Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/4a22bb-2862-421c-b071-da99251b1328/1/N7vAUmjl46R8ti3l4ZBg8lhp624.roa
File: N7vAUmjl46R8ti3l4ZBg8lhp624.roa (raw, json)
Hash identifier: zGdYoudUJk0yKF8Rumlq0foGbxO7jnwJa1DGEMdpsqU=
Subject key identifier: 37:BB:C0:52:68:E5:E3:A4:7C:B6:2D:E5:E1:90:60:F2:58:69:EB:6E
Certificate issuer: /CN=12608e7181a303df044911ab4f2d51c2887ef278
Certificate serial: 018DC002227C701FFBBCFE3C453728C4F9FE
Authority key identifier: 12:60:8E:71:81:A3:03:DF:04:49:11:AB:4F:2D:51:C2:88:7E:F2:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EmCOcYGjA98ESRGrTy1Rwoh-8ng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/4a22bb-2862-421c-b071-da99251b1328/1/N7vAUmjl46R8ti3l4ZBg8lhp624.roa
Signing time: Mon 19 Feb 2024 06:16:21 +0000
ROA not before: Mon 19 Feb 2024 06:16:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 18013
IP address blocks: 45.149.16.0/24 maxlen: 24
45.149.17.0/24 maxlen: 24
45.149.18.0/24 maxlen: 24
45.149.19.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:c0:02:22:7c:70:1f:fb:bc:fe:3c:45:37:28:c4:f9:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12608e7181a303df044911ab4f2d51c2887ef278
Validity
Not Before: Feb 19 06:16:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=37bbc05268e5e3a47cb62de5e19060f25869eb6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:c9:d2:91:77:a9:ce:d1:4a:fc:dd:65:a0:d4:
8e:bc:55:c4:b0:15:36:5b:0e:bf:a7:95:cd:b1:dd:
d2:d4:eb:3e:1f:b5:5e:bc:ac:a8:94:0d:e6:0b:c9:
d1:bc:90:b6:8a:60:4d:84:bf:72:f7:7e:66:b9:46:
37:31:0b:89:3e:0e:29:01:1a:a5:34:d2:a6:98:4c:
41:69:3c:1d:5f:3b:e5:94:2c:57:57:bc:f9:9d:41:
75:16:93:6d:75:36:d9:78:c2:07:b9:1d:f3:ba:6f:
e2:3e:0c:c5:4f:78:50:b4:a0:9e:16:72:c7:6d:af:
1e:ac:2f:7e:b6:a9:76:47:ca:2e:00:d8:03:ff:a8:
db:25:88:d9:ea:b1:73:65:30:64:f4:10:46:05:9e:
72:1d:26:b4:52:09:e7:d2:4a:eb:27:90:42:e4:e7:
13:bf:19:fc:44:b7:0f:22:34:93:32:56:7d:a3:49:
07:3b:bd:7c:a3:5f:10:32:ac:0e:84:23:08:89:97:
92:00:d2:15:a6:2c:77:49:c1:de:9e:98:6e:d7:92:
f0:3d:5f:2d:9c:47:72:f3:40:81:d9:10:25:2f:7a:
a4:94:3d:66:56:08:0d:49:7a:ed:05:5f:42:df:f6:
67:d3:12:37:fa:52:57:06:6f:65:2d:4f:0e:e0:b9:
a3:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:BB:C0:52:68:E5:E3:A4:7C:B6:2D:E5:E1:90:60:F2:58:69:EB:6E
X509v3 Authority Key Identifier:
keyid:12:60:8E:71:81:A3:03:DF:04:49:11:AB:4F:2D:51:C2:88:7E:F2:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EmCOcYGjA98ESRGrTy1Rwoh-8ng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/4a22bb-2862-421c-b071-da99251b1328/1/N7vAUmjl46R8ti3l4ZBg8lhp624.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/4a22bb-2862-421c-b071-da99251b1328/1/EmCOcYGjA98ESRGrTy1Rwoh-8ng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.16.0/22
