Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/eda54a-772c-49db-a012-6100cd15e260/1/5o-DvxppjM8S8KxpwzM3v-ymeQk.roa
File: 5o-DvxppjM8S8KxpwzM3v-ymeQk.roa (raw, json)
Hash identifier: Fvd+Lr70HwLKvm7UYi9XqEeh8Ojy5xb915nW78V6R9Q=
Subject key identifier: E6:8F:83:BF:1A:69:8C:CF:12:F0:AC:69:C3:33:37:BF:EC:A6:79:09
Certificate issuer: /CN=a1a01f76a42be8717befdce1676215988a4dfc73
Certificate serial: 018573BAC2A2B13D147B51153542AC1E4635
Authority key identifier: A1:A0:1F:76:A4:2B:E8:71:7B:EF:DC:E1:67:62:15:98:8A:4D:FC:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oaAfdqQr6HF779zhZ2IVmIpN_HM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/eda54a-772c-49db-a012-6100cd15e260/1/5o-DvxppjM8S8KxpwzM3v-ymeQk.roa
Signing time: Mon 02 Jan 2023 18:24:57 +0000
ROA not before: Mon 02 Jan 2023 18:24:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212921
IP address blocks: 45.142.152.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:ba:c2:a2:b1:3d:14:7b:51:15:35:42:ac:1e:46:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1a01f76a42be8717befdce1676215988a4dfc73
Validity
Not Before: Jan 2 18:24:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e68f83bf1a698ccf12f0ac69c33337bfeca67909
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:41:c1:3b:7f:07:fa:1e:24:38:00:6e:d6:1e:
3c:32:b2:3e:e0:e2:a4:c5:10:3e:c1:6e:a3:c3:9c:
30:81:80:59:52:22:33:79:7d:5f:ec:21:16:04:64:
1f:73:97:89:d0:0f:69:6b:a8:d5:d3:89:83:c2:9e:
20:54:db:f0:60:f7:5b:f5:5f:0e:73:4c:76:b7:73:
55:73:4e:1e:e6:d6:f5:73:91:fe:15:b4:e3:f7:0f:
3c:ce:7d:ec:1a:4b:68:78:cb:2e:36:03:0b:00:f0:
49:69:16:ec:e2:04:41:b4:58:44:e2:4a:3f:3e:8d:
3c:fa:0a:16:10:3a:73:3e:9f:ff:bb:b3:3b:cb:9c:
e6:f1:1b:35:a9:3e:77:2e:bf:eb:23:f7:2e:ed:0b:
6c:53:ed:e7:8f:b5:80:f7:e9:70:48:a9:6b:08:df:
bf:61:90:a5:d6:1b:f9:e0:d2:1d:b6:aa:8d:e2:8a:
a7:a6:52:b8:ed:e4:36:8b:2a:d0:37:34:17:cc:73:
34:d9:4c:b1:13:be:8e:84:2e:15:3c:d8:59:21:64:
10:72:84:bf:5a:65:12:bc:c3:fe:76:f5:a8:45:cd:
5f:6c:60:bf:48:96:ea:4d:5a:c8:fc:6f:b1:9b:3e:
16:0e:58:80:47:da:cd:ac:ba:ba:e7:8b:85:4b:58:
74:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:8F:83:BF:1A:69:8C:CF:12:F0:AC:69:C3:33:37:BF:EC:A6:79:09
X509v3 Authority Key Identifier:
keyid:A1:A0:1F:76:A4:2B:E8:71:7B:EF:DC:E1:67:62:15:98:8A:4D:FC:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oaAfdqQr6HF779zhZ2IVmIpN_HM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/eda54a-772c-49db-a012-6100cd15e260/1/5o-DvxppjM8S8KxpwzM3v-ymeQk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/eda54a-772c-49db-a012-6100cd15e260/1/oaAfdqQr6HF779zhZ2IVmIpN_HM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.152.0/24
