Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/7OI8NE8zVOqj3dUCEgSOV6tmq-U.roa
File: 7OI8NE8zVOqj3dUCEgSOV6tmq-U.roa (raw, json)
Hash identifier: kKfA7d80+SIlBrdZK5SB4Pw3sTYg1qYTWW1O/ne7U+k=
Subject key identifier: EC:E2:3C:34:4F:33:54:EA:A3:DD:D5:02:12:04:8E:57:AB:66:AB:E5
Certificate issuer: /CN=a44c267fa754cd6509e9f807273123bee96c525d
Certificate serial: 0183A8AEA8916A9F0AD10DD4C36C5C1B09A0
Authority key identifier: A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/7OI8NE8zVOqj3dUCEgSOV6tmq-U.roa
Signing time: Wed 05 Oct 2022 15:06:02 +0000
ROA not before: Wed 05 Oct 2022 15:06:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43043
IP address blocks: 45.87.174.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:a8:ae:a8:91:6a:9f:0a:d1:0d:d4:c3:6c:5c:1b:09:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a44c267fa754cd6509e9f807273123bee96c525d
Validity
Not Before: Oct 5 15:06:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ece23c344f3354eaa3ddd50212048e57ab66abe5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:0e:30:0a:5e:a6:3b:08:bd:d8:73:25:4c:12:
58:5c:56:de:0f:45:82:95:2e:fd:c5:35:4d:41:ba:
ba:93:e8:54:89:b2:fb:45:01:0f:bb:7f:4e:95:e5:
13:7e:b9:20:89:ab:d7:8f:48:0a:63:a1:a0:bd:bb:
9b:91:35:c2:eb:b5:ab:7a:e0:e3:ee:d4:5b:2d:a4:
e4:04:80:5d:16:e5:e6:02:43:50:28:f7:77:e8:1b:
72:f5:67:08:17:9d:51:fa:25:c1:ad:2b:fd:ef:16:
c5:77:2d:28:20:0e:fa:38:e0:0f:7c:5e:c0:35:c5:
2c:ea:f8:9b:dd:0c:c0:0a:d1:d3:03:8e:4a:8d:09:
9e:c1:eb:a1:de:2c:5a:be:5b:98:5b:19:40:e7:c8:
99:3d:93:fc:d7:2a:a4:93:c7:0e:c9:ca:7f:21:20:
40:49:30:21:64:e6:c0:60:e8:6c:d3:70:43:ba:a2:
bc:b9:d1:21:1e:6a:db:c8:63:cc:69:3a:a1:96:08:
d7:c7:27:59:7d:cd:1f:5d:34:bf:a1:85:40:07:ad:
24:66:c3:c9:54:8e:7d:62:15:38:08:c9:b2:fc:ee:
fc:f2:2e:a5:a9:1e:1e:a1:11:0b:a3:68:f9:63:18:
d5:a3:ec:e3:af:55:2d:c1:2d:31:5b:c6:fc:a6:50:
12:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:E2:3C:34:4F:33:54:EA:A3:DD:D5:02:12:04:8E:57:AB:66:AB:E5
X509v3 Authority Key Identifier:
keyid:A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/7OI8NE8zVOqj3dUCEgSOV6tmq-U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/pEwmf6dUzWUJ6fgHJzEjvulsUl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.87.174.0/24
Signature Algorithm: sha256WithRSAEncryption
63:57:98:76:01:73:0d:db:b3:31:19:5d:f5:d3:af:55:02:95:
94:59:33:0e:5d:73:a5:3e:f8:5a:48:50:e5:28:ba:15:88:1a:
