Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/wtAR5AehapV_tfvJs76ceIls1UA.roa
File: wtAR5AehapV_tfvJs76ceIls1UA.roa (raw, json)
Hash identifier: fAbqFH9mQHatBl63qFAp2z1yCgq7+AWhZugYw/6UmRw=
Subject key identifier: C2:D0:11:E4:07:A1:6A:95:7F:B5:FB:C9:B3:BE:9C:78:89:6C:D5:40
Certificate issuer: /CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Certificate serial: 0185391EFF2269DB880AD23B61855B53BCB3
Authority key identifier: 82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/wtAR5AehapV_tfvJs76ceIls1UA.roa
Signing time: Thu 22 Dec 2022 09:16:50 +0000
ROA not before: Thu 22 Dec 2022 09:16:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207459
IP address blocks: 45.146.82.0/24 maxlen: 24
45.154.104.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:39:1e:ff:22:69:db:88:0a:d2:3b:61:85:5b:53:bc:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Validity
Not Before: Dec 22 09:16:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c2d011e407a16a957fb5fbc9b3be9c78896cd540
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:81:67:62:fc:4b:24:68:27:63:ae:37:9a:cd:
74:ee:a0:80:33:d4:ab:6b:05:be:c3:e1:bf:68:8f:
07:ff:d8:0d:5c:5d:14:a5:c4:38:a4:fa:70:c2:bf:
99:b8:8a:c7:72:15:1e:12:a6:f9:12:53:93:0d:ed:
94:fa:5b:19:34:2b:fd:f4:44:af:8f:74:62:4d:99:
1e:75:d8:ad:8b:69:8d:51:12:86:1f:f4:34:4f:30:
7b:16:05:70:aa:79:ff:98:00:00:5a:05:4d:51:74:
97:3c:ba:a1:97:f1:85:c3:c0:6b:e2:65:fc:02:1f:
8a:72:67:54:7b:02:d4:89:8a:09:d5:0e:42:be:87:
5b:01:42:f2:d8:2e:5e:d9:4b:9e:d9:6b:f6:c4:a3:
33:1b:9b:49:68:37:96:23:73:08:8b:22:39:a6:2d:
b3:44:c9:85:92:05:39:fa:5a:aa:fe:ac:9d:73:af:
8f:d9:29:63:f4:af:31:c5:b2:f9:3e:96:60:34:ce:
9b:a3:d7:a5:d3:b2:8e:fd:e3:c4:fb:77:e5:c3:e2:
0f:a6:9c:eb:f1:12:73:85:6e:92:f2:ff:04:ba:4b:
5a:6c:12:7c:c5:98:e8:72:a3:d9:cb:27:38:ae:8e:
fc:54:81:c2:07:a8:17:6a:78:81:cf:9c:34:2d:2c:
2d:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:D0:11:E4:07:A1:6A:95:7F:B5:FB:C9:B3:BE:9C:78:89:6C:D5:40
X509v3 Authority Key Identifier:
keyid:82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/wtAR5AehapV_tfvJs76ceIls1UA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/gu1KL7GA31-Z1L-Md8yaBu8mBYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.82.0/24
45.154.104.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:b4:de:f0:51:89:34:75:d2:d3:90:92:c4:57:c9:39:77:ee:
eb:b2:b6:60:73:9d:f5:af:e6:f6:51:96:44:86:80:91:a4:25:
