Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/44NLA8Eks6JFD4N8TMbC8oqgtdk.roa
File: 44NLA8Eks6JFD4N8TMbC8oqgtdk.roa (raw, json)
Hash identifier: 4cEOD3+VnlXl8xtanxgZQkwgNlsTQh6sBykEGpl0nTE=
Subject key identifier: E3:83:4B:03:C1:24:B3:A2:45:0F:83:7C:4C:C6:C2:F2:8A:A0:B5:D9
Certificate issuer: /CN=89ac0acbfdb7a274ef36c16f5860ada2a2470697
Certificate serial: 018CC725A0309C7E8EE6A623A8BBD3B38A4C
Authority key identifier: 89:AC:0A:CB:FD:B7:A2:74:EF:36:C1:6F:58:60:AD:A2:A2:47:06:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/44NLA8Eks6JFD4N8TMbC8oqgtdk.roa
Signing time: Mon 01 Jan 2024 22:29:40 +0000
ROA not before: Mon 01 Jan 2024 22:29:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29802
IP address blocks: 45.151.97.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:25:a0:30:9c:7e:8e:e6:a6:23:a8:bb:d3:b3:8a:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89ac0acbfdb7a274ef36c16f5860ada2a2470697
Validity
Not Before: Jan 1 22:29:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e3834b03c124b3a2450f837c4cc6c2f28aa0b5d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:ef:b5:65:3f:c1:dc:37:b8:62:a0:1e:84:10:
e4:96:e3:c1:a2:f2:63:d0:6c:f9:2a:ce:19:80:2a:
a5:4d:1a:97:56:64:f0:24:7e:6c:2c:dc:af:ca:8b:
3c:40:83:75:8a:af:ee:f6:b9:5e:b1:b1:4c:6b:23:
b5:2e:ed:5f:94:d7:5c:33:3b:c0:48:c8:83:4c:73:
b0:b8:fa:51:f8:0d:05:3a:b8:37:7b:16:a0:59:06:
68:c4:fb:f0:22:82:1c:7b:c8:91:b6:c1:28:55:2d:
02:ef:23:00:b4:b6:7e:fd:8d:41:1b:20:c8:9d:51:
50:f9:0a:e3:c1:3f:8d:6f:d0:35:bd:e2:f4:e7:37:
e9:4b:c1:1f:76:c8:40:2a:c4:17:62:ba:74:5c:f4:
07:0b:5d:b8:b0:05:b3:ad:55:41:73:fc:0d:42:af:
aa:35:67:ed:3f:01:51:08:50:c5:bf:02:12:38:73:
77:1c:12:6a:5c:9e:02:22:55:a6:db:ec:8e:81:bf:
00:4a:9b:1f:70:f9:ae:bb:43:c5:83:94:f8:57:9d:
b4:0c:41:e5:1b:89:a4:ed:ce:07:78:35:68:dd:3c:
b2:4e:fe:f2:23:20:1b:7b:1b:29:56:d7:39:45:8f:
20:55:33:6f:54:51:77:17:b6:b9:8e:e7:a2:82:c7:
83:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:83:4B:03:C1:24:B3:A2:45:0F:83:7C:4C:C6:C2:F2:8A:A0:B5:D9
X509v3 Authority Key Identifier:
keyid:89:AC:0A:CB:FD:B7:A2:74:EF:36:C1:6F:58:60:AD:A2:A2:47:06:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/44NLA8Eks6JFD4N8TMbC8oqgtdk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.97.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:dc:d5:01:0a:da:e0:44:9f:0b:a2:19:14:6e:8b:e8:99:e7:
a5:8e:09:9d:3f:7b:27:cb:6a:ee:18:4c:7d:f9:14:75:5a:51:
