Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/eda54a-772c-49db-a012-6100cd15e260/1/rw0g1YrjCNbn5UXGvpH2b0vju3U.roa
File: rw0g1YrjCNbn5UXGvpH2b0vju3U.roa (raw, json)
Hash identifier: EWifEdKuwuJwvtv9EbFTTnLN/Vh6ZtGSBq7TbIsU0pQ=
Subject key identifier: AF:0D:20:D5:8A:E3:08:D6:E7:E5:45:C6:BE:91:F6:6F:4B:E3:BB:75
Certificate issuer: /CN=a1a01f76a42be8717befdce1676215988a4dfc73
Certificate serial: 018573BABFBD03E58F18370635DA111D60FD
Authority key identifier: A1:A0:1F:76:A4:2B:E8:71:7B:EF:DC:E1:67:62:15:98:8A:4D:FC:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oaAfdqQr6HF779zhZ2IVmIpN_HM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/eda54a-772c-49db-a012-6100cd15e260/1/rw0g1YrjCNbn5UXGvpH2b0vju3U.roa
Signing time: Mon 02 Jan 2023 18:24:56 +0000
ROA not before: Mon 02 Jan 2023 18:24:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 136038
IP address blocks: 45.142.152.0/24 maxlen: 24
45.142.153.0/24 maxlen: 24
45.142.155.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:ba:bf:bd:03:e5:8f:18:37:06:35:da:11:1d:60:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1a01f76a42be8717befdce1676215988a4dfc73
Validity
Not Before: Jan 2 18:24:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=af0d20d58ae308d6e7e545c6be91f66f4be3bb75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:50:01:e6:89:ec:fb:e9:91:b7:1d:09:3c:d2:
a1:05:61:36:c7:f4:b6:fb:2d:95:41:84:6e:47:d9:
fc:1c:03:c7:4d:0c:80:b7:7f:07:73:9b:fa:7a:ea:
f4:18:4d:4c:14:d6:6a:03:8b:93:f0:21:55:c5:96:
ae:7f:d5:60:32:d5:57:4b:3d:e2:88:60:17:9f:7c:
37:f2:00:6d:1a:f7:71:3d:d8:d2:f4:66:39:17:dd:
17:98:07:b0:36:66:27:16:76:d5:b9:85:68:74:26:
30:6d:da:dc:e1:3b:b6:fb:7b:97:bf:fa:49:4e:84:
46:8c:16:74:ab:16:3b:d6:0e:3f:e0:6b:69:47:8a:
d6:f3:35:0d:d0:73:ca:db:9c:77:ee:7c:d2:58:ec:
85:38:8f:aa:51:e1:3a:67:b0:f7:bf:62:2a:c7:4a:
91:a3:88:3f:e2:e1:36:14:68:04:81:c9:a4:3a:c6:
7d:ce:9f:34:f8:fc:eb:e8:8a:d4:7c:59:94:26:7d:
ac:05:51:66:cb:10:a0:d9:8f:ac:a6:bb:d3:94:41:
ee:52:34:8d:42:f7:56:84:2d:f5:ff:2b:3a:28:e3:
9e:be:71:63:dc:91:97:90:91:26:90:73:00:3e:8f:
de:28:54:89:5b:ae:f7:36:28:c4:3a:9b:fd:7b:e6:
75:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:0D:20:D5:8A:E3:08:D6:E7:E5:45:C6:BE:91:F6:6F:4B:E3:BB:75
X509v3 Authority Key Identifier:
keyid:A1:A0:1F:76:A4:2B:E8:71:7B:EF:DC:E1:67:62:15:98:8A:4D:FC:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oaAfdqQr6HF779zhZ2IVmIpN_HM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/eda54a-772c-49db-a012-6100cd15e260/1/rw0g1YrjCNbn5UXGvpH2b0vju3U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/eda54a-772c-49db-a012-6100cd15e260/1/oaAfdqQr6HF779zhZ2IVmIpN_HM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.152.0/23
