Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/f82332-919e-49fa-9743-b14e63bb134d/1/vdpfAT8j4a6baqT50eXxBhk0Pp8.roa
File: vdpfAT8j4a6baqT50eXxBhk0Pp8.roa (raw, json)
Hash identifier: 5MGu/nttWhZrCrBFWtpfWwZ+W1aPAEBCQJ0SmpLgzzY=
Subject key identifier: BD:DA:5F:01:3F:23:E1:AE:9B:6A:A4:F9:D1:E5:F1:06:19:34:3E:9F
Certificate issuer: /CN=25601600e8450ccd1ea5ee324cc82160e290988f
Certificate serial: 0183B6FEE544C1CF30555D9DD01C476B9396
Authority key identifier: 25:60:16:00:E8:45:0C:CD:1E:A5:EE:32:4C:C8:21:60:E2:90:98:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JWAWAOhFDM0epe4yTMghYOKQmI8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/f82332-919e-49fa-9743-b14e63bb134d/1/vdpfAT8j4a6baqT50eXxBhk0Pp8.roa
Signing time: Sat 08 Oct 2022 09:48:21 +0000
ROA not before: Sat 08 Oct 2022 09:48:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206065
IP address blocks: 45.156.200.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:b6:fe:e5:44:c1:cf:30:55:5d:9d:d0:1c:47:6b:93:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25601600e8450ccd1ea5ee324cc82160e290988f
Validity
Not Before: Oct 8 09:48:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bdda5f013f23e1ae9b6aa4f9d1e5f10619343e9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:93:f0:fd:60:80:06:e5:ac:02:5b:88:eb:ec:
df:be:dd:db:3d:56:52:2f:99:be:3c:e7:f9:d7:8d:
bf:ec:b3:5c:d4:b0:81:7a:45:66:d5:7e:8b:4c:64:
d9:8b:9c:19:d6:aa:e9:bd:f0:6f:a4:86:f3:90:48:
d9:bd:19:3c:50:61:dc:af:37:fa:87:be:a5:01:4c:
cf:c0:79:60:a7:18:7e:a6:80:9d:ef:4d:d8:82:37:
9f:e0:a8:33:5d:c7:54:62:43:aa:c3:92:b7:b8:69:
5e:5a:ba:ee:a8:8a:ca:cc:51:e2:53:fd:f1:55:95:
5d:71:2b:f1:6a:84:9c:f3:87:02:c2:ef:80:5a:65:
48:03:16:be:b9:ea:fe:10:68:67:d6:bf:af:c1:df:
40:1a:ea:7a:25:80:2b:bc:0e:c0:68:ac:a4:b3:47:
61:a7:88:7e:82:bc:2f:80:22:89:aa:2c:7f:e8:6f:
ed:d9:f9:8e:05:72:e1:a9:21:49:40:66:5c:da:0e:
b2:62:a5:62:74:83:8f:98:b4:5d:cf:82:5b:22:01:
b5:c2:b3:11:31:07:0c:59:68:85:46:15:38:33:70:
c5:98:b6:d7:c2:f0:23:96:c4:1b:6e:fd:87:fa:d3:
d4:79:70:17:8d:c0:f4:40:ac:c1:2a:63:92:5a:97:
c1:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:DA:5F:01:3F:23:E1:AE:9B:6A:A4:F9:D1:E5:F1:06:19:34:3E:9F
X509v3 Authority Key Identifier:
keyid:25:60:16:00:E8:45:0C:CD:1E:A5:EE:32:4C:C8:21:60:E2:90:98:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JWAWAOhFDM0epe4yTMghYOKQmI8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/f82332-919e-49fa-9743-b14e63bb134d/1/vdpfAT8j4a6baqT50eXxBhk0Pp8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/f82332-919e-49fa-9743-b14e63bb134d/1/JWAWAOhFDM0epe4yTMghYOKQmI8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.156.200.0/22
