Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/ce7f6c-06a6-481f-87f9-6021aa334fa5/1/HoHQhk2OyA-w4JXvLQHiZXdVnHs.roa
File: HoHQhk2OyA-w4JXvLQHiZXdVnHs.roa (raw, json)
Hash identifier: 8XUlmj80VO1C2SYlliPK69N9zlnQcDVHMv9gI62oDy8=
Subject key identifier: 1E:81:D0:86:4D:8E:C8:0F:B0:E0:95:EF:2D:01:E2:65:77:55:9C:7B
Certificate issuer: /CN=10c06ca931cb67464e76fbefb3db68f3f12acd41
Certificate serial: 018345C0CE6EB4558B54DC92B2B5991DEF6D
Authority key identifier: 10:C0:6C:A9:31:CB:67:46:4E:76:FB:EF:B3:DB:68:F3:F1:2A:CD:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EMBsqTHLZ0ZOdvvvs9to8_EqzUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/ce7f6c-06a6-481f-87f9-6021aa334fa5/1/HoHQhk2OyA-w4JXvLQHiZXdVnHs.roa
Signing time: Fri 16 Sep 2022 10:03:27 +0000
ROA not before: Fri 16 Sep 2022 10:03:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 397423
IP address blocks: 45.149.232.0/24 maxlen: 24
45.149.235.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:45:c0:ce:6e:b4:55:8b:54:dc:92:b2:b5:99:1d:ef:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10c06ca931cb67464e76fbefb3db68f3f12acd41
Validity
Not Before: Sep 16 10:03:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1e81d0864d8ec80fb0e095ef2d01e26577559c7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:da:1b:b4:3a:b5:35:c2:c3:93:8e:ce:ec:cd:
b9:f3:a6:a8:a6:3d:20:e6:74:46:d4:dd:ab:fd:2f:
a8:30:1a:fd:f0:fa:fe:22:96:46:20:38:e7:71:e3:
7c:cf:be:18:68:8c:f9:6f:8a:8a:28:7c:e3:af:ee:
3b:01:c7:ce:80:06:87:43:c1:18:3c:a2:89:81:ab:
90:49:5f:ea:0d:e6:97:5d:56:15:97:75:e8:c1:62:
58:69:f9:df:5f:ec:c2:7f:d2:c2:7e:a5:70:21:1a:
ad:13:09:b3:bf:75:55:c8:4d:08:08:b1:64:86:3a:
0c:ea:43:16:51:88:68:f7:29:99:be:24:9a:c4:90:
99:28:8d:7a:24:de:c0:42:2d:a0:68:fc:c6:b0:a5:
14:b5:93:f8:71:f5:b2:14:f8:73:9f:8c:3b:ca:30:
0f:81:f2:9e:2f:c4:38:05:53:ac:2d:38:35:65:7b:
dc:69:4a:c7:b7:50:5d:0e:22:f0:b4:54:08:c0:98:
76:8d:14:7f:4a:c2:db:3f:c9:13:60:a3:48:fd:b0:
d6:a1:e8:e3:f3:2f:40:2e:db:93:70:73:30:36:3f:
d4:70:c7:02:7d:c0:5f:bc:dd:6b:ac:ca:3a:4a:23:
48:dc:2d:98:d5:10:ef:de:73:75:7a:9f:f4:37:af:
50:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:81:D0:86:4D:8E:C8:0F:B0:E0:95:EF:2D:01:E2:65:77:55:9C:7B
X509v3 Authority Key Identifier:
keyid:10:C0:6C:A9:31:CB:67:46:4E:76:FB:EF:B3:DB:68:F3:F1:2A:CD:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EMBsqTHLZ0ZOdvvvs9to8_EqzUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/ce7f6c-06a6-481f-87f9-6021aa334fa5/1/HoHQhk2OyA-w4JXvLQHiZXdVnHs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/ce7f6c-06a6-481f-87f9-6021aa334fa5/1/EMBsqTHLZ0ZOdvvvs9to8_EqzUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.232.0/24
