Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/lIVdDa8LlWsIuxrT2I24ItwTzQo.roa
File: lIVdDa8LlWsIuxrT2I24ItwTzQo.roa (raw, json)
Hash identifier: iN2H1OYJLiGGNy8vBEQAgmzCvpyQw7bV4O4KHk2NrXs=
Subject key identifier: 94:85:5D:0D:AF:0B:95:6B:08:BB:1A:D3:D8:8D:B8:22:DC:13:CD:0A
Certificate issuer: /CN=13ecf10b887f085887de8b2db64917ee2e424545
Certificate serial: 0185714C13E7B453D3D0C5E16BEAC606503F
Authority key identifier: 13:EC:F1:0B:88:7F:08:58:87:DE:8B:2D:B6:49:17:EE:2E:42:45:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E-zxC4h_CFiH3osttkkX7i5CRUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/lIVdDa8LlWsIuxrT2I24ItwTzQo.roa
Signing time: Mon 02 Jan 2023 07:04:49 +0000
ROA not before: Mon 02 Jan 2023 07:04:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50673
IP address blocks: 45.148.141.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:4c:13:e7:b4:53:d3:d0:c5:e1:6b:ea:c6:06:50:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13ecf10b887f085887de8b2db64917ee2e424545
Validity
Not Before: Jan 2 07:04:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=94855d0daf0b956b08bb1ad3d88db822dc13cd0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:e1:7e:fd:04:99:39:3d:d4:ba:fe:9f:f5:95:
1a:b3:01:b7:43:17:a0:3e:c3:59:c4:b6:e5:62:49:
6c:4d:a9:99:04:62:23:88:a1:34:6e:3f:f9:93:f5:
80:f9:12:28:58:0f:94:c9:ab:63:e8:8c:32:5e:19:
0f:ab:10:ed:3b:24:62:d4:eb:c1:56:fc:ac:9e:a4:
4d:45:9f:75:b6:47:59:70:62:6a:0b:2c:36:a2:30:
db:63:37:d2:06:98:28:1c:1c:19:75:af:08:64:e4:
d7:3f:f3:93:74:0e:b6:b5:f5:b4:92:6a:9c:5e:c1:
09:01:41:cf:be:93:09:ff:63:9d:0b:e3:d7:ee:a1:
5b:f1:4a:68:c0:9a:39:83:27:fa:36:87:ef:63:e2:
83:c0:f8:b1:96:b1:df:ee:58:64:0a:6a:53:6d:bd:
ea:c7:49:56:78:7a:1e:69:ea:79:f9:d0:96:f8:79:
4c:3b:bb:59:59:7a:91:6f:67:69:e3:dc:43:0a:58:
c9:ea:02:d9:34:05:b4:a9:1b:4f:d2:a2:b9:a7:5c:
fa:3f:d0:dd:9a:b2:28:74:bc:f0:e0:c2:fe:59:22:
0a:93:06:98:13:f4:8a:5d:d4:af:a4:52:7f:a1:93:
7f:15:df:fc:43:52:f4:a6:c4:d5:a4:6f:69:0b:95:
99:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:85:5D:0D:AF:0B:95:6B:08:BB:1A:D3:D8:8D:B8:22:DC:13:CD:0A
X509v3 Authority Key Identifier:
keyid:13:EC:F1:0B:88:7F:08:58:87:DE:8B:2D:B6:49:17:EE:2E:42:45:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-zxC4h_CFiH3osttkkX7i5CRUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/lIVdDa8LlWsIuxrT2I24ItwTzQo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/E-zxC4h_CFiH3osttkkX7i5CRUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.148.141.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:8e:9b:f7:dc:53:45:f9:7d:ba:92:14:5a:dc:8e:1c:85:a1:
87:6d:a0:59:32:11:cd:3b:3c:a3:49:f3:23:f9:fa:40:5a:d3:
02:53:0a:f7:fd:89:c8:8c:bb:cc:1d:19:23:f9:7b:1c:26:47:
dd:a6:c0:6d:b9:be:9f:95:48:da:1e:6a:6d:4a:18:0c:e0:53:
48:35:e0:0c:f9:a8:8c:2d:36:81:55:1c:03:00:0e:48:a4:ae:
a0:b3:ec:82:4a:52:74:5f:2c:0b:ed:24:92:eb:c4:98:5c:01:
f2:55:59:35:2c:d6:9e:b5:ac:8a:02:84:65:14:92:81:93:38:
e9:a6:1b:ef:73:02:08:bf:ef:d5:98:4c:21:99:d4:ed:3f:da:
b6:66:b9:e7:30:46:bc:5c:e7:32:87:76:73:a7:93:54:f8:61:
04:a7:dc:24:04:07:d8:9c:ca:6f:7e:9e:c4:9e:dc:22:04:4b:
c3:65:38:05:82:28:41:ca:80:f5:f7:15:9d:ec:e8:e8:06:68:
af:bc:ae:4d:91:19:93:6d:08:b9:26:da:ac:a1:4d:82:c8:f3:
9b:60:59:5a:2c:ba:6c:db:15:87:3a:ee:26:58:fa:e2:bc:e4:
de:ef:c3:aa:79:7e:00:b2:66:de:06:36:ca:57:ea:4e:d1:13:
48:14:b3:71
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVxTBPntFPT0MXha+rGBlA/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzZWNmMTBiODg3ZjA4NTg4N2RlOGIyZGI2NDkxN2VlMmU0
MjQ1NDUwHhcNMjMwMTAyMDcwNDQ5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NDg1NWQwZGFmMGI5NTZiMDhiYjFhZDNkODhkYjgyMmRjMTNjZDBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhOF+/QSZOT3Uuv6f9ZUaswG3Qxeg
PsNZxLblYklsTamZBGIjiKE0bj/5k/WA+RIoWA+Uyatj6IwyXhkPqxDtOyRi1OvB
VvysnqRNRZ91tkdZcGJqCyw2ojDbYzfSBpgoHBwZda8IZOTXP/OTdA62tfW0kmqc
XsEJAUHPvpMJ/2OdC+PX7qFb8UpowJo5gyf6NofvY+KDwPixlrHf7lhkCmpTbb3q
x0lWeHoeaep5+dCW+HlMO7tZWXqRb2dp49xDCljJ6gLZNAW0qRtP0qK5p1z6P9Dd
mrIodLzw4ML+WSIKkwaYE/SKXdSvpFJ/oZN/Fd/8Q1L0psTVpG9pC5WZewIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJSFXQ2vC5VrCLsa09iNuCLcE80KMB8GA1UdIwQY
MBaAFBPs8QuIfwhYh96LLbZJF+4uQkVFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRS16eEM0aF9DRmlIM29zdHRra1g3aTVDUlVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9jNDVhOWItNTA5Ni00ZTc1LTkzODkt
YmQ5YjQyZjQ4ZGRlLzEvbElWZERhOExsV3NJdXhyVDJJMjRJdHdUelFvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS9jNDVhOWItNTA5Ni00ZTc1LTkzODktYmQ5YjQyZjQ4ZGRl
LzEvRS16eEM0aF9DRmlIM29zdHRra1g3aTVDUlVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZSNMA0G
CSqGSIb3DQEBCwUAA4IBAQBMjpv33FNF+X26khRa3I4chaGHbaBZMhHNOzyjSfMj
+fpAWtMCUwr3/YnIjLvMHRkj+XscJkfdpsBtub6flUjaHmptShgM4FNINeAM+aiM
LTaBVRwDAA5IpK6gs+yCSlJ0XywL7SSS68SYXAHyVVk1LNaetayKAoRlFJKBkzjp
phvvcwIIv+/VmEwhmdTtP9q2ZrnnMEa8XOcyh3Zzp5NU+GEEp9wkBAfYnMpvfp7E
ntwiBEvDZTgFgihByoD19xWd7OjoBmivvK5NkRmTbQi5JtqsoU2CyPObYFlaLLps
2xWHOu4mWPrivOTe78OqeX4AsmbeBjbKV+pO0RNIFLNx
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:21 2023 by rpki-client on console-ams.rpki-client.org