Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/w1qhfjoHxeTcv4C99czKCiyCHFU.roa
File: w1qhfjoHxeTcv4C99czKCiyCHFU.roa (raw, json)
Hash identifier: /L/4TCurfNr/nZdiWE0FvEghM9gnwzbP8OrYOdurBRg=
Subject key identifier: C3:5A:A1:7E:3A:07:C5:E4:DC:BF:80:BD:F5:CC:CA:0A:2C:82:1C:55
Certificate issuer: /CN=a44c267fa754cd6509e9f807273123bee96c525d
Certificate serial: 01856F8C50AA18CD6DF66E01902409A43FB1
Authority key identifier: A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/w1qhfjoHxeTcv4C99czKCiyCHFU.roa
Signing time: Sun 01 Jan 2023 22:55:44 +0000
ROA not before: Sun 01 Jan 2023 22:55:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209242
IP address blocks: 45.158.56.0/24 maxlen: 24
45.87.175.0/24 maxlen: 24
45.137.99.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:8c:50:aa:18:cd:6d:f6:6e:01:90:24:09:a4:3f:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a44c267fa754cd6509e9f807273123bee96c525d
Validity
Not Before: Jan 1 22:55:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c35aa17e3a07c5e4dcbf80bdf5ccca0a2c821c55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:87:72:4e:a9:47:64:37:16:ee:48:00:39:d7:
98:44:33:ba:74:ce:e6:90:28:da:0a:82:5a:bc:4f:
78:89:ab:fa:3f:1a:24:ee:b7:5b:7d:67:56:cf:46:
d6:49:45:bc:42:f5:6c:90:f1:91:d4:38:35:90:a1:
42:59:5a:78:47:d2:ca:00:2f:04:42:68:17:58:11:
1a:d6:71:55:88:27:d6:a5:e5:a0:81:a3:f1:cc:31:
d8:4b:a5:dc:df:5a:db:35:68:2f:e4:42:f0:2d:72:
a7:82:e1:9c:da:c3:a3:5c:7c:8b:0b:1e:98:1c:aa:
6f:dd:4b:b6:0d:2e:ce:a4:fe:6f:b2:aa:12:f6:08:
5e:5c:64:52:6e:e3:bb:51:7f:b5:5e:dd:ab:d2:19:
67:40:a5:da:32:ce:84:3e:a1:fd:b2:e8:e7:3d:c0:
b4:81:d7:94:3d:0c:dc:cc:4a:0b:b8:cd:a8:b5:fd:
11:a8:97:66:c0:c5:da:da:25:bf:43:38:fa:82:2f:
cc:9a:81:f9:80:fa:51:ca:28:04:7d:b8:5c:57:1f:
66:a8:73:c4:d6:25:cd:05:61:21:03:f3:fe:2d:65:
c8:5c:ce:d1:b2:a2:0e:bb:f8:23:fc:4c:35:b1:94:
a4:82:22:ce:38:4e:cd:6a:3b:e1:b7:3e:47:0f:b8:
f7:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:5A:A1:7E:3A:07:C5:E4:DC:BF:80:BD:F5:CC:CA:0A:2C:82:1C:55
X509v3 Authority Key Identifier:
keyid:A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/w1qhfjoHxeTcv4C99czKCiyCHFU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/pEwmf6dUzWUJ6fgHJzEjvulsUl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.87.175.0/24
45.137.99.0/24
45.158.56.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:12:21:f6:95:5c:47:9a:59:25:93:ff:3c:db:50:3e:1a:f8:
00:e8:9e:af:fc:3d:3a:05:90:c6:f1:56:77:a8:52:4e:b5:58:
b8:a5:57:44:40:5c:f4:57:73:96:4c:57:75:94:a3:03:f1:43:
5e:95:61:d3:e0:bf:34:8f:ce:99:9b:1a:19:dd:b7:11:5e:92:
39:b3:97:aa:f8:49:09:68:0c:5f:98:74:3d:e8:7c:d8:69:d6:
b7:1e:59:c6:a2:a9:01:d7:e0:60:31:fc:ed:cf:51:1d:a7:33:
f3:92:8c:86:43:09:38:2e:2e:90:6e:48:51:54:af:1b:56:1f:
9f:b5:73:16:7c:fb:33:ee:42:70:61:60:8d:70:00:91:8a:67:
0a:82:25:c0:43:42:49:a8:34:b6:88:91:85:6a:1c:10:be:28:
7a:a4:c9:a8:01:21:a9:25:cc:b0:4b:5c:c3:db:eb:cb:8a:fd:
73:ff:66:67:58:7c:c8:ff:0d:64:c2:0c:49:b7:59:c2:6c:49:
b2:d7:8a:fc:34:eb:d3:88:5e:e2:a9:18:fe:db:9d:44:43:35:
44:cd:4f:87:20:18:b8:44:da:f3:95:7e:55:fe:29:f0:2c:47:
54:2d:aa:a9:aa:0d:93:18:28:27:07:c4:1a:45:0f:a3:19:55:
71:0a:ca:18
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYVvjFCqGM1t9m4BkCQJpD+xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0NGMyNjdmYTc1NGNkNjUwOWU5ZjgwNzI3MzEyM2JlZTk2
YzUyNWQwHhcNMjMwMTAxMjI1NTQ0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMzVhYTE3ZTNhMDdjNWU0ZGNiZjgwYmRmNWNjY2EwYTJjODIxYzU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkodyTqlHZDcW7kgAOdeYRDO6dM7m
kCjaCoJavE94iav6Pxok7rdbfWdWz0bWSUW8QvVskPGR1Dg1kKFCWVp4R9LKAC8E
QmgXWBEa1nFViCfWpeWggaPxzDHYS6Xc31rbNWgv5ELwLXKnguGc2sOjXHyLCx6Y
HKpv3Uu2DS7OpP5vsqoS9gheXGRSbuO7UX+1Xt2r0hlnQKXaMs6EPqH9sujnPcC0
gdeUPQzczEoLuM2otf0RqJdmwMXa2iW/Qzj6gi/MmoH5gPpRyigEfbhcVx9mqHPE
1iXNBWEhA/P+LWXIXM7RsqIOu/gj/Ew1sZSkgiLOOE7Najvhtz5HD7j3MQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFMNaoX46B8Xk3L+AvfXMygosghxVMB8GA1UdIwQY
MBaAFKRMJn+nVM1lCen4BycxI77pbFJdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcEV3bWY2ZFV6V1VKNmZnSEp6RWp2dWxzVWwwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9hYjI2YTUtNjdiOS00NjY3LTg1NWIt
NDhhZjA4MDA0YjVmLzEvdzFxaGZqb0h4ZVRjdjRDOTljektDaXlDSEZVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC9hYjI2YTUtNjdiOS00NjY3LTg1NWItNDhhZjA4MDA0YjVm
LzEvcEV3bWY2ZFV6V1VKNmZnSEp6RWp2dWxzVWwwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQALVevAwQA
LYljAwQALZ44MA0GCSqGSIb3DQEBCwUAA4IBAQCzEiH2lVxHmlklk/8821A+GvgA
6J6v/D06BZDG8VZ3qFJOtVi4pVdEQFz0V3OWTFd1lKMD8UNelWHT4L80j86ZmxoZ
3bcRXpI5s5eq+EkJaAxfmHQ96HzYada3HlnGoqkB1+BgMfztz1EdpzPzkoyGQwk4
Li6QbkhRVK8bVh+ftXMWfPsz7kJwYWCNcACRimcKgiXAQ0JJqDS2iJGFahwQvih6
pMmoASGpJcywS1zD2+vLiv1z/2ZnWHzI/w1kwgxJt1nCbEmy14r8NOvTiF7iqRj+
251EQzVEzU+HIBi4RNrzlX5V/inwLEdULaqpqg2TGCgnB8QaRQ+jGVVxCsoY
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:15 2023 by rpki-client on console-ams.rpki-client.org