Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/bhZhgsjF8m80KYTc5Vst_70aV7c.roa
File: bhZhgsjF8m80KYTc5Vst_70aV7c.roa (raw, json)
Hash identifier: ebn7twpQ60FElpVMoLA55HO6h93nwzi+oQmwdYiGEhM=
Subject key identifier: 6E:16:61:82:C8:C5:F2:6F:34:29:84:DC:E5:5B:2D:FF:BD:1A:57:B7
Certificate issuer: /CN=62fa765a393369c96d8d836f23f76e67489c7dde
Certificate serial: 01857142EBCDD56DEDE93A29FE9849ECD33F
Authority key identifier: 62:FA:76:5A:39:33:69:C9:6D:8D:83:6F:23:F7:6E:67:48:9C:7D:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yvp2WjkzacltjYNvI_duZ0icfd4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/bhZhgsjF8m80KYTc5Vst_70aV7c.roa
Signing time: Mon 02 Jan 2023 06:54:49 +0000
ROA not before: Mon 02 Jan 2023 06:54:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7562
IP address blocks: 45.8.174.0/24 maxlen: 24
45.8.175.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:42:eb:cd:d5:6d:ed:e9:3a:29:fe:98:49:ec:d3:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fa765a393369c96d8d836f23f76e67489c7dde
Validity
Not Before: Jan 2 06:54:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6e166182c8c5f26f342984dce55b2dffbd1a57b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:be:20:77:fc:75:8d:5b:f1:23:ac:7d:40:ba:
57:5c:94:b9:4d:e9:b9:5a:00:7f:06:32:4b:98:5b:
5f:ed:fa:98:57:92:b7:03:09:eb:72:22:32:ab:74:
bf:42:0b:46:ca:c9:4e:58:44:11:8e:24:8b:d6:7a:
ad:4d:5e:8a:2b:ed:91:f6:3f:aa:fe:ae:3f:76:e8:
c0:49:10:8b:64:8e:de:95:09:fa:5f:09:81:01:36:
fc:ce:48:07:01:8c:f3:31:85:f3:25:ee:92:06:0a:
52:bc:96:cd:de:b5:44:f4:50:b8:ff:a5:bd:1f:46:
94:73:3a:38:17:cb:37:76:5e:4f:c6:2c:e7:b4:0d:
03:c5:f9:dd:d7:8c:eb:c8:84:7d:72:03:3c:42:cd:
b7:68:db:ae:0e:5c:97:70:fa:f4:6e:48:62:d4:8b:
95:57:b1:e7:1a:43:e0:77:06:fc:e3:4c:ae:f4:2e:
bf:1f:54:02:c6:80:8d:3f:05:bb:d2:53:43:d6:3a:
53:77:6b:cf:e4:c8:3d:12:37:78:3e:e0:40:be:68:
3b:f1:88:5d:41:65:67:04:4c:18:9d:84:ab:64:72:
78:e2:9b:74:35:ec:35:56:b2:a1:ab:c6:a0:7d:26:
78:9a:81:21:15:2d:0d:ca:ab:63:e2:97:b5:30:87:
22:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:16:61:82:C8:C5:F2:6F:34:29:84:DC:E5:5B:2D:FF:BD:1A:57:B7
X509v3 Authority Key Identifier:
keyid:62:FA:76:5A:39:33:69:C9:6D:8D:83:6F:23:F7:6E:67:48:9C:7D:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yvp2WjkzacltjYNvI_duZ0icfd4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/bhZhgsjF8m80KYTc5Vst_70aV7c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/Yvp2WjkzacltjYNvI_duZ0icfd4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.174.0/23
Signature Algorithm: sha256WithRSAEncryption
