Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/65e495-1b18-4c07-9031-2cd558281e95/1/FuFVzTN8_V8F1fUmD6CrXzfO-Oo.roa
File: FuFVzTN8_V8F1fUmD6CrXzfO-Oo.roa (raw, json)
Hash identifier: z6JAcAXUmVnwlmPTLLvk2NVzlbK3A4g2HTv+54z6DYs=
Subject key identifier: 16:E1:55:CD:33:7C:FD:5F:05:D5:F5:26:0F:A0:AB:5F:37:CE:F8:EA
Certificate issuer: /CN=1e7e184abedf8b930451eb5a24b17c31782dfacc
Certificate serial: 02E9653F
Authority key identifier: 1E:7E:18:4A:BE:DF:8B:93:04:51:EB:5A:24:B1:7C:31:78:2D:FA:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hn4YSr7fi5MEUetaJLF8MXgt-sw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/65e495-1b18-4c07-9031-2cd558281e95/1/FuFVzTN8_V8F1fUmD6CrXzfO-Oo.roa
Signing time: Sat 01 Jan 2022 15:07:37 +0000
ROA not before: Sat 01 Jan 2022 15:07:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48314
IP address blocks: 45.133.9.0/24 maxlen: 24
45.133.10.0/23 maxlen: 23
45.133.10.0/24 maxlen: 24
45.133.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 48850239 (0x2e9653f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e7e184abedf8b930451eb5a24b17c31782dfacc
Validity
Not Before: Jan 1 15:07:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=16e155cd337cfd5f05d5f5260fa0ab5f37cef8ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:d9:f1:4c:52:59:06:13:27:90:23:40:26:3d:
85:46:8b:0a:76:38:71:84:57:b1:a0:b3:71:24:d3:
6e:8f:48:ad:ae:ff:01:be:3a:eb:a3:6e:7d:9d:77:
c4:ef:39:dd:57:12:60:6d:da:d1:e2:34:25:96:fe:
94:4f:ae:25:ce:06:ad:f5:93:ef:ed:b6:eb:d4:19:
ba:25:7a:bf:a6:7d:13:c3:63:35:4d:8a:08:e4:83:
e9:ce:95:df:60:90:95:49:a3:31:c7:45:e2:d3:62:
7a:20:ee:ad:c1:64:0f:d5:30:8c:9e:08:01:40:ab:
5c:03:a3:a2:65:5e:3a:f0:77:42:9a:93:d1:a2:08:
eb:a9:bc:ae:44:1d:55:33:60:cf:d3:57:7b:47:62:
39:2e:cc:a4:69:44:b9:d0:e5:dc:a2:44:86:c0:66:
c2:71:29:47:c6:a4:b2:0b:80:c1:3d:22:7d:f3:36:
03:18:7e:bf:65:00:bc:ee:11:17:f6:11:a2:67:68:
aa:9a:89:04:cc:85:48:b3:57:b5:7c:4c:d9:fb:56:
0e:13:62:5f:43:17:36:72:a5:73:93:8c:91:89:b2:
6d:38:7b:21:55:a3:99:f6:60:4c:63:35:23:08:cc:
02:10:a9:8f:e0:3a:8a:59:92:69:8a:16:5c:c0:63:
77:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:E1:55:CD:33:7C:FD:5F:05:D5:F5:26:0F:A0:AB:5F:37:CE:F8:EA
X509v3 Authority Key Identifier:
keyid:1E:7E:18:4A:BE:DF:8B:93:04:51:EB:5A:24:B1:7C:31:78:2D:FA:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hn4YSr7fi5MEUetaJLF8MXgt-sw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/65e495-1b18-4c07-9031-2cd558281e95/1/FuFVzTN8_V8F1fUmD6CrXzfO-Oo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/65e495-1b18-4c07-9031-2cd558281e95/1/Hn4YSr7fi5MEUetaJLF8MXgt-sw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.133.9.0-45.133.11.255