Signature Algorithm: sha256WithRSAEncryption
97:86:ff:19:22:73:b8:d4:92:64:a4:b3:f2:0b:f2:0a:63:ad:
66:02:b5:a3:b8:df:a6:bc:cc:b1:ec:b7:ba:bd:e3:74:79:8e:
73:ab:ab:d8:40:d9:48:57:92:8c:db:a3:4e:5d:59:12:4a:8c:
19:2a:74:57:ef:18:88:2b:98:63:14:e3:9a:52:47:97:55:2c:
f2:75:21:a9:56:e2:f2:96:01:c1:cc:ba:74:6d:53:64:52:9e:
0e:1b:46:f0:bb:8a:e5:ee:d1:a8:9d:d3:33:9c:9b:81:af:94:
8b:b6:1e:ca:59:f0:ab:2e:7d:73:b1:14:5a:ee:94:60:70:34:
de:c5:5f:69:ea:b5:2c:ea:ac:42:3f:2d:f0:0e:2e:34:bc:f5:
b8:7b:7e:e2:45:2c:57:99:45:4f:2e:fe:cf:be:08:b1:9d:52:
a5:28:e7:c9:c4:2f:53:4e:ac:82:24:55:1d:21:d9:52:c8:3a:
ed:44:a8:fc:ce:9d:e8:d0:bd:5d:4f:64:8d:56:9c:45:0a:84:
cb:21:3d:ef:b7:c8:27:a7:15:ef:44:bc:9c:36:e9:13:86:d7:
64:75:64:a8:26:99:8d:61:29:77:96:29:5b:51:25:b2:f9:42:
98:6b:9f:92:1d:a9:ae:25:b2:c7:14:25:5c:11:ec:b3:4b:e7:
ab:ff:2b:8e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVzusKisT0Ue1EVNUKsHkY1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExYTAxZjc2YTQyYmU4NzE3YmVmZGNlMTY3NjIxNTk4OGE0
ZGZjNzMwHhcNMjMwMTAyMTgyNDU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNjhmODNiZjFhNjk4Y2NmMTJmMGFjNjljMzMzMzdiZmVjYTY3OTA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy0HBO38H+h4kOABu1h48MrI+4OKk
xRA+wW6jw5wwgYBZUiIzeX1f7CEWBGQfc5eJ0A9pa6jV04mDwp4gVNvwYPdb9V8O
c0x2t3NVc04e5tb1c5H+FbTj9w88zn3sGktoeMsuNgMLAPBJaRbs4gRBtFhE4ko/
Po08+goWEDpzPp//u7M7y5zm8Rs1qT53Lr/rI/cu7QtsU+3nj7WA9+lwSKlrCN+/
YZCl1hv54NIdtqqN4oqnplK47eQ2iyrQNzQXzHM02UyxE76OhC4VPNhZIWQQcoS/
WmUSvMP+dvWoRc1fbGC/SJbqTVrI/G+xmz4WDliAR9rNrLq654uFS1h0HQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOaPg78aaYzPEvCsacMzN7/spnkJMB8GA1UdIwQY
MBaAFKGgH3akK+hxe+/c4WdiFZiKTfxzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2FBZmRxUXI2SEY3Nzl6aFoySVZtSXBOX0hNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS9lZGE1NGEtNzcyYy00OWRiLWEwMTIt
NjEwMGNkMTVlMjYwLzEvNW8tRHZ4cHBqTThTOEt4cHd6TTN2LXltZVFrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS9lZGE1NGEtNzcyYy00OWRiLWEwMTItNjEwMGNkMTVlMjYw
LzEvb2FBZmRxUXI2SEY3Nzl6aFoySVZtSXBOX0hNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALY6YMA0G
CSqGSIb3DQEBCwUAA4IBAQCXhv8ZInO41JJkpLPyC/IKY61mArWjuN+mvMyx7Le6
veN0eY5zq6vYQNlIV5KM26NOXVkSSowZKnRX7xiIK5hjFOOaUkeXVSzydSGpVuLy
lgHBzLp0bVNkUp4OG0bwu4rl7tGondMznJuBr5SLth7KWfCrLn1zsRRa7pRgcDTe
xV9p6rUs6qxCPy3wDi40vPW4e37iRSxXmUVPLv7PvgixnVKlKOfJxC9TTqyCJFUd
IdlSyDrtRKj8zp3o0L1dT2SNVpxFCoTLIT3vt8gnpxXvRLycNukThtdkdWSoJpmN
YSl3lilbUSWy+UKYa5+SHamuJbLHFCVcEeyzS+er/yuO
-----END CERTIFICATE-----
Generated at Fri Dec 22 15:35:11 2023 by rpki-client on console-fra.rpki-client.org