45.142.155.0/24
Signature Algorithm: sha256WithRSAEncryption
d2:48:35:ed:d3:34:8f:02:44:94:c9:88:f2:fa:d9:af:08:e8:
5d:83:01:80:dd:13:7e:1a:c4:64:ff:a4:a8:3a:58:54:f7:8c:
c6:d1:2a:9c:67:91:fc:4d:cf:d0:ec:2b:e0:5f:75:4a:a3:ca:
18:38:11:ce:b3:47:dc:e8:65:89:72:4e:1d:53:78:d8:a5:cb:
fc:9e:7a:3e:25:83:6f:69:d7:e3:77:fb:a9:ad:05:52:e2:fd:
4e:cf:93:fc:4a:00:2a:06:25:14:8e:92:07:62:a7:e0:1e:22:
49:bf:f9:b4:ca:a5:cc:1f:50:ff:1a:74:05:d8:da:89:46:a8:
ef:10:32:bc:d4:35:27:c2:d5:40:0f:e6:7f:17:6c:de:a2:a6:
ae:97:dd:8d:5a:94:9d:a2:fc:64:7c:a4:e5:e2:c9:b9:b6:34:
0c:a9:f9:d1:e9:8e:1f:74:db:2c:a7:a9:7f:33:d8:6f:b1:38:
0b:e2:5c:16:5d:bf:7c:ab:6a:ef:32:69:78:1f:5f:66:d1:f3:
4c:b5:71:ee:fa:b2:37:50:ae:c3:84:66:be:85:3e:53:3b:08:
a0:2b:a2:64:a7:28:af:a8:41:83:49:c6:df:09:3b:21:79:a5:
37:87:d5:53:1e:28:81:77:b7:78:81:ff:de:d4:cb:14:1a:87:
f9:c4:a3:ca
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYVzur+9A+WPGDcGNdoRHWD9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExYTAxZjc2YTQyYmU4NzE3YmVmZGNlMTY3NjIxNTk4OGE0
ZGZjNzMwHhcNMjMwMTAyMTgyNDU2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZjBkMjBkNThhZTMwOGQ2ZTdlNTQ1YzZiZTkxZjY2ZjRiZTNiYjc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo1AB5ons++mRtx0JPNKhBWE2x/S2
+y2VQYRuR9n8HAPHTQyAt38Hc5v6eur0GE1MFNZqA4uT8CFVxZauf9VgMtVXSz3i
iGAXn3w38gBtGvdxPdjS9GY5F90XmAewNmYnFnbVuYVodCYwbdrc4Tu2+3uXv/pJ
ToRGjBZ0qxY71g4/4GtpR4rW8zUN0HPK25x37nzSWOyFOI+qUeE6Z7D3v2Iqx0qR
o4g/4uE2FGgEgcmkOsZ9zp80+Pzr6IrUfFmUJn2sBVFmyxCg2Y+sprvTlEHuUjSN
QvdWhC31/ys6KOOevnFj3JGXkJEmkHMAPo/eKFSJW673NijEOpv9e+Z1uwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFK8NINWK4wjW5+VFxr6R9m9L47t1MB8GA1UdIwQY
MBaAFKGgH3akK+hxe+/c4WdiFZiKTfxzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2FBZmRxUXI2SEY3Nzl6aFoySVZtSXBOX0hNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS9lZGE1NGEtNzcyYy00OWRiLWEwMTIt
NjEwMGNkMTVlMjYwLzEvcncwZzFZcmpDTmJuNVVYR3ZwSDJiMHZqdTNVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS9lZGE1NGEtNzcyYy00OWRiLWEwMTItNjEwMGNkMTVlMjYw
LzEvb2FBZmRxUXI2SEY3Nzl6aFoySVZtSXBOX0hNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBLY6YAwQA
LY6bMA0GCSqGSIb3DQEBCwUAA4IBAQDSSDXt0zSPAkSUyYjy+tmvCOhdgwGA3RN+
GsRk/6SoOlhU94zG0SqcZ5H8Tc/Q7CvgX3VKo8oYOBHOs0fc6GWJck4dU3jYpcv8
nno+JYNvadfjd/uprQVS4v1Oz5P8SgAqBiUUjpIHYqfgHiJJv/m0yqXMH1D/GnQF
2NqJRqjvEDK81DUnwtVAD+Z/F2zeoqaul92NWpSdovxkfKTl4sm5tjQMqfnR6Y4f
dNssp6l/M9hvsTgL4lwWXb98q2rvMml4H19m0fNMtXHu+rI3UK7DhGa+hT5TOwig
K6JkpyivqEGDScbfCTsheaU3h9VTHiiBd7d4gf/e1MsUGof5xKPK
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:01:51 2024 by rpki-client on console-ams.rpki-client.org