Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/MEJl3C0JJdmFwF1tXONTT0PC_wA.roa
File: MEJl3C0JJdmFwF1tXONTT0PC_wA.roa (raw, json)
Hash identifier: z0umoIFFyPsGY3NGExRDtpEY9m+6uJhV47BJ9B7edoI=
Subject key identifier: 30:42:65:DC:2D:09:25:D9:85:C0:5D:6D:5C:E3:53:4F:43:C2:FF:00
Certificate issuer: /CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
Certificate serial: 03051B6E
Authority key identifier: 21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/MEJl3C0JJdmFwF1tXONTT0PC_wA.roa
Signing time: Sat 01 Jan 2022 01:50:23 +0000
ROA not before: Sat 01 Jan 2022 01:50:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 22773
IP address blocks: 45.132.96.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 50666350 (0x3051b6e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
Validity
Not Before: Jan 1 01:50:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=304265dc2d0925d985c05d6d5ce3534f43c2ff00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:05:77:a3:96:ff:e9:f3:ac:66:5c:85:c8:1b:
08:db:68:93:fe:d8:83:4d:d4:de:9a:20:dc:c1:c1:
19:d7:1d:49:a0:7e:24:dc:03:9f:95:2e:71:2b:c2:
f8:ac:a9:47:79:66:dd:69:74:c4:d4:3e:3b:0f:75:
ee:aa:26:d1:3c:e7:af:f4:49:01:bd:e7:23:d1:40:
16:7a:5b:b1:a6:66:b8:48:24:a0:fc:e0:6f:4c:dc:
aa:cd:34:47:c3:e8:5a:e7:89:85:1d:d1:8e:22:28:
02:28:3e:81:d8:22:d7:e9:c3:97:b1:28:32:ba:ce:
a5:0f:9f:ef:a0:e3:76:11:4d:c2:4f:90:1c:5a:ac:
37:1e:f7:62:12:30:2b:78:e8:0b:10:79:e1:3c:12:
cd:c3:1b:d8:db:6a:a1:0a:78:95:33:e8:6c:22:8c:
98:e9:56:8c:b4:9a:87:b0:b8:da:ef:90:93:a1:21:
2d:3b:65:84:0a:61:d9:49:84:8d:ad:b5:35:80:40:
80:c3:3e:f5:8d:6e:6c:5d:e9:82:5f:18:bb:41:3e:
bc:fb:5a:ca:4f:cb:89:0e:41:4e:36:1c:e5:45:4d:
1e:47:46:c7:5c:b7:33:34:0f:67:6e:6e:07:43:fa:
6d:cc:6e:09:08:f3:d0:7d:8e:5c:1d:8d:a1:dc:ce:
6a:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:42:65:DC:2D:09:25:D9:85:C0:5D:6D:5C:E3:53:4F:43:C2:FF:00
X509v3 Authority Key Identifier:
keyid:21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/MEJl3C0JJdmFwF1tXONTT0PC_wA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/IYFM8so-F5k0nM1Mfmp21j-DSj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.96.0/22
Signature Algorithm: sha256WithRSAEncryption
57:42:d0:90:bd:15:f9:d7:53:f2:6d:bd:22:67:a7:c8:e9:e6:
ea:60:44:68:f3:dc:da:77:63:de:53:7e:d4:ce:15:c1:95:1b:
18:ef:e8:04:b3:d5:68:ab:8d:f2:7f:09:60:54:dd:5d:91:5c:
03:7e:a4:1c:f3:19:03:09:1d:33:d0:95:ff:eb:15:3e:ad:f1:
29:d4:58:db:3f:9b:ce:75:d7:0f:2c:b3:f1:e6:69:93:5e:f0:
54:8a:11:0a:fb:2d:2a:88:d1:b6:55:87:8e:a7:9a:28:2d:60:
45:76:0b:94:75:c0:48:04:21:9c:44:54:36:15:9f:a6:7f:30:
51:fb:cf:54:28:e9:14:15:6a:55:f1:a3:06:cb:bd:d7:56:e8:
3d:fa:32:f1:db:95:7c:17:dd:db:af:5d:52:2a:66:25:88:2a:
6d:fb:18:1d:e0:b3:c2:bc:0d:fc:18:68:15:ca:52:ef:00:02:
33:5b:44:35:e1:34:07:bc:45:7e:45:3e:cc:4e:3b:34:56:08:
84:73:cb:fd:7d:d7:b3:5f:2d:c7:11:a7:e1:2e:3b:58:86:ee:
be:ed:34:bf:e2:08:90:ce:94:f2:2f:38:b8:a4:2a:6c:b2:24:
d7:25:6c:16:f6:0c:89:ba:67:82:9d:0a:12:78:18:e9:e3:34:
e2:13:47:80
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAwUbbjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygy
MTgxNGNmMmNhM2UxNzk5MzQ5Y2NkNGM3ZTZhNzZkNjNmODM0YTNkMB4XDTIyMDEw
MTAxNTAyM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMzA0MjY1ZGMyZDA5
MjVkOTg1YzA1ZDZkNWNlMzUzNGY0M2MyZmYwMDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKAFd6OW/+nzrGZchcgbCNtok/7Yg03U3pog3MHBGdcdSaB+
JNwDn5UucSvC+KypR3lm3Wl0xNQ+Ow917qom0Tznr/RJAb3nI9FAFnpbsaZmuEgk
oPzgb0zcqs00R8PoWueJhR3RjiIoAig+gdgi1+nDl7EoMrrOpQ+f76DjdhFNwk+Q
HFqsNx73YhIwK3joCxB54TwSzcMb2NtqoQp4lTPobCKMmOlWjLSah7C42u+Qk6Eh
LTtlhAph2UmEja21NYBAgMM+9Y1ubF3pgl8Yu0E+vPtayk/LiQ5BTjYc5UVNHkdG
x1y3MzQPZ25uB0P6bcxuCQjz0H2OXB2NodzOahUCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQwQmXcLQkl2YXAXW1c41NPQ8L/ADAfBgNVHSMEGDAWgBQhgUzyyj4XmTSc
zUx+anbWP4NKPTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0lZRk04c28tRjVrMG5NMU1mbXAyMWotRFNqMC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMTgvMDFmODUzLWQ0NDUtNGFjZS1hOGQ4LTIyNzAxYjRiYjQwNy8x
L01FSmwzQzBKSmRtRndGMXRYT05UVDBQQ193QS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTgv
MDFmODUzLWQ0NDUtNGFjZS1hOGQ4LTIyNzAxYjRiYjQwNy8xL0lZRk04c28tRjVr
MG5NMU1mbXAyMWotRFNqMC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAi2EYDANBgkqhkiG9w0BAQsFAAOC
AQEAV0LQkL0V+ddT8m29ImenyOnm6mBEaPPc2ndj3lN+1M4VwZUbGO/oBLPVaKuN
8n8JYFTdXZFcA36kHPMZAwkdM9CV/+sVPq3xKdRY2z+bznXXDyyz8eZpk17wVIoR
CvstKojRtlWHjqeaKC1gRXYLlHXASAQhnERUNhWfpn8wUfvPVCjpFBVqVfGjBsu9
11boPfoy8duVfBfd269dUipmJYgqbfsYHeCzwrwN/BhoFcpS7wACM1tENeE0B7xF
fkU+zE47NFYIhHPL/X3Xs18txxGn4S47WIbuvu00v+IIkM6U8i84uKQqbLIk1yVs
FvYMibpngp0KEngY6eM04hNHgA==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:11:43 2025 by rpki-client