Signature Algorithm: sha256WithRSAEncryption
12:97:dc:29:3f:0e:bd:3d:94:21:78:ac:a0:11:98:bc:5c:97:
84:93:52:33:fa:f9:bd:5d:6f:cc:b3:11:7d:9b:ad:56:99:e3:
ab:7a:64:02:4f:b3:55:cd:e7:c2:42:5b:e2:7a:f7:17:87:1c:
a0:d7:08:e8:ca:1d:27:14:e3:b0:f1:8c:d2:c1:77:74:28:29:
e9:ee:ab:2f:79:6f:4e:a5:50:d0:38:e0:cc:6a:89:ac:ff:9c:
0c:8c:f6:2f:c0:79:a9:9c:33:a0:7f:94:1e:b6:fa:cc:96:71:
c7:d0:bd:0c:6d:2d:db:df:95:0f:a9:23:a5:94:f6:10:8a:79:
90:4d:1f:f3:39:5d:6f:7f:b5:13:44:85:9c:72:4e:1c:98:16:
e9:86:9c:92:ad:f8:54:b7:08:39:f4:1a:8f:4d:0d:a7:c5:96:
80:ab:fc:ec:a4:51:80:37:30:60:20:6f:f3:e4:d6:ff:23:93:
71:e0:92:4c:59:fe:b3:bd:cb:48:1f:b6:f6:13:ec:b9:46:f9:
be:0c:67:5f:d9:1e:3d:9e:36:4f:ef:b5:77:55:87:b2:35:d0:
8d:ff:25:44:8e:3c:21:9a:d5:85:95:f7:f0:c0:39:f6:12:cc:
a7:62:55:f0:be:a2:30:53:12:14:71:dd:07:29:24:8e:c1:a8:
9e:76:b6:c9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY3AAiJ8cB/7vP48RTcoxPn+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyNjA4ZTcxODFhMzAzZGYwNDQ5MTFhYjRmMmQ1MWMyODg3
ZWYyNzgwHhcNMjQwMjE5MDYxNjIxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzN2JiYzA1MjY4ZTVlM2E0N2NiNjJkZTVlMTkwNjBmMjU4NjllYjZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg8nSkXepztFK/N1loNSOvFXEsBU2
Ww6/p5XNsd3S1Os+H7VevKyolA3mC8nRvJC2imBNhL9y935muUY3MQuJPg4pARql
NNKmmExBaTwdXzvllCxXV7z5nUF1FpNtdTbZeMIHuR3zum/iPgzFT3hQtKCeFnLH
ba8erC9+tql2R8ouANgD/6jbJYjZ6rFzZTBk9BBGBZ5yHSa0Ugnn0krrJ5BC5OcT
vxn8RLcPIjSTMlZ9o0kHO718o18QMqwOhCMIiZeSANIVpix3ScHenphu15LwPV8t
nEdy80CB2RAlL3qklD1mVggNSXrtBV9C3/Zn0xI3+lJXBm9lLU8O4LmjzQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDe7wFJo5eOkfLYt5eGQYPJYaetuMB8GA1UdIwQY
MBaAFBJgjnGBowPfBEkRq08tUcKIfvJ4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRW1DT2NZR2pBOThFU1JHclR5MVJ3b2gtOG5nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS80YTIyYmItMjg2Mi00MjFjLWIwNzEt
ZGE5OTI1MWIxMzI4LzEvTjd2QVVtamw0NlI4dGkzbDRaQmc4bGhwNjI0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS80YTIyYmItMjg2Mi00MjFjLWIwNzEtZGE5OTI1MWIxMzI4
LzEvRW1DT2NZR2pBOThFU1JHclR5MVJ3b2gtOG5nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLZUQMA0G
CSqGSIb3DQEBCwUAA4IBAQASl9wpPw69PZQheKygEZi8XJeEk1Iz+vm9XW/MsxF9
m61WmeOremQCT7NVzefCQlvievcXhxyg1wjoyh0nFOOw8YzSwXd0KCnp7qsveW9O
pVDQOODMaoms/5wMjPYvwHmpnDOgf5QetvrMlnHH0L0MbS3b35UPqSOllPYQinmQ
TR/zOV1vf7UTRIWcck4cmBbphpySrfhUtwg59BqPTQ2nxZaAq/zspFGANzBgIG/z
5Nb/I5Nx4JJMWf6zvctIH7b2E+y5Rvm+DGdf2R49njZP77V3VYeyNdCN/yVEjjwh
mtWFlffwwDn2EsynYlXwvqIwUxIUcd0HKSSOwaiedrbJ
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:00 2024 by rpki-client on console-fra.rpki-client.org