Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/0735e3-00aa-405d-89bb-96a404c790b7/1/gcgEWEfurbOdKlXXk-Gz2AuCk3M.roa
File: gcgEWEfurbOdKlXXk-Gz2AuCk3M.roa (raw, json)
Hash identifier: +YSUvsMoa4h8t44F6FGtpUZ8jvBfmnL7H9CGrDux7+M=
Subject key identifier: 81:C8:04:58:47:EE:AD:B3:9D:2A:55:D7:93:E1:B3:D8:0B:82:93:73
Certificate issuer: /CN=787650d0951529b1a817232c12c42e49b889e1b8
Certificate serial: 0182EFEED39DE7DC393502C62EA780BB9B2E
Authority key identifier: 78:76:50:D0:95:15:29:B1:A8:17:23:2C:12:C4:2E:49:B8:89:E1:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eHZQ0JUVKbGoFyMsEsQuSbiJ4bg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/0735e3-00aa-405d-89bb-96a404c790b7/1/gcgEWEfurbOdKlXXk-Gz2AuCk3M.roa
Signing time: Tue 30 Aug 2022 18:06:22 +0000
ROA not before: Tue 30 Aug 2022 18:06:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211237
IP address blocks: 45.150.149.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:ef:ee:d3:9d:e7:dc:39:35:02:c6:2e:a7:80:bb:9b:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=787650d0951529b1a817232c12c42e49b889e1b8
Validity
Not Before: Aug 30 18:06:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=81c8045847eeadb39d2a55d793e1b3d80b829373
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:cd:50:2d:74:e4:3d:af:2c:c9:04:65:61:cd:
29:1d:2b:3b:70:cc:32:b5:ef:d8:89:a7:35:f1:7e:
6e:e4:80:eb:4b:0c:94:b0:5b:b0:fd:78:fc:f3:b0:
14:38:19:d3:a5:a9:49:8f:88:65:3f:ca:d1:8d:58:
9a:bc:30:ec:58:15:8a:09:b8:f5:fa:b5:a9:eb:51:
2e:85:07:62:8a:ab:0b:18:7f:2a:fa:b1:46:78:7a:
dd:5e:4f:db:05:c2:86:05:f5:2a:5f:70:35:54:83:
2b:54:a2:fc:72:99:cb:f4:6c:3a:cd:f9:47:a3:ef:
d3:dd:1e:f7:4c:77:a8:22:d8:55:09:aa:af:c8:69:
1d:53:45:30:54:dc:2d:ee:fa:91:8c:03:cc:4c:1c:
67:63:27:cb:24:8d:11:5b:e0:0e:38:f8:5a:92:04:
16:a2:ad:01:85:d8:e4:f3:3a:b8:f7:51:70:bb:92:
f5:4f:b0:1f:ec:b4:0f:aa:18:24:0d:18:43:e0:3b:
d2:9d:28:2d:05:8d:8e:22:17:84:91:50:ca:f4:da:
61:72:c6:77:1f:f7:b8:6f:6a:d0:7d:20:d4:e0:1e:
f1:ba:df:5b:e3:e7:37:c7:b0:36:eb:89:fd:8f:dc:
ec:73:70:a8:6a:56:d9:e2:b3:cf:1f:16:04:91:2b:
3e:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:C8:04:58:47:EE:AD:B3:9D:2A:55:D7:93:E1:B3:D8:0B:82:93:73
X509v3 Authority Key Identifier:
keyid:78:76:50:D0:95:15:29:B1:A8:17:23:2C:12:C4:2E:49:B8:89:E1:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eHZQ0JUVKbGoFyMsEsQuSbiJ4bg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/0735e3-00aa-405d-89bb-96a404c790b7/1/gcgEWEfurbOdKlXXk-Gz2AuCk3M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/0735e3-00aa-405d-89bb-96a404c790b7/1/eHZQ0JUVKbGoFyMsEsQuSbiJ4bg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.149.0/24
