Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/d9b397-e105-4ac9-8537-0085a365a25f/1/SLstViQU4POXqio8nP0EMOYyFyg.roa
File: SLstViQU4POXqio8nP0EMOYyFyg.roa (raw, json)
Hash identifier: /06p3HJG+o7Ntt4LWICAUIQAe5G6ujaKsiRL5NqCOCw=
Subject key identifier: 48:BB:2D:56:24:14:E0:F3:97:AA:2A:3C:9C:FD:04:30:E6:32:17:28
Certificate issuer: /CN=92192e8d785581f72b18644224bd8c3fa8a2d11b
Certificate serial: 01874FF8BF78EE95254B9EC7820BEC31AE83
Authority key identifier: 92:19:2E:8D:78:55:81:F7:2B:18:64:42:24:BD:8C:3F:A8:A2:D1:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/khkujXhVgfcrGGRCJL2MP6ii0Rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/d9b397-e105-4ac9-8537-0085a365a25f/1/SLstViQU4POXqio8nP0EMOYyFyg.roa
Signing time: Wed 05 Apr 2023 05:51:54 +0000
ROA not before: Wed 05 Apr 2023 05:51:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59588
IP address blocks: 45.153.119.0/24 maxlen: 24
45.153.116.0/24 maxlen: 24
45.153.116.0/23 maxlen: 23
45.153.117.0/24 maxlen: 24
45.153.118.0/23 maxlen: 23
45.153.118.0/24 maxlen: 24
151.236.160.0/24 maxlen: 24
151.236.161.0/24 maxlen: 24
151.236.162.0/23 maxlen: 23
151.236.162.0/24 maxlen: 24
151.236.163.0/24 maxlen: 24
151.236.160.0/23 maxlen: 23
151.236.164.0/23 maxlen: 23
151.236.164.0/24 maxlen: 24
151.236.165.0/24 maxlen: 24
151.236.166.0/24 maxlen: 24
151.236.167.0/24 maxlen: 24
151.236.168.0/23 maxlen: 23
151.236.168.0/24 maxlen: 24
151.236.169.0/24 maxlen: 24
151.236.170.0/24 maxlen: 24
151.236.170.0/23 maxlen: 23
151.236.166.0/23 maxlen: 23
151.236.172.0/24 maxlen: 24
151.236.171.0/24 maxlen: 24
151.236.172.0/23 maxlen: 23
151.236.173.0/24 maxlen: 24
151.236.176.0/23 maxlen: 23
151.236.175.0/24 maxlen: 24
151.236.176.0/24 maxlen: 24
151.236.177.0/24 maxlen: 24
151.236.174.0/23 maxlen: 23
151.236.174.0/24 maxlen: 24
151.236.178.0/23 maxlen: 23
151.236.178.0/24 maxlen: 24
151.236.179.0/24 maxlen: 24
151.236.186.0/24 maxlen: 24
151.236.182.0/23 maxlen: 23
151.236.182.0/24 maxlen: 24
151.236.180.0/24 maxlen: 24
151.236.180.0/23 maxlen: 23
151.236.181.0/24 maxlen: 24
151.236.189.0/24 maxlen: 24
151.236.190.0/24 maxlen: 24
151.236.190.0/23 maxlen: 23
151.236.191.0/24 maxlen: 24
151.236.188.0/23 maxlen: 23
151.236.188.0/24 maxlen: 24
2a10:2200:b::/48 maxlen: 48
2a10:2200:2::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:4f:f8:bf:78:ee:95:25:4b:9e:c7:82:0b:ec:31:ae:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92192e8d785581f72b18644224bd8c3fa8a2d11b
Validity
Not Before: Apr 5 05:51:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=48bb2d562414e0f397aa2a3c9cfd0430e6321728
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:c6:3d:8e:43:5b:3d:b2:08:db:0c:bd:1f:24:
e0:91:64:11:e4:4c:9f:1d:f3:31:58:ed:75:a3:4b:
77:6c:4b:5e:1f:6e:bd:46:e4:25:a7:d3:79:fd:60:
3d:1c:0a:9b:bf:df:41:74:4d:a5:ca:36:92:ba:3b:
15:86:78:57:4c:49:55:54:a3:76:91:c4:8d:63:32:
79:48:cc:e0:24:83:7f:ab:10:6e:72:84:d1:b5:64:
61:01:75:18:cf:85:ce:e8:11:35:60:9d:17:7e:84:
25:d8:98:68:84:39:e6:ca:6f:ec:ac:93:7d:8b:90:
44:26:d5:4a:24:ab:2d:fc:16:80:8a:a2:be:ee:d3:
34:ac:dc:e1:67:5e:b6:23:4c:d9:27:ef:45:26:52:
24:d7:25:1c:82:d0:41:a3:36:8a:d9:be:fe:d6:39:
fe:81:43:c7:75:7f:35:97:3f:52:7f:bb:0d:77:97:
ee:4f:c9:bd:7e:83:f1:09:25:ee:71:78:e4:91:51:
79:d1:b1:9e:32:bf:d5:c8:a4:0f:5a:38:87:0e:b7:
19:d4:f4:01:53:b4:f9:a1:28:70:80:d0:91:15:e5:
d0:a5:5b:25:37:7a:44:86:62:08:c1:b0:8c:cf:b9:
