Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/38b542-4677-4a7e-b212-c8acce156f0d/1/HjqfyBCKqObBW6xHUc7Yhi422ac.roa
File: HjqfyBCKqObBW6xHUc7Yhi422ac.roa (raw, json)
Hash identifier: OQKG6CvrRUzIYDZOsJGAryC2WEGAPvEcvglUFUlaVvc=
Subject key identifier: 1E:3A:9F:C8:10:8A:A8:E6:C1:5B:AC:47:51:CE:D8:86:2E:36:D9:A7
Certificate issuer: /CN=60c9aa8b71e548bd7565ba663fa32f7d1aec41ab
Certificate serial: 018433138D836AD5C801128B267FD11032DC
Authority key identifier: 60:C9:AA:8B:71:E5:48:BD:75:65:BA:66:3F:A3:2F:7D:1A:EC:41:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YMmqi3HlSL11ZbpmP6MvfRrsQas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/38b542-4677-4a7e-b212-c8acce156f0d/1/HjqfyBCKqObBW6xHUc7Yhi422ac.roa
Signing time: Tue 01 Nov 2022 12:03:50 +0000
ROA not before: Tue 01 Nov 2022 12:03:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 14315
IP address blocks: 45.155.226.0/24 maxlen: 24
45.155.224.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:33:13:8d:83:6a:d5:c8:01:12:8b:26:7f:d1:10:32:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60c9aa8b71e548bd7565ba663fa32f7d1aec41ab
Validity
Not Before: Nov 1 12:03:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1e3a9fc8108aa8e6c15bac4751ced8862e36d9a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:77:a9:4e:d0:8b:a0:05:aa:60:64:57:d5:b0:
e9:59:52:29:ec:fb:ab:2f:53:1e:51:70:61:86:22:
87:b1:10:7f:c1:cd:0f:11:1a:0a:a2:21:ea:fc:8a:
db:b0:ef:f2:a4:c0:8f:52:c7:54:77:1d:8b:77:b4:
ff:d5:e9:78:55:c9:2f:ab:63:94:ae:88:11:d6:f6:
b4:d3:e9:bb:3c:26:09:fc:36:7b:ea:cf:a7:17:1f:
ea:b0:aa:5c:5a:4e:a4:15:5e:7e:b1:24:38:b0:15:
48:e9:d8:9c:f4:e6:95:6f:28:96:bc:28:e1:79:92:
c4:63:95:ee:58:14:51:67:a5:80:4f:bb:45:65:0b:
11:2f:59:5f:69:62:ca:c9:8a:34:5a:22:f7:d0:52:
94:2e:1a:b1:19:cf:db:fa:22:06:56:8e:76:5f:5c:
77:98:de:c8:31:35:0a:1d:ad:a7:05:0c:95:1f:22:
df:de:fd:71:40:2a:8d:20:86:b2:24:95:79:15:4b:
79:c9:38:70:1a:50:23:26:17:52:0e:a8:3b:a5:91:
90:26:71:19:f8:47:9c:26:5a:ec:bc:5c:43:de:5d:
76:48:90:a2:06:33:7d:17:56:79:0f:33:7b:cf:e2:
9b:9a:b3:80:78:8a:42:40:37:5f:c0:03:1a:af:29:
f9:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:3A:9F:C8:10:8A:A8:E6:C1:5B:AC:47:51:CE:D8:86:2E:36:D9:A7
X509v3 Authority Key Identifier:
keyid:60:C9:AA:8B:71:E5:48:BD:75:65:BA:66:3F:A3:2F:7D:1A:EC:41:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YMmqi3HlSL11ZbpmP6MvfRrsQas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/38b542-4677-4a7e-b212-c8acce156f0d/1/HjqfyBCKqObBW6xHUc7Yhi422ac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/38b542-4677-4a7e-b212-c8acce156f0d/1/YMmqi3HlSL11ZbpmP6MvfRrsQas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.224.0/24
