Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/OR1pCikP9Cygu2nuzfcd3gtjw-o.roa
File: OR1pCikP9Cygu2nuzfcd3gtjw-o.roa (raw, json)
Hash identifier: jXV0LchGyP2F4ZcCoHpgaEWnWhNGqPJHvOLH8sWFL5I=
Subject key identifier: 39:1D:69:0A:29:0F:F4:2C:A0:BB:69:EE:CD:F7:1D:DE:0B:63:C3:EA
Certificate issuer: /CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
Certificate serial: 01856D9D07A96A89857B1D80EBE0F0A9FFFF
Authority key identifier: 21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/OR1pCikP9Cygu2nuzfcd3gtjw-o.roa
Signing time: Sun 01 Jan 2023 13:54:45 +0000
ROA not before: Sun 01 Jan 2023 13:54:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1299
IP address blocks: 45.146.104.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:9d:07:a9:6a:89:85:7b:1d:80:eb:e0:f0:a9:ff:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
Validity
Not Before: Jan 1 13:54:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=391d690a290ff42ca0bb69eecdf71dde0b63c3ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:31:6d:c8:b7:02:98:d1:29:9d:b3:4d:82:6a:
49:19:c4:75:5e:fd:c7:76:fd:87:4b:a2:33:a7:fd:
0d:0e:2b:58:c6:91:c3:fd:b1:c9:70:be:cc:f9:b7:
48:b7:63:27:e5:96:d0:2b:95:e2:6a:4d:71:61:6f:
85:9d:43:1f:09:10:6d:2d:ab:f1:d8:4e:b6:3d:99:
13:74:42:6b:b1:4f:5a:11:31:7d:8b:a0:6f:f0:60:
ac:60:ba:a5:af:2d:92:cc:e4:8a:ee:84:29:30:c6:
9d:3f:65:c6:a9:b5:3d:b3:80:e1:46:8e:dc:05:e4:
8f:a2:03:c2:dd:8e:ba:21:47:3d:7d:27:55:d8:63:
91:6f:a3:75:7d:40:0f:6c:25:db:4b:c8:5b:16:c0:
14:41:f0:66:0c:06:71:1f:4c:53:a7:bb:17:64:7a:
45:6d:39:7e:53:82:6f:7d:04:65:ab:ce:95:da:6d:
a8:ae:31:e1:ae:cf:5a:54:fb:ea:49:25:27:d2:50:
9d:8d:55:53:98:d5:f7:ec:d6:ca:da:f5:8e:c7:b1:
a7:1a:3a:84:05:35:7b:b6:1f:f6:93:7e:60:9f:2b:
b9:4f:cd:e8:3c:b3:fd:b1:4f:0c:1d:8a:65:63:ed:
ba:1c:2c:ef:71:6c:a4:e6:e3:7e:53:da:2f:6e:04:
a4:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:1D:69:0A:29:0F:F4:2C:A0:BB:69:EE:CD:F7:1D:DE:0B:63:C3:EA
X509v3 Authority Key Identifier:
keyid:21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/OR1pCikP9Cygu2nuzfcd3gtjw-o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/IYFM8so-F5k0nM1Mfmp21j-DSj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.104.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:43:d7:21:b6:3e:18:8c:bc:79:ad:4c:1b:50:e7:99:f1:98:
11:35:ae:e6:91:9a:fa:c5:b2:26:37:20:19:ca:0f:37:e8:c8:
1c:47:a6:1a:95:c5:c0:73:fd:9f:86:72:81:08:2c:e5:58:aa:
9b:41:ff:32:89:78:38:9d:ed:c6:5e:5f:75:4b:49:a4:6c:52:
49:8b:1b:93:85:73:11:61:e6:84:51:62:e3:52:a7:f9:32:09:
5b:3b:9a:65:96:8f:19:d0:7b:19:63:8e:0b:ce:6b:24:41:b0:
a7:1e:bc:34:c8:ca:44:80:6e:39:3f:51:a9:ca:d0:f8:76:4d:
38:05:b3:23:8d:45:ae:cc:de:c4:f7:91:e1:ed:bb:00:1a:c6:
4a:cf:28:b4:82:20:1f:c9:19:2a:0d:98:0a:f6:fe:6d:75:d7:
98:e4:c4:d3:fe:57:eb:84:9c:39:a9:0a:e6:ce:83:4c:1f:43:
6c:95:66:21:f1:8c:3a:dd:1a:d6:e7:f5:5a:99:44:20:10:41:
69:65:bc:42:d2:d3:41:46:84:c9:94:98:7b:56:a1:bd:b7:42:
ef:03:a5:fa:4a:1b:4e:39:6b:2b:43:81:d9:0d:bc:a6:9e:b2:
50:fd:b3:53:54:58:9f:6a:4b:d2:c1:8c:e0:b8:cf:c4:f2:91:
22:0e:94:66
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVtnQepaomFex2A6+Dwqf//MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxODE0Y2YyY2EzZTE3OTkzNDljY2Q0YzdlNmE3NmQ2M2Y4
MzRhM2QwHhcNMjMwMTAxMTM1NDQ1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzOTFkNjkwYTI5MGZmNDJjYTBiYjY5ZWVjZGY3MWRkZTBiNjNjM2VhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9zFtyLcCmNEpnbNNgmpJGcR1Xv3H
dv2HS6Izp/0NDitYxpHD/bHJcL7M+bdIt2Mn5ZbQK5Xiak1xYW+FnUMfCRBtLavx
2E62PZkTdEJrsU9aETF9i6Bv8GCsYLqlry2SzOSK7oQpMMadP2XGqbU9s4DhRo7c
BeSPogPC3Y66IUc9fSdV2GORb6N1fUAPbCXbS8hbFsAUQfBmDAZxH0xTp7sXZHpF
bTl+U4JvfQRlq86V2m2orjHhrs9aVPvqSSUn0lCdjVVTmNX37NbK2vWOx7GnGjqE
BTV7th/2k35gnyu5T83oPLP9sU8MHYplY+26HCzvcWyk5uN+U9ovbgSk0wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDkdaQopD/QsoLtp7s33Hd4LY8PqMB8GA1UdIwQY
MBaAFCGBTPLKPheZNJzNTH5qdtY/g0o9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVlGTThzby1GNWswbk0xTWZtcDIxai1EU2owLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC8wMWY4NTMtZDQ0NS00YWNlLWE4ZDgt
MjI3MDFiNGJiNDA3LzEvT1IxcENpa1A5Q3lndTJudXpmY2QzZ3Rqdy1vLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC8wMWY4NTMtZDQ0NS00YWNlLWE4ZDgtMjI3MDFiNGJiNDA3
LzEvSVlGTThzby1GNWswbk0xTWZtcDIxai1EU2owLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZJoMA0G
CSqGSIb3DQEBCwUAA4IBAQBKQ9chtj4YjLx5rUwbUOeZ8ZgRNa7mkZr6xbImNyAZ
yg836MgcR6YalcXAc/2fhnKBCCzlWKqbQf8yiXg4ne3GXl91S0mkbFJJixuThXMR
YeaEUWLjUqf5MglbO5pllo8Z0HsZY44LzmskQbCnHrw0yMpEgG45P1GpytD4dk04
BbMjjUWuzN7E95Hh7bsAGsZKzyi0giAfyRkqDZgK9v5tddeY5MTT/lfrhJw5qQrm
zoNMH0NslWYh8Yw63RrW5/VamUQgEEFpZbxC0tNBRoTJlJh7VqG9t0LvA6X6ShtO
OWsrQ4HZDbymnrJQ/bNTVFifakvSwYzguM/E8pEiDpRm
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:50 2024 by rpki-client on console-fra.rpki-client.org