Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/NrOF3HPFJejHb-eFBZPPx-gw3rM.roa
File: NrOF3HPFJejHb-eFBZPPx-gw3rM.roa (raw, json)
Hash identifier: WObshHCsFUlk/BgazNjKq9JvTzrUs9ihU00tg8STCCs=
Subject key identifier: 36:B3:85:DC:73:C5:25:E8:C7:6F:E7:85:05:93:CF:C7:E8:30:DE:B3
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 08748FB4
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/NrOF3HPFJejHb-eFBZPPx-gw3rM.roa
Signing time: Thu 05 May 2022 13:30:43 +0000
ROA not before: Thu 05 May 2022 13:30:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211327
IP address blocks: 45.136.7.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 141856692 (0x8748fb4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: May 5 13:30:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=36b385dc73c525e8c76fe7850593cfc7e830deb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:59:2a:ec:12:dd:25:e6:fc:af:8c:ca:60:01:
5e:d9:bd:25:1d:47:1f:3f:5a:79:9c:65:82:09:d4:
8b:7c:f1:9a:e1:7c:39:6e:68:4d:40:dd:66:16:09:
03:53:ab:1b:5e:48:ef:91:9f:e8:0f:9b:1f:61:0d:
57:f7:3e:36:38:d0:73:71:13:b4:ef:8f:b4:72:24:
5a:2b:ce:76:61:58:2e:ab:dd:5e:ab:32:12:a6:6a:
55:1f:e3:c9:a8:9d:65:89:8d:da:e9:31:7d:eb:a4:
43:7f:3a:53:f8:f6:ee:a9:b0:5b:7e:1b:14:34:30:
82:27:93:29:51:51:f7:cb:3d:ca:c5:f3:ff:f7:ee:
a8:2b:6c:dd:7a:f7:6e:03:76:8b:87:8f:f3:40:ba:
6d:be:a4:92:75:b7:51:2d:71:49:af:d5:37:ce:1e:
74:b7:3a:08:f2:11:e8:1d:86:17:5e:88:e6:48:08:
87:ae:e0:0c:15:f5:65:03:77:8d:a1:09:35:3f:4f:
68:4b:51:a2:56:5b:9f:50:04:6f:e9:8b:45:72:f6:
38:a6:4e:2d:e2:09:78:ac:50:dc:b2:72:db:af:e8:
19:5d:b3:f0:18:3d:d5:82:40:8f:f1:21:e6:80:51:
e3:d7:cc:07:eb:56:08:33:21:1c:b6:ef:20:ed:f6:
6a:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:B3:85:DC:73:C5:25:E8:C7:6F:E7:85:05:93:CF:C7:E8:30:DE:B3
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/NrOF3HPFJejHb-eFBZPPx-gw3rM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.136.7.0/24
Signature Algorithm: sha256WithRSAEncryption
55:1e:58:65:06:92:3d:72:b1:d8:fb:51:b2:d8:df:20:3a:d9:
bf:64:92:1f:82:a3:00:6c:97:ed:1b:d5:48:fb:66:74:2b:4b:
6b:27:33:e4:4f:98:40:c3:73:1d:5c:e0:8c:b0:45:30:dc:b3:
a7:6b:92:fb:ae:c9:72:d7:d3:7f:40:31:69:68:ad:90:6b:ae:
5d:b3:07:5a:dd:e6:00:05:63:b8:65:60:6f:e0:f0:99:7c:0b:
9c:b3:4a:d3:ef:18:51:03:14:b6:4c:22:04:3c:70:8e:35:cc:
95:2c:e2:c4:d3:72:31:39:d6:3d:88:58:eb:5b:ef:e5:8a:4d:
58:50:3a:e1:64:80:63:14:23:58:aa:69:53:3d:32:a4:0f:0a:
01:45:ca:4e:0f:db:95:3c:c3:ff:17:4c:e0:db:66:7e:01:66:
c4:8d:c0:00:36:3a:ee:6f:91:77:38:5c:dd:de:32:2c:8c:37:
61:aa:9d:9e:f7:68:b3:c5:e6:14:32:7d:ca:79:58:92:23:10:
0c:93:6e:eb:43:f3:8e:0d:85:fa:2c:13:db:7c:6d:e6:b5:fe:
7b:64:28:ab:c8:e4:74:d8:87:45:2d:e1:fa:6e:0b:16:f6:ae:
da:f5:1e:32:15:6d:36:b0:fa:44:a5:fb:77:ff:ee:22:01:b9:
0e:5f:6b:a7
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIECHSPtDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
ODA1ZjE3YzJkNzEzM2QyZGFkM2E4ZGY3ZTM1MzE1ZTM3ZWY1ZGFmMB4XDTIyMDUw
NTEzMzA0M1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMzZiMzg1ZGM3M2M1
MjVlOGM3NmZlNzg1MDU5M2NmYzdlODMwZGViMzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMJZKuwS3SXm/K+MymABXtm9JR1HHz9aeZxlggnUi3zxmuF8
OW5oTUDdZhYJA1OrG15I75Gf6A+bH2ENV/c+NjjQc3ETtO+PtHIkWivOdmFYLqvd
XqsyEqZqVR/jyaidZYmN2ukxfeukQ386U/j27qmwW34bFDQwgieTKVFR98s9ysXz
//fuqCts3Xr3bgN2i4eP80C6bb6kknW3US1xSa/VN84edLc6CPIR6B2GF16I5kgI
h67gDBX1ZQN3jaEJNT9PaEtRolZbn1AEb+mLRXL2OKZOLeIJeKxQ3LJy26/oGV2z
8Bg91YJAj/Eh5oBR49fMB+tWCDMhHLbvIO32ajMCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQ2s4Xcc8Ul6Mdv54UFk8/H6DDeszAfBgNVHSMEGDAWgBRIBfF8LXEz0trT
qN9+NTFeN+9drzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1NBWHhmQzF4TTlMYTA2amZmalV4WGpmdlhhOC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZGIvOGUwN2RkLTRmZTUtNDgyMC1iY2JlLTVkZDZlMjJlYmFiMC8x
L05yT0YzSFBGSmVqSGItZUZCWlBQeC1ndzNyTS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGIv
OGUwN2RkLTRmZTUtNDgyMC1iY2JlLTVkZDZlMjJlYmFiMC8xL1NBWHhmQzF4TTlM
YTA2amZmalV4WGpmdlhhOC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC2IBzANBgkqhkiG9w0BAQsFAAOC
AQEAVR5YZQaSPXKx2PtRstjfIDrZv2SSH4KjAGyX7RvVSPtmdCtLaycz5E+YQMNz
HVzgjLBFMNyzp2uS+67JctfTf0AxaWitkGuuXbMHWt3mAAVjuGVgb+DwmXwLnLNK
0+8YUQMUtkwiBDxwjjXMlSzixNNyMTnWPYhY61vv5YpNWFA64WSAYxQjWKppUz0y
pA8KAUXKTg/blTzD/xdM4NtmfgFmxI3AADY67m+Rdzhc3d4yLIw3Yaqdnvdos8Xm
FDJ9ynlYkiMQDJNu60Pzjg2F+iwT23xt5rX+e2Qoq8jkdNiHRS3h+m4LFvau2vUe
MhVtNrD6RKX7d//uIgG5Dl9rpw==
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:41:31 2025 by rpki-client