45.155.226.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:c7:a3:37:ea:fd:0c:6c:fa:ab:bd:cf:b4:26:41:bd:cd:9a:
31:a8:35:4a:60:61:09:b2:4a:3a:25:a6:3b:12:53:9e:b4:3e:
d2:9b:72:7d:c5:aa:14:a1:78:f1:91:97:c5:f7:96:87:9b:e1:
13:54:49:72:22:b4:ab:fc:39:b9:45:32:62:2d:b2:d5:78:b6:
b6:2f:0f:09:4d:59:c6:32:40:52:3a:9a:16:67:15:08:f0:80:
cb:a8:af:bf:dd:cf:97:7c:f3:be:ed:7f:f2:7b:25:97:33:cf:
4d:fb:f7:94:17:66:2c:55:ac:75:47:fd:23:7e:66:89:97:4a:
50:31:ea:08:7a:bf:ee:13:7a:c0:66:32:0d:2b:39:f5:07:21:
57:06:26:bb:b3:18:fb:ea:1f:cf:41:1c:30:aa:05:cd:28:d3:
73:b8:e9:b8:ff:e7:5d:cd:f3:d3:05:9d:98:34:79:51:db:8f:
db:84:df:d3:b9:31:c2:7b:82:86:34:4a:cf:12:20:a9:de:83:
51:bb:4b:66:35:a3:8f:17:66:4e:01:09:af:a1:cd:d4:f5:4a:
70:1d:e9:85:ba:51:f0:3d:0b:19:90:b0:9d:77:f2:6d:14:6d:
5b:c0:f7:32:83:97:74:79:31:5d:12:b6:b3:08:0b:15:49:20:
06:34:d3:ac
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYQzE42DatXIARKLJn/REDLcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwYzlhYThiNzFlNTQ4YmQ3NTY1YmE2NjNmYTMyZjdkMWFl
YzQxYWIwHhcNMjIxMTAxMTIwMzUwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZTNhOWZjODEwOGFhOGU2YzE1YmFjNDc1MWNlZDg4NjJlMzZkOWE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy3epTtCLoAWqYGRX1bDpWVIp7Pur
L1MeUXBhhiKHsRB/wc0PERoKoiHq/IrbsO/ypMCPUsdUdx2Ld7T/1el4Vckvq2OU
rogR1va00+m7PCYJ/DZ76s+nFx/qsKpcWk6kFV5+sSQ4sBVI6dic9OaVbyiWvCjh
eZLEY5XuWBRRZ6WAT7tFZQsRL1lfaWLKyYo0WiL30FKULhqxGc/b+iIGVo52X1x3
mN7IMTUKHa2nBQyVHyLf3v1xQCqNIIayJJV5FUt5yThwGlAjJhdSDqg7pZGQJnEZ
+EecJlrsvFxD3l12SJCiBjN9F1Z5DzN7z+KbmrOAeIpCQDdfwAMaryn5xwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFB46n8gQiqjmwVusR1HO2IYuNtmnMB8GA1UdIwQY
MBaAFGDJqotx5Ui9dWW6Zj+jL30a7EGrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWU1tcWkzSGxTTDExWmJwbVA2TXZmUnJzUWFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS8zOGI1NDItNDY3Ny00YTdlLWIyMTIt
YzhhY2NlMTU2ZjBkLzEvSGpxZnlCQ0txT2JCVzZ4SFVjN1loaTQyMmFjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS8zOGI1NDItNDY3Ny00YTdlLWIyMTItYzhhY2NlMTU2ZjBk
LzEvWU1tcWkzSGxTTDExWmJwbVA2TXZmUnJzUWFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALZvgAwQA
LZviMA0GCSqGSIb3DQEBCwUAA4IBAQA8x6M36v0MbPqrvc+0JkG9zZoxqDVKYGEJ
sko6JaY7ElOetD7Sm3J9xaoUoXjxkZfF95aHm+ETVElyIrSr/Dm5RTJiLbLVeLa2
Lw8JTVnGMkBSOpoWZxUI8IDLqK+/3c+XfPO+7X/yeyWXM89N+/eUF2YsVax1R/0j
fmaJl0pQMeoIer/uE3rAZjINKzn1ByFXBia7sxj76h/PQRwwqgXNKNNzuOm4/+dd
zfPTBZ2YNHlR24/bhN/TuTHCe4KGNErPEiCp3oNRu0tmNaOPF2ZOAQmvoc3U9Upw
HemFulHwPQsZkLCdd/JtFG1bwPcyg5d0eTFdErazCAsVSSAGNNOs
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:16:35 2025 by rpki-client