Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/bZRklaDQqTiujtNq328CoxUPlCw.roa
File: bZRklaDQqTiujtNq328CoxUPlCw.roa (raw, json)
Hash identifier: Lu1pOP6baIJT8CUe4XQ1obmye2Ut1md3wNyz4vFTvHA=
Subject key identifier: 6D:94:64:95:A0:D0:A9:38:AE:8E:D3:6A:DF:6F:02:A3:15:0F:94:2C
Certificate issuer: /CN=13ecf10b887f085887de8b2db64917ee2e424545
Certificate serial: 057D8B53
Authority key identifier: 13:EC:F1:0B:88:7F:08:58:87:DE:8B:2D:B6:49:17:EE:2E:42:45:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E-zxC4h_CFiH3osttkkX7i5CRUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/bZRklaDQqTiujtNq328CoxUPlCw.roa
Signing time: Tue 21 Jun 2022 14:02:44 +0000
ROA not before: Tue 21 Jun 2022 14:02:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 24875
IP address blocks: 45.148.140.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92113747 (0x57d8b53)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13ecf10b887f085887de8b2db64917ee2e424545
Validity
Not Before: Jun 21 14:02:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6d946495a0d0a938ae8ed36adf6f02a3150f942c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:46:4f:71:b3:b0:a0:3d:15:91:1a:fa:fe:68:
a9:d0:b7:88:de:04:e9:9e:2a:31:60:c1:6e:b5:ab:
db:f2:de:39:b3:1b:e6:4b:75:de:43:ac:5f:08:1d:
ba:b8:59:89:c5:bd:94:fd:f1:a6:b1:5e:db:9c:4a:
3d:4d:ac:97:83:5c:02:fe:77:c1:bc:f0:f8:39:e4:
2f:ee:c7:ef:1f:d2:85:76:9a:88:8e:06:c5:3d:25:
ea:1c:cf:4c:c9:39:fa:3c:d1:bd:18:37:b5:fc:6b:
29:bd:11:02:cf:b6:d9:6e:05:2a:ab:24:fa:e7:c8:
34:23:d4:9a:d3:1a:c5:e6:71:5f:ca:be:c5:11:aa:
c5:85:b6:63:fd:c4:e2:04:ff:dc:f2:c6:01:c7:2e:
e2:d6:f1:de:ea:43:96:4a:b1:4c:84:b5:4d:c3:6b:
eb:44:ce:ca:d4:bb:84:48:22:ec:20:30:be:42:66:
ba:b3:f2:41:c2:e7:b1:be:26:22:a8:b9:49:14:12:
6e:2e:08:51:7b:8e:f0:27:95:55:55:7b:2d:22:1e:
c2:94:39:e5:80:53:09:94:fc:62:6e:80:e3:bd:ba:
39:10:13:4a:2d:ee:10:7b:78:6b:54:06:04:45:7c:
b5:80:8b:fe:49:f5:c3:fa:44:5a:93:80:d3:23:23:
77:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:94:64:95:A0:D0:A9:38:AE:8E:D3:6A:DF:6F:02:A3:15:0F:94:2C
X509v3 Authority Key Identifier:
keyid:13:EC:F1:0B:88:7F:08:58:87:DE:8B:2D:B6:49:17:EE:2E:42:45:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-zxC4h_CFiH3osttkkX7i5CRUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/bZRklaDQqTiujtNq328CoxUPlCw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/E-zxC4h_CFiH3osttkkX7i5CRUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.148.140.0/24
Signature Algorithm: sha256WithRSAEncryption
