Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/V4LY4P_mKuXLz92z2g49yol7T7Q.roa
File: V4LY4P_mKuXLz92z2g49yol7T7Q.roa (raw, json)
Hash identifier: er2hsMk6g9CjvTJBE9dEli9gQ/vo7yGPUb9jfE2khs8=
Subject key identifier: 57:82:D8:E0:FF:E6:2A:E5:CB:CF:DD:B3:DA:0E:3D:CA:89:7B:4F:B4
Certificate issuer: /CN=a44c267fa754cd6509e9f807273123bee96c525d
Certificate serial: 01839AA6D680FA7B9B8369C9BABDF1D16452
Authority key identifier: A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/V4LY4P_mKuXLz92z2g49yol7T7Q.roa
Signing time: Sun 02 Oct 2022 21:42:48 +0000
ROA not before: Sun 02 Oct 2022 21:42:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 5.181.176.0/24 maxlen: 24
45.137.97.0/24 maxlen: 24
45.137.96.0/24 maxlen: 24
85.209.220.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:9a:a6:d6:80:fa:7b:9b:83:69:c9:ba:bd:f1:d1:64:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a44c267fa754cd6509e9f807273123bee96c525d
Validity
Not Before: Oct 2 21:42:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5782d8e0ffe62ae5cbcfddb3da0e3dca897b4fb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:26:bd:c9:b8:90:96:fa:85:9a:a5:a3:df:47:
e8:6e:65:20:0f:4a:90:ea:d1:78:69:b2:3f:37:25:
51:20:40:7d:63:f5:35:21:9b:25:85:15:62:dd:66:
26:4f:48:1a:51:b5:40:e8:ae:77:b8:4e:1d:63:26:
7c:3f:da:90:d8:76:66:61:ab:c8:00:da:16:03:00:
56:e3:51:dc:90:97:a8:1e:b1:9f:f2:46:e4:e3:c5:
a4:60:f6:72:23:0a:fd:97:61:b7:3d:c9:64:5b:b1:
79:aa:fe:3f:e0:60:88:b7:e4:2b:e8:b2:ca:cb:a1:
e6:47:2a:37:c1:10:55:6e:f6:ab:59:18:80:e1:71:
18:c3:1f:72:d1:5e:93:40:61:80:c4:06:4a:09:56:
f7:25:bd:e2:75:47:4a:d0:33:19:c6:da:b7:2c:83:
53:32:52:9a:10:b1:01:43:1d:d5:60:c4:37:67:30:
f2:bc:2a:e1:45:67:f3:cc:20:cc:54:ba:b4:1a:d4:
b9:b6:4b:de:4a:aa:49:67:f5:d3:88:ba:95:1c:48:
34:85:43:92:95:0b:04:fc:fd:4a:0b:09:8c:48:c4:
7c:63:f7:6d:be:5e:a9:16:0d:92:82:f9:18:e8:65:
e4:ee:8a:43:cd:18:ef:7b:96:b2:50:9a:c5:54:43:
ec:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:82:D8:E0:FF:E6:2A:E5:CB:CF:DD:B3:DA:0E:3D:CA:89:7B:4F:B4
X509v3 Authority Key Identifier:
keyid:A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/V4LY4P_mKuXLz92z2g49yol7T7Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/pEwmf6dUzWUJ6fgHJzEjvulsUl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.176.0/24
45.137.96.0/23
85.209.220.0/24
Signature Algorithm: sha256WithRSAEncryption
75:9b:47:dd:fc:2b:4c:15:10:93:54:09:89:5c:c9:53:79:95:
63:43:d6:8c:ef:48:ef:bf:7e:10:84:13:5c:e2:f6:05:4b:ba:
