Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/eadacb-e4a4-41f9-89ed-c5718bde6751/1/TdFyDengr46PMYv-os064tBBbyM.roa
File: TdFyDengr46PMYv-os064tBBbyM.roa (raw, json)
Hash identifier: 4of6e/TdP6HZiCzucc+s15NNQj4SMHEkVj5RD0LAXOw=
Subject key identifier: 4D:D1:72:0D:E9:E0:AF:8E:8F:31:8B:FE:A2:CD:3A:E2:D0:41:6F:23
Certificate issuer: /CN=9af4f122622fc3bb6fb83b7c8269036eda62466f
Certificate serial: 01856F429CC5AD687CA9DF0889A665C2F9E7
Authority key identifier: 9A:F4:F1:22:62:2F:C3:BB:6F:B8:3B:7C:82:69:03:6E:DA:62:46:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mvTxImIvw7tvuDt8gmkDbtpiRm8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/eadacb-e4a4-41f9-89ed-c5718bde6751/1/TdFyDengr46PMYv-os064tBBbyM.roa
Signing time: Sun 01 Jan 2023 21:35:14 +0000
ROA not before: Sun 01 Jan 2023 21:35:14 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208147
IP address blocks: 45.156.178.0/24 maxlen: 24
45.156.179.0/24 maxlen: 24
45.156.176.0/22 maxlen: 22
45.156.176.0/24 maxlen: 24
45.156.177.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:42:9c:c5:ad:68:7c:a9:df:08:89:a6:65:c2:f9:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9af4f122622fc3bb6fb83b7c8269036eda62466f
Validity
Not Before: Jan 1 21:35:14 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4dd1720de9e0af8e8f318bfea2cd3ae2d0416f23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:9c:c6:8f:2c:fd:21:34:a0:5c:8a:7f:3d:fa:
28:cd:69:bc:8f:dd:a1:92:0f:d6:bf:c8:50:d1:57:
a2:80:93:f3:2d:4d:27:c6:77:6f:fe:27:01:cb:ba:
f7:76:29:3d:87:cf:7a:b8:24:64:98:63:46:f5:24:
c6:63:c2:a6:4e:c5:98:d9:da:3b:3b:13:3e:cc:92:
15:b3:d4:0c:10:74:7f:77:16:1b:71:c3:66:fa:85:
1a:4b:01:1b:80:cf:c5:c3:e3:09:f9:f8:7f:49:9f:
7e:5e:fb:ae:5c:85:f8:35:59:eb:ba:f5:ee:5c:ec:
22:68:e1:4c:1f:0e:82:83:d0:4b:7b:ca:41:d1:67:
ef:54:f7:e9:88:6e:b2:17:67:2e:58:b6:2f:97:e3:
1e:82:38:92:fd:10:b8:66:3c:62:74:43:0a:73:2f:
2a:81:f5:b1:6e:a8:76:20:47:42:ae:34:a6:9e:78:
3a:4d:b1:3b:07:00:85:05:ac:82:6f:d6:ec:7c:1c:
cb:06:16:a5:1a:04:49:14:f4:90:bf:80:df:6b:28:
2a:5e:ac:fa:04:48:fd:4e:a1:8d:d5:5c:08:8c:83:
bd:e4:7d:6a:b8:c3:fe:b9:57:df:cd:aa:48:ce:9d:
e5:f3:eb:7e:9c:41:cb:7c:e5:db:ba:26:3d:b2:5b:
45:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:D1:72:0D:E9:E0:AF:8E:8F:31:8B:FE:A2:CD:3A:E2:D0:41:6F:23
X509v3 Authority Key Identifier:
keyid:9A:F4:F1:22:62:2F:C3:BB:6F:B8:3B:7C:82:69:03:6E:DA:62:46:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mvTxImIvw7tvuDt8gmkDbtpiRm8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/eadacb-e4a4-41f9-89ed-c5718bde6751/1/TdFyDengr46PMYv-os064tBBbyM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/eadacb-e4a4-41f9-89ed-c5718bde6751/1/mvTxImIvw7tvuDt8gmkDbtpiRm8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.156.176.0/22
