Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/eiOn4QFIS3utQRRbfE7TNOnhgOk.roa
File: eiOn4QFIS3utQRRbfE7TNOnhgOk.roa (raw, json)
Hash identifier: bmpmsbnj0N94xmA7bwlmNlwJYbhuFuZUXS10Sj091OI=
Subject key identifier: 7A:23:A7:E1:01:48:4B:7B:AD:41:14:5B:7C:4E:D3:34:E9:E1:80:E9
Certificate issuer: /CN=624039399017fa093dc8d503799f6ca403f0bd05
Certificate serial: 01856D785D3A9E55D02E91C5CC751467CBCE
Authority key identifier: 62:40:39:39:90:17:FA:09:3D:C8:D5:03:79:9F:6C:A4:03:F0:BD:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YkA5OZAX-gk9yNUDeZ9spAPwvQU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/eiOn4QFIS3utQRRbfE7TNOnhgOk.roa
Signing time: Sun 01 Jan 2023 13:14:42 +0000
ROA not before: Sun 01 Jan 2023 13:14:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 45.95.212.0/23 maxlen: 24
45.95.212.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:78:5d:3a:9e:55:d0:2e:91:c5:cc:75:14:67:cb:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=624039399017fa093dc8d503799f6ca403f0bd05
Validity
Not Before: Jan 1 13:14:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7a23a7e101484b7bad41145b7c4ed334e9e180e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:85:c3:25:4b:c8:57:8a:97:19:7d:ba:60:74:
4c:3c:9d:ed:e6:ec:bb:65:5c:18:15:8e:f2:87:a7:
02:3f:c4:80:9f:05:39:41:48:b8:7c:fa:4b:af:1e:
0b:f4:19:a1:35:a2:37:c9:70:cd:bf:28:7c:4a:54:
ce:c7:02:7e:1a:3e:81:15:c5:17:99:de:cb:42:c0:
46:91:1a:8a:ca:03:a9:97:3f:20:5c:03:e1:48:21:
d2:04:ee:e1:5f:7f:38:af:48:ac:d7:eb:11:f8:e2:
54:14:b5:2a:55:cc:de:e6:eb:07:24:e7:24:18:ee:
55:80:80:36:28:49:c1:28:43:b8:88:c2:73:27:e9:
df:f1:62:71:a0:c3:79:64:1e:5d:b8:5e:88:93:5a:
a3:5c:91:f9:c3:0c:d0:2c:cb:7a:b3:69:48:43:6c:
ae:d5:f4:56:74:a3:db:54:d1:a7:ab:bc:29:71:1f:
c3:d3:92:cc:61:e3:c0:ec:60:fd:12:7f:bc:06:80:
5c:ee:fd:90:d7:ba:a1:51:32:d1:35:3c:19:e5:73:
bd:8c:ee:ca:52:42:e5:a1:55:51:aa:0f:10:5f:3b:
3f:20:a4:59:46:0e:5f:98:34:b8:52:f5:e1:4a:0f:
12:5b:af:4c:3d:14:f3:0a:69:cf:aa:6d:67:03:4d:
91:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:23:A7:E1:01:48:4B:7B:AD:41:14:5B:7C:4E:D3:34:E9:E1:80:E9
X509v3 Authority Key Identifier:
keyid:62:40:39:39:90:17:FA:09:3D:C8:D5:03:79:9F:6C:A4:03:F0:BD:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YkA5OZAX-gk9yNUDeZ9spAPwvQU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/eiOn4QFIS3utQRRbfE7TNOnhgOk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/YkA5OZAX-gk9yNUDeZ9spAPwvQU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.212.0/22
Signature Algorithm: sha256WithRSAEncryption