01:36:c0:cd:31:c5:27:27:57:36:e9:d2:1c:cc:7e:66:ab:84:
c4:ee:1e:f9:ab:77:2c:a4:ce:69:65:70:62:7f:47:2e:c1:ce:
83:c8:d8:d9:cf:42:e1:4c:e9:46:1f:98:75:bf:9c:80:22:ce:
6d:97:50:db:ec:02:d1:99:2c:3c:60:a1:5f:23:3e:c9:97:eb:
7e:1b:19:1b:68:fa:9a:5a:2d:48:d4:d6:78:fa:93:90:c0:1b:
1d:39:9f:38:40:46:4f:d0:f5:7b:82:ae:e5:39:10:18:3e:64:
38:33:ba:eb:c2:2f:60:64:49:f8:83:e5:80:7d:7f:c1:4d:e2:
19:e3:5b:a0:ab:57:1f:34:ce:64:38:9a:4a:8f:81:0a:37:01:
51:00:ab:90:ce:69:c0:2c:fb:88:80:c5:95:6b:c8:c3:b0:d6:
6b:25:31:a1:fc:d2:46:07:f1:c4:66:01:bb:6f:e1:79:2f:f4:
98:6f:ed:d5:6a:b3:3a:9a:fe:79:df:00:7b:fc:a4:98:04:8d:
97:98:fd:5f:fd:95:c8:79:d9:c3:44:4e:82:4b:0a:ae:d0:51:
33:36:c4:e8
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzHJaAwnH6O5qYjqLvTs4pMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5YWMwYWNiZmRiN2EyNzRlZjM2YzE2ZjU4NjBhZGEyYTI0
NzA2OTcwHhcNMjQwMTAxMjIyOTQwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMzgzNGIwM2MxMjRiM2EyNDUwZjgzN2M0Y2M2YzJmMjhhYTBiNWQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk++1ZT/B3De4YqAehBDkluPBovJj
0Gz5Ks4ZgCqlTRqXVmTwJH5sLNyvyos8QIN1iq/u9rlesbFMayO1Lu1flNdcMzvA
SMiDTHOwuPpR+A0FOrg3exagWQZoxPvwIoIce8iRtsEoVS0C7yMAtLZ+/Y1BGyDI
nVFQ+QrjwT+Nb9A1veL05zfpS8EfdshAKsQXYrp0XPQHC124sAWzrVVBc/wNQq+q
NWftPwFRCFDFvwISOHN3HBJqXJ4CIlWm2+yOgb8ASpsfcPmuu0PFg5T4V520DEHl
G4mk7c4HeDVo3TyyTv7yIyAbexspVtc5RY8gVTNvVFF3F7a5jueigseDJwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOODSwPBJLOiRQ+DfEzGwvKKoLXZMB8GA1UdIwQY
MBaAFImsCsv9t6J07zbBb1hgraKiRwaXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWF3S3lfMjNvblR2TnNGdldHQ3RvcUpIQnBjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS85M2E3NjgtMjY3Ny00OGQ2LTkxNGMt
ZDRkYmY3MDY2ZmQzLzEvNDROTEE4RWtzNkpGRDROOFRNYkM4b3FndGRrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS85M2E3NjgtMjY3Ny00OGQ2LTkxNGMtZDRkYmY3MDY2ZmQz
LzEvaWF3S3lfMjNvblR2TnNGdldHQ3RvcUpIQnBjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZdhMA0G
CSqGSIb3DQEBCwUAA4IBAQCh3NUBCtrgRJ8LohkUbovomeeljgmdP3sny2ruGEx9
+RR1WlEBNsDNMcUnJ1c26dIczH5mq4TE7h75q3cspM5pZXBif0cuwc6DyNjZz0Lh
TOlGH5h1v5yAIs5tl1Db7ALRmSw8YKFfIz7Jl+t+GxkbaPqaWi1I1NZ4+pOQwBsd
OZ84QEZP0PV7gq7lORAYPmQ4M7rrwi9gZEn4g+WAfX/BTeIZ41ugq1cfNM5kOJpK
j4EKNwFRAKuQzmnALPuIgMWVa8jDsNZrJTGh/NJGB/HEZgG7b+F5L/SYb+3VarM6
mv553wB7/KSYBI2XmP1f/ZXIednDRE6CSwqu0FEzNsTo
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:21:35 2025 by rpki-client