Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/2uv3n0ZwnXJKBUTcwpa1lc0Yk8s.roa
File: 2uv3n0ZwnXJKBUTcwpa1lc0Yk8s.roa (raw, json)
Hash identifier: 0KYEhVvdRbLXjiGj2iJ0O5sO8ngKXiEpVCKaB+joBk8=
Subject key identifier: DA:EB:F7:9F:46:70:9D:72:4A:05:44:DC:C2:96:B5:95:CD:18:93:CB
Certificate issuer: /CN=7ca643bb399c6d87adc4c7cba5d2b72fbd00d046
Certificate serial: 01855565039EB12CD08094AF2336D05F7E99
Authority key identifier: 7C:A6:43:BB:39:9C:6D:87:AD:C4:C7:CB:A5:D2:B7:2F:BD:00:D0:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fKZDuzmcbYetxMfLpdK3L70A0EY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/2uv3n0ZwnXJKBUTcwpa1lc0Yk8s.roa
Signing time: Tue 27 Dec 2022 21:02:41 +0000
ROA not before: Tue 27 Dec 2022 21:02:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 46261
IP address blocks: 45.130.64.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:55:65:03:9e:b1:2c:d0:80:94:af:23:36:d0:5f:7e:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ca643bb399c6d87adc4c7cba5d2b72fbd00d046
Validity
Not Before: Dec 27 21:02:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=daebf79f46709d724a0544dcc296b595cd1893cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:00:f4:fc:80:63:94:0b:f0:ac:9e:a3:e0:bc:
e3:b1:0d:50:96:1b:d1:f7:bb:90:cd:63:a7:76:2f:
5f:18:ba:32:e9:9a:c6:3e:83:06:1f:1d:41:b5:b8:
46:1f:a3:0b:1c:d5:78:e1:ee:43:07:78:0b:d2:fa:
42:6b:0b:a5:03:48:48:b2:80:04:28:a0:7c:2a:2a:
3d:d7:1c:df:49:18:16:69:39:2a:b4:37:21:45:86:
1e:a3:b4:87:fe:0b:51:bf:3b:da:24:2d:22:e4:44:
31:14:05:8f:13:35:76:07:01:42:73:34:c6:e4:33:
80:87:d9:31:5a:41:e6:81:a6:e2:3d:a8:61:90:ec:
29:34:15:18:fa:62:6b:94:9c:33:4a:e3:02:44:d2:
69:26:5c:e7:0d:1e:cc:ee:5c:b7:16:bd:bb:b8:b0:
4c:7a:d0:11:df:96:3f:c7:44:e3:f5:94:37:e8:a1:
14:2c:84:22:8b:22:89:aa:8c:8a:b9:58:5e:56:ec:
7f:b5:f3:c9:19:09:e4:d6:1f:ea:21:ef:fb:2f:ae:
96:35:e5:80:86:9e:ac:b7:6e:64:bd:2b:91:e1:42:
21:00:37:e5:1b:2b:49:52:c1:b0:0c:00:64:f4:93:
ad:1c:0d:c7:04:e0:3e:7b:51:80:71:2f:bf:b5:2f:
99:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:EB:F7:9F:46:70:9D:72:4A:05:44:DC:C2:96:B5:95:CD:18:93:CB
X509v3 Authority Key Identifier:
keyid:7C:A6:43:BB:39:9C:6D:87:AD:C4:C7:CB:A5:D2:B7:2F:BD:00:D0:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fKZDuzmcbYetxMfLpdK3L70A0EY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/2uv3n0ZwnXJKBUTcwpa1lc0Yk8s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/fKZDuzmcbYetxMfLpdK3L70A0EY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.130.64.0/24
Signature Algorithm: sha256WithRSAEncryption