Signature Algorithm: sha256WithRSAEncryption
13:96:63:a6:c3:05:04:ea:fe:e3:94:fe:b1:99:c8:70:31:78:
fb:a3:7c:68:98:c3:2b:5b:aa:0c:be:99:21:73:58:36:46:c5:
95:a7:a8:a3:ff:7a:3b:34:88:f4:65:ab:07:5c:60:38:be:35:
b1:12:e5:c8:e2:b2:8c:2c:3f:ec:03:f1:b7:aa:a6:4b:e0:23:
c0:a6:1a:1b:46:4e:b8:6e:82:42:ae:2a:13:73:ff:ee:7f:27:
f7:25:26:70:87:4a:a2:d3:fb:f1:62:7f:d5:da:80:4d:9c:38:
4d:71:21:c7:10:56:87:b0:a9:a8:6f:bd:97:ef:07:45:8b:3f:
a7:29:44:2d:92:97:c6:00:93:bb:95:a4:d3:4b:e6:ca:bb:89:
2f:b4:7b:72:ae:c8:1e:22:34:1f:e6:9d:b2:80:de:7a:58:16:
3b:03:73:ed:bc:e1:c3:32:36:a9:86:95:45:1b:b8:c1:6b:81:
20:6b:15:94:ae:cb:cc:59:83:df:bf:db:f3:bd:6d:da:3c:17:
2e:d6:42:7e:35:a6:44:aa:d0:43:bb:b2:11:5f:18:32:23:8b:
3c:f7:c1:a1:92:1b:32:73:7e:bc:38:fa:a7:fb:4d:9d:0a:63:
e4:41:69:66:69:c8:2b:e6:5f:91:07:2d:6b:d3:b0:d5:42:9b:
91:7d:c3:dc
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVvQpzFrWh8qd8IiaZlwvnnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhZjRmMTIyNjIyZmMzYmI2ZmI4M2I3YzgyNjkwMzZlZGE2
MjQ2NmYwHhcNMjMwMTAxMjEzNTE0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZGQxNzIwZGU5ZTBhZjhlOGYzMThiZmVhMmNkM2FlMmQwNDE2ZjIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs5zGjyz9ITSgXIp/PfoozWm8j92h
kg/Wv8hQ0VeigJPzLU0nxndv/icBy7r3dik9h896uCRkmGNG9STGY8KmTsWY2do7
OxM+zJIVs9QMEHR/dxYbccNm+oUaSwEbgM/Fw+MJ+fh/SZ9+XvuuXIX4NVnruvXu
XOwiaOFMHw6Cg9BLe8pB0WfvVPfpiG6yF2cuWLYvl+MegjiS/RC4ZjxidEMKcy8q
gfWxbqh2IEdCrjSmnng6TbE7BwCFBayCb9bsfBzLBhalGgRJFPSQv4DfaygqXqz6
BEj9TqGN1VwIjIO95H1quMP+uVffzapIzp3l8+t+nEHLfOXbuiY9sltFuQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFE3Rcg3p4K+OjzGL/qLNOuLQQW8jMB8GA1UdIwQY
MBaAFJr08SJiL8O7b7g7fIJpA27aYkZvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbXZUeEltSXZ3N3R2dUR0OGdta0RidHBpUm04LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9lYWRhY2ItZTRhNC00MWY5LTg5ZWQt
YzU3MThiZGU2NzUxLzEvVGRGeURlbmdyNDZQTVl2LW9zMDY0dEJCYnlNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi9lYWRhY2ItZTRhNC00MWY5LTg5ZWQtYzU3MThiZGU2NzUx
LzEvbXZUeEltSXZ3N3R2dUR0OGdta0RidHBpUm04LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLZywMA0G
CSqGSIb3DQEBCwUAA4IBAQATlmOmwwUE6v7jlP6xmchwMXj7o3xomMMrW6oMvpkh
c1g2RsWVp6ij/3o7NIj0ZasHXGA4vjWxEuXI4rKMLD/sA/G3qqZL4CPAphobRk64
boJCrioTc//ufyf3JSZwh0qi0/vxYn/V2oBNnDhNcSHHEFaHsKmob72X7wdFiz+n
KUQtkpfGAJO7laTTS+bKu4kvtHtyrsgeIjQf5p2ygN56WBY7A3PtvOHDMjaphpVF
G7jBa4EgaxWUrsvMWYPfv9vzvW3aPBcu1kJ+NaZEqtBDu7IRXxgyI4s898Ghkhsy
c368OPqn+02dCmPkQWlmacgr5l+RBy1r07DVQpuRfcPc
-----END CERTIFICATE-----
Generated at Sat May 10 05:26:36 2025 by rpki-client