Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/eda54a-772c-49db-a012-6100cd15e260/1/fbsHAA4uKeQqIRom9Mewk9kUmuw.roa
File: fbsHAA4uKeQqIRom9Mewk9kUmuw.roa (raw, json)
Hash identifier: RqJfJYHZ0lafsOXeY8zMWSv4bkCuT2qe8QNsLM1fAtI=
Subject key identifier: 7D:BB:07:00:0E:2E:29:E4:2A:21:1A:26:F4:C7:B0:93:D9:14:9A:EC
Certificate issuer: /CN=a1a01f76a42be8717befdce1676215988a4dfc73
Certificate serial: 01871E6DD4D5A76C455B8FC6A2F3DCB554A4
Authority key identifier: A1:A0:1F:76:A4:2B:E8:71:7B:EF:DC:E1:67:62:15:98:8A:4D:FC:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oaAfdqQr6HF779zhZ2IVmIpN_HM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/eda54a-772c-49db-a012-6100cd15e260/1/fbsHAA4uKeQqIRom9Mewk9kUmuw.roa
Signing time: Sun 26 Mar 2023 14:58:46 +0000
ROA not before: Sun 26 Mar 2023 14:58:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35913
IP address blocks: 45.142.153.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:1e:6d:d4:d5:a7:6c:45:5b:8f:c6:a2:f3:dc:b5:54:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1a01f76a42be8717befdce1676215988a4dfc73
Validity
Not Before: Mar 26 14:58:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7dbb07000e2e29e42a211a26f4c7b093d9149aec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:f2:bf:ce:2e:09:43:f1:1a:6e:23:34:08:f8:
8a:8f:a5:aa:1e:d1:71:cf:fd:60:c6:92:c5:bc:8f:
5f:4b:b3:36:e2:af:d2:32:a6:04:44:c0:b1:0e:43:
eb:9c:f9:a4:58:a4:36:8c:f5:89:08:8f:50:b3:53:
b7:5d:13:27:94:b1:5c:d6:49:e5:b3:2f:7c:c5:23:
e3:0f:c7:c9:3e:17:18:21:ce:75:94:19:72:06:32:
e6:e8:1d:41:13:1c:09:bf:28:6f:88:73:f1:e8:9e:
18:0f:68:5e:81:ae:d9:6a:ae:fe:97:c1:c3:56:dc:
52:d3:08:d8:72:8c:b3:6d:f8:2d:7a:b1:19:73:59:
11:07:36:fa:52:1b:9e:1e:3f:ad:12:fa:93:fe:29:
8b:02:4e:fd:e2:b5:b1:2a:58:72:f3:92:34:c3:43:
c6:76:ee:e5:db:6e:67:5a:c2:cf:4e:9c:d2:74:12:
69:f1:e0:b2:e0:35:52:39:92:db:0f:93:53:df:2c:
1f:8c:72:bd:dc:b1:96:c7:a4:6e:56:5e:af:ff:7d:
a1:5c:81:c2:3e:41:72:e4:2b:77:d2:e5:4b:a5:64:
b5:4f:94:2a:20:33:9b:0b:db:27:d2:c3:41:81:e2:
a8:e9:24:15:a3:f0:94:42:09:cf:dc:d7:70:b5:cc:
12:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:BB:07:00:0E:2E:29:E4:2A:21:1A:26:F4:C7:B0:93:D9:14:9A:EC
X509v3 Authority Key Identifier:
keyid:A1:A0:1F:76:A4:2B:E8:71:7B:EF:DC:E1:67:62:15:98:8A:4D:FC:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oaAfdqQr6HF779zhZ2IVmIpN_HM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/eda54a-772c-49db-a012-6100cd15e260/1/fbsHAA4uKeQqIRom9Mewk9kUmuw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/eda54a-772c-49db-a012-6100cd15e260/1/oaAfdqQr6HF779zhZ2IVmIpN_HM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.153.0/24
