Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/e203ad-2e94-49b2-9d12-a03b2a3d8c29/1/8PphXYr8vLC6AuhzDvOWB3dvDwo.roa
File: 8PphXYr8vLC6AuhzDvOWB3dvDwo.roa (raw, json)
Hash identifier: q/gqYDRcwWYkolce/VdkLerUjhoVuHQpyeRwfT6lrgM=
Subject key identifier: F0:FA:61:5D:8A:FC:BC:B0:BA:02:E8:73:0E:F3:96:07:77:6F:0F:0A
Certificate issuer: /CN=ef2759c202a0b25a47807cafa1ccbbad96c28a62
Certificate serial: 025B0160
Authority key identifier: EF:27:59:C2:02:A0:B2:5A:47:80:7C:AF:A1:CC:BB:AD:96:C2:8A:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7ydZwgKgslpHgHyvocy7rZbCimI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/e203ad-2e94-49b2-9d12-a03b2a3d8c29/1/8PphXYr8vLC6AuhzDvOWB3dvDwo.roa
Signing time: Sat 01 Jan 2022 13:05:29 +0000
ROA not before: Sat 01 Jan 2022 13:05:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3356
IP address blocks: 45.147.232.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 39518560 (0x25b0160)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef2759c202a0b25a47807cafa1ccbbad96c28a62
Validity
Not Before: Jan 1 13:05:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f0fa615d8afcbcb0ba02e8730ef39607776f0f0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ab:6d:80:c8:68:7b:c6:19:c6:90:23:fb:9c:
39:f3:9b:4e:0e:f8:be:41:82:f6:c2:bc:fa:0e:18:
87:a0:9d:96:ea:a3:19:f1:f0:46:7a:8e:cb:fb:93:
60:db:9c:f3:b7:aa:6c:90:6d:a3:b8:b6:a7:98:e9:
14:ca:85:8b:13:0b:4d:c3:45:f3:ff:df:89:dd:2f:
69:4a:71:c9:36:c2:45:15:a0:24:90:dc:8a:eb:02:
7c:de:ee:90:4c:18:c4:dc:7f:74:9a:08:f1:4d:98:
97:b6:e8:d5:5a:3d:77:47:82:18:dd:07:c5:b2:f4:
24:77:f5:3a:b2:01:2c:aa:05:3d:e6:d4:29:74:fe:
26:7a:5c:e9:31:58:9a:17:3f:76:9f:2c:30:21:a4:
33:b6:7f:fd:00:33:d2:f3:ac:91:f4:3d:9a:ed:49:
57:3e:9b:f4:bf:e7:bc:f2:e2:e0:bc:be:3c:4a:dc:
03:d0:88:d9:de:54:39:ca:e0:bb:6f:ca:a0:41:8b:
eb:11:f3:bb:50:1f:34:ee:c3:df:0f:76:41:6f:5c:
cc:a2:33:d3:e5:50:cc:1c:8a:78:19:ef:d4:50:d4:
59:71:11:17:ff:db:55:1b:a6:89:5b:23:fd:0a:1d:
10:9a:59:7b:21:7e:b8:0e:8d:c2:2e:d5:7f:5f:15:
47:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:FA:61:5D:8A:FC:BC:B0:BA:02:E8:73:0E:F3:96:07:77:6F:0F:0A
X509v3 Authority Key Identifier:
keyid:EF:27:59:C2:02:A0:B2:5A:47:80:7C:AF:A1:CC:BB:AD:96:C2:8A:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7ydZwgKgslpHgHyvocy7rZbCimI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/e203ad-2e94-49b2-9d12-a03b2a3d8c29/1/8PphXYr8vLC6AuhzDvOWB3dvDwo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/e203ad-2e94-49b2-9d12-a03b2a3d8c29/1/7ydZwgKgslpHgHyvocy7rZbCimI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.147.232.0/22
