Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/38b542-4677-4a7e-b212-c8acce156f0d/1/If8gXr9EYe0iYVKxx6njX0k3nDE.roa
File: If8gXr9EYe0iYVKxx6njX0k3nDE.roa (raw, json)
Hash identifier: cg9B6PoatkzkhSitsPYDPbJi5T8yUPg0HUplTE/ccMA=
Subject key identifier: 21:FF:20:5E:BF:44:61:ED:22:61:52:B1:C7:A9:E3:5F:49:37:9C:31
Certificate issuer: /CN=60c9aa8b71e548bd7565ba663fa32f7d1aec41ab
Certificate serial: 0188FA96F59CDDD98284D6A6B22010F6D5C1
Authority key identifier: 60:C9:AA:8B:71:E5:48:BD:75:65:BA:66:3F:A3:2F:7D:1A:EC:41:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YMmqi3HlSL11ZbpmP6MvfRrsQas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/38b542-4677-4a7e-b212-c8acce156f0d/1/If8gXr9EYe0iYVKxx6njX0k3nDE.roa
Signing time: Tue 27 Jun 2023 02:02:57 +0000
ROA not before: Tue 27 Jun 2023 02:02:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61368
IP address blocks: 45.156.221.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:fa:96:f5:9c:dd:d9:82:84:d6:a6:b2:20:10:f6:d5:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60c9aa8b71e548bd7565ba663fa32f7d1aec41ab
Validity
Not Before: Jun 27 02:02:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=21ff205ebf4461ed226152b1c7a9e35f49379c31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:82:c1:94:40:94:51:41:63:bb:34:11:62:4b:
ca:2c:62:02:b9:28:2d:ae:e4:f0:19:59:73:3d:05:
84:49:04:09:e2:76:83:f5:6f:58:51:54:4a:fd:1b:
c0:c6:4b:59:05:28:77:23:c4:02:55:10:71:51:8e:
f7:f6:39:7f:14:3b:17:d7:d0:cb:10:f1:b1:9f:79:
09:93:30:7f:2b:dc:75:bb:6c:77:59:9d:fc:97:91:
21:5e:9f:d3:ab:40:8a:ef:19:9e:f1:5e:17:48:f7:
9d:9a:76:70:dd:28:5f:8a:e6:29:a2:60:91:a9:e2:
f1:05:b3:7c:7f:d6:35:30:59:2b:e4:0c:97:7e:a9:
90:04:7d:be:97:ce:49:02:aa:8d:4b:0c:22:29:ee:
b9:ef:1a:7e:c7:72:5c:ad:4b:a1:0f:e3:f1:9b:f6:
2e:d8:bb:9b:39:1a:65:b4:34:d6:81:de:fe:f2:27:
11:74:69:b0:e6:40:09:b4:a5:c0:fb:51:b1:07:32:
2d:0b:e9:d1:67:f9:98:6e:4f:e9:7a:cf:ce:a8:eb:
0d:ac:a6:6d:f7:39:95:28:f3:29:4b:cc:3b:ef:89:
42:82:0f:82:55:71:07:d0:88:8a:a7:2c:fe:3c:c3:
58:af:df:b4:d9:ff:86:33:f1:5c:e7:63:72:e2:56:
77:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:FF:20:5E:BF:44:61:ED:22:61:52:B1:C7:A9:E3:5F:49:37:9C:31
X509v3 Authority Key Identifier:
keyid:60:C9:AA:8B:71:E5:48:BD:75:65:BA:66:3F:A3:2F:7D:1A:EC:41:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YMmqi3HlSL11ZbpmP6MvfRrsQas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/38b542-4677-4a7e-b212-c8acce156f0d/1/If8gXr9EYe0iYVKxx6njX0k3nDE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/38b542-4677-4a7e-b212-c8acce156f0d/1/YMmqi3HlSL11ZbpmP6MvfRrsQas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.156.221.0/24
