Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/Ogqoy_GkZFSoxIBsMnSCSJhjinc.roa
File: Ogqoy_GkZFSoxIBsMnSCSJhjinc.roa (raw, json)
Hash identifier: Migus8vYakPnvtRNb+LNcF+QxIayZja+qv7XJzDvRFE=
Subject key identifier: 3A:0A:A8:CB:F1:A4:64:54:A8:C4:80:6C:32:74:82:48:98:63:8A:77
Certificate issuer: /CN=62fa765a393369c96d8d836f23f76e67489c7dde
Certificate serial: 01857142F1F11A2346696A4046080525816E
Authority key identifier: 62:FA:76:5A:39:33:69:C9:6D:8D:83:6F:23:F7:6E:67:48:9C:7D:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yvp2WjkzacltjYNvI_duZ0icfd4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/Ogqoy_GkZFSoxIBsMnSCSJhjinc.roa
Signing time: Mon 02 Jan 2023 06:54:50 +0000
ROA not before: Mon 02 Jan 2023 06:54:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62579
IP address blocks: 45.13.151.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:42:f1:f1:1a:23:46:69:6a:40:46:08:05:25:81:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fa765a393369c96d8d836f23f76e67489c7dde
Validity
Not Before: Jan 2 06:54:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3a0aa8cbf1a46454a8c4806c3274824898638a77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:0d:07:9e:7d:21:1c:b1:1d:af:3d:f0:d5:cd:
0c:2a:be:40:38:68:0e:66:3b:79:25:64:28:25:ee:
ef:4f:43:77:a6:84:15:2c:57:1c:de:f9:f5:32:b8:
16:28:ff:67:ce:13:6b:70:ca:01:51:44:f4:50:5e:
4a:1e:be:6d:2f:82:9a:90:6c:18:07:3e:84:aa:71:
22:ba:76:a7:d4:23:9d:4e:2a:5a:3e:1a:8c:c2:d4:
47:cf:51:1f:3a:3c:2a:b0:f6:af:95:05:88:32:82:
50:0a:c7:4c:a8:1f:c6:ed:f2:a0:83:73:c8:f9:37:
cb:1d:cb:eb:20:83:45:b9:d2:26:80:1e:5c:94:6b:
89:e8:3e:ea:34:89:04:ae:23:f9:0d:a3:bb:f5:7c:
b7:60:b7:d3:61:94:c5:bb:c3:3e:3a:ba:c7:a7:9e:
6f:8b:ca:52:f3:b9:9f:01:0b:39:98:90:74:b0:85:
d0:5c:a1:2a:76:82:a4:5e:5b:a8:27:e5:ab:41:92:
f1:d0:3f:b0:0d:76:37:72:e9:37:fd:33:d5:25:93:
0f:6c:b7:b5:9e:d5:89:63:96:63:50:66:93:1f:25:
6f:ca:e9:a2:89:8c:f2:b7:c6:1e:ab:14:3e:fe:90:
af:7b:4d:0a:a1:c7:2b:51:cb:38:8f:44:a8:37:6f:
48:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:0A:A8:CB:F1:A4:64:54:A8:C4:80:6C:32:74:82:48:98:63:8A:77
X509v3 Authority Key Identifier:
keyid:62:FA:76:5A:39:33:69:C9:6D:8D:83:6F:23:F7:6E:67:48:9C:7D:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yvp2WjkzacltjYNvI_duZ0icfd4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/Ogqoy_GkZFSoxIBsMnSCSJhjinc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/Yvp2WjkzacltjYNvI_duZ0icfd4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.13.151.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:3e:3e:9e:35:a1:a2:fe:7d:34:29:60:df:be:76:02:c0:b0:
55:7e:ac:86:67:6b:b5:2d:ce:41:f5:11:66:56:b5:e5:53:56:
8d:53:57:4e:43:a8:69:5f:cf:00:c6:04:96:c4:3b:94:51:50:
fa:34:93:87:73:bb:bb:fd:78:4d:5b:70:1d:b5:5f:e4:de:de:
13:69:bb:e0:db:95:60:af:73:61:9d:01:93:f4:cf:a5:4c:b2:
db:a0:7f:d9:2b:3f:b9:06:6f:2b:9a:73:4c:fc:65:6a:99:84:
79:a3:b3:5a:91:d5:b9:b9:b7:c2:6d:2d:cd:41:6b:af:d0:40:
3a:b9:ae:91:2c:80:c8:4a:de:40:2b:0e:1f:77:72:67:0a:cb:
78:3e:0d:2d:c3:ed:9c:d2:a3:61:d9:fc:62:62:d4:4e:62:40:
21:c1:2b:50:f0:0b:76:8e:7a:4e:cf:f2:2d:d7:1b:e9:3b:9c:
b7:a8:44:ff:a0:a3:c8:15:ac:8d:b3:88:21:ea:7c:4d:23:f6:
cc:a4:34:51:ca:06:bd:be:c0:d9:50:27:80:93:c4:1a:2b:9d:
20:32:b8:be:10:54:29:b3:71:0c:f5:04:31:85:73:67:db:56:
95:7d:75:40:8d:6d:a4:89:71:e9:dc:32:26:a4:64:86:56:6b:
71:ff:05:2d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVxQvHxGiNGaWpARggFJYFuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyZmE3NjVhMzkzMzY5Yzk2ZDhkODM2ZjIzZjc2ZTY3NDg5
YzdkZGUwHhcNMjMwMTAyMDY1NDUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYTBhYThjYmYxYTQ2NDU0YThjNDgwNmMzMjc0ODI0ODk4NjM4YTc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtQ0Hnn0hHLEdrz3w1c0MKr5AOGgO
Zjt5JWQoJe7vT0N3poQVLFcc3vn1MrgWKP9nzhNrcMoBUUT0UF5KHr5tL4KakGwY
Bz6EqnEiunan1COdTipaPhqMwtRHz1EfOjwqsPavlQWIMoJQCsdMqB/G7fKgg3PI
+TfLHcvrIINFudImgB5clGuJ6D7qNIkEriP5DaO79Xy3YLfTYZTFu8M+OrrHp55v
i8pS87mfAQs5mJB0sIXQXKEqdoKkXluoJ+WrQZLx0D+wDXY3cuk3/TPVJZMPbLe1
ntWJY5ZjUGaTHyVvyumiiYzyt8YeqxQ+/pCve00KoccrUcs4j0SoN29IGQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDoKqMvxpGRUqMSAbDJ0gkiYY4p3MB8GA1UdIwQY
MBaAFGL6dlo5M2nJbY2DbyP3bmdInH3eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXZwMldqa3phY2x0allOdklfZHVaMGljZmQ0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi9hZGZmODAtYjIwNy00ZmJkLWJmNWUt
MDdkZDFiNGM1NWQ5LzEvT2dxb3lfR2taRlNveElCc01uU0NTSmhqaW5jLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi9hZGZmODAtYjIwNy00ZmJkLWJmNWUtMDdkZDFiNGM1NWQ5
LzEvWXZwMldqa3phY2x0allOdklfZHVaMGljZmQ0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALQ2XMA0G
CSqGSIb3DQEBCwUAA4IBAQCkPj6eNaGi/n00KWDfvnYCwLBVfqyGZ2u1Lc5B9RFm
VrXlU1aNU1dOQ6hpX88AxgSWxDuUUVD6NJOHc7u7/XhNW3AdtV/k3t4Tabvg25Vg
r3NhnQGT9M+lTLLboH/ZKz+5Bm8rmnNM/GVqmYR5o7NakdW5ubfCbS3NQWuv0EA6
ua6RLIDISt5AKw4fd3JnCst4Pg0tw+2c0qNh2fxiYtROYkAhwStQ8At2jnpOz/It
1xvpO5y3qET/oKPIFayNs4gh6nxNI/bMpDRRyga9vsDZUCeAk8QaK50gMri+EFQp
s3EM9QQxhXNn21aVfXVAjW2kiXHp3DImpGSGVmtx/wUt
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:55:45 2025 by rpki-client