Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/792d92-7668-4251-accf-ba8e5f5e71f4/1/0dmSLyNGbrkY3UGgeptmCGq2vN8.roa
File: 0dmSLyNGbrkY3UGgeptmCGq2vN8.roa (raw, json)
Hash identifier: BTGFz0zZ8/nCqf4vZtqS34EzNNUksxNGbpcHvPaUpbM=
Subject key identifier: D1:D9:92:2F:23:46:6E:B9:18:DD:41:A0:7A:9B:66:08:6A:B6:BC:DF
Certificate issuer: /CN=8558ede97b4f930e3762d86c2cb68e94f1d3639e
Certificate serial: 07A4AF91
Authority key identifier: 85:58:ED:E9:7B:4F:93:0E:37:62:D8:6C:2C:B6:8E:94:F1:D3:63:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hVjt6XtPkw43YthsLLaOlPHTY54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/792d92-7668-4251-accf-ba8e5f5e71f4/1/0dmSLyNGbrkY3UGgeptmCGq2vN8.roa
Signing time: Sat 01 Jan 2022 03:57:44 +0000
ROA not before: Sat 01 Jan 2022 03:57:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42156
IP address blocks: 45.143.62.0/23 maxlen: 23
2a0e:e2c1::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 128233361 (0x7a4af91)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8558ede97b4f930e3762d86c2cb68e94f1d3639e
Validity
Not Before: Jan 1 03:57:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d1d9922f23466eb918dd41a07a9b66086ab6bcdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f2:d3:0d:3e:2f:6a:c7:21:76:a0:72:09:cc:
55:49:fc:56:32:93:c9:57:a2:60:e2:26:6d:66:5a:
15:3d:21:0c:e6:89:15:d5:33:48:44:ab:df:34:bf:
31:90:1c:82:ab:a4:1b:0b:88:f4:1d:36:d0:54:02:
15:2e:ca:e5:fe:b1:93:0e:ef:d9:4e:fa:b6:5c:b3:
6f:68:4c:0f:d5:3e:88:0e:80:b6:56:80:ac:e3:5f:
6c:97:4d:e7:c9:ec:3a:7a:99:ae:08:1d:1e:01:81:
56:1d:b7:bd:bd:fa:8e:11:05:7b:11:54:e0:39:b6:
32:08:6b:74:6b:aa:a6:9f:18:b1:d9:1e:6d:e5:3c:
1a:15:84:32:b5:24:6a:be:06:1e:79:6d:95:ec:8b:
0b:cc:bc:f0:2b:f3:af:b1:4d:04:bb:d9:e4:de:2e:
f4:43:01:67:88:e1:36:09:0b:f9:16:8b:25:28:17:
3c:8e:52:1f:8a:25:09:2b:ee:2f:d0:47:5c:c0:0f:
32:5c:ec:16:41:5d:40:71:d6:95:80:32:93:09:7e:
4a:fe:08:c6:60:4e:75:44:dc:c3:4e:ec:d7:db:2e:
a4:f6:5d:88:88:12:29:34:b3:5b:18:03:7e:ce:10:
9c:97:b2:9b:da:c6:32:c8:be:c3:20:28:9e:3d:03:
03:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:D9:92:2F:23:46:6E:B9:18:DD:41:A0:7A:9B:66:08:6A:B6:BC:DF
X509v3 Authority Key Identifier:
keyid:85:58:ED:E9:7B:4F:93:0E:37:62:D8:6C:2C:B6:8E:94:F1:D3:63:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hVjt6XtPkw43YthsLLaOlPHTY54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/792d92-7668-4251-accf-ba8e5f5e71f4/1/0dmSLyNGbrkY3UGgeptmCGq2vN8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/792d92-7668-4251-accf-ba8e5f5e71f4/1/hVjt6XtPkw43YthsLLaOlPHTY54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.143.62.0/23
