Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/452b7b-6814-4cbe-bbce-b06535d61b3f/1/suRabBF0Rdh906T3hcFVpeWWsX0.roa
File: suRabBF0Rdh906T3hcFVpeWWsX0.roa (raw, json)
Hash identifier: nK17Vs5nCfSzY/2bvc5pAXbSgQU/u5JpM0Nv7EkYK2Y=
Subject key identifier: B2:E4:5A:6C:11:74:45:D8:7D:D3:A4:F7:85:C1:55:A5:E5:96:B1:7D
Certificate issuer: /CN=01df787bebe85f1defedf5702310ee6aadb28e06
Certificate serial: 018571BA078BFD84037B0B7B2B359F0AC0E5
Authority key identifier: 01:DF:78:7B:EB:E8:5F:1D:EF:ED:F5:70:23:10:EE:6A:AD:B2:8E:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ad94e-voXx3v7fVwIxDuaq2yjgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/452b7b-6814-4cbe-bbce-b06535d61b3f/1/suRabBF0Rdh906T3hcFVpeWWsX0.roa
Signing time: Mon 02 Jan 2023 09:04:55 +0000
ROA not before: Mon 02 Jan 2023 09:04:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198735
IP address blocks: 217.145.231.0/24 maxlen: 24
217.145.230.0/24 maxlen: 24
217.145.229.0/24 maxlen: 24
217.145.228.0/22 maxlen: 22
217.145.228.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:ba:07:8b:fd:84:03:7b:0b:7b:2b:35:9f:0a:c0:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01df787bebe85f1defedf5702310ee6aadb28e06
Validity
Not Before: Jan 2 09:04:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b2e45a6c117445d87dd3a4f785c155a5e596b17d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b9:5e:82:a1:71:fa:c9:ed:fb:25:c9:5a:ee:
f8:6c:5d:6b:4b:9c:6e:f0:d4:90:7e:bc:eb:2d:ba:
d7:38:fe:0d:55:93:7d:3b:21:f1:f8:37:51:bb:61:
bd:ba:2c:a4:80:2d:2c:c8:d4:13:d8:e2:3b:42:e2:
27:e7:4a:fb:f1:f9:c9:13:69:4e:43:77:ed:0f:c9:
2f:12:37:56:f4:36:1e:c0:06:5f:0f:88:a8:e6:46:
e2:94:85:f8:f2:76:4c:72:ad:d6:db:f4:7e:7b:88:
a8:eb:fc:bc:d0:5b:57:36:23:e9:49:88:8f:d6:07:
5e:de:ee:2a:f1:c9:96:e9:2c:1f:64:e7:8e:5d:a5:
a3:34:f9:c3:c8:0c:9a:81:b1:92:f8:ac:a3:75:7b:
c4:f7:75:ae:65:72:e8:4a:61:56:d8:fd:ba:66:1e:
14:22:b3:28:b0:af:15:04:2e:1f:92:4f:63:13:5e:
33:e4:5a:f7:df:7e:a1:c8:39:e7:87:90:10:1b:a6:
82:76:70:40:db:2b:f4:ca:ba:d7:01:55:ab:3d:53:
ca:74:16:e7:3a:5e:d7:d9:2a:9b:ae:9b:12:90:d3:
79:39:b6:6c:6f:e6:4c:90:35:0f:40:34:ba:20:4f:
40:fa:63:5e:b7:58:b2:cf:24:aa:5d:ab:e5:16:aa:
22:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:E4:5A:6C:11:74:45:D8:7D:D3:A4:F7:85:C1:55:A5:E5:96:B1:7D
X509v3 Authority Key Identifier:
keyid:01:DF:78:7B:EB:E8:5F:1D:EF:ED:F5:70:23:10:EE:6A:AD:B2:8E:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ad94e-voXx3v7fVwIxDuaq2yjgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/452b7b-6814-4cbe-bbce-b06535d61b3f/1/suRabBF0Rdh906T3hcFVpeWWsX0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/452b7b-6814-4cbe-bbce-b06535d61b3f/1/Ad94e-voXx3v7fVwIxDuaq2yjgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.145.228.0/22
