Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/ef3216-a310-469c-b3a8-2382e7ba72d8/1/1-C_LYEl_oPQ-HPB3bYGn6Fnmpzw.roa
File: 1-C_LYEl_oPQ-HPB3bYGn6Fnmpzw.roa (raw, json)
Hash identifier: ZeKvOO2UNHLdVJygFF5Hv03Oarg+m3RVkSpNUYzBHDo=
Subject key identifier: F8:2F:CB:60:49:7F:A0:F4:3E:1C:F0:77:6D:81:A7:E8:59:E6:A7:3C
Certificate issuer: /CN=8d3458adcba08a1cd0ebf1b13b45a0bfac87d7d4
Certificate serial: 0183B6FD106B3172A07DAC9ACC81B8BF6BD9
Authority key identifier: 8D:34:58:AD:CB:A0:8A:1C:D0:EB:F1:B1:3B:45:A0:BF:AC:87:D7:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jTRYrcugihzQ6_GxO0Wgv6yH19Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/ef3216-a310-469c-b3a8-2382e7ba72d8/1/1-C_LYEl_oPQ-HPB3bYGn6Fnmpzw.roa
Signing time: Sat 08 Oct 2022 09:46:21 +0000
ROA not before: Sat 08 Oct 2022 09:46:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206065
IP address blocks: 45.156.192.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:b6:fd:10:6b:31:72:a0:7d:ac:9a:cc:81:b8:bf:6b:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d3458adcba08a1cd0ebf1b13b45a0bfac87d7d4
Validity
Not Before: Oct 8 09:46:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f82fcb60497fa0f43e1cf0776d81a7e859e6a73c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:9b:39:63:d4:2c:ae:34:65:33:dd:d8:27:48:
0c:be:28:e8:85:68:2c:69:b9:d7:c0:04:a7:54:a2:
5f:70:94:65:e4:a6:0b:72:75:28:40:94:eb:0c:7d:
c7:68:c4:6f:09:5b:99:48:0d:b8:b4:79:6a:bd:6e:
30:e2:5b:8c:d9:0d:00:19:79:17:3e:98:61:3d:de:
e6:65:6c:40:02:cf:4d:0c:77:69:f2:5a:3c:8b:aa:
df:78:c1:66:e6:4d:67:7a:ab:9c:7d:e9:b8:ba:cd:
82:9d:ca:96:45:ea:eb:a1:35:8b:ec:4b:eb:aa:4d:
64:b1:c0:7f:69:81:89:b5:df:bf:a4:2f:82:85:35:
77:b3:24:77:46:f8:b6:97:d7:78:41:e9:ed:68:08:
cf:62:8f:dd:76:c7:c1:a3:9e:87:10:b4:07:24:2e:
71:ad:ec:f5:c5:16:d2:9d:8f:76:4e:03:2c:1e:c0:
43:d8:3f:14:ed:72:39:12:f7:b5:fe:11:95:df:09:
24:c7:32:61:05:f5:87:22:eb:8f:e5:b1:f0:e0:de:
36:0a:94:70:c9:d4:95:2a:db:15:0c:30:4e:92:db:
d4:30:47:66:9b:fe:6a:b3:9b:2b:fd:ca:07:9c:a0:
78:25:01:2d:fc:57:ec:ee:66:6e:79:25:fc:26:b0:
1f:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:2F:CB:60:49:7F:A0:F4:3E:1C:F0:77:6D:81:A7:E8:59:E6:A7:3C
X509v3 Authority Key Identifier:
keyid:8D:34:58:AD:CB:A0:8A:1C:D0:EB:F1:B1:3B:45:A0:BF:AC:87:D7:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jTRYrcugihzQ6_GxO0Wgv6yH19Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ef3216-a310-469c-b3a8-2382e7ba72d8/1/1-C_LYEl_oPQ-HPB3bYGn6Fnmpzw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ef3216-a310-469c-b3a8-2382e7ba72d8/1/jTRYrcugihzQ6_GxO0Wgv6yH19Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.156.192.0/22
