Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/rc9BodCE4iYj25xQHim5-zSt3x0.roa
File: rc9BodCE4iYj25xQHim5-zSt3x0.roa (raw, json)
Hash identifier: q+MPoPtuDDRIJZ2umUoYvzKLUKXyl+kGYO44TUtgZ6o=
Subject key identifier: AD:CF:41:A1:D0:84:E2:26:23:DB:9C:50:1E:29:B9:FB:34:AD:DF:1D
Certificate issuer: /CN=13ecf10b887f085887de8b2db64917ee2e424545
Certificate serial: 0183F569B32A91C1A0729EDAC259C6A13E17
Authority key identifier: 13:EC:F1:0B:88:7F:08:58:87:DE:8B:2D:B6:49:17:EE:2E:42:45:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E-zxC4h_CFiH3osttkkX7i5CRUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/rc9BodCE4iYj25xQHim5-zSt3x0.roa
Signing time: Thu 20 Oct 2022 12:41:28 +0000
ROA not before: Thu 20 Oct 2022 12:41:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202358
IP address blocks: 45.148.142.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:f5:69:b3:2a:91:c1:a0:72:9e:da:c2:59:c6:a1:3e:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13ecf10b887f085887de8b2db64917ee2e424545
Validity
Not Before: Oct 20 12:41:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=adcf41a1d084e22623db9c501e29b9fb34addf1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:d1:3c:57:77:d7:e2:e2:c2:75:0c:64:23:3d:
0c:30:43:aa:8a:ed:b7:d5:75:db:55:7d:20:8e:af:
83:e5:a9:34:79:e3:af:1d:2a:28:0a:49:4b:43:84:
e7:43:be:13:ff:5a:e8:b5:8d:ea:f5:8e:44:b8:dc:
54:f6:d6:eb:57:db:62:d4:f5:10:73:7a:78:33:f4:
d7:22:cb:ce:f8:b5:04:b8:af:2e:83:82:27:4f:c2:
db:f2:f9:89:9e:bc:ff:bb:a1:8c:b0:d7:2f:ea:02:
a4:8b:ea:ac:63:5b:0f:fc:e5:c5:88:2d:cc:53:6a:
30:86:e4:b6:6b:57:07:f8:10:b6:a3:72:64:04:7e:
3c:e8:b3:1d:b5:ee:c1:3a:43:cd:21:dc:86:25:5d:
52:9e:c8:c4:f8:ca:10:3e:50:4b:05:e1:cb:42:ec:
30:79:01:b4:4d:f0:46:c4:71:ad:5c:9a:e0:dc:24:
db:da:da:31:d2:0a:69:fc:40:c3:31:f6:7f:e4:39:
7b:7a:d6:31:1d:52:37:af:66:10:51:28:a6:99:92:
0c:2c:6c:73:7b:a0:39:2b:42:5f:b3:32:4c:4a:dd:
a2:43:ba:dd:10:12:75:9d:1d:f8:f4:71:7c:d0:9c:
9e:d0:c7:97:57:eb:6f:42:0b:17:d0:40:2c:0e:07:
af:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:CF:41:A1:D0:84:E2:26:23:DB:9C:50:1E:29:B9:FB:34:AD:DF:1D
X509v3 Authority Key Identifier:
keyid:13:EC:F1:0B:88:7F:08:58:87:DE:8B:2D:B6:49:17:EE:2E:42:45:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-zxC4h_CFiH3osttkkX7i5CRUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/rc9BodCE4iYj25xQHim5-zSt3x0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/E-zxC4h_CFiH3osttkkX7i5CRUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.148.142.0/24
Signature Algorithm: sha256WithRSAEncryption
