Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/6fd304-69bd-4bf2-a073-6a78f55a6f89/1/4qKUVEDuzTOT4E4dSVwQm3gT414.roa
File: 4qKUVEDuzTOT4E4dSVwQm3gT414.roa (raw, json)
Hash identifier: BGOD+BnU6kk52AKv7pdVkcSwdFRoXk6IAoYWavRwHkk=
Subject key identifier: E2:A2:94:54:40:EE:CD:33:93:E0:4E:1D:49:5C:10:9B:78:13:E3:5E
Certificate issuer: /CN=c4457a309643b9a164da9f736f3241c0c16a50e9
Certificate serial: 074D875E
Authority key identifier: C4:45:7A:30:96:43:B9:A1:64:DA:9F:73:6F:32:41:C0:C1:6A:50:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xEV6MJZDuaFk2p9zbzJBwMFqUOk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/6fd304-69bd-4bf2-a073-6a78f55a6f89/1/4qKUVEDuzTOT4E4dSVwQm3gT414.roa
Signing time: Sat 01 Jan 2022 03:52:19 +0000
ROA not before: Sat 01 Jan 2022 03:52:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43414
IP address blocks: 45.151.4.0/22 maxlen: 22
2a0f:b00::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 122521438 (0x74d875e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4457a309643b9a164da9f736f3241c0c16a50e9
Validity
Not Before: Jan 1 03:52:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e2a2945440eecd3393e04e1d495c109b7813e35e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:36:a9:41:3e:94:61:c6:67:f0:b0:b0:c2:78:
cd:1e:56:39:11:e7:3c:24:65:50:68:f1:14:71:6f:
50:95:67:b9:cc:69:42:44:25:ff:4e:57:5c:b2:f4:
38:02:2e:c7:ac:90:de:2c:4d:58:d0:16:78:27:d2:
a2:e0:f4:39:ec:ad:3a:dd:1d:51:cd:ec:2b:8e:2a:
14:1b:87:ee:92:d5:1d:c9:74:fa:fb:4c:a9:0c:57:
1c:1d:ca:71:6e:06:d6:f2:c6:05:ba:57:02:13:a9:
78:15:8b:71:80:d7:e3:7d:2c:0f:62:ae:68:a2:e9:
e4:35:fe:7b:69:9a:59:67:db:bf:05:2b:c5:ac:78:
5c:58:fd:c7:18:e0:53:07:9d:a5:ec:a8:9d:e0:18:
21:70:73:14:11:24:0c:d2:bd:a2:ea:80:f8:59:15:
25:91:3c:59:29:b5:c4:57:d5:60:8e:0a:1b:16:aa:
f0:5e:6e:07:5f:4a:b9:05:42:9b:db:c5:77:91:03:
2c:54:7b:97:48:b1:f1:4b:70:7d:b1:88:24:f5:63:
fb:a6:a7:e7:f6:7f:29:ca:10:56:3b:45:57:64:ef:
84:4a:b7:f4:b6:e2:92:cf:ed:41:97:64:e0:64:b3:
ad:f0:4e:5e:e6:79:a6:b9:48:09:29:db:09:6c:5e:
76:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:A2:94:54:40:EE:CD:33:93:E0:4E:1D:49:5C:10:9B:78:13:E3:5E
X509v3 Authority Key Identifier:
keyid:C4:45:7A:30:96:43:B9:A1:64:DA:9F:73:6F:32:41:C0:C1:6A:50:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xEV6MJZDuaFk2p9zbzJBwMFqUOk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/6fd304-69bd-4bf2-a073-6a78f55a6f89/1/4qKUVEDuzTOT4E4dSVwQm3gT414.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/6fd304-69bd-4bf2-a073-6a78f55a6f89/1/xEV6MJZDuaFk2p9zbzJBwMFqUOk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.4.0/22