Signature Algorithm: sha256WithRSAEncryption
79:23:39:f2:97:c7:ec:8e:01:2c:84:f0:55:1b:3a:53:2e:58:
e5:84:49:90:b0:8d:82:51:6c:53:5f:47:2b:b5:d5:da:1e:fd:
44:bc:f4:88:2e:60:99:e0:3d:b8:b6:cc:fd:84:2e:e5:e3:a2:
98:72:d7:5e:37:bf:ac:6e:eb:c6:2b:be:c5:26:1d:ed:89:76:
db:cd:f7:8d:8e:36:a8:29:b5:08:81:2b:f1:21:72:cb:35:6e:
31:62:84:3b:a7:9c:e4:64:53:8d:88:94:00:f1:67:f9:0d:b0:
6b:35:f1:e8:fa:5f:7f:38:7c:81:f8:87:6a:0d:93:82:80:b2:
e9:ee:2f:8d:1f:a2:97:b9:29:86:fe:23:a0:a3:90:aa:f1:c2:
82:7a:d3:b7:95:39:ac:85:71:8a:b3:6f:73:77:e4:b0:d0:d5:
1f:f0:8d:0a:a2:80:32:03:6f:3a:5a:31:50:02:6b:21:f9:0a:
51:17:22:40:2a:15:8c:a3:b5:95:52:fa:8b:e0:c5:4b:67:11:
45:47:a6:83:56:1f:37:a8:05:c2:0d:ca:15:d3:21:f8:c5:26:
4f:3e:de:e1:b2:61:c8:e7:6f:96:6b:aa:aa:92:f9:84:d2:8a:
cd:21:b6:33:bb:1a:3e:d5:8b:83:30:64:17:bf:8f:35:04:87:
c2:aa:c3:25
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVxugeL/YQDewt7KzWfCsDlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxZGY3ODdiZWJlODVmMWRlZmVkZjU3MDIzMTBlZTZhYWRi
MjhlMDYwHhcNMjMwMTAyMDkwNDU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMmU0NWE2YzExNzQ0NWQ4N2RkM2E0Zjc4NWMxNTVhNWU1OTZiMTdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtblegqFx+snt+yXJWu74bF1rS5xu
8NSQfrzrLbrXOP4NVZN9OyHx+DdRu2G9uiykgC0syNQT2OI7QuIn50r78fnJE2lO
Q3ftD8kvEjdW9DYewAZfD4io5kbilIX48nZMcq3W2/R+e4io6/y80FtXNiPpSYiP
1gde3u4q8cmW6SwfZOeOXaWjNPnDyAyagbGS+KyjdXvE93WuZXLoSmFW2P26Zh4U
IrMosK8VBC4fkk9jE14z5Fr3336hyDnnh5AQG6aCdnBA2yv0yrrXAVWrPVPKdBbn
Ol7X2SqbrpsSkNN5ObZsb+ZMkDUPQDS6IE9A+mNet1iyzySqXavlFqoirwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLLkWmwRdEXYfdOk94XBVaXllrF9MB8GA1UdIwQY
MBaAFAHfeHvr6F8d7+31cCMQ7mqtso4GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQWQ5NGUtdm9YeDN2N2ZWd0l4RHVhcTJ5amdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80NTJiN2ItNjgxNC00Y2JlLWJiY2Ut
YjA2NTM1ZDYxYjNmLzEvc3VSYWJCRjBSZGg5MDZUM2hjRlZwZVdXc1gwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80NTJiN2ItNjgxNC00Y2JlLWJiY2UtYjA2NTM1ZDYxYjNm
LzEvQWQ5NGUtdm9YeDN2N2ZWd0l4RHVhcTJ5amdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2ZHkMA0G
CSqGSIb3DQEBCwUAA4IBAQB5Iznyl8fsjgEshPBVGzpTLljlhEmQsI2CUWxTX0cr
tdXaHv1EvPSILmCZ4D24tsz9hC7l46KYctdeN7+sbuvGK77FJh3tiXbbzfeNjjao
KbUIgSvxIXLLNW4xYoQ7p5zkZFONiJQA8Wf5DbBrNfHo+l9/OHyB+IdqDZOCgLLp
7i+NH6KXuSmG/iOgo5Cq8cKCetO3lTmshXGKs29zd+Sw0NUf8I0KooAyA286WjFQ
Amsh+QpRFyJAKhWMo7WVUvqL4MVLZxFFR6aDVh83qAXCDcoV0yH4xSZPPt7hsmHI
52+Wa6qqkvmE0orNIbYzuxo+1YuDMGQXv481BIfCqsMl
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:12 2023 by rpki-client on console-fra.rpki-client.org