Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/OIU3SnInYpP-EPQApV0yc3D94As.roa
File: OIU3SnInYpP-EPQApV0yc3D94As.roa (raw, json)
Hash identifier: UsX63Xil/PVd/ZMslOu6PcTe17Bb3ImqgbCt97J2tMU=
Subject key identifier: 38:85:37:4A:72:27:62:93:FE:10:F4:00:A5:5D:32:73:70:FD:E0:0B
Certificate issuer: /CN=13ecf10b887f085887de8b2db64917ee2e424545
Certificate serial: 0185714C14607EFB72886498C5E40E1230EF
Authority key identifier: 13:EC:F1:0B:88:7F:08:58:87:DE:8B:2D:B6:49:17:EE:2E:42:45:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E-zxC4h_CFiH3osttkkX7i5CRUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/OIU3SnInYpP-EPQApV0yc3D94As.roa
Signing time: Mon 02 Jan 2023 07:04:49 +0000
ROA not before: Mon 02 Jan 2023 07:04:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60781
IP address blocks: 45.88.9.0/24 maxlen: 24
45.95.65.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:4c:14:60:7e:fb:72:88:64:98:c5:e4:0e:12:30:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13ecf10b887f085887de8b2db64917ee2e424545
Validity
Not Before: Jan 2 07:04:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3885374a72276293fe10f400a55d327370fde00b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:be:21:98:1f:e4:91:2e:1e:9e:88:f1:e5:a8:
be:e9:4d:55:e0:7a:bb:cc:99:c0:4c:b3:da:cb:6f:
63:d6:7a:38:8f:88:2c:c4:9c:2d:d1:4f:79:25:ef:
26:d2:bd:db:6b:12:7f:7b:e1:a9:af:23:9f:20:e5:
49:e5:b0:a6:d5:34:0c:b4:ce:b8:06:fd:ef:04:87:
15:5d:80:49:44:87:6a:00:b8:f5:3f:d7:50:86:bf:
85:ba:be:4d:10:d9:63:cb:bd:1a:aa:74:8d:ed:86:
8d:c7:55:7e:23:e8:8c:04:2c:7d:e0:b3:e1:2a:11:
90:b2:dc:ad:5b:4a:44:93:7f:14:3d:5e:5f:c0:5c:
92:67:f1:3b:75:45:8f:e1:7d:f0:22:cd:37:aa:5e:
c9:8d:2b:8d:76:75:fc:03:1f:17:96:05:cb:b1:78:
14:ac:56:eb:cd:e3:19:0a:6a:e6:05:ec:b7:17:e4:
b8:56:50:97:13:b1:e8:e7:0d:00:2a:e7:53:80:bc:
a9:5a:f0:d3:3f:4a:be:5d:e8:ee:34:b4:63:98:6e:
65:70:69:d9:bb:fe:5a:69:6a:b4:69:18:ce:36:b2:
10:a6:e2:22:5b:8a:00:f8:4d:63:df:a5:d8:49:51:
26:9b:4f:a6:c5:b3:d6:0f:1b:14:8c:44:56:12:af:
e2:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:85:37:4A:72:27:62:93:FE:10:F4:00:A5:5D:32:73:70:FD:E0:0B
X509v3 Authority Key Identifier:
keyid:13:EC:F1:0B:88:7F:08:58:87:DE:8B:2D:B6:49:17:EE:2E:42:45:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-zxC4h_CFiH3osttkkX7i5CRUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/OIU3SnInYpP-EPQApV0yc3D94As.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/E-zxC4h_CFiH3osttkkX7i5CRUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.9.0/24
45.95.65.0/24
Signature Algorithm: sha256WithRSAEncryption
