Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/5f6ac1-b935-47b1-96c1-0a12969fbcfc/1/DT_Ss8LCBbtkB6MCqsWbdy4jSM0.roa
File: DT_Ss8LCBbtkB6MCqsWbdy4jSM0.roa (raw, json)
Hash identifier: HIskbVJiQ6NGaBVL6bamYd5nh5GYpdslxPlR2hGTy78=
Subject key identifier: 0D:3F:D2:B3:C2:C2:05:BB:64:07:A3:02:AA:C5:9B:77:2E:23:48:CD
Certificate issuer: /CN=be37cce14cb56b66497810e73baa0edf67007a48
Certificate serial: 01856EC232DFBDBCB5FAB685141056CA5502
Authority key identifier: BE:37:CC:E1:4C:B5:6B:66:49:78:10:E7:3B:AA:0E:DF:67:00:7A:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vjfM4Uy1a2ZJeBDnO6oO32cAekg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/5f6ac1-b935-47b1-96c1-0a12969fbcfc/1/DT_Ss8LCBbtkB6MCqsWbdy4jSM0.roa
Signing time: Sun 01 Jan 2023 19:14:58 +0000
ROA not before: Sun 01 Jan 2023 19:14:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43915
IP address blocks: 45.130.56.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:c2:32:df:bd:bc:b5:fa:b6:85:14:10:56:ca:55:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be37cce14cb56b66497810e73baa0edf67007a48
Validity
Not Before: Jan 1 19:14:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0d3fd2b3c2c205bb6407a302aac59b772e2348cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d0:aa:19:f0:a1:8b:b6:57:71:ed:cc:b4:c3:
fb:19:fb:c2:42:ca:0f:b5:f4:1a:82:16:ab:17:44:
89:0a:6b:8a:bd:76:27:1e:f5:c7:61:09:77:54:fc:
29:8a:12:38:41:50:58:9f:1c:7b:29:c0:63:73:20:
e7:64:d0:66:04:f8:e3:a8:21:63:48:7b:db:3b:cd:
c2:9c:5d:03:59:67:b1:bb:44:41:41:e1:50:1c:d5:
29:18:2e:4a:89:83:1c:56:6e:62:5f:e5:57:e3:1e:
66:76:9e:47:2e:5a:f2:ec:6f:69:45:a6:13:b0:f8:
af:96:34:9f:b0:7a:dd:19:db:98:0a:51:d4:b7:3d:
f0:f4:ea:4d:00:3c:0a:e7:e7:c6:50:34:d7:92:93:
33:c0:ff:e1:40:8d:d9:af:da:ac:a8:4c:66:90:38:
09:34:84:25:85:02:fb:83:00:e8:14:13:07:e4:10:
46:c3:e1:0c:80:0d:a0:18:4c:17:a9:01:94:2b:26:
6d:fc:df:32:46:f4:04:29:5d:96:34:05:87:63:25:
19:80:02:1c:27:ba:2e:03:e7:3e:24:03:c7:a6:94:
a1:01:1e:b8:6d:e1:3a:47:34:d9:89:5c:07:20:8b:
24:20:7c:28:f8:35:bb:52:ed:cf:d7:94:ac:7c:97:
ce:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:3F:D2:B3:C2:C2:05:BB:64:07:A3:02:AA:C5:9B:77:2E:23:48:CD
X509v3 Authority Key Identifier:
keyid:BE:37:CC:E1:4C:B5:6B:66:49:78:10:E7:3B:AA:0E:DF:67:00:7A:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vjfM4Uy1a2ZJeBDnO6oO32cAekg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/5f6ac1-b935-47b1-96c1-0a12969fbcfc/1/DT_Ss8LCBbtkB6MCqsWbdy4jSM0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/5f6ac1-b935-47b1-96c1-0a12969fbcfc/1/vjfM4Uy1a2ZJeBDnO6oO32cAekg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.130.56.0/22
