Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/d6c752-aa4b-4fa7-ab1f-91a394684644/1/j8gyWsRkkHFj471M_mas3x_kK88.roa
File: j8gyWsRkkHFj471M_mas3x_kK88.roa (raw, json)
Hash identifier: aAR1nnqqt1WZ6GuhijvLaqKLM3ebeMxKd1729kZ7axQ=
Subject key identifier: 8F:C8:32:5A:C4:64:90:71:63:E3:BD:4C:FE:66:AC:DF:1F:E4:2B:CF
Certificate issuer: /CN=111014ce8ad38d15350096d549ee1c5805d09dc8
Certificate serial: 0194206854D64BDD31C7310D12C0792F2784
Authority key identifier: 11:10:14:CE:8A:D3:8D:15:35:00:96:D5:49:EE:1C:58:05:D0:9D:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ERAUzorTjRU1AJbVSe4cWAXQncg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/d6c752-aa4b-4fa7-ab1f-91a394684644/1/j8gyWsRkkHFj471M_mas3x_kK88.roa
Signing time: Wed 01 Jan 2025 05:48:15 +0000
ROA not before: Wed 01 Jan 2025 05:48:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43648
IP address blocks: 45.132.220.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:54:d6:4b:dd:31:c7:31:0d:12:c0:79:2f:27:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=111014ce8ad38d15350096d549ee1c5805d09dc8
Validity
Not Before: Jan 1 05:48:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8fc8325ac464907163e3bd4cfe66acdf1fe42bcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:3a:d3:57:a9:4f:c0:9d:eb:7d:a4:15:40:56:
ce:9f:12:8a:bd:c0:fb:9e:9e:ab:b4:f4:a5:4e:f6:
60:41:63:88:0d:dc:fb:bb:86:e9:03:70:74:b4:0b:
3b:14:90:f0:e6:00:c3:00:a4:06:5f:5b:ca:9b:53:
f0:ba:1b:db:64:73:30:8e:af:ec:65:48:f7:73:52:
17:9b:15:f9:2b:da:3d:2c:f7:27:ae:62:11:86:93:
a5:ca:98:bd:ce:6b:74:73:79:46:d5:63:b5:21:fc:
8c:4c:63:03:29:f0:41:fb:d6:8f:1f:bc:91:0d:17:
8b:f4:d1:3b:af:4a:11:4d:0c:ac:a1:13:a4:93:19:
13:38:7f:b8:78:9f:1b:fb:09:72:6a:ae:44:59:28:
97:9e:9b:fa:ef:34:79:6e:e6:44:28:0c:9f:0c:bc:
50:c8:88:73:33:89:2c:95:ac:17:bc:2f:73:7c:9f:
bb:88:53:7b:db:fe:fa:97:6a:0e:52:86:bc:9d:99:
f3:25:1d:28:8f:64:aa:ae:dd:e4:5a:e0:d0:b2:ab:
5a:a2:d4:8e:9a:af:bf:1c:75:23:7c:52:2a:ca:80:
a1:11:6c:96:16:e0:ec:4e:9f:b4:e7:3c:23:a5:17:
81:b3:ed:53:1e:c8:d7:a2:eb:90:b6:55:73:f5:6e:
7d:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:C8:32:5A:C4:64:90:71:63:E3:BD:4C:FE:66:AC:DF:1F:E4:2B:CF
X509v3 Authority Key Identifier:
keyid:11:10:14:CE:8A:D3:8D:15:35:00:96:D5:49:EE:1C:58:05:D0:9D:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ERAUzorTjRU1AJbVSe4cWAXQncg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/d6c752-aa4b-4fa7-ab1f-91a394684644/1/j8gyWsRkkHFj471M_mas3x_kK88.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/d6c752-aa4b-4fa7-ab1f-91a394684644/1/ERAUzorTjRU1AJbVSe4cWAXQncg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.220.0/22