24:cd:5f:b4:66:cb:c5:b3:51:ee:68:ee:5a:16:75:92:02:f7:
0c:ec:36:33:e0:4a:8d:80:f5:14:35:eb:58:c0:27:6e:14:7e:
f8:cd:15:2e:d4:9d:5b:18:7c:0b:6f:1e:40:51:8f:92:eb:aa:
0f:3f:c4:60:d8:32:92:20:c2:80:2b:ef:20:00:df:25:4d:10:
3a:51:46:10:5d:46:41:f8:31:9c:2c:31:2c:65:b0:7a:27:e4:
6f:04:04:ee:89:88:59:e6:50:7f:45:a1:9b:9f:49:6c:c8:21:
aa:35:db:68:8f:0e:45:77:b1:5a:cb:51:43:c2:79:7b:75:96:
7b:78:39:ab:99:1c:09:0d:53:64:33:33:23:04:b6:8d:f1:87:
d6:c9:de:70:57:b5:64:7f:d0:bb:62:86:95:74:d1:19:7c:e5:
2b:dd:47:07:9f:da:c0:9e:23:bd:a8:81:bc:3b:36:9f:eb:db:
a9:21:cd:2a:d6:b3:e0:b3:ea:ec:43:2f:68:67:37:d7:b9:f7:
89:00:25:67:c3:85:63:d1:42:a7:7c:6d:f6:24:3b:f0:1c:da:
e3:49:17:a7:05:0c:41:83:7c:32:44:bc:0e:ab:b4:9b:fa:d5:
ee:c5:0e:2d:8a:67:c5:9d:ed:54:e5:e7:2c:58:18:bb:9d:14:
54:07:e9:09
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYVxTBRgfvtyiGSYxeQOEjDvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzZWNmMTBiODg3ZjA4NTg4N2RlOGIyZGI2NDkxN2VlMmU0
MjQ1NDUwHhcNMjMwMTAyMDcwNDQ5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzODg1Mzc0YTcyMjc2MjkzZmUxMGY0MDBhNTVkMzI3MzcwZmRlMDBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtL4hmB/kkS4enojx5ai+6U1V4Hq7
zJnATLPay29j1no4j4gsxJwt0U95Je8m0r3baxJ/e+GpryOfIOVJ5bCm1TQMtM64
Bv3vBIcVXYBJRIdqALj1P9dQhr+Fur5NENljy70aqnSN7YaNx1V+I+iMBCx94LPh
KhGQstytW0pEk38UPV5fwFySZ/E7dUWP4X3wIs03ql7JjSuNdnX8Ax8XlgXLsXgU
rFbrzeMZCmrmBey3F+S4VlCXE7Ho5w0AKudTgLypWvDTP0q+XejuNLRjmG5lcGnZ
u/5aaWq0aRjONrIQpuIiW4oA+E1j36XYSVEmm0+mxbPWDxsUjERWEq/iEwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFDiFN0pyJ2KT/hD0AKVdMnNw/eALMB8GA1UdIwQY
MBaAFBPs8QuIfwhYh96LLbZJF+4uQkVFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRS16eEM0aF9DRmlIM29zdHRra1g3aTVDUlVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9jNDVhOWItNTA5Ni00ZTc1LTkzODkt
YmQ5YjQyZjQ4ZGRlLzEvT0lVM1NuSW5ZcFAtRVBRQXBWMHljM0Q5NEFzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS9jNDVhOWItNTA5Ni00ZTc1LTkzODktYmQ5YjQyZjQ4ZGRl
LzEvRS16eEM0aF9DRmlIM29zdHRra1g3aTVDUlVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALVgJAwQA
LV9BMA0GCSqGSIb3DQEBCwUAA4IBAQAkzV+0ZsvFs1HuaO5aFnWSAvcM7DYz4EqN
gPUUNetYwCduFH74zRUu1J1bGHwLbx5AUY+S66oPP8Rg2DKSIMKAK+8gAN8lTRA6
UUYQXUZB+DGcLDEsZbB6J+RvBATuiYhZ5lB/RaGbn0lsyCGqNdtojw5Fd7Fay1FD
wnl7dZZ7eDmrmRwJDVNkMzMjBLaN8YfWyd5wV7Vkf9C7YoaVdNEZfOUr3UcHn9rA
niO9qIG8Ozaf69upIc0q1rPgs+rsQy9oZzfXufeJACVnw4Vj0UKnfG32JDvwHNrj
SRenBQxBg3wyRLwOq7Sb+tXuxQ4timfFne1U5ecsWBi7nRRUB+kJ
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:21 2023 by rpki-client on console-ams.rpki-client.org