Signature Algorithm: sha256WithRSAEncryption
72:3d:38:2f:1b:b9:eb:ff:58:3a:a6:58:70:1c:35:58:40:b4:
6f:8b:4e:48:a7:bd:43:fe:20:28:a7:3f:9c:99:06:cc:17:f1:
5d:10:0f:a0:94:b9:03:ee:00:1f:28:1a:e8:ff:b9:c4:ec:36:
64:7b:64:79:49:16:78:28:33:34:05:ee:4a:43:a7:aa:3a:07:
99:9f:fb:ab:c7:f3:2f:9c:dd:41:a3:53:b5:19:06:76:48:61:
c1:fe:11:19:76:65:1e:ed:bf:7f:19:78:e8:14:1a:04:0a:3a:
00:3d:5a:59:16:d0:1e:74:3c:58:36:e1:b8:fa:75:d6:5d:1d:
9a:df:5c:8e:d4:bb:75:3c:39:29:61:80:21:78:61:60:cc:76:
8f:79:8a:b9:37:16:ad:cd:2e:ce:40:46:98:e1:bf:07:50:1c:
45:2d:05:23:48:58:1f:8d:9e:53:1b:68:a4:b2:4b:bf:0d:70:
3a:88:e2:e6:71:11:e9:e8:0d:0e:c9:9c:a6:e5:19:59:62:f7:
73:dd:12:01:e8:47:f9:6e:4f:4e:fa:1a:30:92:c0:a7:e7:6e:
d4:5e:5d:11:1d:ed:e3:de:ff:d5:46:4d:a5:61:60:e5:76:d8:
fd:6d:9f:67:71:1f:7e:5d:2a:b4:b4:82:09:65:b7:0e:38:98:
a0:fa:99:99
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYLv7tOd59w5NQLGLqeAu5suMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc4NzY1MGQwOTUxNTI5YjFhODE3MjMyYzEyYzQyZTQ5Yjg4
OWUxYjgwHhcNMjIwODMwMTgwNjIyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MWM4MDQ1ODQ3ZWVhZGIzOWQyYTU1ZDc5M2UxYjNkODBiODI5MzczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoM1QLXTkPa8syQRlYc0pHSs7cMwy
te/Yiac18X5u5IDrSwyUsFuw/Xj887AUOBnTpalJj4hlP8rRjViavDDsWBWKCbj1
+rWp61EuhQdiiqsLGH8q+rFGeHrdXk/bBcKGBfUqX3A1VIMrVKL8cpnL9Gw6zflH
o+/T3R73THeoIthVCaqvyGkdU0UwVNwt7vqRjAPMTBxnYyfLJI0RW+AOOPhakgQW
oq0Bhdjk8zq491Fwu5L1T7Af7LQPqhgkDRhD4DvSnSgtBY2OIheEkVDK9NphcsZ3
H/e4b2rQfSDU4B7xut9b4+c3x7A264n9j9zsc3CoalbZ4rPPHxYEkSs+BwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIHIBFhH7q2znSpV15Phs9gLgpNzMB8GA1UdIwQY
MBaAFHh2UNCVFSmxqBcjLBLELkm4ieG4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZUhaUTBKVVZLYkdvRnlNc0VzUXVTYmlKNGJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi8wNzM1ZTMtMDBhYS00MDVkLTg5YmIt
OTZhNDA0Yzc5MGI3LzEvZ2NnRVdFZnVyYk9kS2xYWGstR3oyQXVDazNNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi8wNzM1ZTMtMDBhYS00MDVkLTg5YmItOTZhNDA0Yzc5MGI3
LzEvZUhaUTBKVVZLYkdvRnlNc0VzUXVTYmlKNGJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZaVMA0G
CSqGSIb3DQEBCwUAA4IBAQByPTgvG7nr/1g6plhwHDVYQLRvi05Ip71D/iAopz+c
mQbMF/FdEA+glLkD7gAfKBro/7nE7DZke2R5SRZ4KDM0Be5KQ6eqOgeZn/urx/Mv
nN1Bo1O1GQZ2SGHB/hEZdmUe7b9/GXjoFBoECjoAPVpZFtAedDxYNuG4+nXWXR2a
31yO1Lt1PDkpYYAheGFgzHaPeYq5NxatzS7OQEaY4b8HUBxFLQUjSFgfjZ5TG2ik
sku/DXA6iOLmcRHp6A0OyZym5RlZYvdz3RIB6Ef5bk9O+howksCn527UXl0RHe3j
3v/VRk2lYWDldtj9bZ9ncR9+XSq0tIIJZbcOOJig+pmZ
-----END CERTIFICATE-----
Generated at Mon Apr 7 22:50:16 2025 by rpki-client