Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/46d7af-02fb-45f9-a922-14b38b6e00a7/1/T2qloX6-O-1wiB7PvD3sB62JdKw.roa
File: T2qloX6-O-1wiB7PvD3sB62JdKw.roa (raw, json)
Hash identifier: k+1XwntY49V1FNH+RW/UDdXZX72KdVLR347jt/t2nNk=
Subject key identifier: 4F:6A:A5:A1:7E:BE:3B:ED:70:88:1E:CF:BC:3D:EC:07:AD:89:74:AC
Certificate issuer: /CN=f4db95f9d1b5c3ec934ff84d6ff7f01242da842a
Certificate serial: 0185737A9764FBA42AA33036D261FBAD2CE6
Authority key identifier: F4:DB:95:F9:D1:B5:C3:EC:93:4F:F8:4D:6F:F7:F0:12:42:DA:84:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9NuV-dG1w-yTT_hNb_fwEkLahCo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/46d7af-02fb-45f9-a922-14b38b6e00a7/1/T2qloX6-O-1wiB7PvD3sB62JdKw.roa
Signing time: Mon 02 Jan 2023 17:14:52 +0000
ROA not before: Mon 02 Jan 2023 17:14:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51317
IP address blocks: 45.84.179.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:7a:97:64:fb:a4:2a:a3:30:36:d2:61:fb:ad:2c:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4db95f9d1b5c3ec934ff84d6ff7f01242da842a
Validity
Not Before: Jan 2 17:14:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4f6aa5a17ebe3bed70881ecfbc3dec07ad8974ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:88:d9:c9:32:d6:41:8d:56:e3:1d:d6:ab:1b:
84:2a:2c:98:b6:63:4d:cf:62:7e:de:9d:fd:5a:8e:
68:57:43:49:fa:19:36:0f:4a:7f:aa:58:08:26:81:
c3:0e:fb:fb:3e:17:33:6f:e7:62:5a:bb:ad:09:49:
e6:a8:72:f9:e7:6a:b7:bf:f2:7f:1f:0d:f1:da:0d:
74:72:1d:6e:82:50:8e:4c:f0:29:fc:11:a1:42:23:
f6:77:f8:7e:d0:5c:61:d4:72:2a:b4:7a:62:02:45:
63:98:f1:3e:81:5c:15:17:74:e1:25:db:5f:70:99:
92:bd:56:28:2c:53:03:fb:38:5d:9e:35:86:ad:4f:
0d:4b:68:92:5e:df:32:8f:e5:b9:d5:36:ab:2c:78:
83:11:a7:96:0b:97:d9:f4:b2:f5:11:fb:42:f3:a4:
95:b7:24:27:ac:25:68:39:0f:9b:9e:a6:24:46:f1:
d2:42:cc:48:1e:2f:80:c3:a1:11:ab:06:3f:e7:45:
cc:b1:83:8c:40:cc:9d:e4:0f:c7:11:e6:ec:f6:97:
31:8c:af:80:2a:4f:e1:d9:74:32:48:02:d9:a2:23:
cc:1e:0e:80:5d:43:ec:32:f5:45:11:21:13:ee:a0:
64:ed:26:36:f1:0a:09:66:f1:14:cd:25:fd:dc:82:
29:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:6A:A5:A1:7E:BE:3B:ED:70:88:1E:CF:BC:3D:EC:07:AD:89:74:AC
X509v3 Authority Key Identifier:
keyid:F4:DB:95:F9:D1:B5:C3:EC:93:4F:F8:4D:6F:F7:F0:12:42:DA:84:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9NuV-dG1w-yTT_hNb_fwEkLahCo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/46d7af-02fb-45f9-a922-14b38b6e00a7/1/T2qloX6-O-1wiB7PvD3sB62JdKw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/46d7af-02fb-45f9-a922-14b38b6e00a7/1/9NuV-dG1w-yTT_hNb_fwEkLahCo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.179.0/24