78:58:57:ac:a4:df:b3:36:5a:ce:c1:b0:fe:df:0f:49:f6:a4:
80:09:1c:1f:bf:4c:67:92:ef:62:21:56:0f:9e:87:b6:9b:9e:
c4:62:6e:35:09:dc:16:72:0a:f6:48:07:4a:46:ca:4c:90:8f:
b0:aa:49:1e:b9:9f:15:a2:60:eb:e5:15:ac:ec:25:14:58:be:
37:f9:00:ee:18:ea:ac:20:ba:e1:11:48:c3:65:74:53:95:53:
7e:7c:38:ef:e0:48:3b:bf:d6:e3:04:f1:c0:ea:ba:41:36:17:
69:66:5f:a7:66:49:d6:f1:9d:13:06:9d:19:a3:7e:1e:a3:bd:
43:dd:06:ed:1b:c9:90:3b:3d:fd:db:e0:a4:7f:26:12:f1:c3:
b1:46:82:58:dc:7a:c1:b1:df:77:68:80:e7:dc:81:68:79:2e:
0a:f6:60:f3:22:7e:ed:9c:14:71:ac:56:36:93:cc:cf:c6:22:
1e:10:b4:77:77:a5:9d:8b:90:87:f0:5a:79:e9:db:93:55:f7:
03:35:fa:7a:44:90:83:20:50:0a:f9:5f:f8:9d:90:74:e3:34:
0f:4b:e2:d9:ad:f4:2e:71:a7:d3:bf:3e:57:5e:3a:0c:c8:52:
36:48:a1:6c:c0:0c:97:0b:e8:5c:1a:7a:1a:bf:d1:1d:f6:35:
5b:6a:f6:51
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBX2LUzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygx
M2VjZjEwYjg4N2YwODU4ODdkZThiMmRiNjQ5MTdlZTJlNDI0NTQ1MB4XDTIyMDYy
MTE0MDI0NFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNmQ5NDY0OTVhMGQw
YTkzOGFlOGVkMzZhZGY2ZjAyYTMxNTBmOTQyYzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALBGT3GzsKA9FZEa+v5oqdC3iN4E6Z4qMWDBbrWr2/LeObMb
5kt13kOsXwgdurhZicW9lP3xprFe25xKPU2sl4NcAv53wbzw+DnkL+7H7x/ShXaa
iI4GxT0l6hzPTMk5+jzRvRg3tfxrKb0RAs+22W4FKqsk+ufINCPUmtMaxeZxX8q+
xRGqxYW2Y/3E4gT/3PLGAccu4tbx3upDlkqxTIS1TcNr60TOytS7hEgi7CAwvkJm
urPyQcLnsb4mIqi5SRQSbi4IUXuO8CeVVVV7LSIewpQ55YBTCZT8Ym6A4726ORAT
Si3uEHt4a1QGBEV8tYCL/kn1w/pEWpOA0yMjd10CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRtlGSVoNCpOK6O02rfbwKjFQ+ULDAfBgNVHSMEGDAWgBQT7PELiH8IWIfe
iy22SRfuLkJFRTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0UtenhDNGhfQ0ZpSDNvc3R0a2tYN2k1Q1JVVS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNGEvYzQ1YTliLTUwOTYtNGU3NS05Mzg5LWJkOWI0MmY0OGRkZS8x
L2JaUmtsYURRcVRpdWp0TnEzMjhDb3hVUGxDdy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGEv
YzQ1YTliLTUwOTYtNGU3NS05Mzg5LWJkOWI0MmY0OGRkZS8xL0UtenhDNGhfQ0Zp
SDNvc3R0a2tYN2k1Q1JVVS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC2UjDANBgkqhkiG9w0BAQsFAAOC
AQEAeFhXrKTfszZazsGw/t8PSfakgAkcH79MZ5LvYiFWD56HtpuexGJuNQncFnIK
9kgHSkbKTJCPsKpJHrmfFaJg6+UVrOwlFFi+N/kA7hjqrCC64RFIw2V0U5VTfnw4
7+BIO7/W4wTxwOq6QTYXaWZfp2ZJ1vGdEwadGaN+HqO9Q90G7RvJkDs9/dvgpH8m
EvHDsUaCWNx6wbHfd2iA59yBaHkuCvZg8yJ+7ZwUcaxWNpPMz8YiHhC0d3elnYuQ
h/Baeenbk1X3AzX6ekSQgyBQCvlf+J2QdOM0D0vi2a30LnGn078+V146DMhSNkih
bMAMlwvoXBp6Gr/RHfY1W2r2UQ==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:21 2023 by rpki-client on console-ams.rpki-client.org