ff:e0:eb:78:55:de:d7:22:33:6a:3a:71:6a:de:b1:ae:6b:2d:
1f:c2:02:2f:fd:8b:cd:99:4d:a1:32:98:3f:d2:f8:8c:a1:b5:
46:05:56:80:57:fe:04:55:9b:70:0d:c5:66:db:82:fd:03:b1:
b3:3e:9d:bf:1a:a9:51:1e:1e:cd:cb:66:ee:ab:5b:8d:38:df:
ec:8f:b8:b8:6c:d9:81:c2:3f:a3:70:94:cc:b3:1e:3d:5c:79:
e3:ac:a7:b0:9b:09:e4:84:21:ac:e3:23:28:ca:b5:02:a2:1b:
eb:42:51:10:6d:0b:48:d9:76:6d:df:50:74:7f:ca:2a:8f:50:
66:74:2f:34:cd:41:cb:40:e9:29:18:7e:59:26:1e:ae:11:7a:
17:ba:21:c1:db:ba:e9:98:6f:ba:b4:89:46:09:c4:1e:bf:65:
14:89:67:1f:f5:82:6d:7e:c0:e4:f1:5e:d3:df:e2:01:7a:f3:
f3:c4:7f:47:f9:41:02:f0:d7:73:ed:c3:63:85:14:17:a8:d8:
57:66:4d:a0:d5:83:4d:7e:f7:2b:26:92:c0:44:a8:cd:0e:af:
0d:2a:7a:2b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYOorqiRap8K0Q3Uw2xcGwmgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0NGMyNjdmYTc1NGNkNjUwOWU5ZjgwNzI3MzEyM2JlZTk2
YzUyNWQwHhcNMjIxMDA1MTUwNjAyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlY2UyM2MzNDRmMzM1NGVhYTNkZGQ1MDIxMjA0OGU1N2FiNjZhYmU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Q4wCl6mOwi92HMlTBJYXFbeD0WC
lS79xTVNQbq6k+hUibL7RQEPu39OleUTfrkgiavXj0gKY6GgvbubkTXC67WreuDj
7tRbLaTkBIBdFuXmAkNQKPd36Bty9WcIF51R+iXBrSv97xbFdy0oIA76OOAPfF7A
NcUs6vib3QzACtHTA45KjQmeweuh3ixavluYWxlA58iZPZP81yqkk8cOycp/ISBA
STAhZObAYOhs03BDuqK8udEhHmrbyGPMaTqhlgjXxydZfc0fXTS/oYVAB60kZsPJ
VI59YhU4CMmy/O788i6lqR4eoRELo2j5YxjVo+zjr1UtwS0xW8b8plAS0QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOziPDRPM1Tqo93VAhIEjlerZqvlMB8GA1UdIwQY
MBaAFKRMJn+nVM1lCen4BycxI77pbFJdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcEV3bWY2ZFV6V1VKNmZnSEp6RWp2dWxzVWwwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9hYjI2YTUtNjdiOS00NjY3LTg1NWIt
NDhhZjA4MDA0YjVmLzEvN09JOE5FOHpWT3FqM2RVQ0VnU09WNnRtcS1VLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC9hYjI2YTUtNjdiOS00NjY3LTg1NWItNDhhZjA4MDA0YjVm
LzEvcEV3bWY2ZFV6V1VKNmZnSEp6RWp2dWxzVWwwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALVeuMA0G
CSqGSIb3DQEBCwUAA4IBAQBjV5h2AXMN27MxGV31069VApWUWTMOXXOlPvhaSFDl
KLoViBr/4Ot4Vd7XIjNqOnFq3rGuay0fwgIv/YvNmU2hMpg/0viMobVGBVaAV/4E
VZtwDcVm24L9A7GzPp2/GqlRHh7Ny2buq1uNON/sj7i4bNmBwj+jcJTMsx49XHnj
rKewmwnkhCGs4yMoyrUCohvrQlEQbQtI2XZt31B0f8oqj1BmdC80zUHLQOkpGH5Z
Jh6uEXoXuiHB27rpmG+6tIlGCcQev2UUiWcf9YJtfsDk8V7T3+IBevPzxH9H+UEC
8Ndz7cNjhRQXqNhXZk2g1YNNfvcrJpLARKjNDq8NKnor
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:31 2023 by rpki-client on console-fra.rpki-client.org