Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/kCrXhR0H-8wyhs57Hs6LD0qtTFQ.roa
File: kCrXhR0H-8wyhs57Hs6LD0qtTFQ.roa (raw, json)
Hash identifier: bYPwCEYC/FMoBcFS6KmYaYKMlh0g815N4MklHLD0NUY=
Subject key identifier: 90:2A:D7:85:1D:07:FB:CC:32:86:CE:7B:1E:CE:8B:0F:4A:AD:4C:54
Certificate issuer: /CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Certificate serial: 01840B5D0961BD38D22E5615A85F0E8E4615
Authority key identifier: 82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/kCrXhR0H-8wyhs57Hs6LD0qtTFQ.roa
Signing time: Mon 24 Oct 2022 18:59:17 +0000
ROA not before: Mon 24 Oct 2022 18:59:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60602
IP address blocks: 45.146.82.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:0b:5d:09:61:bd:38:d2:2e:56:15:a8:5f:0e:8e:46:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Validity
Not Before: Oct 24 18:59:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=902ad7851d07fbcc3286ce7b1ece8b0f4aad4c54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b9:63:39:06:78:65:79:1d:42:70:e7:01:66:
08:97:55:cc:3e:80:2a:85:34:67:32:a3:93:47:13:
01:d3:69:f9:d4:2a:13:b3:1c:8f:68:61:48:46:1b:
79:45:f6:52:ec:a7:1f:f6:aa:4e:15:29:c5:53:2f:
37:4f:5d:b0:ba:56:12:f4:f0:1a:ab:31:21:0f:48:
25:00:d5:f4:53:c2:34:78:6c:a2:24:33:17:18:b6:
59:cc:a6:62:70:d2:ca:ff:68:50:9b:72:c6:8e:14:
75:e8:29:36:dd:25:42:81:d1:5f:0a:76:c9:e2:1d:
87:7d:09:f2:34:6c:22:8a:84:01:f0:b1:92:c8:d4:
cf:7f:f5:13:17:00:60:c7:d1:34:e4:8c:b4:fb:28:
57:d2:9b:5f:b9:d8:c6:e2:f8:23:33:f3:65:5b:03:
9a:0d:9f:c9:41:55:1c:23:03:8e:81:54:9d:e6:9e:
6a:6e:74:3a:03:a9:3f:87:62:ad:32:5e:e3:d4:d6:
22:03:d2:23:64:16:aa:50:67:53:88:2e:41:13:b3:
8e:43:7c:96:16:5c:df:db:fa:cd:9d:c5:5d:c4:d9:
7e:f4:69:1c:f4:3a:e2:83:b4:f0:4c:ce:8f:1e:28:
bf:9f:df:cb:78:26:68:83:c0:9b:7f:b1:8d:c8:82:
a3:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:2A:D7:85:1D:07:FB:CC:32:86:CE:7B:1E:CE:8B:0F:4A:AD:4C:54
X509v3 Authority Key Identifier:
keyid:82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/kCrXhR0H-8wyhs57Hs6LD0qtTFQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/gu1KL7GA31-Z1L-Md8yaBu8mBYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.82.0/23
Signature Algorithm: sha256WithRSAEncryption
8d:74:e1:8d:17:ec:ba:e8:72:a5:b7:a9:8a:f1:2b:ff:3c:69:
8f:45:19:99:6b:e6:88:33:92:05:c8:a5:04:0e:04:19:97:23:
67:a0:ce:57:43:81:fc:40:60:88:23:b7:ec:67:24:5b:38:ca:
aa:9e:61:65:0d:c3:1f:0d:25:bc:28:96:63:19:3a:d1:e6:bd:
d9:a8:96:f4:5f:fe:1d:a8:a6:b6:9c:d4:f8:05:9f:c5:90:a9:
d8:27:bc:c3:eb:0c:88:af:5e:df:28:5a:a6:6a:43:5b:6f:55:
1b:cc:3a:46:29:cc:ce:87:de:d7:ea:b8:e2:a0:d8:6e:b6:4b:
ed:03:03:4a:3e:ef:9f:78:38:e7:e3:e5:48:5d:0f:68:81:87:
57:24:ae:bd:a0:fc:47:18:b2:71:94:51:d6:2e:28:80:d2:89:
8a:99:3a:eb:a6:e8:7c:16:8d:31:92:3b:ec:a3:5d:05:2a:c7:
d6:89:c2:2b:ef:ab:90:f8:7b:83:b9:11:2e:50:bb:21:91:b0:
5d:a8:9b:b6:e3:d2:a5:8a:c0:f0:a9:50:1e:86:b9:42:ba:bb:
d5:0a:b6:14:b8:0e:19:48:96:ab:4d:a3:60:a9:8b:f9:d7:a9:
b6:d8:fc:ee:45:f7:1b:96:13:94:d1:f5:13:3e:6a:08:ff:26:
09:db:ba:8e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYQLXQlhvTjSLlYVqF8OjkYVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyZWQ0YTJmYjE4MGRmNWY5OWQ0YmY4Yzc3Y2M5YTA2ZWYy
NjA1OGMwHhcNMjIxMDI0MTg1OTE3WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MDJhZDc4NTFkMDdmYmNjMzI4NmNlN2IxZWNlOGIwZjRhYWQ0YzU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwrljOQZ4ZXkdQnDnAWYIl1XMPoAq
hTRnMqOTRxMB02n51CoTsxyPaGFIRht5RfZS7Kcf9qpOFSnFUy83T12wulYS9PAa
qzEhD0glANX0U8I0eGyiJDMXGLZZzKZicNLK/2hQm3LGjhR16Ck23SVCgdFfCnbJ
4h2HfQnyNGwiioQB8LGSyNTPf/UTFwBgx9E05Iy0+yhX0ptfudjG4vgjM/NlWwOa
DZ/JQVUcIwOOgVSd5p5qbnQ6A6k/h2KtMl7j1NYiA9IjZBaqUGdTiC5BE7OOQ3yW
Flzf2/rNncVdxNl+9Gkc9Drig7TwTM6PHii/n9/LeCZog8Cbf7GNyIKjowIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJAq14UdB/vMMobOex7Oiw9KrUxUMB8GA1UdIwQY
MBaAFILtSi+xgN9fmdS/jHfMmgbvJgWMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3UxS0w3R0EzMS1aMUwtTWQ4eWFCdThtQll3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS8wMzAxYmMtYzdmZS00NmU5LWI3YTAt
NDUyNmY2MjYzYmNlLzEva0NyWGhSMEgtOHd5aHM1N0hzNkxEMHF0VEZRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS8wMzAxYmMtYzdmZS00NmU5LWI3YTAtNDUyNmY2MjYzYmNl
LzEvZ3UxS0w3R0EzMS1aMUwtTWQ4eWFCdThtQll3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLZJSMA0G
CSqGSIb3DQEBCwUAA4IBAQCNdOGNF+y66HKlt6mK8Sv/PGmPRRmZa+aIM5IFyKUE
DgQZlyNnoM5XQ4H8QGCII7fsZyRbOMqqnmFlDcMfDSW8KJZjGTrR5r3ZqJb0X/4d
qKa2nNT4BZ/FkKnYJ7zD6wyIr17fKFqmakNbb1UbzDpGKczOh97X6rjioNhutkvt
AwNKPu+feDjn4+VIXQ9ogYdXJK69oPxHGLJxlFHWLiiA0omKmTrrpuh8Fo0xkjvs
o10FKsfWicIr76uQ+HuDuREuULshkbBdqJu249KlisDwqVAehrlCurvVCrYUuA4Z
SJarTaNgqYv516m22PzuRfcblhOU0fUTPmoI/yYJ27qO
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:44 2023 by rpki-client on console-ams.rpki-client.org