Signature Algorithm: sha256WithRSAEncryption
4a:b3:df:50:92:2f:c8:26:8e:54:b5:5d:44:9c:e7:17:cf:b0:
48:c2:64:0a:c5:cc:bb:9d:ea:4b:dd:3b:2c:5d:51:9c:36:02:
cb:93:05:de:34:ae:59:67:ea:67:af:f0:2e:18:72:fa:1a:14:
8e:c2:b8:eb:ef:f2:c4:c7:77:03:9a:8f:56:c2:e1:b5:74:46:
05:9e:ef:e9:d5:41:8d:21:64:04:d4:c7:88:06:93:f1:fb:12:
6e:75:cb:30:c6:ca:04:2b:d2:93:84:96:0b:cd:60:04:0b:26:
90:3f:e1:39:b9:01:68:c1:f1:21:3c:be:47:cc:5f:30:e3:b9:
94:6b:cc:d9:39:0f:91:83:9b:0d:1b:78:18:b7:ad:c9:72:8b:
af:3c:10:4c:7c:1a:6a:2e:42:ec:ff:d8:30:1d:c6:33:f3:a5:
6d:37:fe:66:04:05:5a:cf:33:c6:0d:53:8d:bd:a3:7c:6b:cf:
1a:ce:b5:e0:b7:41:ed:0e:62:7a:e7:9a:87:58:8d:dd:8d:05:
c1:0f:f1:c4:37:d7:b6:1c:08:41:c5:30:04:b6:97:ce:3f:76:
88:36:c4:05:4d:87:a3:26:be:bf:2c:b2:4e:fe:b2:74:d4:c4:
67:25:8d:51:bb:9f:5c:76:36:6c:61:39:b6:c8:11:40:2f:4e:
ac:70:2a:db
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQgaFTWS90xxzENEsB5LyeEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExMTAxNGNlOGFkMzhkMTUzNTAwOTZkNTQ5ZWUxYzU4MDVk
MDlkYzgwHhcNMjUwMTAxMDU0ODE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZmM4MzI1YWM0NjQ5MDcxNjNlM2JkNGNmZTY2YWNkZjFmZTQyYmNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuDrTV6lPwJ3rfaQVQFbOnxKKvcD7
np6rtPSlTvZgQWOIDdz7u4bpA3B0tAs7FJDw5gDDAKQGX1vKm1PwuhvbZHMwjq/s
ZUj3c1IXmxX5K9o9LPcnrmIRhpOlypi9zmt0c3lG1WO1IfyMTGMDKfBB+9aPH7yR
DReL9NE7r0oRTQysoROkkxkTOH+4eJ8b+wlyaq5EWSiXnpv67zR5buZEKAyfDLxQ
yIhzM4kslawXvC9zfJ+7iFN72/76l2oOUoa8nZnzJR0oj2Sqrt3kWuDQsqtaotSO
mq+/HHUjfFIqyoChEWyWFuDsTp+05zwjpReBs+1THsjXouuQtlVz9W596wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFI/IMlrEZJBxY+O9TP5mrN8f5CvPMB8GA1UdIwQY
MBaAFBEQFM6K040VNQCW1UnuHFgF0J3IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRVJBVXpvclRqUlUxQUpiVlNlNGNXQVhRbmNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy9kNmM3NTItYWE0Yi00ZmE3LWFiMWYt
OTFhMzk0Njg0NjQ0LzEvajhneVdzUmtrSEZqNDcxTV9tYXMzeF9rSzg4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy9kNmM3NTItYWE0Yi00ZmE3LWFiMWYtOTFhMzk0Njg0NjQ0
LzEvRVJBVXpvclRqUlUxQUpiVlNlNGNXQVhRbmNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLYTcMA0G
CSqGSIb3DQEBCwUAA4IBAQBKs99Qki/IJo5UtV1EnOcXz7BIwmQKxcy7nepL3Tss
XVGcNgLLkwXeNK5ZZ+pnr/AuGHL6GhSOwrjr7/LEx3cDmo9WwuG1dEYFnu/p1UGN
IWQE1MeIBpPx+xJudcswxsoEK9KThJYLzWAECyaQP+E5uQFowfEhPL5HzF8w47mU
a8zZOQ+Rg5sNG3gYt63JcouvPBBMfBpqLkLs/9gwHcYz86VtN/5mBAVazzPGDVON
vaN8a88azrXgt0HtDmJ655qHWI3djQXBD/HEN9e2HAhBxTAEtpfOP3aINsQFTYej
Jr6/LLJO/rJ01MRnJY1Ru59cdjZsYTm2yBFAL06scCrb
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:48 2025 by rpki-client on console.sobornost.net