IPv6:
2a0f:b00::/29
Signature Algorithm: sha256WithRSAEncryption
92:38:18:eb:55:6e:b2:3a:b2:b4:b5:4c:0c:13:70:34:60:72:
cd:3b:25:04:78:49:ac:34:16:6a:e1:d4:89:fc:29:08:c1:86:
c3:5a:cf:27:d4:09:1b:2f:af:69:49:b6:02:66:d7:5b:12:fd:
ba:19:30:16:2d:46:4e:ee:17:a8:ed:1b:25:e6:34:2c:a1:ce:
13:37:25:c2:b5:f8:b0:a2:50:37:67:89:0c:3c:cd:ef:a6:27:
6e:95:c1:ae:f5:33:bc:b6:59:65:cd:6f:5a:ec:36:0f:67:44:
d0:07:c4:f9:12:f9:cb:4f:da:32:29:1f:4d:2c:c7:13:16:c8:
f9:d5:20:0b:19:2b:c3:8b:2e:a6:e7:70:12:4b:f9:d5:e1:f2:
79:19:88:50:6c:5e:57:60:b1:37:c8:51:e6:7f:eb:0b:04:ff:
08:10:f2:3c:63:1c:6a:9f:12:ee:46:e7:f8:c9:fa:13:b2:56:
0d:e5:3f:78:56:33:14:bf:9a:79:4d:ae:16:92:39:e8:9a:c2:
83:80:ac:67:bf:fe:76:c5:18:80:63:da:8e:08:c7:b5:1e:7d:
68:32:f5:30:77:3f:09:89:4a:d3:e6:98:d9:e6:a6:d4:5e:cf:
8c:a8:93:d9:0c:1e:5f:71:f3:e6:cb:b2:6d:95:34:71:82:1c:
39:99:01:68
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgIEB02HXjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhj
NDQ1N2EzMDk2NDNiOWExNjRkYTlmNzM2ZjMyNDFjMGMxNmE1MGU5MB4XDTIyMDEw
MTAzNTIxOVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZTJhMjk0NTQ0MGVl
Y2QzMzkzZTA0ZTFkNDk1YzEwOWI3ODEzZTM1ZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMM2qUE+lGHGZ/CwsMJ4zR5WORHnPCRlUGjxFHFvUJVnucxp
QkQl/05XXLL0OAIux6yQ3ixNWNAWeCfSouD0OeytOt0dUc3sK44qFBuH7pLVHcl0
+vtMqQxXHB3KcW4G1vLGBbpXAhOpeBWLcYDX430sD2KuaKLp5DX+e2maWWfbvwUr
xax4XFj9xxjgUwedpeyoneAYIXBzFBEkDNK9ouqA+FkVJZE8WSm1xFfVYI4KGxaq
8F5uB19KuQVCm9vFd5EDLFR7l0ix8UtwfbGIJPVj+6an5/Z/KcoQVjtFV2TvhEq3
9Lbiks/tQZdk4GSzrfBOXuZ5prlICSnbCWxedmsCAwEAAaOCAhgwggIUMB0GA1Ud
DgQWBBTiopRUQO7NM5PgTh1JXBCbeBPjXjAfBgNVHSMEGDAWgBTERXowlkO5oWTa
n3NvMkHAwWpQ6TAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3hFVjZNSlpEdWFGazJwOXpiekpCd01GcVVPay5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMDkvNmZkMzA0LTY5YmQtNGJmMi1hMDczLTZhNzhmNTVhNmY4OS8x
LzRxS1VWRUR1elRPVDRFNGRTVndRbTNnVDQxNC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDkv
NmZkMzA0LTY5YmQtNGJmMi1hMDczLTZhNzhmNTVhNmY4OS8xL3hFVjZNSlpEdWFG
azJwOXpiekpCd01GcVVPay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAi2XBDANBAIAAjAHAwUDKg8LADAN
BgkqhkiG9w0BAQsFAAOCAQEAkjgY61VusjqytLVMDBNwNGByzTslBHhJrDQWauHU
ifwpCMGGw1rPJ9QJGy+vaUm2AmbXWxL9uhkwFi1GTu4XqO0bJeY0LKHOEzclwrX4
sKJQN2eJDDzN76YnbpXBrvUzvLZZZc1vWuw2D2dE0AfE+RL5y0/aMikfTSzHExbI
+dUgCxkrw4supudwEkv51eHyeRmIUGxeV2CxN8hR5n/rCwT/CBDyPGMcap8S7kbn
+Mn6E7JWDeU/eFYzFL+aeU2uFpI56JrCg4CsZ7/+dsUYgGPajgjHtR59aDL1MHc/
CYlK0+aY2eam1F7PjKiT2QweX3Hz5suybZU0cYIcOZkBaA==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:13:06 2025 by rpki-client