Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/kwhtBck9tAkx35XJVwgsWrlcLtU.roa
File: kwhtBck9tAkx35XJVwgsWrlcLtU.roa (raw, json)
Hash identifier: tlFvLWs1wptgm0V7zRIvJYd6hXaXbky0GT0fBORHjsg=
Subject key identifier: 93:08:6D:05:C9:3D:B4:09:31:DF:95:C9:57:08:2C:5A:B9:5C:2E:D5
Certificate issuer: /CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
Certificate serial: 044CBA88
Authority key identifier: 21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/kwhtBck9tAkx35XJVwgsWrlcLtU.roa
Signing time: Mon 09 May 2022 07:13:00 +0000
ROA not before: Mon 09 May 2022 07:13:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 40676
IP address blocks: 213.225.237.0/24 maxlen: 24
213.225.238.0/24 maxlen: 24
45.146.107.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 72137352 (0x44cba88)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
Validity
Not Before: May 9 07:13:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=93086d05c93db40931df95c957082c5ab95c2ed5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:dc:b5:9b:a1:3e:85:51:ef:36:72:60:f8:ec:
b1:d6:e8:32:41:a3:cf:b0:fa:93:10:96:9a:9a:1f:
ee:9f:77:74:34:01:bd:42:e3:da:8a:71:70:3b:2d:
32:04:29:9b:b0:f2:bc:30:00:2e:43:0e:ad:fb:33:
03:fb:4e:e6:e9:b4:54:01:02:6d:22:77:a6:38:b9:
12:03:ff:dc:60:62:0c:27:cc:b1:07:5f:58:ef:95:
c7:4b:a8:48:51:0c:97:00:f5:5a:49:81:20:1c:de:
90:ab:9f:5d:2d:4e:a8:20:5e:80:d9:cf:16:bd:17:
75:fc:19:ca:c4:99:86:d9:4e:cf:d5:9d:38:d9:93:
66:ad:73:6b:4c:1a:7a:8d:8f:91:2f:04:13:06:9d:
2a:4e:1e:57:9f:91:24:37:8d:2c:85:a8:3e:1f:dc:
f0:45:45:e5:1a:13:87:7d:93:3c:9a:19:da:17:e8:
e0:14:2d:48:e4:29:c1:84:ec:fa:f3:52:7a:a9:93:
73:90:ca:4a:62:39:cc:14:3b:ea:39:86:e7:b2:f7:
de:03:e5:9f:1b:fb:ba:41:e7:b5:18:a2:10:b1:e3:
4a:f6:0c:21:95:70:92:b9:ff:53:f7:71:35:7e:8b:
37:65:8c:71:7e:a8:b7:cb:06:57:c4:39:70:e1:b2:
47:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:08:6D:05:C9:3D:B4:09:31:DF:95:C9:57:08:2C:5A:B9:5C:2E:D5
X509v3 Authority Key Identifier:
keyid:21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/kwhtBck9tAkx35XJVwgsWrlcLtU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/IYFM8so-F5k0nM1Mfmp21j-DSj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.107.0/24
213.225.237.0-213.225.238.255
Signature Algorithm: sha256WithRSAEncryption
5a:79:22:86:4e:bd:53:36:9c:e3:85:eb:e1:2d:eb:06:f6:d7:
b1:7d:e9:b3:7e:68:b4:90:99:dd:bd:b0:e9:ac:ef:e8:9a:a7:
e7:63:c8:65:89:69:9b:2c:2a:f8:03:d5:b7:34:db:5a:f0:1f:
56:25:b2:0c:74:b6:71:35:d0:d6:52:2d:1b:c7:a1:48:dc:45:
66:12:71:9a:b5:c1:0e:b7:7b:13:72:2b:77:3e:68:ae:dc:61:
fe:8b:9b:34:f0:53:b7:82:14:0c:97:ae:2b:2c:33:87:74:65:
1d:e2:46:64:1a:c0:a6:3c:7b:48:d9:17:13:aa:b1:06:87:12:
a5:b1:db:4e:eb:d6:ad:e1:34:5c:a3:c7:2f:9a:f1:b9:2b:31:
b6:57:12:f9:6b:93:41:a0:76:a9:e0:81:a8:c2:6b:8a:35:0e:
ee:94:fe:54:55:a2:f8:21:2a:86:fc:ad:27:54:6e:2b:f6:c1:
37:37:39:4e:dc:b5:6c:16:e7:cc:b2:3c:75:a7:eb:27:5a:e2:
d1:b7:5e:14:b9:49:f3:e8:bc:33:7d:d4:1d:32:d4:19:7f:bd:
6e:e7:97:08:05:ad:2a:97:c4:a7:22:b9:fd:11:50:a3:7d:18:
17:2f:bf:9f:f8:13:6d:01:e3:a6:40:f0:ae:16:1c:7f:8f:61:
aa:a3:66:2b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgIEBEy6iDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygy
MTgxNGNmMmNhM2UxNzk5MzQ5Y2NkNGM3ZTZhNzZkNjNmODM0YTNkMB4XDTIyMDUw
OTA3MTMwMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOTMwODZkMDVjOTNk
YjQwOTMxZGY5NWM5NTcwODJjNWFiOTVjMmVkNTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAOzctZuhPoVR7zZyYPjssdboMkGjz7D6kxCWmpof7p93dDQB
vULj2opxcDstMgQpm7DyvDAALkMOrfszA/tO5um0VAECbSJ3pji5EgP/3GBiDCfM
sQdfWO+Vx0uoSFEMlwD1WkmBIBzekKufXS1OqCBegNnPFr0XdfwZysSZhtlOz9Wd
ONmTZq1za0waeo2PkS8EEwadKk4eV5+RJDeNLIWoPh/c8EVF5RoTh32TPJoZ2hfo
4BQtSOQpwYTs+vNSeqmTc5DKSmI5zBQ76jmG57L33gPlnxv7ukHntRiiELHjSvYM
IZVwkrn/U/dxNX6LN2WMcX6ot8sGV8Q5cOGyR6sCAwEAAaOCAhcwggITMB0GA1Ud
DgQWBBSTCG0FyT20CTHflclXCCxauVwu1TAfBgNVHSMEGDAWgBQhgUzyyj4XmTSc
zUx+anbWP4NKPTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0lZRk04c28tRjVrMG5NMU1mbXAyMWotRFNqMC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMTgvMDFmODUzLWQ0NDUtNGFjZS1hOGQ4LTIyNzAxYjRiYjQwNy8x
L2t3aHRCY2s5dEFreDM1WEpWd2dzV3JsY0x0VS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTgv
MDFmODUzLWQ0NDUtNGFjZS1hOGQ4LTIyNzAxYjRiYjQwNy8xL0lZRk04c28tRjVr
MG5NMU1mbXAyMWotRFNqMC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAt
BggrBgEFBQcBBwEB/wQeMBwwGgQCAAEwFAMEAC2SazAMAwQA1eHtAwQA1eHuMA0G
CSqGSIb3DQEBCwUAA4IBAQBaeSKGTr1TNpzjhevhLesG9texfemzfmi0kJndvbDp
rO/omqfnY8hliWmbLCr4A9W3NNta8B9WJbIMdLZxNdDWUi0bx6FI3EVmEnGatcEO
t3sTcit3Pmiu3GH+i5s08FO3ghQMl64rLDOHdGUd4kZkGsCmPHtI2RcTqrEGhxKl
sdtO69at4TRco8cvmvG5KzG2VxL5a5NBoHap4IGowmuKNQ7ulP5UVaL4ISqG/K0n
VG4r9sE3NzlO3LVsFufMsjx1p+snWuLRt14UuUnz6LwzfdQdMtQZf71u55cIBa0q
l8SnIrn9EVCjfRgXL7+f+BNtAeOmQPCuFhx/j2Gqo2Yr
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:02:32 2025 by rpki-client