99:d3:26:cd:45:0b:f1:70:1d:c3:07:be:a5:16:7e:53:60:71:
77:0d:9f:cd:42:30:cf:d5:04:b2:ad:dc:b6:15:3d:0e:1e:0c:
33:26:a6:98:b3:99:35:f3:f8:c6:5c:bd:97:a4:d1:58:d4:fe:
12:2b:16:38:ce:e9:8a:eb:f6:ab:60:7e:2f:52:93:c8:db:da:
3b:95:75:9e:7d:d3:a6:40:04:9a:99:99:d7:f3:c3:05:05:d8:
89:11:60:85:09:b1:96:a4:e2:f1:cf:66:ae:03:e8:05:5e:3b:
3b:dd:ba:af:88:a7:1a:2c:2e:e3:60:5a:ef:11:a7:c7:4f:d2:
5c:ee:cc:bb:17:0a:ff:cf:7e:2a:cd:81:43:8a:b7:38:71:2d:
0d:c8:1a:0d:14:88:da:12:d0:a0:87:53:85:64:fa:95:8e:f7:
25:80:1f:9f:0f:45:0f:c1:87:50:6e:6b:22:be:d0:60:0b:9a:
d3:bb:17:af:76:8a:d0:86:de:e3:ca:da:fd:b3:b3:4f:e0:ae:
df:9a:20:4f:94:07:38:b6:c2:57:82:a0:49:1a:88:1d:e7:0f:
0d:91:bf:b7
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYOaptaA+nubg2nJur3x0WRSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0NGMyNjdmYTc1NGNkNjUwOWU5ZjgwNzI3MzEyM2JlZTk2
YzUyNWQwHhcNMjIxMDAyMjE0MjQ4WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NzgyZDhlMGZmZTYyYWU1Y2JjZmRkYjNkYTBlM2RjYTg5N2I0ZmI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Ca9ybiQlvqFmqWj30fobmUgD0qQ
6tF4abI/NyVRIEB9Y/U1IZslhRVi3WYmT0gaUbVA6K53uE4dYyZ8P9qQ2HZmYavI
ANoWAwBW41HckJeoHrGf8kbk48WkYPZyIwr9l2G3PclkW7F5qv4/4GCIt+Qr6LLK
y6HmRyo3wRBVbvarWRiA4XEYwx9y0V6TQGGAxAZKCVb3Jb3idUdK0DMZxtq3LINT
MlKaELEBQx3VYMQ3ZzDyvCrhRWfzzCDMVLq0GtS5tkveSqpJZ/XTiLqVHEg0hUOS
lQsE/P1KCwmMSMR8Y/dtvl6pFg2SgvkY6GXk7opDzRjve5ayUJrFVEPskQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFFeC2OD/5irly8/ds9oOPcqJe0+0MB8GA1UdIwQY
MBaAFKRMJn+nVM1lCen4BycxI77pbFJdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcEV3bWY2ZFV6V1VKNmZnSEp6RWp2dWxzVWwwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9hYjI2YTUtNjdiOS00NjY3LTg1NWIt
NDhhZjA4MDA0YjVmLzEvVjRMWTRQX21LdVhMejkyejJnNDl5b2w3VDdRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC9hYjI2YTUtNjdiOS00NjY3LTg1NWItNDhhZjA4MDA0YjVm
LzEvcEV3bWY2ZFV6V1VKNmZnSEp6RWp2dWxzVWwwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQABbWwAwQB
LYlgAwQAVdHcMA0GCSqGSIb3DQEBCwUAA4IBAQB1m0fd/CtMFRCTVAmJXMlTeZVj
Q9aM70jvv34QhBNc4vYFS7qZ0ybNRQvxcB3DB76lFn5TYHF3DZ/NQjDP1QSyrdy2
FT0OHgwzJqaYs5k18/jGXL2XpNFY1P4SKxY4zumK6/arYH4vUpPI29o7lXWefdOm
QASamZnX88MFBdiJEWCFCbGWpOLxz2auA+gFXjs73bqviKcaLC7jYFrvEafHT9Jc
7sy7Fwr/z34qzYFDirc4cS0NyBoNFIjaEtCgh1OFZPqVjvclgB+fD0UPwYdQbmsi
vtBgC5rTuxevdorQht7jytr9s7NP4K7fmiBPlAc4tsJXgqBJGogd5w8Nkb+3
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:14 2023 by rpki-client on console-ams.rpki-client.org