Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/7d8cfd-8830-4fe3-bf75-bc64d3e62382/1/Z8LuTplJRkeYK3qPYWI8fbeH9T8.roa
File: Z8LuTplJRkeYK3qPYWI8fbeH9T8.roa (raw, json)
Hash identifier: ZEvlfXB1xuk8gQqEag/ImnE2A0dI7tKPAhmHcdHHdSk=
Subject key identifier: 67:C2:EE:4E:99:49:46:47:98:2B:7A:8F:61:62:3C:7D:B7:87:F5:3F
Certificate issuer: /CN=d32f876231dcb5dfd7af4523120565d98006474a
Certificate serial: 01856CC167A8F980C775E0BFF375C1FE3813
Authority key identifier: D3:2F:87:62:31:DC:B5:DF:D7:AF:45:23:12:05:65:D9:80:06:47:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0y-HYjHctd_Xr0UjEgVl2YAGR0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/7d8cfd-8830-4fe3-bf75-bc64d3e62382/1/Z8LuTplJRkeYK3qPYWI8fbeH9T8.roa
Signing time: Sun 01 Jan 2023 09:54:52 +0000
ROA not before: Sun 01 Jan 2023 09:54:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212335
IP address blocks: 45.143.7.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:c1:67:a8:f9:80:c7:75:e0:bf:f3:75:c1:fe:38:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d32f876231dcb5dfd7af4523120565d98006474a
Validity
Not Before: Jan 1 09:54:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=67c2ee4e99494647982b7a8f61623c7db787f53f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:ff:1e:03:80:a8:eb:f7:e0:af:e9:0b:09:cd:
4d:86:4f:1a:2d:f2:02:03:3c:c4:de:1a:be:3d:f3:
04:69:7e:8d:57:11:70:f4:19:ce:c4:98:41:c6:43:
8a:df:fc:a9:2a:aa:70:fa:e2:97:07:19:76:88:b1:
43:5a:2b:19:e7:a1:0c:6e:33:53:95:ca:51:6c:2d:
2e:7d:1d:00:c7:b6:05:4a:12:2e:6c:8c:2a:1b:3a:
92:7a:2b:25:d5:68:e7:2f:2e:9d:a0:27:7e:d6:b5:
82:e4:02:a4:e6:b0:59:9a:28:3b:be:2d:a7:41:49:
8b:ca:8a:54:3c:0c:4f:28:fa:d3:96:0c:91:1f:8b:
9a:3f:80:6d:ca:f2:e0:8e:8e:23:0b:ae:2a:63:71:
1d:e3:3a:2d:b9:be:1b:a5:30:00:87:df:f7:25:63:
ea:f3:ca:cd:cb:43:a6:e9:69:5f:a6:b2:f7:ab:4e:
1b:71:f4:63:49:5a:8a:a9:ca:49:b8:89:e4:cc:64:
bf:88:9a:81:ad:20:0b:05:1e:2c:5c:ec:9e:83:ae:
92:ef:d9:96:4d:55:6d:03:eb:18:25:3b:20:9d:1b:
30:cc:91:fa:c3:6b:43:3e:5b:9a:88:a3:96:49:77:
c0:18:ee:2f:29:ce:af:70:4f:41:dc:ef:e5:04:c6:
59:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:C2:EE:4E:99:49:46:47:98:2B:7A:8F:61:62:3C:7D:B7:87:F5:3F
X509v3 Authority Key Identifier:
keyid:D3:2F:87:62:31:DC:B5:DF:D7:AF:45:23:12:05:65:D9:80:06:47:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0y-HYjHctd_Xr0UjEgVl2YAGR0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/7d8cfd-8830-4fe3-bf75-bc64d3e62382/1/Z8LuTplJRkeYK3qPYWI8fbeH9T8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/7d8cfd-8830-4fe3-bf75-bc64d3e62382/1/0y-HYjHctd_Xr0UjEgVl2YAGR0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.143.7.0/24
