Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/4a22bb-2862-421c-b071-da99251b1328/1/mClvKxQkNIqBrvILvOt-CJwY1Mo.roa
File: mClvKxQkNIqBrvILvOt-CJwY1Mo.roa (raw, json)
Hash identifier: vJPIgmzF6Vd60FKEkW35l/Qc6BKydR+ozcEN913XydU=
Subject key identifier: 98:29:6F:2B:14:24:34:8A:81:AE:F2:0B:BC:EB:7E:08:9C:18:D4:CA
Certificate issuer: /CN=12608e7181a303df044911ab4f2d51c2887ef278
Certificate serial: 0186CF5B008087F2C4D619EABF4C676A9968
Authority key identifier: 12:60:8E:71:81:A3:03:DF:04:49:11:AB:4F:2D:51:C2:88:7E:F2:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EmCOcYGjA98ESRGrTy1Rwoh-8ng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/4a22bb-2862-421c-b071-da99251b1328/1/mClvKxQkNIqBrvILvOt-CJwY1Mo.roa
Signing time: Sat 11 Mar 2023 06:28:13 +0000
ROA not before: Sat 11 Mar 2023 06:28:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 40065
IP address blocks: 45.149.16.0/24 maxlen: 24
45.149.17.0/24 maxlen: 24
45.149.19.0/24 maxlen: 24
45.149.18.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:cf:5b:00:80:87:f2:c4:d6:19:ea:bf:4c:67:6a:99:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12608e7181a303df044911ab4f2d51c2887ef278
Validity
Not Before: Mar 11 06:28:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=98296f2b1424348a81aef20bbceb7e089c18d4ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:93:ce:02:b9:f9:1b:36:57:7b:ec:1d:f7:74:
03:e0:c9:de:b7:49:a0:3e:b4:7d:e9:76:a4:23:a4:
9c:6f:ea:f9:85:21:5b:af:a1:fd:b0:81:ce:dd:a5:
dd:e2:a7:2c:d4:d6:cb:4f:e6:05:ee:19:ec:38:cd:
3e:5e:70:37:2e:25:16:7c:64:23:93:36:2d:d2:82:
24:54:1c:1f:76:bb:2b:78:cb:6e:2d:b5:7c:d7:11:
b7:ba:bc:40:e5:12:b9:40:ee:d5:23:d1:74:ec:4d:
76:a5:65:81:85:99:4f:59:7e:8a:9d:b8:29:5e:05:
bc:98:60:43:de:77:6d:d5:23:11:0d:3b:49:69:c0:
3e:93:72:65:89:29:e2:00:d0:36:b3:33:c0:ec:a3:
78:2b:3d:e9:69:fc:67:d3:8a:8e:0b:6d:4c:10:1e:
96:ee:1a:77:74:27:45:93:38:ea:c1:d4:1c:74:c9:
55:f9:9a:a1:49:8e:a5:6b:60:b3:78:d7:a4:ee:c6:
0c:77:88:dc:da:b3:25:53:c7:31:62:22:4f:26:cb:
99:42:2a:84:00:36:26:a3:83:62:89:da:dc:08:e2:
ce:69:ba:1e:73:d8:8f:4d:a2:e6:47:fc:6e:61:6c:
16:f3:73:84:be:94:e3:da:cc:61:00:c3:03:3b:34:
8d:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:29:6F:2B:14:24:34:8A:81:AE:F2:0B:BC:EB:7E:08:9C:18:D4:CA
X509v3 Authority Key Identifier:
keyid:12:60:8E:71:81:A3:03:DF:04:49:11:AB:4F:2D:51:C2:88:7E:F2:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EmCOcYGjA98ESRGrTy1Rwoh-8ng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/4a22bb-2862-421c-b071-da99251b1328/1/mClvKxQkNIqBrvILvOt-CJwY1Mo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/4a22bb-2862-421c-b071-da99251b1328/1/EmCOcYGjA98ESRGrTy1Rwoh-8ng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.16.0/22
