Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SNqtrfM0NDNp_BCTIhvbuFgmI2k.roa
File: SNqtrfM0NDNp_BCTIhvbuFgmI2k.roa (raw, json)
Hash identifier: BqDwe7qftjIOmKVH9hKQWVdTXI228JEgYntqQv3U+v4=
Subject key identifier: 48:DA:AD:AD:F3:34:34:33:69:FC:10:93:22:1B:DB:B8:58:26:23:69
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 01839F549788670250708F8E0D84E3886CE4
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SNqtrfM0NDNp_BCTIhvbuFgmI2k.roa
Signing time: Mon 03 Oct 2022 19:31:04 +0000
ROA not before: Mon 03 Oct 2022 19:31:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211237
IP address blocks: 45.136.6.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:9f:54:97:88:67:02:50:70:8f:8e:0d:84:e3:88:6c:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Oct 3 19:31:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=48daadadf334343369fc1093221bdbb858262369
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:df:99:18:49:5f:be:c7:d7:c9:4d:df:2f:5a:
91:74:a5:ee:5b:50:60:9a:6e:32:47:ca:3d:8d:f7:
30:9a:19:77:55:4b:ea:53:e6:72:38:ff:df:fc:6b:
3a:af:49:d3:4f:4a:30:aa:02:e8:ea:99:76:17:df:
0d:ce:56:8a:e2:7d:41:48:d9:b8:d0:f6:6e:40:d1:
f1:18:c3:17:24:14:92:f7:73:28:5f:20:ab:a5:55:
3e:d3:ac:6d:b9:63:dc:c4:74:33:88:fc:52:fa:7e:
b0:c5:11:84:7e:6a:8d:14:81:a6:14:60:19:b1:20:
bf:c4:9d:95:1e:e8:58:9b:eb:47:ca:ff:c9:ff:06:
1d:70:98:b5:72:d7:7f:c0:df:65:b1:b2:91:8f:83:
e1:96:66:08:85:b2:2f:42:a9:4f:5b:7c:da:16:a1:
9e:f8:b7:c3:da:1f:10:cc:27:83:83:ea:68:c1:4d:
e5:ba:d3:e8:1e:6e:af:58:e5:45:48:5e:a2:81:aa:
73:94:bd:7b:fa:f0:65:c4:49:00:f6:72:aa:fa:a7:
0e:17:8d:f5:1b:a4:79:9a:50:e4:5e:29:66:c9:23:
47:ba:74:c2:bd:f3:b6:41:a2:f6:81:ff:ba:54:1c:
ea:93:ad:01:61:0e:fa:00:98:8e:37:bc:2f:b0:a4:
74:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:DA:AD:AD:F3:34:34:33:69:FC:10:93:22:1B:DB:B8:58:26:23:69
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SNqtrfM0NDNp_BCTIhvbuFgmI2k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.136.6.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:80:55:4e:2f:88:f7:6f:2a:1f:0b:8d:75:4c:34:8d:6c:46:
79:49:2b:74:8f:6a:96:ac:0e:41:af:70:41:f6:e7:ee:17:50:
aa:23:d5:d9:2d:b5:f3:fa:42:3f:ac:84:6a:a1:f9:0e:bd:78:
61:20:e6:f8:6d:de:8f:66:6b:24:55:a7:f4:23:ac:12:c7:3a:
3b:b1:a0:f7:66:1a:72:da:b8:9d:ac:51:19:74:6f:bf:69:a0:
47:de:3b:73:5e:7b:a5:0b:e2:75:39:c0:1c:0c:cf:92:17:bb:
bc:da:c0:b8:e8:18:e2:8f:a2:4a:71:97:d8:50:6f:42:e9:4b:
36:bb:4a:46:28:ef:2e:a5:ad:44:fd:e2:08:d7:d0:23:ae:6e:
42:36:5c:92:eb:65:79:33:13:98:52:7f:0e:2b:63:4a:9a:85:
6b:af:f4:af:97:55:fc:16:eb:26:86:32:03:ad:b8:a2:f2:e4:
be:d6:76:60:ca:b0:46:1e:da:0c:e6:4f:3b:39:6b:80:0c:b5:
8d:6b:95:6a:a0:e7:f1:a7:bc:1f:e8:69:3e:7d:dc:3f:15:bd:
76:f8:6c:12:56:ff:03:4d:81:95:ca:d4:d2:00:24:36:e1:d9:
59:d7:62:d2:9f:83:d5:13:51:30:ba:1d:5c:97:aa:3f:da:69:
5c:1f:56:74
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYOfVJeIZwJQcI+ODYTjiGzkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4MDVmMTdjMmQ3MTMzZDJkYWQzYThkZjdlMzUzMTVlMzdl
ZjVkYWYwHhcNMjIxMDAzMTkzMTA0WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0OGRhYWRhZGYzMzQzNDMzNjlmYzEwOTMyMjFiZGJiODU4MjYyMzY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmN+ZGElfvsfXyU3fL1qRdKXuW1Bg
mm4yR8o9jfcwmhl3VUvqU+ZyOP/f/Gs6r0nTT0owqgLo6pl2F98NzlaK4n1BSNm4
0PZuQNHxGMMXJBSS93MoXyCrpVU+06xtuWPcxHQziPxS+n6wxRGEfmqNFIGmFGAZ
sSC/xJ2VHuhYm+tHyv/J/wYdcJi1ctd/wN9lsbKRj4PhlmYIhbIvQqlPW3zaFqGe
+LfD2h8QzCeDg+powU3lutPoHm6vWOVFSF6igapzlL17+vBlxEkA9nKq+qcOF431
G6R5mlDkXilmySNHunTCvfO2QaL2gf+6VBzqk60BYQ76AJiON7wvsKR0aQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEjara3zNDQzafwQkyIb27hYJiNpMB8GA1UdIwQY
MBaAFEgF8XwtcTPS2tOo3341MV43712vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0FYeGZDMXhNOUxhMDZqZmZqVXhYamZ2WGE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi84ZTA3ZGQtNGZlNS00ODIwLWJjYmUt
NWRkNmUyMmViYWIwLzEvU05xdHJmTTBORE5wX0JDVElodmJ1RmdtSTJrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi84ZTA3ZGQtNGZlNS00ODIwLWJjYmUtNWRkNmUyMmViYWIw
LzEvU0FYeGZDMXhNOUxhMDZqZmZqVXhYamZ2WGE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYgGMA0G
CSqGSIb3DQEBCwUAA4IBAQB9gFVOL4j3byofC411TDSNbEZ5SSt0j2qWrA5Br3BB
9ufuF1CqI9XZLbXz+kI/rIRqofkOvXhhIOb4bd6PZmskVaf0I6wSxzo7saD3Zhpy
2ridrFEZdG+/aaBH3jtzXnulC+J1OcAcDM+SF7u82sC46Bjij6JKcZfYUG9C6Us2
u0pGKO8upa1E/eII19Ajrm5CNlyS62V5MxOYUn8OK2NKmoVrr/Svl1X8FusmhjID
rbii8uS+1nZgyrBGHtoM5k87OWuADLWNa5VqoOfxp7wf6Gk+fdw/Fb12+GwSVv8D
TYGVytTSACQ24dlZ12LSn4PVE1Ewuh1cl6o/2mlcH1Z0
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:30:34 2025 by rpki-client