Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/rVWT3lyF4Es-KSFwo664WjzjnAU.roa
File: rVWT3lyF4Es-KSFwo664WjzjnAU.roa (raw, json)
Hash identifier: f9iR+oQ6FKErn/P3CqmQ6sm+vEoPqy+I38ZY6ZURLj8=
Subject key identifier: AD:55:93:DE:5C:85:E0:4B:3E:29:21:70:A3:AE:B8:5A:3C:E3:9C:05
Certificate issuer: /CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
Certificate serial: 01856D9D0852F5F5B5C172B9C46809391557
Authority key identifier: 21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/rVWT3lyF4Es-KSFwo664WjzjnAU.roa
Signing time: Sun 01 Jan 2023 13:54:45 +0000
ROA not before: Sun 01 Jan 2023 13:54:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7018
IP address blocks: 45.146.107.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:9d:08:52:f5:f5:b5:c1:72:b9:c4:68:09:39:15:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
Validity
Not Before: Jan 1 13:54:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ad5593de5c85e04b3e292170a3aeb85a3ce39c05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:7f:12:e5:d1:05:5b:9e:67:64:61:f5:5c:10:
72:2a:b3:0c:33:d3:60:72:c9:6a:95:cb:8e:1e:0a:
7c:3c:81:62:4c:a1:05:a8:c0:75:c0:1f:79:db:db:
fd:72:86:b4:e9:a2:21:c7:0a:b0:e7:0a:c5:08:b2:
62:03:83:a4:db:9c:70:ef:1a:be:a5:cd:36:e3:d5:
3f:3d:a0:91:a2:46:2a:d8:12:19:5f:36:3c:eb:90:
c8:ed:b3:5b:b9:33:55:e4:69:eb:15:fa:56:e9:98:
3e:60:94:16:5b:19:cb:f9:e3:23:b0:db:e4:1f:04:
13:4e:ca:93:b4:d4:65:aa:dd:d1:21:ec:dc:4e:93:
14:4a:c1:11:d2:41:25:2c:5e:ae:e5:ca:c2:46:18:
e4:97:dd:ad:96:2d:45:d4:40:44:7d:94:13:57:cc:
c2:1f:b9:f4:6d:1a:de:72:5f:06:73:c7:53:d1:b1:
d9:b4:e5:58:3a:73:d0:a5:41:42:58:9a:47:70:57:
9f:77:68:32:7e:8c:cb:b3:92:da:3a:bc:e0:63:77:
fb:70:a2:67:eb:55:2d:7e:fa:34:4c:86:9a:9e:07:
88:5d:9c:72:9f:0e:00:d3:2c:d7:1c:58:85:04:76:
83:e6:77:88:28:7e:a6:83:73:9c:7e:b5:f2:9d:74:
60:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:55:93:DE:5C:85:E0:4B:3E:29:21:70:A3:AE:B8:5A:3C:E3:9C:05
X509v3 Authority Key Identifier:
keyid:21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/rVWT3lyF4Es-KSFwo664WjzjnAU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/IYFM8so-F5k0nM1Mfmp21j-DSj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.107.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:2d:31:80:35:87:70:e4:c2:8d:fe:71:45:0c:04:b6:ed:44:
50:99:c3:b8:35:f4:27:b3:11:8a:65:45:87:54:62:ab:55:58:
ad:ad:de:b1:00:0c:f4:e8:1b:ae:22:09:62:4f:be:23:23:c2:
fb:23:0a:18:a2:5a:da:70:0a:09:cd:89:44:71:94:fc:07:ea:
9c:fd:9a:10:93:62:45:f4:f0:7d:8c:6a:22:84:fc:ce:46:00:
94:39:8a:d2:7e:37:4a:8d:8d:32:90:47:0c:a1:ce:6a:a2:1c:
d5:cb:25:03:6b:fa:43:04:7f:33:49:b9:d0:44:8d:db:54:d5:
fc:b6:06:5e:3c:5b:18:45:fe:88:b4:11:3f:e9:a2:20:14:ca:
e6:06:1b:3e:eb:f0:0c:dc:e5:ff:44:a2:22:ba:b9:d2:8e:58:
c4:ba:83:cc:94:87:e2:35:64:ac:66:6d:51:d8:d6:8e:69:a2:
78:67:3d:fa:f3:68:b7:60:65:b4:08:1c:26:5f:12:11:6f:42:
f7:6c:b4:33:95:83:48:d9:11:f1:c6:97:c6:ce:20:7a:ae:fb:
3f:1f:07:bc:b2:58:1f:22:b2:5f:c5:ee:ad:d9:a1:5a:19:35:
84:58:59:30:71:0b:df:00:77:c5:d3:6e:fe:c4:31:50:e6:cd:
0d:d2:c0:3b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVtnQhS9fW1wXK5xGgJORVXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxODE0Y2YyY2EzZTE3OTkzNDljY2Q0YzdlNmE3NmQ2M2Y4
MzRhM2QwHhcNMjMwMTAxMTM1NDQ1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZDU1OTNkZTVjODVlMDRiM2UyOTIxNzBhM2FlYjg1YTNjZTM5YzA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgH8S5dEFW55nZGH1XBByKrMMM9Ng
cslqlcuOHgp8PIFiTKEFqMB1wB9529v9coa06aIhxwqw5wrFCLJiA4Ok25xw7xq+
pc0249U/PaCRokYq2BIZXzY865DI7bNbuTNV5GnrFfpW6Zg+YJQWWxnL+eMjsNvk
HwQTTsqTtNRlqt3RIezcTpMUSsER0kElLF6u5crCRhjkl92tli1F1EBEfZQTV8zC
H7n0bRrecl8Gc8dT0bHZtOVYOnPQpUFCWJpHcFefd2gyfozLs5LaOrzgY3f7cKJn
61Utfvo0TIaangeIXZxynw4A0yzXHFiFBHaD5neIKH6mg3OcfrXynXRgmwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFK1Vk95cheBLPikhcKOuuFo845wFMB8GA1UdIwQY
MBaAFCGBTPLKPheZNJzNTH5qdtY/g0o9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVlGTThzby1GNWswbk0xTWZtcDIxai1EU2owLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC8wMWY4NTMtZDQ0NS00YWNlLWE4ZDgt
MjI3MDFiNGJiNDA3LzEvclZXVDNseUY0RXMtS1NGd282NjRXanpqbkFVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC8wMWY4NTMtZDQ0NS00YWNlLWE4ZDgtMjI3MDFiNGJiNDA3
LzEvSVlGTThzby1GNWswbk0xTWZtcDIxai1EU2owLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZJrMA0G
CSqGSIb3DQEBCwUAA4IBAQANLTGANYdw5MKN/nFFDAS27URQmcO4NfQnsxGKZUWH
VGKrVVitrd6xAAz06BuuIgliT74jI8L7IwoYolracAoJzYlEcZT8B+qc/ZoQk2JF
9PB9jGoihPzORgCUOYrSfjdKjY0ykEcMoc5qohzVyyUDa/pDBH8zSbnQRI3bVNX8
tgZePFsYRf6ItBE/6aIgFMrmBhs+6/AM3OX/RKIiurnSjljEuoPMlIfiNWSsZm1R
2NaOaaJ4Zz3682i3YGW0CBwmXxIRb0L3bLQzlYNI2RHxxpfGziB6rvs/Hwe8slgf
IrJfxe6t2aFaGTWEWFkwcQvfAHfF027+xDFQ5s0N0sA7
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:31:48 2025 by rpki-client