IPv6:
2a0e:e2c1::/32
Signature Algorithm: sha256WithRSAEncryption
47:b1:a7:23:5c:8b:49:c2:b6:e7:d1:50:64:da:62:a1:49:db:
35:85:4a:21:d6:e8:0d:a4:be:85:b2:9c:57:4e:37:a7:a8:af:
27:67:2a:22:4e:13:10:55:9d:38:ec:66:21:44:36:0f:73:f5:
ad:2e:1d:89:78:0d:47:e7:dd:bb:34:f6:20:1a:b2:77:72:70:
5e:19:1d:f2:ef:d6:b9:05:cc:ad:05:18:72:7f:96:84:53:00:
a4:43:4c:fd:4b:fc:7c:de:c2:d6:7b:e1:e2:0b:b3:05:d7:5d:
e5:97:20:f9:f9:23:f5:60:a6:d2:95:d6:a9:b0:96:e7:cb:4a:
0c:62:d2:69:d8:3d:73:9c:b7:b0:e8:d7:c8:20:81:4f:34:dc:
0e:b0:80:b1:1b:30:26:20:a3:d9:dd:88:a6:5e:a6:32:6a:01:
7b:68:ee:c2:07:59:d0:15:8d:53:53:97:83:b7:b8:78:3c:78:
b0:90:d9:07:3b:5f:d9:2b:b6:67:d4:2a:3c:13:62:f6:20:8d:
32:e8:71:be:6b:bd:8b:69:04:e9:21:bb:80:8e:87:67:4c:15:
7f:94:c5:81:0e:a5:a7:43:b5:a0:fa:b5:e5:02:38:66:b8:61:
22:28:50:3a:d9:43:09:71:8f:f4:3f:57:37:94:67:64:ae:58:
01:5c:2b:99
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgIEB6SvkTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4
NTU4ZWRlOTdiNGY5MzBlMzc2MmQ4NmMyY2I2OGU5NGYxZDM2MzllMB4XDTIyMDEw
MTAzNTc0NFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZDFkOTkyMmYyMzQ2
NmViOTE4ZGQ0MWEwN2E5YjY2MDg2YWI2YmNkZjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKjy0w0+L2rHIXagcgnMVUn8VjKTyVeiYOImbWZaFT0hDOaJ
FdUzSESr3zS/MZAcgqukGwuI9B020FQCFS7K5f6xkw7v2U76tlyzb2hMD9U+iA6A
tlaArONfbJdN58nsOnqZrggdHgGBVh23vb36jhEFexFU4Dm2MghrdGuqpp8Ysdke
beU8GhWEMrUkar4GHnltleyLC8y88Cvzr7FNBLvZ5N4u9EMBZ4jhNgkL+RaLJSgX
PI5SH4olCSvuL9BHXMAPMlzsFkFdQHHWlYAykwl+Sv4IxmBOdUTcw07s19supPZd
iIgSKTSzWxgDfs4QnJeym9rGMsi+wyAonj0DA48CAwEAAaOCAhgwggIUMB0GA1Ud
DgQWBBTR2ZIvI0ZuuRjdQaB6m2YIara83zAfBgNVHSMEGDAWgBSFWO3pe0+TDjdi
2Gwsto6U8dNjnjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2hWanQ2WHRQa3c0M1l0aHNMTGFPbFBIVFk1NC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYzkvNzkyZDkyLTc2NjgtNDI1MS1hY2NmLWJhOGU1ZjVlNzFmNC8x
LzBkbVNMeU5HYnJrWTNVR2dlcHRtQ0dxMnZOOC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzkv
NzkyZDkyLTc2NjgtNDI1MS1hY2NmLWJhOGU1ZjVlNzFmNC8xL2hWanQ2WHRQa3c0
M1l0aHNMTGFPbFBIVFk1NC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAS2PPjANBAIAAjAHAwUAKg7iwTAN
BgkqhkiG9w0BAQsFAAOCAQEAR7GnI1yLScK259FQZNpioUnbNYVKIdboDaS+hbKc
V043p6ivJ2cqIk4TEFWdOOxmIUQ2D3P1rS4diXgNR+fduzT2IBqyd3JwXhkd8u/W
uQXMrQUYcn+WhFMApENM/Uv8fN7C1nvh4guzBddd5Zcg+fkj9WCm0pXWqbCW58tK
DGLSadg9c5y3sOjXyCCBTzTcDrCAsRswJiCj2d2Ipl6mMmoBe2juwgdZ0BWNU1OX
g7e4eDx4sJDZBztf2Su2Z9QqPBNi9iCNMuhxvmu9i2kE6SG7gI6HZ0wVf5TFgQ6l
p0O1oPq15QI4ZrhhIihQOtlDCXGP9D9XN5RnZK5YAVwrmQ==
-----END CERTIFICATE-----
Generated at Wed Apr 30 00:36:37 2025 by rpki-client