Signature Algorithm: sha256WithRSAEncryption
82:57:74:e1:a7:cf:7d:35:e2:36:1f:52:00:d1:e0:b5:0c:58:
bc:ec:5e:6a:d4:4f:ec:c7:66:34:43:22:0d:96:3c:cb:9b:19:
11:0a:d4:7c:cf:a9:dc:68:d4:9f:ab:74:01:63:0f:d2:16:cb:
30:0d:b7:3b:83:9b:e3:ce:a2:10:eb:5e:89:fd:02:90:47:7d:
d0:3c:89:1d:47:61:76:dd:f2:46:38:53:9e:fb:ea:06:39:27:
8f:55:31:e9:c0:2a:90:76:20:55:30:7d:be:e8:d8:4d:43:9e:
81:85:06:b0:4b:4e:a1:0f:fd:91:70:75:c7:00:97:be:38:e5:
ef:df:f2:c2:4c:56:1a:1c:94:c1:69:a0:08:4e:fc:ea:4d:97:
f0:ef:11:c4:7a:73:01:63:7e:8b:bc:f9:84:f5:06:8d:ab:e2:
d1:0a:74:94:cd:6c:3d:7a:93:d4:fd:b2:f7:53:ad:47:d1:30:
f3:cd:e4:44:a6:ef:ab:75:af:82:92:ab:90:01:29:0d:34:f6:
20:df:69:44:ef:4c:79:26:c8:d4:35:5d:85:85:ea:09:05:d5:
34:80:a8:77:58:58:6a:b1:d5:c5:51:bc:3e:58:ce:c1:5a:07:
8f:bd:6f:61:e2:3c:fb:49:04:61:35:05:d3:77:e4:e1:44:e8:
f5:74:74:fa
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYcebdTVp2xFW4/GovPctVSkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExYTAxZjc2YTQyYmU4NzE3YmVmZGNlMTY3NjIxNTk4OGE0
ZGZjNzMwHhcNMjMwMzI2MTQ1ODQ2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZGJiMDcwMDBlMmUyOWU0MmEyMTFhMjZmNGM3YjA5M2Q5MTQ5YWVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm/K/zi4JQ/EabiM0CPiKj6WqHtFx
z/1gxpLFvI9fS7M24q/SMqYERMCxDkPrnPmkWKQ2jPWJCI9Qs1O3XRMnlLFc1knl
sy98xSPjD8fJPhcYIc51lBlyBjLm6B1BExwJvyhviHPx6J4YD2hega7Zaq7+l8HD
VtxS0wjYcoyzbfgterEZc1kRBzb6UhueHj+tEvqT/imLAk794rWxKlhy85I0w0PG
du7l225nWsLPTpzSdBJp8eCy4DVSOZLbD5NT3ywfjHK93LGWx6RuVl6v/32hXIHC
PkFy5Ct30uVLpWS1T5QqIDObC9sn0sNBgeKo6SQVo/CUQgnP3NdwtcwS+QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFH27BwAOLinkKiEaJvTHsJPZFJrsMB8GA1UdIwQY
MBaAFKGgH3akK+hxe+/c4WdiFZiKTfxzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2FBZmRxUXI2SEY3Nzl6aFoySVZtSXBOX0hNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS9lZGE1NGEtNzcyYy00OWRiLWEwMTIt
NjEwMGNkMTVlMjYwLzEvZmJzSEFBNHVLZVFxSVJvbTlNZXdrOWtVbXV3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS9lZGE1NGEtNzcyYy00OWRiLWEwMTItNjEwMGNkMTVlMjYw
LzEvb2FBZmRxUXI2SEY3Nzl6aFoySVZtSXBOX0hNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALY6ZMA0G
CSqGSIb3DQEBCwUAA4IBAQCCV3Thp899NeI2H1IA0eC1DFi87F5q1E/sx2Y0QyIN
ljzLmxkRCtR8z6ncaNSfq3QBYw/SFsswDbc7g5vjzqIQ616J/QKQR33QPIkdR2F2
3fJGOFOe++oGOSePVTHpwCqQdiBVMH2+6NhNQ56BhQawS06hD/2RcHXHAJe+OOXv
3/LCTFYaHJTBaaAITvzqTZfw7xHEenMBY36LvPmE9QaNq+LRCnSUzWw9epPU/bL3
U61H0TDzzeREpu+rda+CkquQASkNNPYg32lE70x5JsjUNV2FheoJBdU0gKh3WFhq
sdXFUbw+WM7BWgePvW9h4jz7SQRhNQXTd+ThROj1dHT6
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:01:51 2024 by rpki-client on console-ams.rpki-client.org