Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/46d7af-02fb-45f9-a922-14b38b6e00a7/1/0JloI2_75jwiir4szMdbiI5_ddM.roa
File: 0JloI2_75jwiir4szMdbiI5_ddM.roa (raw, json)
Hash identifier: A8OYLBZbT2YAAUQCUcttehwl8ylLZtIOHaKpz3M/jBw=
Subject key identifier: D0:99:68:23:6F:FB:E6:3C:22:8A:BE:2C:CC:C7:5B:88:8E:7F:75:D3
Certificate issuer: /CN=f4db95f9d1b5c3ec934ff84d6ff7f01242da842a
Certificate serial: 0185737A9930826423D834D2FA67FC9E6D3A
Authority key identifier: F4:DB:95:F9:D1:B5:C3:EC:93:4F:F8:4D:6F:F7:F0:12:42:DA:84:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9NuV-dG1w-yTT_hNb_fwEkLahCo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/46d7af-02fb-45f9-a922-14b38b6e00a7/1/0JloI2_75jwiir4szMdbiI5_ddM.roa
Signing time: Mon 02 Jan 2023 17:14:52 +0000
ROA not before: Mon 02 Jan 2023 17:14:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 63023
IP address blocks: 45.142.216.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:7a:99:30:82:64:23:d8:34:d2:fa:67:fc:9e:6d:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4db95f9d1b5c3ec934ff84d6ff7f01242da842a
Validity
Not Before: Jan 2 17:14:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d09968236ffbe63c228abe2cccc75b888e7f75d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:f9:ec:f1:5e:92:7c:f0:1e:f8:2b:6a:fe:f2:
48:a8:db:3a:e2:05:77:dc:9d:71:53:ec:9c:26:a7:
09:eb:53:c2:44:80:b3:fb:ad:b4:9b:ab:35:ac:65:
d2:c2:df:56:b2:ec:1d:0b:47:37:66:66:84:2d:f2:
60:ef:a4:8a:45:3f:17:02:b8:a8:e8:46:9c:d1:ad:
b9:41:fe:23:03:6b:97:3c:a8:b5:28:d2:74:d7:13:
b8:67:52:40:02:c5:f7:8d:09:2e:26:87:62:ba:29:
f6:15:a9:04:db:a8:1a:95:fd:2e:8e:59:e2:fe:9e:
10:8f:48:05:4e:59:eb:58:d7:89:2f:7e:ff:6c:72:
81:a9:74:8b:04:b6:e1:14:d7:0f:f1:29:49:0a:19:
a5:41:2a:4c:96:aa:14:c2:76:0b:2a:a8:2d:6e:38:
6d:20:7d:7f:ea:36:b2:8d:bf:54:b1:67:2b:ee:99:
0f:c0:8d:bb:3e:9a:db:b7:12:23:7e:f9:24:b5:d2:
e5:d9:80:eb:c8:63:88:eb:36:51:20:94:c2:fb:ff:
c3:1c:f1:10:db:a0:eb:5a:46:17:6e:99:ac:65:28:
b3:b6:07:f4:1d:b7:c2:a0:2d:25:43:9a:90:9b:ae:
df:16:7e:0f:7a:8a:84:73:29:23:44:51:8b:6e:e1:
9e:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:99:68:23:6F:FB:E6:3C:22:8A:BE:2C:CC:C7:5B:88:8E:7F:75:D3
X509v3 Authority Key Identifier:
keyid:F4:DB:95:F9:D1:B5:C3:EC:93:4F:F8:4D:6F:F7:F0:12:42:DA:84:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9NuV-dG1w-yTT_hNb_fwEkLahCo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/46d7af-02fb-45f9-a922-14b38b6e00a7/1/0JloI2_75jwiir4szMdbiI5_ddM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/46d7af-02fb-45f9-a922-14b38b6e00a7/1/9NuV-dG1w-yTT_hNb_fwEkLahCo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.216.0/22