Signature Algorithm: sha256WithRSAEncryption
68:b9:67:44:f0:1d:2a:e2:0d:81:53:09:88:89:0b:f4:63:05:
88:4a:2d:e5:20:66:84:34:1d:cd:dd:0f:d1:66:22:9d:c6:8e:
7f:0a:fa:4a:b1:36:4f:22:c4:c6:94:eb:d5:ba:2a:41:4d:04:
78:9b:fa:95:65:f1:e8:37:40:fe:ee:9c:a9:c7:60:69:87:76:
c0:ac:22:0c:45:f5:77:02:5b:78:de:c4:e4:59:00:34:01:fd:
53:96:5b:e1:d8:ca:6c:54:e7:02:be:33:7c:a6:23:6a:2e:b4:
40:85:e2:ff:1d:85:c5:c4:27:0a:89:6d:4d:0a:ca:40:df:9c:
59:8d:48:3b:ff:1d:f0:1e:c7:cf:96:7c:77:22:f7:ea:a9:09:
9b:15:40:4e:4b:cc:4e:2b:14:1b:41:ea:68:5c:07:9e:f4:26:
f0:5b:9c:37:d1:88:a4:c8:b7:be:55:d6:35:0d:b5:57:8f:ac:
2a:77:df:81:58:31:58:06:4a:38:a2:10:ab:e1:84:e0:0c:8e:
ad:c1:a3:56:4b:7d:e4:0e:7c:95:37:11:54:9a:93:87:1c:db:
63:54:32:bb:32:5c:55:44:0d:69:ec:be:be:ea:38:cd:c3:81:
92:e4:8f:0f:cc:28:c7:ec:8f:38:a5:be:67:bc:e2:c4:31:3f:
03:94:a6:0e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYO2/uVEwc8wVV2d0BxHa5OWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1NjAxNjAwZTg0NTBjY2QxZWE1ZWUzMjRjYzgyMTYwZTI5
MDk4OGYwHhcNMjIxMDA4MDk0ODIxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZGRhNWYwMTNmMjNlMWFlOWI2YWE0ZjlkMWU1ZjEwNjE5MzQzZTlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp5Pw/WCABuWsAluI6+zfvt3bPVZS
L5m+POf5142/7LNc1LCBekVm1X6LTGTZi5wZ1qrpvfBvpIbzkEjZvRk8UGHcrzf6
h76lAUzPwHlgpxh+poCd703Ygjef4KgzXcdUYkOqw5K3uGleWrruqIrKzFHiU/3x
VZVdcSvxaoSc84cCwu+AWmVIAxa+uer+EGhn1r+vwd9AGup6JYArvA7AaKyks0dh
p4h+grwvgCKJqix/6G/t2fmOBXLhqSFJQGZc2g6yYqVidIOPmLRdz4JbIgG1wrMR
MQcMWWiFRhU4M3DFmLbXwvAjlsQbbv2H+tPUeXAXjcD0QKzBKmOSWpfBAwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFL3aXwE/I+Gum2qk+dHl8QYZND6fMB8GA1UdIwQY
MBaAFCVgFgDoRQzNHqXuMkzIIWDikJiPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSldBV0FPaEZETTBlcGU0eVRNZ2hZT0tRbUk4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS9mODIzMzItOTE5ZS00OWZhLTk3NDMt
YjE0ZTYzYmIxMzRkLzEvdmRwZkFUOGo0YTZiYXFUNTBlWHhCaGswUHA4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS9mODIzMzItOTE5ZS00OWZhLTk3NDMtYjE0ZTYzYmIxMzRk
LzEvSldBV0FPaEZETTBlcGU0eVRNZ2hZT0tRbUk4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLZzIMA0G
CSqGSIb3DQEBCwUAA4IBAQBouWdE8B0q4g2BUwmIiQv0YwWISi3lIGaENB3N3Q/R
ZiKdxo5/CvpKsTZPIsTGlOvVuipBTQR4m/qVZfHoN0D+7pypx2Bph3bArCIMRfV3
Alt43sTkWQA0Af1Tllvh2MpsVOcCvjN8piNqLrRAheL/HYXFxCcKiW1NCspA35xZ
jUg7/x3wHsfPlnx3IvfqqQmbFUBOS8xOKxQbQepoXAee9CbwW5w30YikyLe+VdY1
DbVXj6wqd9+BWDFYBko4ohCr4YTgDI6twaNWS33kDnyVNxFUmpOHHNtjVDK7MlxV
RA1p7L6+6jjNw4GS5I8PzCjH7I84pb5nvOLEMT8DlKYO
-----END CERTIFICATE-----
Generated at Thu Apr 17 01:08:13 2025 by rpki-client