Signature Algorithm: sha256WithRSAEncryption
29:9d:b5:f8:d8:c3:c1:2c:f4:eb:23:36:c2:65:44:8d:3c:a6:
d5:bc:a5:36:e0:36:4f:d3:80:6a:c5:b8:03:69:d2:a8:0a:16:
06:97:98:9e:39:33:d5:47:bb:ac:43:f6:d9:be:35:ff:c3:47:
9c:4b:c5:63:ed:b6:41:99:65:88:5a:55:cf:2c:1a:a0:b7:f1:
a2:2a:86:c3:ac:c9:90:e5:ea:73:d3:75:74:de:c4:51:d5:d5:
04:49:67:77:9e:1f:bb:48:f4:9b:41:57:ae:9a:bd:ec:27:16:
55:9b:d1:af:9d:a7:32:75:4a:a5:63:75:82:8f:f3:05:36:70:
20:69:c6:3e:a6:16:fd:b1:08:ce:e3:8d:7a:a8:d4:52:5f:a7:
01:df:2f:94:67:e4:51:54:14:70:50:85:2a:c5:f9:f5:4d:ae:
c4:13:57:82:6b:c2:36:13:4f:8d:e5:08:ae:3e:d2:4d:89:f8:
dc:ea:9c:60:8b:ab:b5:74:2b:a2:2c:36:4a:e1:8f:8c:e1:f0:
3d:72:b7:1e:23:d6:64:38:c0:c9:fe:5b:40:4d:3b:2b:c1:b9:
9c:2a:c7:b0:bd:40:28:a9:48:a3:69:6f:a6:3c:81:24:ae:c4:
60:33:dc:f5:ce:9f:97:76:a1:1c:ab:56:42:e4:9b:c4:77:60:
dc:3f:e6:fc
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYj6lvWc3dmChNamsiAQ9tXBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwYzlhYThiNzFlNTQ4YmQ3NTY1YmE2NjNmYTMyZjdkMWFl
YzQxYWIwHhcNMjMwNjI3MDIwMjU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMWZmMjA1ZWJmNDQ2MWVkMjI2MTUyYjFjN2E5ZTM1ZjQ5Mzc5YzMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgoLBlECUUUFjuzQRYkvKLGICuSgt
ruTwGVlzPQWESQQJ4naD9W9YUVRK/RvAxktZBSh3I8QCVRBxUY739jl/FDsX19DL
EPGxn3kJkzB/K9x1u2x3WZ38l5EhXp/Tq0CK7xme8V4XSPedmnZw3ShfiuYpomCR
qeLxBbN8f9Y1MFkr5AyXfqmQBH2+l85JAqqNSwwiKe657xp+x3JcrUuhD+Pxm/Yu
2LubORpltDTWgd7+8icRdGmw5kAJtKXA+1GxBzItC+nRZ/mYbk/pes/OqOsNrKZt
9zmVKPMpS8w774lCgg+CVXEH0IiKpyz+PMNYr9+02f+GM/Fc52Ny4lZ3NwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCH/IF6/RGHtImFSscep419JN5wxMB8GA1UdIwQY
MBaAFGDJqotx5Ui9dWW6Zj+jL30a7EGrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWU1tcWkzSGxTTDExWmJwbVA2TXZmUnJzUWFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS8zOGI1NDItNDY3Ny00YTdlLWIyMTIt
YzhhY2NlMTU2ZjBkLzEvSWY4Z1hyOUVZZTBpWVZLeHg2bmpYMGszbkRFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS8zOGI1NDItNDY3Ny00YTdlLWIyMTItYzhhY2NlMTU2ZjBk
LzEvWU1tcWkzSGxTTDExWmJwbVA2TXZmUnJzUWFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZzdMA0G
CSqGSIb3DQEBCwUAA4IBAQApnbX42MPBLPTrIzbCZUSNPKbVvKU24DZP04BqxbgD
adKoChYGl5ieOTPVR7usQ/bZvjX/w0ecS8Vj7bZBmWWIWlXPLBqgt/GiKobDrMmQ
5epz03V03sRR1dUESWd3nh+7SPSbQVeumr3sJxZVm9GvnacydUqlY3WCj/MFNnAg
acY+phb9sQjO4416qNRSX6cB3y+UZ+RRVBRwUIUqxfn1Ta7EE1eCa8I2E0+N5Qiu
PtJNifjc6pxgi6u1dCuiLDZK4Y+M4fA9crceI9ZkOMDJ/ltATTsrwbmcKsewvUAo
qUijaW+mPIEkrsRgM9z1zp+XdqEcq1ZC5JvEd2DcP+b8
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:16:46 2025 by rpki-client