Signature Algorithm: sha256WithRSAEncryption
d3:50:59:58:ab:dd:0a:87:6f:3a:fa:4f:31:dc:b0:62:2b:ce:
17:26:33:b2:82:9a:55:f4:2a:38:e2:08:31:35:95:7b:03:25:
50:08:f8:ca:d1:74:27:f1:3d:f6:8f:4b:d2:4e:0d:ad:18:35:
1c:f1:48:2e:34:94:e7:f0:aa:e7:ad:c6:e0:20:cb:bb:e7:d1:
ee:b2:88:de:3b:96:09:d2:7e:48:e8:7a:28:6a:f7:62:b9:6d:
ca:c5:95:c7:0c:62:90:ec:9c:21:17:5f:a7:59:f3:a5:f9:90:
8e:8a:87:05:24:25:e4:3b:cf:06:e6:d7:a0:6b:b9:fc:ad:4e:
14:56:28:e1:d3:c7:8d:ab:19:4d:73:d6:f1:5d:8f:2e:1c:ab:
38:f6:70:78:67:6b:01:b0:82:cf:cd:c3:72:cb:c4:46:aa:7e:
83:96:70:01:9c:b9:6e:9b:50:8f:a9:0e:8a:cf:a8:bf:56:fe:
e7:82:75:08:3e:08:5c:de:8d:d5:c1:76:7b:67:78:92:ae:65:
d0:c6:8e:83:d0:93:37:e8:13:5e:36:94:91:e6:96:e8:f9:9e:
a8:99:7d:53:5b:cc:50:c7:1b:1c:22:79:0f:9e:87:ce:fc:ec:
30:df:01:e1:9f:24:f2:42:fa:af:70:75:9a:da:f6:5c:c4:8e:
27:bc:f6:3f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVuwjLfvby1+raFFBBWylUCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlMzdjY2UxNGNiNTZiNjY0OTc4MTBlNzNiYWEwZWRmNjcw
MDdhNDgwHhcNMjMwMTAxMTkxNDU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZDNmZDJiM2MyYzIwNWJiNjQwN2EzMDJhYWM1OWI3NzJlMjM0OGNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAotCqGfChi7ZXce3MtMP7GfvCQsoP
tfQagharF0SJCmuKvXYnHvXHYQl3VPwpihI4QVBYnxx7KcBjcyDnZNBmBPjjqCFj
SHvbO83CnF0DWWexu0RBQeFQHNUpGC5KiYMcVm5iX+VX4x5mdp5HLlry7G9pRaYT
sPivljSfsHrdGduYClHUtz3w9OpNADwK5+fGUDTXkpMzwP/hQI3Zr9qsqExmkDgJ
NIQlhQL7gwDoFBMH5BBGw+EMgA2gGEwXqQGUKyZt/N8yRvQEKV2WNAWHYyUZgAIc
J7ouA+c+JAPHppShAR64beE6RzTZiVwHIIskIHwo+DW7Uu3P15SsfJfOhQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFA0/0rPCwgW7ZAejAqrFm3cuI0jNMB8GA1UdIwQY
MBaAFL43zOFMtWtmSXgQ5zuqDt9nAHpIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmpmTTRVeTFhMlpKZUJEbk82b08zMmNBZWtnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi81ZjZhYzEtYjkzNS00N2IxLTk2YzEt
MGExMjk2OWZiY2ZjLzEvRFRfU3M4TENCYnRrQjZNQ3FzV2JkeTRqU00wLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi81ZjZhYzEtYjkzNS00N2IxLTk2YzEtMGExMjk2OWZiY2Zj
LzEvdmpmTTRVeTFhMlpKZUJEbk82b08zMmNBZWtnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLYI4MA0G
CSqGSIb3DQEBCwUAA4IBAQDTUFlYq90Kh286+k8x3LBiK84XJjOygppV9Co44ggx
NZV7AyVQCPjK0XQn8T32j0vSTg2tGDUc8UguNJTn8KrnrcbgIMu759HusojeO5YJ
0n5I6HooavdiuW3KxZXHDGKQ7JwhF1+nWfOl+ZCOiocFJCXkO88G5tega7n8rU4U
Vijh08eNqxlNc9bxXY8uHKs49nB4Z2sBsILPzcNyy8RGqn6DlnABnLlum1CPqQ6K
z6i/Vv7ngnUIPghc3o3VwXZ7Z3iSrmXQxo6D0JM36BNeNpSR5pbo+Z6omX1TW8xQ
xxscInkPnofO/Oww3wHhnyTyQvqvcHWa2vZcxI4nvPY/
-----END CERTIFICATE-----
Generated at Fri Apr 18 16:02:27 2025 by rpki-client