c5:86:c7:53:d6:bc:c1:60:35:e0:18:9b:3a:3c:83:d9:ed:5c:
ed:47:a4:73:e4:66:58:88:40:0b:48:b8:50:9e:db:d2:4c:02:
0d:32:12:92:f8:e9:7b:e6:f6:f3:3c:65:10:fe:58:b7:dd:e9:
99:cc:76:98:00:c6:ff:a8:00:6f:cf:7d:7d:9a:76:40:0e:b8:
78:8b:01:4f:fc:0d:8e:66:a2:fc:51:bd:a8:d5:57:94:a9:40:
49:1e:7e:d8:b6:ce:f0:98:96:2b:19:e4:66:f2:b3:70:a8:6a:
d6:03:57:92:8c:51:ab:e4:17:00:d9:d2:9c:7a:6d:d4:fa:9c:
23:c8:a5:9c:51:c5:84:72:1e:8f:d8:fb:25:db:cf:0d:8f:85:
62:bc:6a:b8:47:2d:58:5d:e7:12:31:8d:b8:ee:2b:98:26:06:
d0:3e:22:62:4e:e2:15:e8:77:40:25:74:98:75:34:ef:ff:da:
d4:d5:75:ac:31:71:f0:ec:f8:e2:0c:ac:1d:da:c6:42:3c:2c:
d6:06:4d:8c:03:37:e7:fc:13:4f:87:d1:16:2a:68:f1:97:8f:
06:79:cf:61:d3:71:cf:b8:2e:3c:48:38:c3:be:80:8b:07:16:
6c:ca:7e:08:f0:0f:a9:f0:57:75:22:47:07:9e:c8:81:55:09:
6e:b9:e5:bf
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVxQuvN1W3t6Top/phJ7NM/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyZmE3NjVhMzkzMzY5Yzk2ZDhkODM2ZjIzZjc2ZTY3NDg5
YzdkZGUwHhcNMjMwMTAyMDY1NDQ5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZTE2NjE4MmM4YzVmMjZmMzQyOTg0ZGNlNTViMmRmZmJkMWE1N2I3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgL4gd/x1jVvxI6x9QLpXXJS5Tem5
WgB/BjJLmFtf7fqYV5K3AwnrciIyq3S/QgtGyslOWEQRjiSL1nqtTV6KK+2R9j+q
/q4/dujASRCLZI7elQn6XwmBATb8zkgHAYzzMYXzJe6SBgpSvJbN3rVE9FC4/6W9
H0aUczo4F8s3dl5PxizntA0Dxfnd14zryIR9cgM8Qs23aNuuDlyXcPr0bkhi1IuV
V7HnGkPgdwb840yu9C6/H1QCxoCNPwW70lND1jpTd2vP5Mg9Ejd4PuBAvmg78Yhd
QWVnBEwYnYSrZHJ44pt0New1VrKhq8agfSZ4moEhFS0Nyqtj4pe1MIcidwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFG4WYYLIxfJvNCmE3OVbLf+9Gle3MB8GA1UdIwQY
MBaAFGL6dlo5M2nJbY2DbyP3bmdInH3eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXZwMldqa3phY2x0allOdklfZHVaMGljZmQ0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi9hZGZmODAtYjIwNy00ZmJkLWJmNWUt
MDdkZDFiNGM1NWQ5LzEvYmhaaGdzakY4bTgwS1lUYzVWc3RfNzBhVjdjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi9hZGZmODAtYjIwNy00ZmJkLWJmNWUtMDdkZDFiNGM1NWQ5
LzEvWXZwMldqa3phY2x0allOdklfZHVaMGljZmQ0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLQiuMA0G
CSqGSIb3DQEBCwUAA4IBAQDFhsdT1rzBYDXgGJs6PIPZ7VztR6Rz5GZYiEALSLhQ
ntvSTAINMhKS+Ol75vbzPGUQ/li33emZzHaYAMb/qABvz319mnZADrh4iwFP/A2O
ZqL8Ub2o1VeUqUBJHn7Yts7wmJYrGeRm8rNwqGrWA1eSjFGr5BcA2dKcem3U+pwj
yKWcUcWEch6P2Psl288Nj4VivGq4Ry1YXecSMY247iuYJgbQPiJiTuIV6HdAJXSY
dTTv/9rU1XWsMXHw7PjiDKwd2sZCPCzWBk2MAzfn/BNPh9EWKmjxl48Gec9h03HP
uC48SDjDvoCLBxZsyn4I8A+p8Fd1IkcHnsiBVQluueW/
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:10:15 2023 by rpki-client on console-ams.rpki-client.org