4c:9f:30:07:7b:ac:e0:ee:2d:ec:a8:7f:f6:73:7b:
b4:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:BB:2D:56:24:14:E0:F3:97:AA:2A:3C:9C:FD:04:30:E6:32:17:28
X509v3 Authority Key Identifier:
keyid:92:19:2E:8D:78:55:81:F7:2B:18:64:42:24:BD:8C:3F:A8:A2:D1:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/khkujXhVgfcrGGRCJL2MP6ii0Rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d9b397-e105-4ac9-8537-0085a365a25f/1/SLstViQU4POXqio8nP0EMOYyFyg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d9b397-e105-4ac9-8537-0085a365a25f/1/khkujXhVgfcrGGRCJL2MP6ii0Rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.153.116.0/22
151.236.160.0-151.236.183.255
151.236.186.0/24
151.236.188.0/22
IPv6:
2a10:2200:2::/48
2a10:2200:b::/48
Signature Algorithm: sha256WithRSAEncryption
78:48:c6:96:30:6f:2d:f5:ab:b0:e2:2e:0f:24:86:dd:45:fa:
4a:82:bd:b6:d7:0b:67:46:8f:d6:9e:38:6c:8e:2c:99:a3:1a:
23:7a:92:28:49:7a:ea:ef:65:df:e7:75:a4:df:0d:b8:6b:01:
9a:d1:b3:3b:62:65:3d:67:71:94:5b:f0:3b:d2:48:12:10:e3:
6a:bc:76:7b:92:b9:ef:67:e3:ff:a7:b6:ef:45:cd:43:46:83:
7f:b4:53:37:ae:78:8a:1d:d8:06:95:16:e5:d7:5d:c0:e7:75:
c2:11:99:c4:d6:da:74:f8:7c:ec:61:db:13:d7:55:a4:90:95:
86:0e:79:a5:14:94:50:07:bb:6e:1a:71:fb:0f:da:f7:b0:5c:
b5:82:07:2a:d1:67:02:54:fa:7d:e4:d9:22:fd:5a:24:12:f2:
25:5b:d3:05:9c:fd:76:32:6b:6a:a3:1d:a2:9c:0d:4a:27:7c:
d5:46:2b:56:fc:c1:44:ea:c4:6d:ad:1e:64:1c:47:a1:b1:a1:
84:60:2c:c8:87:f9:30:36:be:9f:9e:08:29:34:fc:58:ca:fe:
29:1f:28:fd:3e:59:d9:fb:66:00:3d:c1:c9:6d:d2:be:0d:02:
b6:fd:32:57:92:61:12:4b:f0:fd:46:99:7d:0f:8f:6e:6e:c5:
ec:c2:8f:83
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgISAYdP+L947pUlS57HggvsMa6DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyMTkyZThkNzg1NTgxZjcyYjE4NjQ0MjI0YmQ4YzNmYThh
MmQxMWIwHhcNMjMwNDA1MDU1MTU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0OGJiMmQ1NjI0MTRlMGYzOTdhYTJhM2M5Y2ZkMDQzMGU2MzIxNzI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgMY9jkNbPbII2wy9HyTgkWQR5Eyf
HfMxWO11o0t3bEteH269RuQlp9N5/WA9HAqbv99BdE2lyjaSujsVhnhXTElVVKN2
kcSNYzJ5SMzgJIN/qxBucoTRtWRhAXUYz4XO6BE1YJ0XfoQl2JhohDnmym/srJN9
i5BEJtVKJKst/BaAiqK+7tM0rNzhZ162I0zZJ+9FJlIk1yUcgtBBozaK2b7+1jn+
gUPHdX81lz9Sf7sNd5fuT8m9foPxCSXucXjkkVF50bGeMr/VyKQPWjiHDrcZ1PQB
U7T5oShwgNCRFeXQpVslN3pEhmIIwbCMz7lMnzAHe6zg7i3sqH/2c3u08QIDAQAB
o4ICPTCCAjkwHQYDVR0OBBYEFEi7LVYkFODzl6oqPJz9BDDmMhcoMB8GA1UdIwQY
MBaAFJIZLo14VYH3KxhkQiS9jD+ootEbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva2hrdWpYaFZnZmNyR0dSQ0pMMk1QNmlpMFJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi9kOWIzOTctZTEwNS00YWM5LTg1Mzct
MDA4NWEzNjVhMjVmLzEvU0xzdFZpUVU0UE9YcWlvOG5QMEVNT1l5RnlnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi9kOWIzOTctZTEwNS00YWM5LTg1MzctMDA4NWEzNjVhMjVm
LzEva2hrdWpYaFZnZmNyR0dSQ0pMMk1QNmlpMFJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFMGCCsGAQUFBwEHAQH/BEQwQjAmBAIAATAgAwQCLZl0MAwD
BAWX7KADBAOX7LADBACX7LoDBAKX7LwwGAQCAAIwEgMHACoQIgAAAgMHACoQIgAA
CzANBgkqhkiG9w0BAQsFAAOCAQEAeEjGljBvLfWrsOIuDySG3UX6SoK9ttcLZ0aP
1p44bI4smaMaI3qSKEl66u9l3+d1pN8NuGsBmtGzO2JlPWdxlFvwO9JIEhDjarx2
e5K572fj/6e270XNQ0aDf7RTN654ih3YBpUW5dddwOd1whGZxNbadPh87GHbE9dV
pJCVhg55pRSUUAe7bhpx+w/a97BctYIHKtFnAlT6feTZIv1aJBLyJVvTBZz9djJr
aqMdopwNSid81UYrVvzBROrEba0eZBxHobGhhGAsyIf5MDa+n54IKTT8WMr+KR8o
/T5Z2ftmAD3ByW3Svg0Ctv0yV5JhEkvw/UaZfQ+Pbm7F7MKPgw==
-----END CERTIFICATE-----
Generated at Thu Feb 20 03:28:46 2025 by rpki-client