Signature Algorithm: sha256WithRSAEncryption
7c:40:3b:be:5a:3b:06:9e:ab:dc:15:30:a3:d5:2e:95:ab:18:
00:55:95:3a:18:e9:85:2e:51:93:c7:59:db:29:bf:92:5d:ee:
1c:f6:5b:0b:05:6c:6c:23:0f:80:1d:93:4c:c8:78:6f:d5:b7:
6f:c0:ff:39:96:bb:dc:06:ba:9f:b2:35:38:47:2c:ee:8d:fc:
d5:5f:4d:bd:d5:ae:a2:10:24:18:a8:9e:26:4e:bb:fc:e7:1b:
f8:f0:e0:4b:d6:9d:1d:ef:98:26:7a:5e:35:9a:d3:9e:b6:73:
c5:33:d2:35:b3:a2:66:1a:e6:4c:ec:16:77:f8:d2:26:f2:70:
7a:85:90:90:cb:14:39:4f:29:eb:0d:1c:3e:a4:4e:4b:58:28:
2f:c7:f8:88:d7:4b:5f:5c:30:33:51:60:4f:c7:ed:b7:3b:80:
e6:01:d8:2b:6c:66:a0:f1:73:6b:92:96:e3:db:08:ab:cb:26:
86:ab:8a:3e:37:67:4b:97:97:48:c8:c7:67:3c:12:19:70:27:
cb:9f:42:24:1b:ac:83:a7:89:93:5c:2b:73:d0:39:a5:f5:8a:
21:f0:eb:8b:28:7d:16:94:b3:74:39:72:4f:33:11:c8:b9:8b:
c1:ad:d1:cb:d1:4c:6e:a1:8c:a1:17:13:4a:d6:6a:60:5e:84:
11:77:4c:fe
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAlsBYDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhl
ZjI3NTljMjAyYTBiMjVhNDc4MDdjYWZhMWNjYmJhZDk2YzI4YTYyMB4XDTIyMDEw
MTEzMDUyOVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZjBmYTYxNWQ4YWZj
YmNiMGJhMDJlODczMGVmMzk2MDc3NzZmMGYwYTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALmrbYDIaHvGGcaQI/ucOfObTg74vkGC9sK8+g4Yh6Cdluqj
GfHwRnqOy/uTYNuc87eqbJBto7i2p5jpFMqFixMLTcNF8//fid0vaUpxyTbCRRWg
JJDciusCfN7ukEwYxNx/dJoI8U2Yl7bo1Vo9d0eCGN0HxbL0JHf1OrIBLKoFPebU
KXT+Jnpc6TFYmhc/dp8sMCGkM7Z//QAz0vOskfQ9mu1JVz6b9L/nvPLi4Ly+PErc
A9CI2d5UOcrgu2/KoEGL6xHzu1AfNO7D3w92QW9czKIz0+VQzByKeBnv1FDUWXER
F//bVRumiVsj/QodEJpZeyF+uA6Nwi7Vf18VR+cCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTw+mFdivy8sLoC6HMO85YHd28PCjAfBgNVHSMEGDAWgBTvJ1nCAqCyWkeA
fK+hzLutlsKKYjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
Lzd5ZFp3Z0tnc2xwSGdIeXZvY3k3clpiQ2ltSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYmQvZTIwM2FkLTJlOTQtNDliMi05ZDEyLWEwM2IyYTNkOGMyOS8x
LzhQcGhYWXI4dkxDNkF1aHpEdk9XQjNkdkR3by5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmQv
ZTIwM2FkLTJlOTQtNDliMi05ZDEyLWEwM2IyYTNkOGMyOS8xLzd5ZFp3Z0tnc2xw
SGdIeXZvY3k3clpiQ2ltSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAi2T6DANBgkqhkiG9w0BAQsFAAOC
AQEAfEA7vlo7Bp6r3BUwo9UulasYAFWVOhjphS5Rk8dZ2ym/kl3uHPZbCwVsbCMP
gB2TTMh4b9W3b8D/OZa73Aa6n7I1OEcs7o381V9NvdWuohAkGKieJk67/Ocb+PDg
S9adHe+YJnpeNZrTnrZzxTPSNbOiZhrmTOwWd/jSJvJweoWQkMsUOU8p6w0cPqRO
S1goL8f4iNdLX1wwM1FgT8fttzuA5gHYK2xmoPFza5KW49sIq8smhquKPjdnS5eX
SMjHZzwSGXAny59CJBusg6eJk1wrc9A5pfWKIfDriyh9FpSzdDlyTzMRyLmLwa3R
y9FMbqGMoRcTStZqYF6EEXdM/g==
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:24:09 2025 by rpki-client