Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/22e96f-2451-4e86-a037-8db62ea50995/1/UdgnZ9KkEj-QHtLKh-okfGfEpP4.roa
File: UdgnZ9KkEj-QHtLKh-okfGfEpP4.roa (raw, json)
Hash identifier: raZYcGjG0pDaolYZZoz+Z42eDSRiC6iaqW2AS1r7SVk=
Subject key identifier: 51:D8:27:67:D2:A4:12:3F:90:1E:D2:CA:87:EA:24:7C:67:C4:A4:FE
Certificate issuer: /CN=72978d1d4e7782816ac42da4788e33cbb2487859
Certificate serial: 01837B9950D768E556A425A7649EF82D1B44
Authority key identifier: 72:97:8D:1D:4E:77:82:81:6A:C4:2D:A4:78:8E:33:CB:B2:48:78:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cpeNHU53goFqxC2keI4zy7JIeFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/22e96f-2451-4e86-a037-8db62ea50995/1/UdgnZ9KkEj-QHtLKh-okfGfEpP4.roa
Signing time: Mon 26 Sep 2022 20:59:48 +0000
ROA not before: Mon 26 Sep 2022 20:59:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62240
IP address blocks: 45.140.7.0/24 maxlen: 24
45.130.186.0/24 maxlen: 24
45.130.185.0/24 maxlen: 24
45.130.184.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:7b:99:50:d7:68:e5:56:a4:25:a7:64:9e:f8:2d:1b:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72978d1d4e7782816ac42da4788e33cbb2487859
Validity
Not Before: Sep 26 20:59:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=51d82767d2a4123f901ed2ca87ea247c67c4a4fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:bd:9a:19:33:25:10:2a:15:94:cb:e5:72:b0:
ec:e3:30:f5:2d:6e:c7:78:7b:fd:9b:6d:c3:c3:e8:
20:27:3d:de:63:b4:1b:78:a7:7b:53:33:60:5b:a9:
13:d5:ae:c0:c0:c0:84:b3:19:be:70:fa:85:d1:15:
82:8d:ea:18:e4:c5:e7:2f:0a:8e:88:bb:b0:09:8f:
6b:33:ad:ce:40:bb:28:b0:91:ba:ba:ed:7e:00:54:
44:af:ed:63:89:c3:6c:8a:bf:3b:3a:bd:c1:7f:06:
54:d3:f2:f0:75:18:37:99:eb:9d:98:4d:f1:0d:b9:
3c:49:74:67:60:1d:49:b1:63:b1:61:fb:09:16:6e:
fa:75:85:cc:0f:97:4f:1b:08:97:06:49:d3:77:77:
af:5a:29:92:9c:57:cd:0b:b2:3d:7b:ff:9d:c0:b6:
b9:36:81:52:85:2e:ba:9d:5c:39:f0:3d:b6:c8:e1:
f6:f8:65:44:5b:40:e5:6e:45:79:70:47:ef:81:da:
ea:fc:d1:d4:0e:9c:08:f4:27:62:25:a6:c4:1a:49:
8f:57:d3:ae:8e:5f:92:e2:80:07:47:4b:82:11:f1:
fb:2b:14:11:7a:c6:5b:2f:fa:84:5f:f2:fe:71:be:
73:75:9f:88:9b:be:52:37:75:be:32:55:ac:a6:4c:
e8:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:D8:27:67:D2:A4:12:3F:90:1E:D2:CA:87:EA:24:7C:67:C4:A4:FE
X509v3 Authority Key Identifier:
keyid:72:97:8D:1D:4E:77:82:81:6A:C4:2D:A4:78:8E:33:CB:B2:48:78:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cpeNHU53goFqxC2keI4zy7JIeFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/22e96f-2451-4e86-a037-8db62ea50995/1/UdgnZ9KkEj-QHtLKh-okfGfEpP4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/22e96f-2451-4e86-a037-8db62ea50995/1/cpeNHU53goFqxC2keI4zy7JIeFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.130.184.0-45.130.186.255
