Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/aPjWWjJH3io3q44ys-9DptZCe-g.roa
File: aPjWWjJH3io3q44ys-9DptZCe-g.roa (raw, json)
Hash identifier: KxU3WCiCAjQWlIwHhs8doEgRhgNP3xhm8+Z6hzd1BFo=
Subject key identifier: 68:F8:D6:5A:32:47:DE:2A:37:AB:8E:32:B3:EF:43:A6:D6:42:7B:E8
Certificate issuer: /CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
Certificate serial: 01856D9D13FAA4378ADF21E3043E13030D66
Authority key identifier: 21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/aPjWWjJH3io3q44ys-9DptZCe-g.roa
Signing time: Sun 01 Jan 2023 13:54:48 +0000
ROA not before: Sun 01 Jan 2023 13:54:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61138
IP address blocks: 45.146.105.0/24 maxlen: 24
92.114.5.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:9d:13:fa:a4:37:8a:df:21:e3:04:3e:13:03:0d:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
Validity
Not Before: Jan 1 13:54:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=68f8d65a3247de2a37ab8e32b3ef43a6d6427be8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b6:80:65:36:a0:cc:df:f6:97:16:b0:b1:71:
a4:74:57:68:08:be:09:39:f5:53:97:7f:d2:4f:92:
68:89:3c:f8:8b:7b:59:64:1c:4d:6b:ea:21:60:6c:
0d:ac:ab:37:d5:3c:18:40:d7:f3:a6:e5:bf:ab:b1:
d4:77:6f:9e:91:0d:5a:de:8c:ee:8f:69:bb:4d:cd:
fc:4b:b2:ee:27:e6:a1:10:ab:4d:02:47:2e:2b:8b:
4e:64:d0:be:72:0b:99:8d:ad:2d:cd:fb:3b:bb:ed:
b2:c6:bd:05:e9:ca:7d:c9:36:a8:c2:f3:ef:23:8c:
dd:28:41:d1:be:f3:c7:2f:fc:e9:4a:0d:ca:13:f3:
0f:93:79:f0:ff:b8:74:98:89:a8:c0:04:53:ec:ac:
9a:08:dc:27:86:ac:c4:b8:82:da:db:3b:b2:4e:bf:
79:8e:da:8f:73:4a:71:aa:94:5f:17:61:2c:6a:55:
3c:c8:cb:58:f1:f9:28:ea:d0:a9:b4:0c:1b:18:c0:
66:97:8c:2b:bb:79:f7:81:c6:ca:39:03:cd:86:61:
4f:30:f1:1a:f6:a7:3e:a7:53:d7:fe:98:ea:b9:85:
00:8a:b3:c3:8b:1c:71:3c:76:79:ee:4a:2a:5b:52:
62:11:f0:86:ea:6e:e5:66:32:ee:0f:66:57:75:d5:
78:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:F8:D6:5A:32:47:DE:2A:37:AB:8E:32:B3:EF:43:A6:D6:42:7B:E8
X509v3 Authority Key Identifier:
keyid:21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/aPjWWjJH3io3q44ys-9DptZCe-g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/IYFM8so-F5k0nM1Mfmp21j-DSj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.105.0/24
92.114.5.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:82:77:38:62:87:5a:3d:4e:8e:22:ab:d2:1d:17:bf:4f:69:
7b:7d:b4:1f:2a:26:3e:27:58:29:99:ac:b9:59:6e:39:e4:56:
37:bb:ad:a8:ad:14:cf:03:f3:6b:63:cc:7e:01:5e:6a:f2:f0:
c0:f5:11:c9:04:1f:5e:d8:e1:9a:25:f9:0f:1e:89:9d:7f:77:
d8:7d:e4:1c:9d:c7:7a:5e:60:9e:79:6c:bd:21:21:a0:dd:14:
9c:60:4e:89:dd:4e:7a:d3:5c:36:26:6d:09:c9:8a:cd:fb:36:
97:d7:d1:31:8f:b8:7b:6e:a5:cf:52:2b:90:bc:b6:73:67:76:
1b:8d:4d:51:f2:c9:3b:19:0f:3c:87:ff:e6:04:36:ff:f4:c0:
0b:08:30:6f:80:61:6e:9f:a8:46:29:22:ed:c1:40:72:bf:ab:
83:82:13:14:f8:0e:df:fd:35:47:88:54:8c:32:21:14:60:6e:
16:12:79:57:10:e5:2d:cd:a1:dc:04:50:49:23:9d:14:f9:e8:
1a:57:8a:ac:bf:18:ec:1f:00:8e:8a:d3:8a:9d:fe:ce:5d:c0:
83:34:48:29:de:96:cb:b0:ee:63:c0:43:32:d9:a0:1d:98:8b:
fb:46:c7:7b:88:a7:5e:94:be:8a:42:03:bc:d7:38:fc:69:6b:
3c:07:e3:ce
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYVtnRP6pDeK3yHjBD4TAw1mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxODE0Y2YyY2EzZTE3OTkzNDljY2Q0YzdlNmE3NmQ2M2Y4
MzRhM2QwHhcNMjMwMTAxMTM1NDQ4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2OGY4ZDY1YTMyNDdkZTJhMzdhYjhlMzJiM2VmNDNhNmQ2NDI3YmU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApbaAZTagzN/2lxawsXGkdFdoCL4J
OfVTl3/ST5JoiTz4i3tZZBxNa+ohYGwNrKs31TwYQNfzpuW/q7HUd2+ekQ1a3ozu
j2m7Tc38S7LuJ+ahEKtNAkcuK4tOZNC+cguZja0tzfs7u+2yxr0F6cp9yTaowvPv
I4zdKEHRvvPHL/zpSg3KE/MPk3nw/7h0mImowART7KyaCNwnhqzEuILa2zuyTr95
jtqPc0pxqpRfF2EsalU8yMtY8fko6tCptAwbGMBml4wru3n3gcbKOQPNhmFPMPEa
9qc+p1PX/pjquYUAirPDixxxPHZ57koqW1JiEfCG6m7lZjLuD2ZXddV42QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFGj41loyR94qN6uOMrPvQ6bWQnvoMB8GA1UdIwQY
MBaAFCGBTPLKPheZNJzNTH5qdtY/g0o9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVlGTThzby1GNWswbk0xTWZtcDIxai1EU2owLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC8wMWY4NTMtZDQ0NS00YWNlLWE4ZDgt
MjI3MDFiNGJiNDA3LzEvYVBqV1dqSkgzaW8zcTQ0eXMtOURwdFpDZS1nLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC8wMWY4NTMtZDQ0NS00YWNlLWE4ZDgtMjI3MDFiNGJiNDA3
LzEvSVlGTThzby1GNWswbk0xTWZtcDIxai1EU2owLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALZJpAwQA
XHIFMA0GCSqGSIb3DQEBCwUAA4IBAQCagnc4YodaPU6OIqvSHRe/T2l7fbQfKiY+
J1gpmay5WW455FY3u62orRTPA/NrY8x+AV5q8vDA9RHJBB9e2OGaJfkPHomdf3fY
feQcncd6XmCeeWy9ISGg3RScYE6J3U5601w2Jm0JyYrN+zaX19Exj7h7bqXPUiuQ
vLZzZ3YbjU1R8sk7GQ88h//mBDb/9MALCDBvgGFun6hGKSLtwUByv6uDghMU+A7f
/TVHiFSMMiEUYG4WEnlXEOUtzaHcBFBJI50U+egaV4qsvxjsHwCOitOKnf7OXcCD
NEgp3pbLsO5jwEMy2aAdmIv7Rsd7iKdelL6KQgO81zj8aWs8B+PO
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:50 2024 by rpki-client on console-fra.rpki-client.org