2b:dc:07:a3:cd:66:ed:b8:f2:08:4e:46:52:e4:35:9d:a9:b7:
d1:42:e2:b4:20:35:0a:e9:d2:b3:22:7a:86:b3:64:de:47:f8:
76:0c:d6:8b:e4:20:aa:14:82:24:66:2d:eb:55:7f:ce:80:5a:
6f:49:42:4e:37:26:c5:5a:3c:97:b5:ce:05:ca:45:f8:1d:83:
58:98:47:1f:30:a2:df:6a:04:bb:5b:d8:54:7a:28:34:f7:36:
85:e2:cd:bd:10:d1:98:4f:b6:d4:29:1f:e3:4f:b0:fb:41:d8:
e0:6d:52:a1:9e:12:9e:92:7f:5e:dd:b1:3e:e3:58:5c:6a:e3:
e0:e2:f4:f7:b5:1d:73:68:e1:04:13:8e:4f:50:de:13:5f:2a:
9b:95:04:d6:fe:45:12:38:73:e6:bc:63:38:cf:b9:ec:ea:d9:
50:6f:66:17:ab:df:ea:02:87:b8:1d:79:0f:6a:31:50:c3:4c:
73:3d:cc:c9:82:b4:dc:1c:32:11:bc:74:12:62:d6:3f:6f:b9:
77:7f:88:85:e8:fb:d6:0c:db:c1:f9:a2:2f:e0:52:0c:77:84:
92:85:57:91:2c:92:a5:52:19:25:21:14:ba:15:8d:54:25:6c:
03:7c:38:5f:fd:bf:70:9e:fd:c3:a7:89:6a:c8:3b:7e:9f:ac:
2c:bf:6b:75
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVteF06nlXQLpHFzHUUZ8vOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyNDAzOTM5OTAxN2ZhMDkzZGM4ZDUwMzc5OWY2Y2E0MDNm
MGJkMDUwHhcNMjMwMTAxMTMxNDQyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YTIzYTdlMTAxNDg0YjdiYWQ0MTE0NWI3YzRlZDMzNGU5ZTE4MGU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2oXDJUvIV4qXGX26YHRMPJ3t5uy7
ZVwYFY7yh6cCP8SAnwU5QUi4fPpLrx4L9BmhNaI3yXDNvyh8SlTOxwJ+Gj6BFcUX
md7LQsBGkRqKygOplz8gXAPhSCHSBO7hX384r0is1+sR+OJUFLUqVcze5usHJOck
GO5VgIA2KEnBKEO4iMJzJ+nf8WJxoMN5ZB5duF6Ik1qjXJH5wwzQLMt6s2lIQ2yu
1fRWdKPbVNGnq7wpcR/D05LMYePA7GD9En+8BoBc7v2Q17qhUTLRNTwZ5XO9jO7K
UkLloVVRqg8QXzs/IKRZRg5fmDS4UvXhSg8SW69MPRTzCmnPqm1nA02RpQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHojp+EBSEt7rUEUW3xO0zTp4YDpMB8GA1UdIwQY
MBaAFGJAOTmQF/oJPcjVA3mfbKQD8L0FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWtBNU9aQVgtZ2s5eU5VRGVaOXNwQVB3dlFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9lYjIzOWEtMzNjOC00ZGJkLWJjOTYt
MzI1OTQ5NmU3YzVmLzEvZWlPbjRRRklTM3V0UVJSYmZFN1ROT25oZ09rLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy9lYjIzOWEtMzNjOC00ZGJkLWJjOTYtMzI1OTQ5NmU3YzVm
LzEvWWtBNU9aQVgtZ2s5eU5VRGVaOXNwQVB3dlFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLV/UMA0G
CSqGSIb3DQEBCwUAA4IBAQAr3AejzWbtuPIITkZS5DWdqbfRQuK0IDUK6dKzInqG
s2TeR/h2DNaL5CCqFIIkZi3rVX/OgFpvSUJONybFWjyXtc4FykX4HYNYmEcfMKLf
agS7W9hUeig09zaF4s29ENGYT7bUKR/jT7D7QdjgbVKhnhKekn9e3bE+41hcauPg
4vT3tR1zaOEEE45PUN4TXyqblQTW/kUSOHPmvGM4z7ns6tlQb2YXq9/qAoe4HXkP
ajFQw0xzPczJgrTcHDIRvHQSYtY/b7l3f4iF6PvWDNvB+aIv4FIMd4SShVeRLJKl
UhklIRS6FY1UJWwDfDhf/b9wnv3Dp4lqyDt+n6wsv2t1
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:50:00 2025 by rpki-client