Signature Algorithm: sha256WithRSAEncryption
12:ea:d5:6b:de:c1:3a:70:b8:c7:b1:99:46:75:69:77:42:a7:
ad:ae:64:3e:ec:ca:e9:f0:62:c8:45:1a:3b:2e:23:32:ce:40:
08:b1:ec:c8:23:47:ea:d5:9d:dc:f3:62:24:5d:14:05:a3:41:
31:3c:af:8b:98:85:88:04:77:7c:d9:b8:c1:c1:49:f7:3b:6e:
cd:ad:df:5f:f2:d5:14:aa:5f:cf:4b:ed:d8:7a:ed:7e:84:ef:
24:51:37:bc:a7:2c:f9:26:24:fc:20:2d:df:46:c2:53:e9:b9:
23:4c:aa:1d:d0:c5:66:64:44:78:9c:10:52:c5:b3:1a:0a:d8:
7e:8c:b3:f0:47:3c:fe:c4:ab:c5:0f:cf:4b:4f:56:b6:2f:07:
75:db:a0:7d:f7:b2:26:4f:8a:88:2e:ed:6a:ba:29:a1:14:59:
e0:a5:72:dc:24:3d:e1:21:c2:4f:62:fc:73:e7:17:a7:47:9f:
a0:a3:34:77:c8:a0:c0:8f:8c:a3:19:dc:73:69:94:87:f8:92:
5c:e4:66:90:ad:c4:be:91:ff:c2:cc:21:20:b6:9b:da:f6:b7:
ae:e0:f1:6b:2b:4e:2c:d6:af:d4:04:02:bb:6c:bb:7f:c6:67:
1f:25:11:08:58:e4:91:1a:7d:59:c7:bf:da:04:37:6a:74:33:
c1:a4:0c:55
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVswWeo+YDHdeC/83XB/jgTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzMmY4NzYyMzFkY2I1ZGZkN2FmNDUyMzEyMDU2NWQ5ODAw
NjQ3NGEwHhcNMjMwMTAxMDk1NDUyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2N2MyZWU0ZTk5NDk0NjQ3OTgyYjdhOGY2MTYyM2M3ZGI3ODdmNTNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5/8eA4Co6/fgr+kLCc1Nhk8aLfIC
AzzE3hq+PfMEaX6NVxFw9BnOxJhBxkOK3/ypKqpw+uKXBxl2iLFDWisZ56EMbjNT
lcpRbC0ufR0Ax7YFShIubIwqGzqSeisl1WjnLy6doCd+1rWC5AKk5rBZmig7vi2n
QUmLyopUPAxPKPrTlgyRH4uaP4BtyvLgjo4jC64qY3Ed4zotub4bpTAAh9/3JWPq
88rNy0Om6WlfprL3q04bcfRjSVqKqcpJuInkzGS/iJqBrSALBR4sXOyeg66S79mW
TVVtA+sYJTsgnRswzJH6w2tDPluaiKOWSXfAGO4vKc6vcE9B3O/lBMZZJQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGfC7k6ZSUZHmCt6j2FiPH23h/U/MB8GA1UdIwQY
MBaAFNMvh2Ix3LXf169FIxIFZdmABkdKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMHktSFlqSGN0ZF9YcjBVakVnVmwyWUFHUjBvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS83ZDhjZmQtODgzMC00ZmUzLWJmNzUt
YmM2NGQzZTYyMzgyLzEvWjhMdVRwbEpSa2VZSzNxUFlXSThmYmVIOVQ4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS83ZDhjZmQtODgzMC00ZmUzLWJmNzUtYmM2NGQzZTYyMzgy
LzEvMHktSFlqSGN0ZF9YcjBVakVnVmwyWUFHUjBvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALY8HMA0G
CSqGSIb3DQEBCwUAA4IBAQAS6tVr3sE6cLjHsZlGdWl3QqetrmQ+7Mrp8GLIRRo7
LiMyzkAIsezII0fq1Z3c82IkXRQFo0ExPK+LmIWIBHd82bjBwUn3O27Nrd9f8tUU
ql/PS+3Yeu1+hO8kUTe8pyz5JiT8IC3fRsJT6bkjTKod0MVmZER4nBBSxbMaCth+
jLPwRzz+xKvFD89LT1a2Lwd126B997ImT4qILu1quimhFFngpXLcJD3hIcJPYvxz
5xenR5+gozR3yKDAj4yjGdxzaZSH+JJc5GaQrcS+kf/CzCEgtpva9reu4PFrK04s
1q/UBAK7bLt/xmcfJREIWOSRGn1Zx7/aBDdqdDPBpAxV
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:18 2023 by rpki-client on console-fra.rpki-client.org