Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/eadacb-e4a4-41f9-89ed-c5718bde6751/1/biPliclhe9AStTKzSVPpCw24A50.roa
File: biPliclhe9AStTKzSVPpCw24A50.roa (raw, json)
Hash identifier: QcC167Hmgv+cesN5mpuJEGKN081cb0HvweYZzARBp1Y=
Subject key identifier: 6E:23:E5:89:C9:61:7B:D0:12:B5:32:B3:49:53:E9:0B:0D:B8:03:9D
Certificate issuer: /CN=9af4f122622fc3bb6fb83b7c8269036eda62466f
Certificate serial: 018E654E2A55686DAC3ECF2F45C2522D00A2
Authority key identifier: 9A:F4:F1:22:62:2F:C3:BB:6F:B8:3B:7C:82:69:03:6E:DA:62:46:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mvTxImIvw7tvuDt8gmkDbtpiRm8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/eadacb-e4a4-41f9-89ed-c5718bde6751/1/biPliclhe9AStTKzSVPpCw24A50.roa
Signing time: Fri 22 Mar 2024 08:36:45 +0000
ROA not before: Fri 22 Mar 2024 08:36:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208147
IP address blocks: 45.156.176.0/22 maxlen: 22
45.156.176.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:65:4e:2a:55:68:6d:ac:3e:cf:2f:45:c2:52:2d:00:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9af4f122622fc3bb6fb83b7c8269036eda62466f
Validity
Not Before: Mar 22 08:36:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6e23e589c9617bd012b532b34953e90b0db8039d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:00:5c:46:db:8a:88:bb:84:97:a5:e4:e4:57:
78:81:1e:37:80:10:bc:68:85:fa:53:5c:25:7f:d4:
eb:31:b4:55:e8:a9:0b:de:8c:78:e0:ba:be:a5:13:
4f:eb:c2:a3:56:69:25:e3:a5:c7:49:b6:60:42:7b:
df:22:87:8a:9e:e9:5e:7b:02:e2:e6:94:1c:3a:ea:
27:d7:fc:62:24:87:35:6e:77:2a:3c:a0:f8:02:c6:
e6:b2:f2:84:8d:ce:46:3e:db:20:2a:53:0b:13:86:
d1:5b:bb:81:d6:ae:ad:b0:2c:00:98:52:b3:41:a7:
ee:5e:5d:09:3e:52:d8:11:7e:eb:09:cb:1f:5e:7e:
6b:b4:74:55:02:92:5c:ee:62:57:e0:40:52:f9:19:
3b:59:f0:6e:6f:cc:7a:34:e4:9f:5b:e0:d6:1c:68:
b9:37:c0:01:cd:4a:1d:bf:f4:7c:a2:b2:c3:92:e5:
0f:c8:b6:54:06:84:1f:c0:38:87:c1:1f:40:39:8a:
60:67:97:19:8f:76:57:99:e7:cd:80:b2:12:04:13:
ab:c8:95:6b:63:c5:b6:3d:98:fa:8e:d4:dd:de:69:
8f:c8:e1:0d:89:2b:69:54:43:7b:a4:de:6c:ad:5e:
86:7e:ee:ef:83:49:8c:14:a9:45:3b:56:38:60:88:
0c:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:23:E5:89:C9:61:7B:D0:12:B5:32:B3:49:53:E9:0B:0D:B8:03:9D
X509v3 Authority Key Identifier:
keyid:9A:F4:F1:22:62:2F:C3:BB:6F:B8:3B:7C:82:69:03:6E:DA:62:46:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mvTxImIvw7tvuDt8gmkDbtpiRm8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/eadacb-e4a4-41f9-89ed-c5718bde6751/1/biPliclhe9AStTKzSVPpCw24A50.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/eadacb-e4a4-41f9-89ed-c5718bde6751/1/mvTxImIvw7tvuDt8gmkDbtpiRm8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.156.176.0/22
