Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/xtJWOynjEAN4f9SWE-e9_Kr4Gws.roa
File: xtJWOynjEAN4f9SWE-e9_Kr4Gws.roa (raw, json)
Hash identifier: /qxau0dsOMMqZCtyEPBeDK8WPh9AwGhjOvaNXb25xXE=
Subject key identifier: C6:D2:56:3B:29:E3:10:03:78:7F:D4:96:13:E7:BD:FC:AA:F8:1B:0B
Certificate issuer: /CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
Certificate serial: 0306A10A
Authority key identifier: 21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/xtJWOynjEAN4f9SWE-e9_Kr4Gws.roa
Signing time: Sat 01 Jan 2022 01:50:24 +0000
ROA not before: Sat 01 Jan 2022 01:50:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35913
IP address blocks: 45.146.107.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 50766090 (0x306a10a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
Validity
Not Before: Jan 1 01:50:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c6d2563b29e31003787fd49613e7bdfcaaf81b0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:a3:ce:56:7d:88:97:2c:24:8a:82:8b:d6:34:
43:1c:93:8e:20:fd:ad:38:07:ca:a5:00:c1:b2:7f:
a4:79:cc:5b:b5:60:54:7d:cc:fc:c1:08:6c:ca:3e:
6e:ea:20:4c:8b:61:54:4f:3e:f8:c0:28:60:cf:a3:
71:22:d9:b9:71:cb:1e:db:50:57:5a:cf:5d:58:1b:
f2:a2:fd:b9:50:81:db:4c:fe:52:40:89:4e:61:0d:
f6:b0:7e:33:dc:e8:a4:a6:88:e3:df:41:25:ea:64:
3e:10:39:e1:f0:4c:b6:37:c1:1c:77:0c:1d:9c:1f:
b0:dd:38:a2:61:f0:96:cc:f2:a0:6f:08:f8:07:6b:
45:51:20:a1:35:46:b8:2e:1b:06:eb:ed:f7:12:1a:
3e:b3:8f:01:18:06:be:4a:fd:9b:fa:65:26:25:05:
e1:d1:36:c2:46:68:d5:1b:2d:4b:80:a0:8b:b5:4a:
76:aa:cc:16:42:d8:96:93:ad:9f:13:6e:54:bb:58:
60:15:a9:b5:d9:fd:a3:0c:b7:39:9c:85:0c:cc:9f:
a6:42:82:56:ef:a5:d2:02:6e:ec:29:73:19:e6:f6:
85:a3:bd:9d:02:b0:ee:32:fd:df:b7:ee:c1:c0:49:
e6:08:e2:cd:ae:8f:ef:4c:36:d8:35:b6:4f:7b:70:
9f:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:D2:56:3B:29:E3:10:03:78:7F:D4:96:13:E7:BD:FC:AA:F8:1B:0B
X509v3 Authority Key Identifier:
keyid:21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/xtJWOynjEAN4f9SWE-e9_Kr4Gws.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/IYFM8so-F5k0nM1Mfmp21j-DSj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.107.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:89:cb:5c:cb:08:3b:52:a3:0d:8d:0a:73:0b:d7:92:2e:91:
cb:93:4b:85:fc:42:13:fc:9d:70:4f:5d:ed:94:10:a0:72:86:
09:8c:cf:08:6a:7c:69:a5:66:5f:65:35:4d:dd:e0:ed:1f:18:
1f:68:4c:2c:be:1d:3b:c2:9f:a2:97:bb:0d:89:24:69:0e:90:
e2:6d:0e:de:dc:f7:66:e3:b5:9b:40:f7:9c:fe:6b:1c:9b:33:
75:31:51:63:df:38:e8:b6:88:c3:db:24:a9:5f:1d:a3:a6:59:
76:0c:81:28:f8:69:35:e8:b5:fa:29:87:fd:6e:22:08:f7:16:
a7:06:71:50:1b:a6:a8:3a:12:25:cd:d8:27:4b:94:18:80:49:
96:8b:90:9c:d2:13:39:27:8b:78:31:12:30:f8:d2:2f:ad:97:
8b:f1:4a:10:4f:97:b5:34:d7:64:72:77:e5:bd:dd:a2:d4:3e:
56:8b:33:d1:ba:1a:f8:67:18:27:f2:38:b6:09:31:e6:09:97:
8c:67:dd:30:f5:96:04:a1:f1:07:04:ed:6b:ef:6b:8b:cb:30:
fe:44:5f:e2:d3:fa:27:1a:2a:9b:00:d3:c4:c8:23:96:8a:7a:
33:dd:18:98:f6:97:d4:1a:6a:26:85:bc:33:eb:b4:96:72:55:
cf:aa:07:44
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAwahCjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygy
MTgxNGNmMmNhM2UxNzk5MzQ5Y2NkNGM3ZTZhNzZkNjNmODM0YTNkMB4XDTIyMDEw
MTAxNTAyNFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYzZkMjU2M2IyOWUz
MTAwMzc4N2ZkNDk2MTNlN2JkZmNhYWY4MWIwYjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAOyjzlZ9iJcsJIqCi9Y0QxyTjiD9rTgHyqUAwbJ/pHnMW7Vg
VH3M/MEIbMo+buogTIthVE8++MAoYM+jcSLZuXHLHttQV1rPXVgb8qL9uVCB20z+
UkCJTmEN9rB+M9zopKaI499BJepkPhA54fBMtjfBHHcMHZwfsN04omHwlszyoG8I
+AdrRVEgoTVGuC4bBuvt9xIaPrOPARgGvkr9m/plJiUF4dE2wkZo1RstS4Cgi7VK
dqrMFkLYlpOtnxNuVLtYYBWptdn9owy3OZyFDMyfpkKCVu+l0gJu7ClzGeb2haO9
nQKw7jL937fuwcBJ5gjiza6P70w22DW2T3twn/0CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTG0lY7KeMQA3h/1JYT5738qvgbCzAfBgNVHSMEGDAWgBQhgUzyyj4XmTSc
zUx+anbWP4NKPTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0lZRk04c28tRjVrMG5NMU1mbXAyMWotRFNqMC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMTgvMDFmODUzLWQ0NDUtNGFjZS1hOGQ4LTIyNzAxYjRiYjQwNy8x
L3h0SldPeW5qRUFONGY5U1dFLWU5X0tyNEd3cy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTgv
MDFmODUzLWQ0NDUtNGFjZS1hOGQ4LTIyNzAxYjRiYjQwNy8xL0lZRk04c28tRjVr
MG5NMU1mbXAyMWotRFNqMC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC2SazANBgkqhkiG9w0BAQsFAAOC
AQEAK4nLXMsIO1KjDY0KcwvXki6Ry5NLhfxCE/ydcE9d7ZQQoHKGCYzPCGp8aaVm
X2U1Td3g7R8YH2hMLL4dO8Kfope7DYkkaQ6Q4m0O3tz3ZuO1m0D3nP5rHJszdTFR
Y9846LaIw9skqV8do6ZZdgyBKPhpNei1+imH/W4iCPcWpwZxUBumqDoSJc3YJ0uU
GIBJlouQnNITOSeLeDESMPjSL62Xi/FKEE+XtTTXZHJ35b3dotQ+Vosz0boa+GcY
J/I4tgkx5gmXjGfdMPWWBKHxBwTta+9ri8sw/kRf4tP6JxoqmwDTxMgjlop6M90Y
mPaX1BpqJoW8M+u0lnJVz6oHRA==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:55:43 2025 by rpki-client