c5:4c:18:de:3e:a7:59:ef:cc:2c:35:b3:57:a0:cf:40:34:df:
2f:3b:5d:a7:67:8e:4a:1f:ae:8e:4f:f5:ba:23:99:27:e3:e0:
be:fc:4c:a6:d2:ce:2e:b3:01:ad:1a:54:0b:bf:b7:39:78:22:
fa:b7:7e:9c:8e:0f:a0:03:ca:34:f8:cf:56:9c:b3:dd:f2:35:
0b:1c:3c:c9:6f:32:e7:78:f8:69:58:a8:46:e7:73:05:15:b9:
fc:09:81:a4:60:f6:e7:77:95:38:9d:a6:38:58:12:21:34:6e:
d1:18:90:7a:a1:eb:3c:42:9d:f0:b7:62:eb:57:da:f0:ce:b4:
47:85:7f:8d:ba:7d:92:b2:79:a2:43:df:65:f5:c2:e8:d7:7e:
67:55:c5:e4:42:ae:1a:52:85:8c:02:d2:e4:05:73:27:b8:11:
79:75:c2:9f:40:20:05:6e:31:94:9e:f5:70:a0:f7:10:64:0b:
4f:01:1b:f6:ec:c0:1e:c7:fa:9f:ec:82:d4:65:5e:14:ed:10:
a2:23:e6:18:5e:16:39:48:0a:06:d7:89:bf:2e:58:cb:a2:6f:
4c:07:fc:74:c0:02:76:88:57:68:80:95:f7:14:61:d6:a1:65:
ed:37:c9:c2:ad:52:19:3f:0c:0f:7b:d8:ff:f2:26:8f:56:80:
5c:79:75:85
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVVZQOesSzQgJSvIzbQX36ZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjYTY0M2JiMzk5YzZkODdhZGM0YzdjYmE1ZDJiNzJmYmQw
MGQwNDYwHhcNMjIxMjI3MjEwMjQxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYWViZjc5ZjQ2NzA5ZDcyNGEwNTQ0ZGNjMjk2YjU5NWNkMTg5M2NiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnQD0/IBjlAvwrJ6j4LzjsQ1QlhvR
97uQzWOndi9fGLoy6ZrGPoMGHx1BtbhGH6MLHNV44e5DB3gL0vpCawulA0hIsoAE
KKB8Kio91xzfSRgWaTkqtDchRYYeo7SH/gtRvzvaJC0i5EQxFAWPEzV2BwFCczTG
5DOAh9kxWkHmgabiPahhkOwpNBUY+mJrlJwzSuMCRNJpJlznDR7M7ly3Fr27uLBM
etAR35Y/x0Tj9ZQ36KEULIQiiyKJqoyKuVheVux/tfPJGQnk1h/qIe/7L66WNeWA
hp6st25kvSuR4UIhADflGytJUsGwDABk9JOtHA3HBOA+e1GAcS+/tS+ZFQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNrr959GcJ1ySgVE3MKWtZXNGJPLMB8GA1UdIwQY
MBaAFHymQ7s5nG2HrcTHy6XSty+9ANBGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZktaRHV6bWNiWWV0eE1mTHBkSzNMNzBBMEVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi9jMDMwMWQtNTgwMS00YWM2LWI1MDMt
NDRlYTY0NzIxYzllLzEvMnV2M24wWnduWEpLQlVUY3dwYTFsYzBZazhzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi9jMDMwMWQtNTgwMS00YWM2LWI1MDMtNDRlYTY0NzIxYzll
LzEvZktaRHV6bWNiWWV0eE1mTHBkSzNMNzBBMEVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYJAMA0G
CSqGSIb3DQEBCwUAA4IBAQDFTBjePqdZ78wsNbNXoM9ANN8vO12nZ45KH66OT/W6
I5kn4+C+/Eym0s4uswGtGlQLv7c5eCL6t36cjg+gA8o0+M9WnLPd8jULHDzJbzLn
ePhpWKhG53MFFbn8CYGkYPbnd5U4naY4WBIhNG7RGJB6oes8Qp3wt2LrV9rwzrRH
hX+Nun2SsnmiQ99l9cLo135nVcXkQq4aUoWMAtLkBXMnuBF5dcKfQCAFbjGUnvVw
oPcQZAtPARv27MAex/qf7ILUZV4U7RCiI+YYXhY5SAoG14m/LljLom9MB/x0wAJ2
iFdogJX3FGHWoWXtN8nCrVIZPwwPe9j/8iaPVoBceXWF
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:17:02 2025 by rpki-client