Signature Algorithm: sha256WithRSAEncryption
1e:b0:b1:d5:11:05:e7:2a:cd:6a:94:40:37:98:d9:24:e5:07:
dd:6e:65:b4:bd:3e:33:2e:c6:17:88:ba:05:cc:1d:2b:1d:c8:
f9:a6:c8:80:5f:58:14:13:e3:cf:e2:a0:f7:0b:25:36:77:bb:
2c:01:a5:5e:b0:6e:7a:04:cf:f4:5b:31:0f:ae:81:9d:68:d2:
6b:04:32:5e:12:2c:49:4c:da:4d:71:03:c3:47:f2:bc:55:2b:
2e:37:7d:74:9f:41:74:3e:6b:fe:3d:b7:79:c7:d6:67:55:a5:
ab:09:f6:32:3b:dd:3f:0f:b6:01:cf:97:c0:9c:38:a5:43:f2:
98:e3:6f:17:17:88:21:73:7c:e8:5f:7a:33:ec:7e:31:48:3a:
64:f9:5d:91:42:fd:ae:ae:2b:cb:fc:e9:57:22:36:0d:d8:d2:
b1:2b:2b:8b:1c:29:02:33:64:66:ba:00:3a:e8:05:97:4a:60:
62:bb:22:26:51:ba:e1:3b:3c:f7:9d:fd:fb:ef:42:1a:07:5a:
b4:ab:18:8c:d1:9e:87:70:6a:15:98:66:f8:f0:f8:07:66:9c:
b9:b3:7b:84:4b:72:43:d6:9d:f6:50:17:58:0f:03:b1:ef:ed:
57:47:01:6d:7c:2c:8b:7c:3d:80:a0:45:dd:aa:9f:88:c3:cb:
8f:8e:4a:d3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYbPWwCAh/LE1hnqv0xnaploMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyNjA4ZTcxODFhMzAzZGYwNDQ5MTFhYjRmMmQ1MWMyODg3
ZWYyNzgwHhcNMjMwMzExMDYyODEzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ODI5NmYyYjE0MjQzNDhhODFhZWYyMGJiY2ViN2UwODljMThkNGNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs5POArn5GzZXe+wd93QD4Mnet0mg
PrR96XakI6Scb+r5hSFbr6H9sIHO3aXd4qcs1NbLT+YF7hnsOM0+XnA3LiUWfGQj
kzYt0oIkVBwfdrsreMtuLbV81xG3urxA5RK5QO7VI9F07E12pWWBhZlPWX6Knbgp
XgW8mGBD3ndt1SMRDTtJacA+k3JliSniANA2szPA7KN4Kz3pafxn04qOC21MEB6W
7hp3dCdFkzjqwdQcdMlV+ZqhSY6la2CzeNek7sYMd4jc2rMlU8cxYiJPJsuZQiqE
ADYmo4NiidrcCOLOaboec9iPTaLmR/xuYWwW83OEvpTj2sxhAMMDOzSNwwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJgpbysUJDSKga7yC7zrfgicGNTKMB8GA1UdIwQY
MBaAFBJgjnGBowPfBEkRq08tUcKIfvJ4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRW1DT2NZR2pBOThFU1JHclR5MVJ3b2gtOG5nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS80YTIyYmItMjg2Mi00MjFjLWIwNzEt
ZGE5OTI1MWIxMzI4LzEvbUNsdkt4UWtOSXFCcnZJTHZPdC1DSndZMU1vLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS80YTIyYmItMjg2Mi00MjFjLWIwNzEtZGE5OTI1MWIxMzI4
LzEvRW1DT2NZR2pBOThFU1JHclR5MVJ3b2gtOG5nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLZUQMA0G
CSqGSIb3DQEBCwUAA4IBAQAesLHVEQXnKs1qlEA3mNkk5QfdbmW0vT4zLsYXiLoF
zB0rHcj5psiAX1gUE+PP4qD3CyU2d7ssAaVesG56BM/0WzEProGdaNJrBDJeEixJ
TNpNcQPDR/K8VSsuN310n0F0Pmv+Pbd5x9ZnVaWrCfYyO90/D7YBz5fAnDilQ/KY
428XF4ghc3zoX3oz7H4xSDpk+V2RQv2urivL/OlXIjYN2NKxKyuLHCkCM2RmugA6
6AWXSmBiuyImUbrhOzz3nf3770IaB1q0qxiM0Z6HcGoVmGb48PgHZpy5s3uES3JD
1p32UBdYDwOx7+1XRwFtfCyLfD2AoEXdqp+Iw8uPjkrT
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:03:53 2024 by rpki-client on console-ams.rpki-client.org