Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/70c451-876e-4581-98dd-08618e6b2c1c/1/1taIIIiLKZJDhn0uGtc1frf-PS0.roa
File: 1taIIIiLKZJDhn0uGtc1frf-PS0.roa (raw, json)
Hash identifier: vduNRGfB0WA9by0AtRPJ6fodNUxU6+ztzR0mynL5dgw=
Subject key identifier: D6:D6:88:20:88:8B:29:92:43:86:7D:2E:1A:D7:35:7E:B7:FE:3D:2D
Certificate issuer: /CN=be810fb3ce83c623c7c9894fadb595310d41818f
Certificate serial: 018CC6B92D4D0BEBA0CB8403F129E76C95D4
Authority key identifier: BE:81:0F:B3:CE:83:C6:23:C7:C9:89:4F:AD:B5:95:31:0D:41:81:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/voEPs86DxiPHyYlPrbWVMQ1BgY8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/70c451-876e-4581-98dd-08618e6b2c1c/1/1taIIIiLKZJDhn0uGtc1frf-PS0.roa
Signing time: Mon 01 Jan 2024 20:31:13 +0000
ROA not before: Mon 01 Jan 2024 20:31:13 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213373
IP address blocks: 45.141.56.0/24 maxlen: 24
45.141.58.0/24 maxlen: 24
45.141.59.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b9:2d:4d:0b:eb:a0:cb:84:03:f1:29:e7:6c:95:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be810fb3ce83c623c7c9894fadb595310d41818f
Validity
Not Before: Jan 1 20:31:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d6d68820888b299243867d2e1ad7357eb7fe3d2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e4:1c:c4:7e:fd:38:dc:33:80:f5:a2:a1:80:
fc:15:11:a3:bd:64:42:4c:f7:e9:40:af:ea:3a:51:
da:66:61:1f:3c:e2:f2:4b:d9:38:3f:37:57:57:d4:
d2:c1:ec:77:bb:75:47:6e:cf:a0:54:8b:ee:3d:d9:
91:42:ac:6e:ff:89:17:8c:62:51:4a:d6:b7:c6:2f:
e3:59:1c:cb:0f:da:44:fa:14:39:1e:28:80:5f:58:
25:af:78:6f:fc:6e:6b:60:c4:6a:43:1c:f6:d1:f9:
bc:7a:d7:8a:f3:d9:86:9b:64:2f:2d:24:99:2a:19:
74:d4:6e:d3:ef:1e:9c:a4:8a:21:9e:95:a6:fd:8b:
3c:c6:9c:07:d2:0e:b2:cd:ec:f4:39:f7:b0:f2:c5:
19:54:18:10:37:7e:04:21:83:4e:b8:14:13:61:a1:
22:0c:55:1b:97:bb:01:c9:9b:e1:d4:e7:4c:32:b6:
60:53:4e:e6:19:95:fb:4f:d0:f6:9d:4e:67:1b:a9:
0e:c4:fc:7c:63:8f:78:8f:f9:fa:dd:4e:45:6e:b3:
6a:7c:1b:f9:70:4b:f3:34:3f:2e:f9:cc:45:a6:b5:
94:c6:3e:74:61:5d:54:cb:8e:f8:75:35:5a:c7:68:
59:63:02:0e:04:ca:b1:1e:57:cd:6e:7c:81:a5:05:
35:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:D6:88:20:88:8B:29:92:43:86:7D:2E:1A:D7:35:7E:B7:FE:3D:2D
X509v3 Authority Key Identifier:
keyid:BE:81:0F:B3:CE:83:C6:23:C7:C9:89:4F:AD:B5:95:31:0D:41:81:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/voEPs86DxiPHyYlPrbWVMQ1BgY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/70c451-876e-4581-98dd-08618e6b2c1c/1/1taIIIiLKZJDhn0uGtc1frf-PS0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/70c451-876e-4581-98dd-08618e6b2c1c/1/voEPs86DxiPHyYlPrbWVMQ1BgY8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.56.0/24