Signature Algorithm: sha256WithRSAEncryption
20:da:0b:67:84:61:d1:53:79:e9:3b:63:50:27:94:4f:0a:10:
d8:65:d7:d8:e0:12:bb:18:e3:61:6b:dd:b1:cc:a7:7b:9c:72:
a4:1f:b2:7e:c2:c5:e3:de:fc:74:3b:95:0c:7c:cf:81:32:b1:
c9:21:90:0f:e6:9b:5e:9f:dc:5b:58:10:78:58:e0:09:43:bc:
ee:54:89:99:54:3e:bb:6a:2e:da:d6:c4:0f:f0:36:97:18:86:
83:6a:d5:ab:6f:77:32:09:b7:3f:a5:39:c3:bf:eb:07:dc:0d:
b7:4e:cf:66:35:83:a4:ca:93:80:e2:13:8a:f5:fc:2c:dc:c9:
16:92:0a:76:01:0f:0b:47:7b:a3:bf:24:a2:00:71:d3:a1:9b:
9d:76:f6:1d:fc:f2:a5:54:af:5e:b2:8d:c0:cf:d3:56:fc:77:
54:db:fb:78:45:4c:d0:7d:7b:51:c5:4c:c7:b4:05:ce:dd:af:
c8:3c:49:c9:58:4d:1a:26:e0:0c:de:41:7d:e2:ab:af:14:9c:
5d:e7:2a:71:ae:88:cd:01:f3:53:7a:0e:d1:f0:c6:59:35:1e:
83:db:74:b9:77:68:e2:91:41:3d:6a:bc:f6:b1:59:00:48:b1:
63:f2:e6:13:b7:12:a1:6d:65:27:4b:ea:d4:db:fc:4d:1d:f0:
3e:90:94:87
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVzepdk+6QqozA20mH7rSzmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0ZGI5NWY5ZDFiNWMzZWM5MzRmZjg0ZDZmZjdmMDEyNDJk
YTg0MmEwHhcNMjMwMTAyMTcxNDUyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZjZhYTVhMTdlYmUzYmVkNzA4ODFlY2ZiYzNkZWMwN2FkODk3NGFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtYjZyTLWQY1W4x3WqxuEKiyYtmNN
z2J+3p39Wo5oV0NJ+hk2D0p/qlgIJoHDDvv7Phczb+diWrutCUnmqHL552q3v/J/
Hw3x2g10ch1uglCOTPAp/BGhQiP2d/h+0Fxh1HIqtHpiAkVjmPE+gVwVF3ThJdtf
cJmSvVYoLFMD+zhdnjWGrU8NS2iSXt8yj+W51TarLHiDEaeWC5fZ9LL1EftC86SV
tyQnrCVoOQ+bnqYkRvHSQsxIHi+Aw6ERqwY/50XMsYOMQMyd5A/HEebs9pcxjK+A
Kk/h2XQySALZoiPMHg6AXUPsMvVFESET7qBk7SY28QoJZvEUzSX93IIp+QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFE9qpaF+vjvtcIgez7w97AetiXSsMB8GA1UdIwQY
MBaAFPTblfnRtcPsk0/4TW/38BJC2oQqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOU51Vi1kRzF3LXlUVF9oTmJfZndFa0xhaENvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC80NmQ3YWYtMDJmYi00NWY5LWE5MjIt
MTRiMzhiNmUwMGE3LzEvVDJxbG9YNi1PLTF3aUI3UHZEM3NCNjJKZEt3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC80NmQ3YWYtMDJmYi00NWY5LWE5MjItMTRiMzhiNmUwMGE3
LzEvOU51Vi1kRzF3LXlUVF9oTmJfZndFa0xhaENvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALVSzMA0G
CSqGSIb3DQEBCwUAA4IBAQAg2gtnhGHRU3npO2NQJ5RPChDYZdfY4BK7GONha92x
zKd7nHKkH7J+wsXj3vx0O5UMfM+BMrHJIZAP5pten9xbWBB4WOAJQ7zuVImZVD67
ai7a1sQP8DaXGIaDatWrb3cyCbc/pTnDv+sH3A23Ts9mNYOkypOA4hOK9fws3MkW
kgp2AQ8LR3ujvySiAHHToZuddvYd/PKlVK9eso3Az9NW/HdU2/t4RUzQfXtRxUzH
tAXO3a/IPEnJWE0aJuAM3kF94quvFJxd5ypxrojNAfNTeg7R8MZZNR6D23S5d2ji
kUE9arz2sVkASLFj8uYTtxKhbWUnS+rU2/xNHfA+kJSH
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:41:33 2025 by rpki-client