Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/oqeM8Lj4mS3VGSoY6eOGSA8x7ww.roa
File: oqeM8Lj4mS3VGSoY6eOGSA8x7ww.roa (raw, json)
Hash identifier: TW2saSv4nlt9WC7wBejgyZTZJ1dVcGwFZA2OrLCl76w=
Subject key identifier: A2:A7:8C:F0:B8:F8:99:2D:D5:19:2A:18:E9:E3:86:48:0F:31:EF:0C
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 018F5E5D7F2923EE5D67B23B4267E0DF3FC2
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/oqeM8Lj4mS3VGSoY6eOGSA8x7ww.roa
Signing time: Thu 09 May 2024 17:18:56 +0000
ROA not before: Thu 09 May 2024 17:18:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47436
IP address blocks: 45.147.45.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:5e:5d:7f:29:23:ee:5d:67:b2:3b:42:67:e0:df:3f:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: May 9 17:18:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a2a78cf0b8f8992dd5192a18e9e386480f31ef0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:fe:b9:e1:51:17:cd:63:09:79:83:57:58:a9:
1a:9c:30:21:3b:99:14:9f:56:9f:cd:42:35:c0:c6:
d9:61:4a:d0:ec:00:89:49:d3:4c:1d:ca:10:bb:b7:
40:b1:b3:a9:9f:32:a2:ea:dc:f5:88:52:8b:47:fd:
44:b8:9d:f7:73:41:80:df:a6:2a:58:09:49:03:40:
a8:c9:00:25:60:ee:0b:ce:57:4d:8e:59:7e:2e:62:
c8:81:1f:54:be:f1:e4:74:e2:43:7b:a4:35:d9:be:
fa:a9:0a:b4:fc:cf:12:65:dc:96:08:d2:94:d7:a0:
7f:15:2d:48:89:9d:f4:d6:36:37:3b:10:5e:dd:7b:
98:b1:65:39:3e:32:b1:04:1b:57:02:3c:fc:2d:f5:
22:49:8b:05:38:50:1e:11:08:50:e9:0c:59:69:aa:
bf:28:ad:ff:60:25:eb:22:f8:e4:87:73:fb:f4:d3:
a5:2b:61:d0:b9:be:c7:20:e6:8b:f9:54:02:34:c8:
f8:40:1f:bc:87:a4:5f:85:8d:f6:0c:ee:e0:8c:ed:
60:76:e2:17:dd:61:3c:f2:72:37:c4:52:5a:72:c8:
b1:39:5f:b3:56:24:90:3c:ab:9c:a1:1f:bf:8b:1a:
6d:64:6c:9c:14:f7:ac:94:70:23:d8:2e:d2:c2:28:
b3:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:A7:8C:F0:B8:F8:99:2D:D5:19:2A:18:E9:E3:86:48:0F:31:EF:0C
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/oqeM8Lj4mS3VGSoY6eOGSA8x7ww.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.147.45.0/24
Signature Algorithm: sha256WithRSAEncryption
28:97:0a:5d:cf:ab:3d:8c:e6:5a:b9:b4:bd:c6:06:7d:da:f6:
20:b8:36:c8:e3:0c:03:0f:72:c0:44:43:cb:fc:0f:35:10:1d:
ac:9d:85:70:a4:3b:96:ff:cc:fc:b0:09:a0:6f:6f:12:07:9e:
8f:69:7c:74:5f:50:c0:a8:0e:82:97:76:6f:aa:93:b0:82:ed:
14:1d:b3:b0:29:21:a2:03:cd:47:07:75:47:ed:66:00:f5:f3:
78:e5:d0:94:31:d1:40:f2:a8:e3:cc:73:e8:75:0f:91:b0:e8:
94:fb:c4:2d:bb:af:91:1a:a9:43:3c:4c:75:00:6c:23:c1:35:
69:fe:32:2d:76:40:12:1c:25:43:92:33:c4:d6:b9:4f:be:a7:
dc:81:81:ca:3a:c2:7f:c9:7d:4c:a9:c9:9e:f7:e7:f2:c2:07:
e7:51:6b:ed:84:06:fd:2e:ea:48:31:d4:9e:c6:3f:ba:27:f0:
b8:91:09:bf:58:d2:3d:57:9c:69:2f:d1:0d:3a:53:fc:a1:3a:
f8:d5:1f:85:8d:8e:64:78:81:fa:6f:36:ea:d5:da:8a:6a:4c:
b8:3d:6b:21:ef:f2:db:11:57:1b:7a:3a:e3:e6:54:88:1c:9b:
d5:12:e7:10:1c:88:c9:12:e1:5b:9e:49:10:76:aa:74:7b:33:
f2:dc:6b:3f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY9eXX8pI+5dZ7I7Qmfg3z/CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4MDVmMTdjMmQ3MTMzZDJkYWQzYThkZjdlMzUzMTVlMzdl
ZjVkYWYwHhcNMjQwNTA5MTcxODU2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMmE3OGNmMGI4Zjg5OTJkZDUxOTJhMThlOWUzODY0ODBmMzFlZjBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArf654VEXzWMJeYNXWKkanDAhO5kU
n1afzUI1wMbZYUrQ7ACJSdNMHcoQu7dAsbOpnzKi6tz1iFKLR/1EuJ33c0GA36Yq
WAlJA0CoyQAlYO4LzldNjll+LmLIgR9UvvHkdOJDe6Q12b76qQq0/M8SZdyWCNKU
16B/FS1IiZ301jY3OxBe3XuYsWU5PjKxBBtXAjz8LfUiSYsFOFAeEQhQ6QxZaaq/
KK3/YCXrIvjkh3P79NOlK2HQub7HIOaL+VQCNMj4QB+8h6RfhY32DO7gjO1gduIX
3WE88nI3xFJacsixOV+zViSQPKucoR+/ixptZGycFPeslHAj2C7SwiizGQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKKnjPC4+Jkt1RkqGOnjhkgPMe8MMB8GA1UdIwQY
MBaAFEgF8XwtcTPS2tOo3341MV43712vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0FYeGZDMXhNOUxhMDZqZmZqVXhYamZ2WGE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi84ZTA3ZGQtNGZlNS00ODIwLWJjYmUt
NWRkNmUyMmViYWIwLzEvb3FlTThMajRtUzNWR1NvWTZlT0dTQTh4N3d3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi84ZTA3ZGQtNGZlNS00ODIwLWJjYmUtNWRkNmUyMmViYWIw
LzEvU0FYeGZDMXhNOUxhMDZqZmZqVXhYamZ2WGE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZMtMA0G
CSqGSIb3DQEBCwUAA4IBAQAolwpdz6s9jOZaubS9xgZ92vYguDbI4wwDD3LAREPL
/A81EB2snYVwpDuW/8z8sAmgb28SB56PaXx0X1DAqA6Cl3ZvqpOwgu0UHbOwKSGi
A81HB3VH7WYA9fN45dCUMdFA8qjjzHPodQ+RsOiU+8Qtu6+RGqlDPEx1AGwjwTVp
/jItdkASHCVDkjPE1rlPvqfcgYHKOsJ/yX1Mqcme9+fywgfnUWvthAb9LupIMdSe
xj+6J/C4kQm/WNI9V5xpL9ENOlP8oTr41R+FjY5keIH6bzbq1dqKaky4PWsh7/Lb
EVcbejrj5lSIHJvVEucQHIjJEuFbnkkQdqp0ezPy3Gs/
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:34:30 2025 by rpki-client