Signature Algorithm: sha256WithRSAEncryption
49:43:d6:d3:0f:c3:1b:48:1c:37:76:20:78:f8:06:bf:2d:a6:
1b:c3:f2:a6:75:c4:c4:fb:22:6d:b0:dd:91:9e:cd:b4:58:b0:
dc:d7:17:ca:8d:02:db:2d:fc:4c:b6:fb:e7:48:b9:4b:d2:09:
6b:ef:d6:05:1f:0a:8e:2e:7b:0e:73:2c:ab:48:35:25:4c:e2:
49:85:0a:c3:bf:3b:f1:e1:dd:b3:b3:d9:ac:8f:75:33:d1:3f:
dd:b8:ee:ca:dd:41:4a:15:fd:77:4c:d4:08:57:ee:c1:48:84:
0e:98:cb:39:b0:08:7f:69:6b:95:06:cb:d5:eb:1d:c0:b1:6c:
58:a4:a9:76:72:ef:6f:2f:0e:9c:73:40:72:bb:49:98:9e:2c:
d1:07:f0:32:24:3c:65:50:9c:ef:8f:31:ff:c8:2e:1c:38:f5:
10:6e:e6:d7:99:42:7b:86:70:42:43:62:bd:5d:d0:5e:d7:b7:
4c:cd:08:0e:ae:d4:bc:f5:3a:2d:89:05:86:fa:a2:a4:77:a0:
ec:e7:87:f1:df:0c:8a:f4:a7:cc:eb:a8:15:f1:bd:4d:3f:74:
09:94:ff:b8:91:2d:59:fb:b3:ea:fa:28:37:3a:11:13:b6:0c:
e9:a5:57:31:89:4c:6f:f1:d4:e9:ba:de:21:c4:f3:6d:3f:15:
94:b6:9d:e0
-----BEGIN CERTIFICATE-----
MIIE9zCCA9+gAwIBAgIEAullPzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygx
ZTdlMTg0YWJlZGY4YjkzMDQ1MWViNWEyNGIxN2MzMTc4MmRmYWNjMB4XDTIyMDEw
MTE1MDczN1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMTZlMTU1Y2QzMzdj
ZmQ1ZjA1ZDVmNTI2MGZhMGFiNWYzN2NlZjhlYTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAPPZ8UxSWQYTJ5AjQCY9hUaLCnY4cYRXsaCzcSTTbo9Ira7/
Ab4666NufZ13xO853VcSYG3a0eI0JZb+lE+uJc4GrfWT7+2269QZuiV6v6Z9E8Nj
NU2KCOSD6c6V32CQlUmjMcdF4tNieiDurcFkD9UwjJ4IAUCrXAOjomVeOvB3QpqT
0aII66m8rkQdVTNgz9NXe0diOS7MpGlEudDl3KJEhsBmwnEpR8aksguAwT0iffM2
Axh+v2UAvO4RF/YRomdoqpqJBMyFSLNXtXxM2ftWDhNiX0MXNnKlc5OMkYmybTh7
IVWjmfZgTGM1IwjMAhCpj+A6ilmSaYoWXMBjd08CAwEAAaOCAhEwggINMB0GA1Ud
DgQWBBQW4VXNM3z9XwXV9SYPoKtfN8746jAfBgNVHSMEGDAWgBQefhhKvt+LkwRR
61oksXwxeC36zDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0huNFlTcjdmaTVNRVVldGFKTEY4TVhndC1zdy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYTgvNjVlNDk1LTFiMTgtNGMwNy05MDMxLTJjZDU1ODI4MWU5NS8x
L0Z1RlZ6VE44X1Y4RjFmVW1ENkNyWHpmTy1Pby5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTgv
NjVlNDk1LTFiMTgtNGMwNy05MDMxLTJjZDU1ODI4MWU5NS8xL0huNFlTcjdmaTVN
RVVldGFKTEY4TVhndC1zdy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAn
BggrBgEFBQcBBwEB/wQYMBYwFAQCAAEwDjAMAwQALYUJAwQCLYUIMA0GCSqGSIb3
DQEBCwUAA4IBAQBJQ9bTD8MbSBw3diB4+Aa/LaYbw/KmdcTE+yJtsN2Rns20WLDc
1xfKjQLbLfxMtvvnSLlL0glr79YFHwqOLnsOcyyrSDUlTOJJhQrDvzvx4d2zs9ms
j3Uz0T/duO7K3UFKFf13TNQIV+7BSIQOmMs5sAh/aWuVBsvV6x3AsWxYpKl2cu9v
Lw6cc0Byu0mYnizRB/AyJDxlUJzvjzH/yC4cOPUQbubXmUJ7hnBCQ2K9XdBe17dM
zQgOrtS89TotiQWG+qKkd6Ds54fx3wyK9KfM66gV8b1NP3QJlP+4kS1Z+7Pq+ig3
OhETtgzppVcxiUxv8dTput4hxPNtPxWUtp3g
-----END CERTIFICATE-----