Signature Algorithm: sha256WithRSAEncryption
ba:a1:0e:6b:c2:61:a2:f1:1f:75:f0:e1:55:4c:f4:7f:97:ca:
86:6d:0a:ab:74:3a:74:f8:73:c4:03:e3:55:74:d6:1f:0d:28:
46:bb:c3:d4:0b:62:4e:a7:2a:cb:cc:fc:c1:d4:ac:29:02:d1:
8e:23:c5:f4:af:f2:f4:a9:46:98:dd:11:95:0a:08:79:44:b3:
0d:32:f2:18:db:5d:e7:8f:6b:1b:e0:f8:2d:cc:13:17:49:39:
a7:c5:c0:a9:af:fe:e5:98:e6:5a:96:fe:0d:d1:27:c7:7e:47:
e9:7c:ef:40:e4:e3:18:a7:df:93:e1:dc:a9:d4:df:f1:42:76:
da:57:d9:64:ca:d9:60:4a:63:c8:1d:56:1b:75:3d:f4:e5:27:
cc:68:06:73:fe:67:11:1c:b2:af:ea:d7:50:7d:c0:4a:d5:54:
d6:7c:ee:bb:62:66:5c:05:37:d1:14:43:55:34:cd:7e:8b:6f:
31:9a:29:8a:16:a8:7e:b9:f2:dd:60:fa:76:9d:d0:2d:8c:83:
39:a6:0d:06:e0:3b:72:1b:72:01:b0:f4:9e:53:71:6e:80:35:
b5:c6:56:80:db:fb:07:56:71:4e:4e:1c:22:6b:70:d2:83:ee:
cb:bf:4b:86:57:b8:ca:9a:d4:05:fc:0d:83:04:22:84:05:71:
6f:9b:30:76
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYO2/RBrMXKgfayazIG4v2vZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkMzQ1OGFkY2JhMDhhMWNkMGViZjFiMTNiNDVhMGJmYWM4
N2Q3ZDQwHhcNMjIxMDA4MDk0NjIxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmODJmY2I2MDQ5N2ZhMGY0M2UxY2YwNzc2ZDgxYTdlODU5ZTZhNzNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsps5Y9QsrjRlM93YJ0gMvijohWgs
abnXwASnVKJfcJRl5KYLcnUoQJTrDH3HaMRvCVuZSA24tHlqvW4w4luM2Q0AGXkX
PphhPd7mZWxAAs9NDHdp8lo8i6rfeMFm5k1nequcfem4us2CncqWRerroTWL7Evr
qk1kscB/aYGJtd+/pC+ChTV3syR3Rvi2l9d4QentaAjPYo/ddsfBo56HELQHJC5x
rez1xRbSnY92TgMsHsBD2D8U7XI5Eve1/hGV3wkkxzJhBfWHIuuP5bHw4N42CpRw
ydSVKtsVDDBOktvUMEdmm/5qs5sr/coHnKB4JQEt/Ffs7mZueSX8JrAfnwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFPgvy2BJf6D0Phzwd22Bp+hZ5qc8MB8GA1UdIwQY
MBaAFI00WK3LoIoc0OvxsTtFoL+sh9fUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvalRSWXJjdWdpaHpRNl9HeE8wV2d2NnlIMTlRLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9lZjMyMTYtYTMxMC00NjljLWIzYTgt
MjM4MmU3YmE3MmQ4LzEvMS1DX0xZRWxfb1BRLUhQQjNiWUduNkZubXB6dy5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvZGYvZWYzMjE2LWEzMTAtNDY5Yy1iM2E4LTIzODJlN2JhNzJk
OC8xL2pUUllyY3VnaWh6UTZfR3hPMFdndjZ5SDE5US5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAi2cwDAN
BgkqhkiG9w0BAQsFAAOCAQEAuqEOa8JhovEfdfDhVUz0f5fKhm0Kq3Q6dPhzxAPj
VXTWHw0oRrvD1AtiTqcqy8z8wdSsKQLRjiPF9K/y9KlGmN0RlQoIeUSzDTLyGNtd
549rG+D4LcwTF0k5p8XAqa/+5ZjmWpb+DdEnx35H6XzvQOTjGKffk+HcqdTf8UJ2
2lfZZMrZYEpjyB1WG3U99OUnzGgGc/5nERyyr+rXUH3AStVU1nzuu2JmXAU30RRD
VTTNfotvMZopihaofrny3WD6dp3QLYyDOaYNBuA7chtyAbD0nlNxboA1tcZWgNv7
B1ZxTk4cImtw0oPuy79Lhle4yprUBfwNgwQihAVxb5swdg==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:23:44 2025 by rpki-client