45.141.58.0/23
Signature Algorithm: sha256WithRSAEncryption
31:c6:26:50:2c:d4:4e:76:36:85:55:da:50:98:33:fd:9e:f5:
9d:8d:0c:36:c7:8e:87:67:df:7c:d6:72:7c:73:d8:ee:dd:c5:
8d:16:1f:0a:ce:a3:50:3e:bc:2d:a8:d9:db:ab:7b:f6:64:8f:
03:28:4b:9d:d7:0e:84:5d:49:7b:1b:0c:91:34:3a:3f:69:d9:
2b:4f:bc:87:0a:f4:ff:ed:90:44:2b:71:f5:df:5b:80:bd:8d:
89:76:06:26:b2:f7:e3:0d:cd:6d:19:49:bd:bd:a7:94:a6:84:
b9:43:1f:5d:b0:06:42:79:36:4a:7f:f6:fe:2a:d1:92:70:bb:
c4:45:6f:07:ae:29:4d:0c:9a:31:a6:d0:c4:9a:e7:b6:1d:19:
38:d6:e2:3e:5d:36:aa:47:d4:1c:5e:ec:59:41:6e:95:d0:35:
3d:17:10:c3:00:d8:5b:a4:c4:62:63:33:e2:50:67:f4:f0:9a:
0c:80:e2:ef:de:fc:59:ad:54:96:43:3a:23:4f:3c:cf:31:3a:
d9:9f:d6:47:ed:08:34:f3:62:09:99:88:f0:c3:b1:0e:c2:bc:
4c:b4:c8:08:ce:aa:56:fc:77:69:96:4c:ba:60:07:ab:95:52:
0b:d9:84:45:f4:df:0f:ab:5d:d9:06:4d:7c:d4:1b:ae:f7:92:
88:4e:e6:d9
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYzGuS1NC+ugy4QD8SnnbJXUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlODEwZmIzY2U4M2M2MjNjN2M5ODk0ZmFkYjU5NTMxMGQ0
MTgxOGYwHhcNMjQwMTAxMjAzMTEzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNmQ2ODgyMDg4OGIyOTkyNDM4NjdkMmUxYWQ3MzU3ZWI3ZmUzZDJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq+QcxH79ONwzgPWioYD8FRGjvWRC
TPfpQK/qOlHaZmEfPOLyS9k4PzdXV9TSwex3u3VHbs+gVIvuPdmRQqxu/4kXjGJR
Sta3xi/jWRzLD9pE+hQ5HiiAX1glr3hv/G5rYMRqQxz20fm8eteK89mGm2QvLSSZ
Khl01G7T7x6cpIohnpWm/Ys8xpwH0g6yzez0Ofew8sUZVBgQN34EIYNOuBQTYaEi
DFUbl7sByZvh1OdMMrZgU07mGZX7T9D2nU5nG6kOxPx8Y494j/n63U5FbrNqfBv5
cEvzND8u+cxFprWUxj50YV1Uy474dTVax2hZYwIOBMqxHlfNbnyBpQU1sQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFNbWiCCIiymSQ4Z9LhrXNX63/j0tMB8GA1UdIwQY
MBaAFL6BD7POg8Yjx8mJT621lTENQYGPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdm9FUHM4NkR4aVBIeVlsUHJiV1ZNUTFCZ1k4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC83MGM0NTEtODc2ZS00NTgxLTk4ZGQt
MDg2MThlNmIyYzFjLzEvMXRhSUlJaUxLWkpEaG4wdUd0YzFmcmYtUFMwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC83MGM0NTEtODc2ZS00NTgxLTk4ZGQtMDg2MThlNmIyYzFj
LzEvdm9FUHM4NkR4aVBIeVlsUHJiV1ZNUTFCZ1k4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALY04AwQB
LY06MA0GCSqGSIb3DQEBCwUAA4IBAQAxxiZQLNROdjaFVdpQmDP9nvWdjQw2x46H
Z9981nJ8c9ju3cWNFh8KzqNQPrwtqNnbq3v2ZI8DKEud1w6EXUl7GwyRNDo/adkr
T7yHCvT/7ZBEK3H131uAvY2JdgYmsvfjDc1tGUm9vaeUpoS5Qx9dsAZCeTZKf/b+
KtGScLvERW8HrilNDJoxptDEmue2HRk41uI+XTaqR9QcXuxZQW6V0DU9FxDDANhb
pMRiYzPiUGf08JoMgOLv3vxZrVSWQzojTzzPMTrZn9ZH7Qg082IJmYjww7EOwrxM
tMgIzqpW/Hdplky6YAerlVIL2YRF9N8Pq13ZBk181Buu95KITubZ
-----END CERTIFICATE-----
Generated at Fri Oct 25 15:59:20 2024 by rpki-client on console-fra.rpki-client.org