:bb:ea:e1:61:a9:7c:
64:f4:07:a1:a6:e5:8b:d7:62:8d:66:f1:74:f9:b4:fb:f8:29:
e4:8a:cf:c4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVwjNPdDDAq9DHtF+FD/uMNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjMTFiNmQwZWU2YjllY2NmZTM0ZWM1MDZhMjc1MDc4YzM5
ZWNjYjMwHhcNMjMwMTAyMDMzNTU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MTY1ODg5Y2EwOWM1MTI3ZDM3NTU1ZTJmZmVjZDE4MGNkZThmMmIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiafTGyjsNghsUCvSwHadg+lIqXcc
moUsCkRh8FK9T49Ha0yZz7mJAslVSEmb7/xwVUsqTWXvJPih2bQZGGcliLAdB9K0
BWprvEXPjIKOVBKCSHYgNUwX0/DFnHeYrkp7KEbKXHKY9hQwmVzmBUl8i4VZ/xEH
VV3+Fp7i1Twy1SqsDcxoyqVVela5uMdSXds9WBKpdQafhf4EYlMv4xdZCZO6d+73
bbYiN+AGo3HKNVu4SOJK5jjI/jw+XwzZKAYvrYnTgHsT2Dmyuw/+0Zp84rF4uUzz
8MK+8vBKKRH9M/E6cO/rP86bEyY/bHmvps+K9C8b0xqepC+bekBfWrzKCQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHFliJygnFEn03VV4v/s0YDN6PKwMB8GA1UdIwQY
MBaAFOwRttDua57M/jTsUGonUHjDnsyzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN0JHMjBPNXJuc3otTk94UWFpZFFlTU9lekxNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS82YjVmOTktMmM1Zi00MGI4LTljODkt
Mzk1YjBlNzcwMmNjLzEvY1dXSW5LQ2NVU2ZUZFZYaV8telJnTTNvOHJBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS82YjVmOTktMmM1Zi00MGI4LTljODktMzk1YjBlNzcwMmNj
LzEvN0JHMjBPNXJuc3otTk94UWFpZFFlTU9lekxNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZw9MA0G
CSqGSIb3DQEBCwUAA4IBAQCMRnaBELKuLMYtN4Zms/NBLwBtlZOhtiboMJTSGT6e
Xmj7gzgXXc/49Dy8hUbr8m4yTWF63H1Sq8eLRG9YAWKlpckY+OCTUFw2+VLO6EVB
2kS+M+9pOpyoEcGRj/6XSZWXTAQBQ6qz8imtcy9zBTVv/wnCBOWvnVjOjR9FMOjA
KIrVe4jhDnW+kKKoc1yFQwUPRIuvwDxjw6MxfUNC3H8zJbOKN6tS9iJfKBoC6OCH
WkMNCqVuSTZ17nElf5Fdqmav4N9kl7dpHp0DyfOJkj0pCQSYVi6RLKzJuDpvAGZH
9yBGulm76uFhqXxk9AehpuWL12KNZvF0+bT7+Cnkis/E
-----END CERTIFICATE-----
Generated at Sat Apr 19 12:21:28 2025 by rpki-client