Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/u4mS-OsFgANteM9fwxO7YM-pBHc.roa
File: u4mS-OsFgANteM9fwxO7YM-pBHc.roa (raw, json)
Hash identifier: jxI2V6lZEUAvhdiTotkvALc2PxlGD2JhzfFVatgg2Fo=
Subject key identifier: BB:89:92:F8:EB:05:80:03:6D:78:CF:5F:C3:13:BB:60:CF:A9:04:77
Certificate issuer: /CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
Certificate serial: 018409E86B9277E94580B982F754A359B79F
Authority key identifier: 21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/u4mS-OsFgANteM9fwxO7YM-pBHc.roa
Signing time: Mon 24 Oct 2022 12:12:17 +0000
ROA not before: Mon 24 Oct 2022 12:12:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44258
IP address blocks: 45.132.98.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:09:e8:6b:92:77:e9:45:80:b9:82:f7:54:a3:59:b7:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
Validity
Not Before: Oct 24 12:12:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bb8992f8eb0580036d78cf5fc313bb60cfa90477
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:68:d2:1e:fd:2a:4d:7a:8a:67:ff:41:48:34:
10:01:b8:c8:a1:59:d3:a6:6c:56:45:ee:85:42:77:
29:7b:42:40:5e:d9:6b:ca:fe:d7:74:d3:3a:5f:ad:
e9:cf:bd:29:d0:28:3c:61:e1:f2:9a:b6:26:16:29:
71:19:73:b6:e7:f6:42:7f:52:d9:ed:fb:d0:80:71:
e5:0f:56:92:f7:46:c9:79:41:25:f7:9e:60:ab:55:
d1:0d:f9:49:c7:49:4a:ed:1a:2f:4d:06:f5:2d:da:
84:8f:5b:89:bb:2c:cc:a0:48:4f:f5:4e:08:fd:22:
67:fd:ae:cb:d4:c8:6f:d3:ca:65:31:02:0c:a0:d7:
a7:74:fa:32:23:3d:9c:f9:71:02:b3:2c:0f:ac:be:
18:a3:ce:cb:11:b1:20:2b:8d:91:9a:d2:e2:06:0a:
85:c9:c0:aa:51:cf:92:b3:4d:fb:8c:04:48:3a:02:
3e:1c:0c:03:2d:b8:6b:b3:2e:dc:33:aa:cb:e1:77:
9a:d1:44:c9:6d:d3:47:44:96:01:b3:67:88:7e:69:
b5:c6:f9:49:ee:46:56:ff:7a:30:66:25:da:5a:25:
22:bd:21:9b:75:60:4f:9b:dd:4a:1a:53:d2:9e:a0:
6d:fb:a4:dd:23:31:4d:88:d9:de:8f:0c:53:e0:55:
5d:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:89:92:F8:EB:05:80:03:6D:78:CF:5F:C3:13:BB:60:CF:A9:04:77
X509v3 Authority Key Identifier:
keyid:21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/u4mS-OsFgANteM9fwxO7YM-pBHc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/IYFM8so-F5k0nM1Mfmp21j-DSj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.98.0/24
Signature Algorithm: sha256WithRSAEncryption
71:07:06:c9:f3:48:a7:d0:af:a0:ff:a6:6e:e4:72:1a:a9:f5:
48:de:c7:f7:e5:5a:2d:75:8a:cf:2f:a4:78:0d:81:22:54:e1:
92:c6:01:56:53:11:42:b2:eb:b8:df:b2:a5:ff:70:61:66:c5:
67:cd:47:52:3b:f6:7f:5f:9b:d3:45:0e:9b:6e:ee:9b:8a:6e:
f8:b7:f7:48:cf:b6:6a:de:b6:12:5e:53:15:0e:fc:e4:18:5b:
e5:80:57:c5:dd:fd:59:5c:6a:aa:3b:e5:95:63:d4:93:01:c6:
87:db:23:c6:7d:c4:b5:5b:e6:f9:a2:cf:be:e1:9c:25:c4:e7:
ff:7d:ca:68:84:59:14:58:f8:a2:a7:b9:3d:bf:78:87:95:96:
72:c4:67:9e:41:b1:6a:ee:76:ba:71:65:72:f3:2a:ac:4f:99:
08:a4:56:cf:67:20:0f:0f:5a:91:92:b1:9c:68:73:9f:c0:83:
b1:12:88:4d:33:df:3b:83:ba:1d:17:7f:4f:79:e6:95:f2:28:
0a:28:db:b5:e0:31:8a:28:b3:fd:8d:f5:91:d3:29:c1:c9:df:
6b:25:21:06:4f:57:db:3c:21:d0:88:bf:ab:43:09:30:29:91:
1a:6c:f7:7e:1e:68:6b:c6:70:4a:83:49:23:7b:b9:9f:e1:03:
01:3b:e8:6c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYQJ6GuSd+lFgLmC91SjWbefMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxODE0Y2YyY2EzZTE3OTkzNDljY2Q0YzdlNmE3NmQ2M2Y4
MzRhM2QwHhcNMjIxMDI0MTIxMjE3WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYjg5OTJmOGViMDU4MDAzNmQ3OGNmNWZjMzEzYmI2MGNmYTkwNDc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlWjSHv0qTXqKZ/9BSDQQAbjIoVnT
pmxWRe6FQncpe0JAXtlryv7XdNM6X63pz70p0Cg8YeHymrYmFilxGXO25/ZCf1LZ
7fvQgHHlD1aS90bJeUEl955gq1XRDflJx0lK7RovTQb1LdqEj1uJuyzMoEhP9U4I
/SJn/a7L1Mhv08plMQIMoNendPoyIz2c+XECsywPrL4Yo87LEbEgK42RmtLiBgqF
ycCqUc+Ss037jARIOgI+HAwDLbhrsy7cM6rL4Xea0UTJbdNHRJYBs2eIfmm1xvlJ
7kZW/3owZiXaWiUivSGbdWBPm91KGlPSnqBt+6TdIzFNiNnejwxT4FVdMQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLuJkvjrBYADbXjPX8MTu2DPqQR3MB8GA1UdIwQY
MBaAFCGBTPLKPheZNJzNTH5qdtY/g0o9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVlGTThzby1GNWswbk0xTWZtcDIxai1EU2owLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC8wMWY4NTMtZDQ0NS00YWNlLWE4ZDgt
MjI3MDFiNGJiNDA3LzEvdTRtUy1Pc0ZnQU50ZU05Znd4TzdZTS1wQkhjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC8wMWY4NTMtZDQ0NS00YWNlLWE4ZDgtMjI3MDFiNGJiNDA3
LzEvSVlGTThzby1GNWswbk0xTWZtcDIxai1EU2owLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYRiMA0G
CSqGSIb3DQEBCwUAA4IBAQBxBwbJ80in0K+g/6Zu5HIaqfVI3sf35VotdYrPL6R4
DYEiVOGSxgFWUxFCsuu437Kl/3BhZsVnzUdSO/Z/X5vTRQ6bbu6bim74t/dIz7Zq
3rYSXlMVDvzkGFvlgFfF3f1ZXGqqO+WVY9STAcaH2yPGfcS1W+b5os++4ZwlxOf/
fcpohFkUWPiip7k9v3iHlZZyxGeeQbFq7na6cWVy8yqsT5kIpFbPZyAPD1qRkrGc
aHOfwIOxEohNM987g7odF39PeeaV8igKKNu14DGKKLP9jfWR0ynByd9rJSEGT1fb
PCHQiL+rQwkwKZEabPd+HmhrxnBKg0kje7mf4QMBO+hs
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:50 2024 by rpki-client on console-fra.rpki-client.org