54:2c:06:72:a5:9c:0f:5d:0f:2c:98:1c:0a:f7:b6:4f:83:cf:
c9:c1:f1:87:b4:a3:ed:40:34:1a:bf:f4:5d:0e:47:36:73:05:
09:98:aa:3f:ac:2a:5d:cf:08:84:ab:14:fd:55:3c:66:3d:df:
84:fd:03:e5:1d:bc:51:40:d8:a8:11:da:66:63:9f:d7:b3:b1:
37:26:20:6c:9e:bd:c1:33:4e:49:30:30:fc:a2:6d:bd:94:85:
56:80:c2:fe:1e:6e:91:2b:6d:1e:18:ac:07:a0:d8:1a:2c:a0:
2a:0c:e6:ab:39:23:ed:3b:c7:6d:a1:33:2e:3e:ce:30:d5:5d:
66:80:6a:53:da:f0:f8:83:dc:19:9d:ae:8b:7f:95:ad:62:fa:
f7:fc:11:ad:0a:8c:d1:20:2c:18:04:3a:bc:03:0d:e9:ae:ce:
56:81:13:a6:3a:86:44:9f:3e:94:75:be:ed:db:8b:c7:b6:55:
c4:a8:dd:5e:fe:20:a2:a5:7b:f8:fe:ac:ba:7a:b7:af:9f:df:
bb:95:19:f7:ed:6e:45:b2:7b:8f:25:b0:f4:bf:53:5a:ce:7a:
67:9a:9f:79:89:45:8a:92:ff:14:5e:12:55:49:34:f9:8d:94:
a6:f0:33:a7:9c:c4:7f:48:fe:9c:22:07:d3:15:8f:f4:02:b9:
57:21:24:e3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYP1abMqkcGgcp7awlnGoT4XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzZWNmMTBiODg3ZjA4NTg4N2RlOGIyZGI2NDkxN2VlMmU0
MjQ1NDUwHhcNMjIxMDIwMTI0MTI4WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZGNmNDFhMWQwODRlMjI2MjNkYjljNTAxZTI5YjlmYjM0YWRkZjFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2dE8V3fX4uLCdQxkIz0MMEOqiu23
1XXbVX0gjq+D5ak0eeOvHSooCklLQ4TnQ74T/1rotY3q9Y5EuNxU9tbrV9ti1PUQ
c3p4M/TXIsvO+LUEuK8ug4InT8Lb8vmJnrz/u6GMsNcv6gKki+qsY1sP/OXFiC3M
U2owhuS2a1cH+BC2o3JkBH486LMdte7BOkPNIdyGJV1SnsjE+MoQPlBLBeHLQuww
eQG0TfBGxHGtXJrg3CTb2tox0gpp/EDDMfZ/5Dl7etYxHVI3r2YQUSimmZIMLGxz
e6A5K0JfszJMSt2iQ7rdEBJ1nR349HF80Jye0MeXV+tvQgsX0EAsDgev5QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFK3PQaHQhOImI9ucUB4pufs0rd8dMB8GA1UdIwQY
MBaAFBPs8QuIfwhYh96LLbZJF+4uQkVFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRS16eEM0aF9DRmlIM29zdHRra1g3aTVDUlVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9jNDVhOWItNTA5Ni00ZTc1LTkzODkt
YmQ5YjQyZjQ4ZGRlLzEvcmM5Qm9kQ0U0aVlqMjV4UUhpbTUtelN0M3gwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS9jNDVhOWItNTA5Ni00ZTc1LTkzODktYmQ5YjQyZjQ4ZGRl
LzEvRS16eEM0aF9DRmlIM29zdHRra1g3aTVDUlVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZSOMA0G
CSqGSIb3DQEBCwUAA4IBAQBULAZypZwPXQ8smBwK97ZPg8/JwfGHtKPtQDQav/Rd
Dkc2cwUJmKo/rCpdzwiEqxT9VTxmPd+E/QPlHbxRQNioEdpmY5/Xs7E3JiBsnr3B
M05JMDD8om29lIVWgML+Hm6RK20eGKwHoNgaLKAqDOarOSPtO8dtoTMuPs4w1V1m
gGpT2vD4g9wZna6Lf5WtYvr3/BGtCozRICwYBDq8Aw3prs5WgROmOoZEnz6Udb7t
24vHtlXEqN1e/iCipXv4/qy6erevn9+7lRn37W5FsnuPJbD0v1Naznpnmp95iUWK
kv8UXhJVSTT5jZSm8DOnnMR/SP6cIgfTFY/0ArlXISTj
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:21 2023 by rpki-client on console-ams.rpki-client.org