94:ad:13:8c:cf:e5:2a:c5:68:d3:65:03:8a:ba:d2:56:9e:26:
cb:26:da:ad:93:98:05:fa:fb:9b:22:92:11:ed:41:b4:d0:19:
e1:da:c1:f0:52:65:21:5d:31:db:66:b1:42:e1:e8:3a:4c:9f:
4e:91:86:cd:18:05:b4:60:33:ab:29:65:9a:b7:8b:82:89:c6:
65:c1:20:1c:0e:d0:a4:f4:ef:9e:e1:ef:5b:c4:f7:c6:93:9b:
b4:07:ce:03:f5:5a:e2:8d:86:55:8f:a7:50:cb:20:4d:3b:3f:
18:59:df:44:45:84:90:24:ff:7b:cd:db:59:8a:93:ed:88:90:
5c:9c:9f:d6:b2:d8:a4:bb:68:fd:d4:80:83:69:80:d2:a5:a8:
7a:a8:de:8f:59:40:0c:64:39:43:5f:85:d2:e5:d8:12:89:a5:
7f:a7:5a:f7:c9:24:dc:db:01:09:5b:f8:7a:14:c7:fc:6e:6a:
61:5b:02:47:52:0b:77:b9:64:35:5f:26:5c:fa:22:78:d8:f6:
f0:fa:07:6b:92:79:d0:18:47:93:1a:4f:45:4e:40:4e:ce:2f:
e6:7b:b5:11
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYU5Hv8iaduICtI7YYVbU7yzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyZWQ0YTJmYjE4MGRmNWY5OWQ0YmY4Yzc3Y2M5YTA2ZWYy
NjA1OGMwHhcNMjIxMjIyMDkxNjUwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMmQwMTFlNDA3YTE2YTk1N2ZiNWZiYzliM2JlOWM3ODg5NmNkNTQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl4FnYvxLJGgnY643ms107qCAM9Sr
awW+w+G/aI8H/9gNXF0UpcQ4pPpwwr+ZuIrHchUeEqb5ElOTDe2U+lsZNCv99ESv
j3RiTZkedditi2mNURKGH/Q0TzB7FgVwqnn/mAAAWgVNUXSXPLqhl/GFw8Br4mX8
Ah+KcmdUewLUiYoJ1Q5CvodbAULy2C5e2Uue2Wv2xKMzG5tJaDeWI3MIiyI5pi2z
RMmFkgU5+lqq/qydc6+P2Slj9K8xxbL5PpZgNM6bo9el07KO/ePE+3flw+IPppzr
8RJzhW6S8v8EuktabBJ8xZjocqPZyyc4ro78VIHCB6gXaniBz5w0LSwtYwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFMLQEeQHoWqVf7X7ybO+nHiJbNVAMB8GA1UdIwQY
MBaAFILtSi+xgN9fmdS/jHfMmgbvJgWMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3UxS0w3R0EzMS1aMUwtTWQ4eWFCdThtQll3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS8wMzAxYmMtYzdmZS00NmU5LWI3YTAt
NDUyNmY2MjYzYmNlLzEvd3RBUjVBZWhhcFZfdGZ2SnM3NmNlSWxzMVVBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS8wMzAxYmMtYzdmZS00NmU5LWI3YTAtNDUyNmY2MjYzYmNl
LzEvZ3UxS0w3R0EzMS1aMUwtTWQ4eWFCdThtQll3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALZJSAwQA
LZpoMA0GCSqGSIb3DQEBCwUAA4IBAQB7tN7wUYk0ddLTkJLEV8k5d+7rsrZgc531
r+b2UZZEhoCRpCWUrROMz+UqxWjTZQOKutJWnibLJtqtk5gF+vubIpIR7UG00Bnh
2sHwUmUhXTHbZrFC4eg6TJ9OkYbNGAW0YDOrKWWat4uCicZlwSAcDtCk9O+e4e9b
xPfGk5u0B84D9VrijYZVj6dQyyBNOz8YWd9ERYSQJP97zdtZipPtiJBcnJ/Wstik
u2j91ICDaYDSpah6qN6PWUAMZDlDX4XS5dgSiaV/p1r3ySTc2wEJW/h6FMf8bmph
WwJHUgt3uWQ1XyZc+iJ42Pbw+gdrknnQGEeTGk9FTkBOzi/me7UR
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:58 2023 by rpki-client on console-fra.rpki-client.org