Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/e710z6snaZP6uy-iCPCDqjWC71E.roa
File: e710z6snaZP6uy-iCPCDqjWC71E.roa (raw, json)
Hash identifier: i16i6Tuor86UA3GijT8Prx33yC1Sbj6rgt2dYDudZq4=
Subject key identifier: 7B:BD:74:CF:AB:27:69:93:FA:BB:2F:A2:08:F0:83:AA:35:82:EF:51
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 0183178A1E8C447B894D77483F724B35905C
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/e710z6snaZP6uy-iCPCDqjWC71E.roa
Signing time: Wed 07 Sep 2022 10:41:11 +0000
ROA not before: Wed 07 Sep 2022 10:41:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43260
IP address blocks: 45.136.7.0/24 maxlen: 24
45.131.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:17:8a:1e:8c:44:7b:89:4d:77:48:3f:72:4b:35:90:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Sep 7 10:41:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7bbd74cfab276993fabb2fa208f083aa3582ef51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:84:95:b2:68:57:f9:06:2f:1a:16:71:60:70:
e8:02:4e:0c:bb:c0:10:35:d2:a7:92:6e:8f:53:80:
d2:0c:7e:00:c8:7d:08:aa:c6:00:1b:85:35:a9:69:
28:21:e0:71:26:e1:d1:1d:e9:31:71:66:de:46:df:
8c:d0:37:1a:89:02:58:b8:9f:5d:94:17:1b:96:35:
74:61:a4:55:89:ae:79:86:51:ff:8f:9f:63:56:26:
5b:e3:e6:4f:15:14:29:d6:72:b4:96:91:56:fd:b2:
c2:f5:96:24:7d:42:22:f2:1e:21:dd:fb:37:ca:eb:
8c:44:92:de:b5:e5:1b:aa:0d:e6:d1:b2:68:3b:85:
18:c3:1e:a5:ee:ca:99:6d:9f:40:51:b2:8a:ed:37:
05:fc:3c:07:91:b5:af:f0:0e:cf:06:d7:da:78:44:
3a:cd:97:92:ed:af:f5:57:c7:bd:1f:30:dd:b8:e0:
38:30:b3:25:a0:5a:14:46:fd:58:4a:e0:43:75:30:
51:7c:5e:78:93:e2:10:e5:78:8f:f2:f4:4e:ca:34:
62:1a:32:9b:14:0c:54:b1:35:c1:42:ee:75:9b:09:
97:36:b8:2b:d3:59:6d:5c:81:fb:7c:78:82:b5:d1:
0a:58:0c:ed:69:3b:d3:42:55:89:d4:8a:7d:25:2e:
7d:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:BD:74:CF:AB:27:69:93:FA:BB:2F:A2:08:F0:83:AA:35:82:EF:51
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/e710z6snaZP6uy-iCPCDqjWC71E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.131.3.0/24
45.136.7.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:14:46:8a:d7:78:2b:8b:09:7c:b1:3c:2f:63:7c:2b:21:42:
9e:c8:12:56:9a:0a:a0:cd:10:55:48:f3:d1:0f:65:94:c8:55:
e2:2e:36:60:3e:58:82:a4:39:72:a1:29:11:73:70:37:ed:a2:
3e:38:78:df:66:bd:45:70:74:13:fc:4e:cf:6d:b4:8a:25:56:
a4:96:8a:2e:42:d9:eb:fc:78:44:5e:0c:10:0b:8f:e5:b6:77:
7a:ad:ea:fd:15:e2:ec:92:45:d9:de:a2:bd:24:ce:36:af:0b:
ac:49:8a:b1:8e:23:21:57:ab:93:f0:c6:e0:80:66:2d:c7:1d:
5f:33:11:7e:04:b9:95:66:06:6e:2a:dd:ae:6e:17:42:d2:77:
45:fd:2b:d4:8e:3e:a4:3f:93:a9:25:00:19:b5:d0:e5:7a:42:
f3:73:f8:d3:86:73:20:1c:b1:f8:96:38:f9:63:a0:04:a2:08:
26:81:de:5b:8e:64:74:2f:25:fe:26:be:98:85:bf:29:0a:b4:
1c:b2:06:10:13:54:a1:29:7b:40:20:a4:d8:de:2c:dd:21:42:
93:4b:84:d3:cf:c4:a8:f8:16:ff:9f:85:f1:0d:be:98:1e:99:
5c:0b:9b:ee:07:b8:be:69:83:62:68:9e:6f:c5:3b:cd:cf:97:
de:fd:f9:56
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYMXih6MRHuJTXdIP3JLNZBcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4MDVmMTdjMmQ3MTMzZDJkYWQzYThkZjdlMzUzMTVlMzdl
ZjVkYWYwHhcNMjIwOTA3MTA0MTExWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YmJkNzRjZmFiMjc2OTkzZmFiYjJmYTIwOGYwODNhYTM1ODJlZjUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7YSVsmhX+QYvGhZxYHDoAk4Mu8AQ
NdKnkm6PU4DSDH4AyH0IqsYAG4U1qWkoIeBxJuHRHekxcWbeRt+M0DcaiQJYuJ9d
lBcbljV0YaRVia55hlH/j59jViZb4+ZPFRQp1nK0lpFW/bLC9ZYkfUIi8h4h3fs3
yuuMRJLeteUbqg3m0bJoO4UYwx6l7sqZbZ9AUbKK7TcF/DwHkbWv8A7PBtfaeEQ6
zZeS7a/1V8e9HzDduOA4MLMloFoURv1YSuBDdTBRfF54k+IQ5XiP8vROyjRiGjKb
FAxUsTXBQu51mwmXNrgr01ltXIH7fHiCtdEKWAztaTvTQlWJ1Ip9JS59ZQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFHu9dM+rJ2mT+rsvogjwg6o1gu9RMB8GA1UdIwQY
MBaAFEgF8XwtcTPS2tOo3341MV43712vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0FYeGZDMXhNOUxhMDZqZmZqVXhYamZ2WGE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi84ZTA3ZGQtNGZlNS00ODIwLWJjYmUt
NWRkNmUyMmViYWIwLzEvZTcxMHo2c25hWlA2dXktaUNQQ0RxaldDNzFFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi84ZTA3ZGQtNGZlNS00ODIwLWJjYmUtNWRkNmUyMmViYWIw
LzEvU0FYeGZDMXhNOUxhMDZqZmZqVXhYamZ2WGE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALYMDAwQA
LYgHMA0GCSqGSIb3DQEBCwUAA4IBAQCpFEaK13griwl8sTwvY3wrIUKeyBJWmgqg
zRBVSPPRD2WUyFXiLjZgPliCpDlyoSkRc3A37aI+OHjfZr1FcHQT/E7PbbSKJVak
loouQtnr/HhEXgwQC4/ltnd6rer9FeLskkXZ3qK9JM42rwusSYqxjiMhV6uT8Mbg
gGYtxx1fMxF+BLmVZgZuKt2ubhdC0ndF/SvUjj6kP5OpJQAZtdDlekLzc/jThnMg
HLH4ljj5Y6AEoggmgd5bjmR0LyX+Jr6Yhb8pCrQcsgYQE1ShKXtAIKTY3izdIUKT
S4TTz8So+Bb/n4XxDb6YHplcC5vuB7i+aYNiaJ5vxTvNz5fe/flW
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:43:01 2025 by rpki-client