Signature Algorithm: sha256WithRSAEncryption
2e:d1:cd:aa:a8:de:85:34:01:6e:8f:63:1b:ce:88:dc:f5:6a:
1b:dc:28:ea:98:0c:0a:1f:dd:8f:0c:bf:2c:5e:1b:04:63:e9:
7d:90:74:ad:f3:77:c2:0f:05:0e:d7:69:1d:04:0b:c9:59:aa:
1f:c5:d5:88:f5:98:cd:d9:ae:bb:13:c4:19:4f:39:dc:1b:0d:
09:69:5b:fd:ae:42:65:f2:8f:fd:50:a4:e9:11:25:73:4d:34:
9c:84:65:38:77:b5:93:3a:c5:44:40:4c:89:a8:d2:69:ab:d2:
2e:14:de:de:27:44:d6:b3:da:c9:fc:34:ef:58:83:fb:ac:3c:
6b:82:57:07:b4:ee:dc:90:fa:bc:f2:2d:57:04:7a:c9:0b:1d:
2a:6d:38:ef:b1:3a:7e:b1:3f:36:85:40:06:d5:fc:5c:a1:3e:
d5:e4:14:a8:89:bc:2b:e3:e8:d8:46:57:f1:be:77:d7:6a:b5:
45:67:03:5b:bb:6e:2d:75:27:49:e0:29:c4:e8:4c:21:de:c9:
28:15:ff:d2:bd:2e:b3:a5:14:91:26:46:9b:c2:7a:b1:7a:48:
d0:48:d1:d8:02:04:e4:b9:d8:f5:d6:02:93:23:b2:02:3d:c9:
1b:74:3f:ca:a9:43:f0:38:a1:21:75:fc:a2:78:da:0a:cc:56:
26:7f:91:d0
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY5lTipVaG2sPs8vRcJSLQCiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhZjRmMTIyNjIyZmMzYmI2ZmI4M2I3YzgyNjkwMzZlZGE2
MjQ2NmYwHhcNMjQwMzIyMDgzNjQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZTIzZTU4OWM5NjE3YmQwMTJiNTMyYjM0OTUzZTkwYjBkYjgwMzlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhQBcRtuKiLuEl6Xk5Fd4gR43gBC8
aIX6U1wlf9TrMbRV6KkL3ox44Lq+pRNP68KjVmkl46XHSbZgQnvfIoeKnuleewLi
5pQcOuon1/xiJIc1bncqPKD4AsbmsvKEjc5GPtsgKlMLE4bRW7uB1q6tsCwAmFKz
QafuXl0JPlLYEX7rCcsfXn5rtHRVApJc7mJX4EBS+Rk7WfBub8x6NOSfW+DWHGi5
N8ABzUodv/R8orLDkuUPyLZUBoQfwDiHwR9AOYpgZ5cZj3ZXmefNgLISBBOryJVr
Y8W2PZj6jtTd3mmPyOENiStpVEN7pN5srV6Gfu7vg0mMFKlFO1Y4YIgM+wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFG4j5YnJYXvQErUys0lT6QsNuAOdMB8GA1UdIwQY
MBaAFJr08SJiL8O7b7g7fIJpA27aYkZvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbXZUeEltSXZ3N3R2dUR0OGdta0RidHBpUm04LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9lYWRhY2ItZTRhNC00MWY5LTg5ZWQt
YzU3MThiZGU2NzUxLzEvYmlQbGljbGhlOUFTdFRLelNWUHBDdzI0QTUwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi9lYWRhY2ItZTRhNC00MWY5LTg5ZWQtYzU3MThiZGU2NzUx
LzEvbXZUeEltSXZ3N3R2dUR0OGdta0RidHBpUm04LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLZywMA0G
CSqGSIb3DQEBCwUAA4IBAQAu0c2qqN6FNAFuj2Mbzojc9Wob3CjqmAwKH92PDL8s
XhsEY+l9kHSt83fCDwUO12kdBAvJWaofxdWI9ZjN2a67E8QZTzncGw0JaVv9rkJl
8o/9UKTpESVzTTSchGU4d7WTOsVEQEyJqNJpq9IuFN7eJ0TWs9rJ/DTvWIP7rDxr
glcHtO7ckPq88i1XBHrJCx0qbTjvsTp+sT82hUAG1fxcoT7V5BSoibwr4+jYRlfx
vnfXarVFZwNbu24tdSdJ4CnE6Ewh3skoFf/SvS6zpRSRJkabwnqxekjQSNHYAgTk
udj11gKTI7ICPckbdD/KqUPwOKEhdfyieNoKzFYmf5HQ
-----END CERTIFICATE-----
Generated at Sat May 10 05:37:51 2025 by rpki-client