Signature Algorithm: sha256WithRSAEncryption
53:58:dc:23:14:2d:28:bf:3c:23:0a:0e:a5:11:09:9c:47:ab:
96:ad:9e:a5:00:43:09:22:12:0f:3b:db:58:2a:0f:0f:a5:f7:
b7:3a:59:e7:ac:64:0d:99:80:e1:b8:eb:ac:98:29:eb:6b:e0:
cf:99:77:e5:46:dd:37:17:38:c0:8e:02:f8:d6:c9:ba:8e:d3:
4a:e1:1e:7e:4d:a3:d4:50:fb:b7:36:7b:b7:7b:a0:92:97:49:
b6:81:26:91:9b:51:07:0e:15:01:c9:74:a3:3f:80:e3:c5:9e:
2b:96:fc:19:33:8f:0a:fc:42:07:c0:10:a4:17:d3:5d:26:af:
a1:ae:e9:f4:51:c3:3e:46:d4:fc:6f:5d:34:2f:08:8e:7a:c4:
50:b5:04:a1:c2:84:e3:07:0a:3c:51:8b:67:d1:79:e6:47:5c:
87:7d:c4:85:a5:5a:16:4d:7c:f9:b7:86:85:51:0f:98:4b:05:
76:a6:72:96:76:0b:a4:be:17:62:0b:1c:a4:50:dd:5f:b5:33:
4b:b3:8e:95:b5:7d:27:0b:86:2e:a4:fb:4f:0c:b5:da:30:af:
c3:68:22:b6:49:91:98:8b:8a:6d:72:7d:bb:10:48:48:71:8d:
3d:52:b9:76:a2:01:fd:b4:f0:04:9c:76:91:f9:89:af:34:3c:
cd:f0:6f:7c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVzepkwgmQj2DTS+mf8nm06MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0ZGI5NWY5ZDFiNWMzZWM5MzRmZjg0ZDZmZjdmMDEyNDJk
YTg0MmEwHhcNMjMwMTAyMTcxNDUyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMDk5NjgyMzZmZmJlNjNjMjI4YWJlMmNjY2M3NWI4ODhlN2Y3NWQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjPns8V6SfPAe+Ctq/vJIqNs64gV3
3J1xU+ycJqcJ61PCRICz+620m6s1rGXSwt9WsuwdC0c3ZmaELfJg76SKRT8XArio
6Eac0a25Qf4jA2uXPKi1KNJ01xO4Z1JAAsX3jQkuJodiuin2FakE26galf0ujlni
/p4Qj0gFTlnrWNeJL37/bHKBqXSLBLbhFNcP8SlJChmlQSpMlqoUwnYLKqgtbjht
IH1/6jayjb9UsWcr7pkPwI27PprbtxIjfvkktdLl2YDryGOI6zZRIJTC+//DHPEQ
26DrWkYXbpmsZSiztgf0HbfCoC0lQ5qQm67fFn4PeoqEcykjRFGLbuGeqwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNCZaCNv++Y8Ioq+LMzHW4iOf3XTMB8GA1UdIwQY
MBaAFPTblfnRtcPsk0/4TW/38BJC2oQqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOU51Vi1kRzF3LXlUVF9oTmJfZndFa0xhaENvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC80NmQ3YWYtMDJmYi00NWY5LWE5MjIt
MTRiMzhiNmUwMGE3LzEvMEpsb0kyXzc1andpaXI0c3pNZGJpSTVfZGRNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC80NmQ3YWYtMDJmYi00NWY5LWE5MjItMTRiMzhiNmUwMGE3
LzEvOU51Vi1kRzF3LXlUVF9oTmJfZndFa0xhaENvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLY7YMA0G
CSqGSIb3DQEBCwUAA4IBAQBTWNwjFC0ovzwjCg6lEQmcR6uWrZ6lAEMJIhIPO9tY
Kg8Ppfe3OlnnrGQNmYDhuOusmCnra+DPmXflRt03FzjAjgL41sm6jtNK4R5+TaPU
UPu3Nnu3e6CSl0m2gSaRm1EHDhUByXSjP4DjxZ4rlvwZM48K/EIHwBCkF9NdJq+h
run0UcM+RtT8b100LwiOesRQtQShwoTjBwo8UYtn0XnmR1yHfcSFpVoWTXz5t4aF
UQ+YSwV2pnKWdgukvhdiCxykUN1ftTNLs46VtX0nC4YupPtPDLXaMK/DaCK2SZGY
i4ptcn27EEhIcY09Url2ogH9tPAEnHaR+YmvNDzN8G98
-----END CERTIFICATE-----
Generated at Mon May 12 10:57:24 2025 by rpki-client