45.140.7.0/24
Signature Algorithm: sha256WithRSAEncryption
c0:df:85:96:d1:be:d2:97:be:08:d0:d3:6b:38:85:03:1b:09:
b4:e1:b5:4b:7d:8f:64:b3:67:eb:cd:9a:aa:fe:22:0c:1d:d4:
08:96:41:86:c3:a7:c5:ce:09:b1:25:ed:8d:99:67:6c:72:21:
a3:a9:e4:5e:a6:3c:df:40:e1:05:43:02:25:91:e2:32:1b:9e:
c8:70:50:06:68:29:3c:92:c8:f9:54:e7:39:7b:c1:81:44:84:
33:98:f9:25:6e:70:91:62:e6:38:c2:f1:c4:2e:86:17:39:e5:
e6:f9:49:55:f4:4e:8a:57:bd:c4:b1:5a:0a:ec:91:f3:85:c5:
a1:d7:84:03:16:2f:3f:59:46:f9:e2:6c:27:b9:23:6d:5a:8d:
2a:dd:1d:d5:9b:38:a5:dc:88:83:bd:4f:ac:21:94:03:7c:ab:
43:17:5b:71:a7:f6:90:2f:e3:ff:fd:cf:b8:ca:3b:28:d1:36:
1f:89:9d:91:7c:65:af:45:92:19:83:04:43:b8:09:87:3c:97:
71:43:ed:af:5e:71:6e:a4:61:72:23:83:7d:e8:d8:53:7c:db:
dc:98:b8:f8:7d:f8:38:70:ea:a5:19:10:57:22:73:ab:81:8a:
3c:a6:6c:6e:bb:50:ee:1c:b4:b3:eb:c8:f1:aa:ca:ca:46:b6:
ce:6e:a5:c2
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAYN7mVDXaOVWpCWnZJ74LRtEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyOTc4ZDFkNGU3NzgyODE2YWM0MmRhNDc4OGUzM2NiYjI0
ODc4NTkwHhcNMjIwOTI2MjA1OTQ4WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MWQ4Mjc2N2QyYTQxMjNmOTAxZWQyY2E4N2VhMjQ3YzY3YzRhNGZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhr2aGTMlECoVlMvlcrDs4zD1LW7H
eHv9m23Dw+ggJz3eY7QbeKd7UzNgW6kT1a7AwMCEsxm+cPqF0RWCjeoY5MXnLwqO
iLuwCY9rM63OQLsosJG6uu1+AFREr+1jicNsir87Or3BfwZU0/LwdRg3meudmE3x
Dbk8SXRnYB1JsWOxYfsJFm76dYXMD5dPGwiXBknTd3evWimSnFfNC7I9e/+dwLa5
NoFShS66nVw58D22yOH2+GVEW0DlbkV5cEfvgdrq/NHUDpwI9CdiJabEGkmPV9Ou
jl+S4oAHR0uCEfH7KxQResZbL/qEX/L+cb5zdZ+Im75SN3W+MlWspkzoZQIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFFHYJ2fSpBI/kB7SyofqJHxnxKT+MB8GA1UdIwQY
MBaAFHKXjR1Od4KBasQtpHiOM8uySHhZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3BlTkhVNTNnb0ZxeEMya2VJNHp5N0pJZUZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC8yMmU5NmYtMjQ1MS00ZTg2LWEwMzct
OGRiNjJlYTUwOTk1LzEvVWRnblo5S2tFai1RSHRMS2gtb2tmR2ZFcFA0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC8yMmU5NmYtMjQ1MS00ZTg2LWEwMzctOGRiNjJlYTUwOTk1
LzEvY3BlTkhVNTNnb0ZxeEMya2VJNHp5N0pJZUZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBAMtgrgD
BAAtgroDBAAtjAcwDQYJKoZIhvcNAQELBQADggEBAMDfhZbRvtKXvgjQ02s4hQMb
CbThtUt9j2SzZ+vNmqr+Igwd1AiWQYbDp8XOCbEl7Y2ZZ2xyIaOp5F6mPN9A4QVD
AiWR4jIbnshwUAZoKTySyPlU5zl7wYFEhDOY+SVucJFi5jjC8cQuhhc55eb5SVX0
TopXvcSxWgrskfOFxaHXhAMWLz9ZRvnibCe5I21ajSrdHdWbOKXciIO9T6whlAN8
q0MXW3Gn9pAv4//9z7jKOyjRNh+JnZF8Za9FkhmDBEO4CYc8l3FD7a9ecW6kYXIj
g33o2FN829yYuPh9+Dhw6qUZEFcic6uBijymbG67UO4ctLPryPGqyspGts5upcI=
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:12:17 2025 by rpki-client