45.149.235.0/24
Signature Algorithm: sha256WithRSAEncryption
80:06:68:ae:c1:b5:cc:44:01:f7:49:88:48:34:53:93:03:8a:
c3:ed:f6:74:be:eb:31:ba:43:52:93:45:c0:5e:4c:fe:0d:c1:
76:b3:d5:e7:70:d0:81:bc:86:86:c5:ee:59:c0:79:0d:8b:5b:
ef:db:12:9b:90:10:56:69:48:3e:c9:c1:44:35:81:05:9c:09:
61:de:58:d1:bc:c9:b8:00:28:04:08:6b:6a:63:47:6f:3f:7a:
82:13:e9:fe:f4:93:01:0b:4e:ff:0d:51:61:8c:42:8d:b4:e3:
d5:fe:8c:de:de:13:54:53:42:54:6d:86:a9:2b:06:5c:11:ef:
57:df:8c:3d:4c:40:e9:88:0b:ba:e0:0b:44:7f:0d:db:23:62:
ac:88:88:af:a8:59:3b:a6:42:4d:77:24:5b:f0:64:af:fa:c0:
3f:8a:1b:c2:c5:c2:f6:3f:5b:14:b9:51:e9:1f:02:05:c5:a2:
05:da:6e:89:ff:62:39:a9:3b:a0:1a:2d:41:3d:ac:e3:e1:34:
2d:39:f3:54:b0:af:93:74:ed:3c:ed:8e:4f:c3:19:fe:eb:bf:
05:d8:df:f6:9a:80:6a:f6:32:85:c8:40:59:8b:0a:01:d1:f7:
31:72:e7:a4:a8:38:e7:b5:2c:31:a0:70:e0:65:cd:44:96:ad:
d3:5a:e7:2d
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYNFwM5utFWLVNySsrWZHe9tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwYzA2Y2E5MzFjYjY3NDY0ZTc2ZmJlZmIzZGI2OGYzZjEy
YWNkNDEwHhcNMjIwOTE2MTAwMzI3WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZTgxZDA4NjRkOGVjODBmYjBlMDk1ZWYyZDAxZTI2NTc3NTU5YzdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgdobtDq1NcLDk47O7M2586aopj0g
5nRG1N2r/S+oMBr98Pr+IpZGIDjnceN8z74YaIz5b4qKKHzjr+47AcfOgAaHQ8EY
PKKJgauQSV/qDeaXXVYVl3XowWJYafnfX+zCf9LCfqVwIRqtEwmzv3VVyE0ICLFk
hjoM6kMWUYho9ymZviSaxJCZKI16JN7AQi2gaPzGsKUUtZP4cfWyFPhzn4w7yjAP
gfKeL8Q4BVOsLTg1ZXvcaUrHt1BdDiLwtFQIwJh2jRR/SsLbP8kTYKNI/bDWoejj
8y9ALtuTcHMwNj/UcMcCfcBfvN1rrMo6SiNI3C2Y1RDv3nN1ep/0N69Q6QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFB6B0IZNjsgPsOCV7y0B4mV3VZx7MB8GA1UdIwQY
MBaAFBDAbKkxy2dGTnb777PbaPPxKs1BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRU1Cc3FUSExaMFpPZHZ2dnM5dG84X0VxelVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC9jZTdmNmMtMDZhNi00ODFmLTg3Zjkt
NjAyMWFhMzM0ZmE1LzEvSG9IUWhrMk95QS13NEpYdkxRSGlaWGRWbkhzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC9jZTdmNmMtMDZhNi00ODFmLTg3ZjktNjAyMWFhMzM0ZmE1
LzEvRU1Cc3FUSExaMFpPZHZ2dnM5dG84X0VxelVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALZXoAwQA
LZXrMA0GCSqGSIb3DQEBCwUAA4IBAQCABmiuwbXMRAH3SYhINFOTA4rD7fZ0vusx
ukNSk0XAXkz+DcF2s9XncNCBvIaGxe5ZwHkNi1vv2xKbkBBWaUg+ycFENYEFnAlh
3ljRvMm4ACgECGtqY0dvP3qCE+n+9JMBC07/DVFhjEKNtOPV/oze3hNUU0JUbYap
KwZcEe9X34w9TEDpiAu64AtEfw3bI2KsiIivqFk7pkJNdyRb8GSv+sA/ihvCxcL2
P1sUuVHpHwIFxaIF2m6J/2I5qTugGi1BPazj4TQtOfNUsK+TdO087Y5Pwxn+678F
2N/2moBq9jKFyEBZiwoB0fcxcuekqDjntSwxoHDgZc1Elq3TWuct
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:39 2023 by rpki-client on console-ams.rpki-client.org