Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/231914-032a-41ef-8975-9533a8491425/1/C0XMVJJGRTk7SAASkHfgBq8-SSI.roa
File: C0XMVJJGRTk7SAASkHfgBq8-SSI.roa (raw, json)
Hash identifier: /yu2aBLAXLq4HVp8Wr5AM2yOwoeZfo8lS1ksVOcF21Q=
Subject key identifier: 0B:45:CC:54:92:46:45:39:3B:48:00:12:90:77:E0:06:AF:3E:49:22
Certificate issuer: /CN=225e7ba910679ece289a4678aadff0f9d2c1d1a1
Certificate serial: 01856E2F8C10E20261CB80C59E27CCC3B537
Authority key identifier: 22:5E:7B:A9:10:67:9E:CE:28:9A:46:78:AA:DF:F0:F9:D2:C1:D1:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Il57qRBnns4omkZ4qt_w-dLB0aE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/231914-032a-41ef-8975-9533a8491425/1/C0XMVJJGRTk7SAASkHfgBq8-SSI.roa
Signing time: Sun 01 Jan 2023 16:34:47 +0000
ROA not before: Sun 01 Jan 2023 16:34:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208126
IP address blocks: 45.128.68.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:2f:8c:10:e2:02:61:cb:80:c5:9e:27:cc:c3:b5:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=225e7ba910679ece289a4678aadff0f9d2c1d1a1
Validity
Not Before: Jan 1 16:34:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0b45cc54924645393b4800129077e006af3e4922
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:46:be:8f:1f:53:11:2e:07:17:80:80:9c:0e:
47:cf:5e:d1:69:33:ed:df:61:9b:e4:cc:44:cb:e7:
43:60:5e:f6:21:d7:87:70:eb:50:34:b8:77:ba:f9:
da:ae:a0:db:cc:79:78:65:fe:61:a2:46:8e:e7:11:
7d:08:e4:ae:6e:d3:ed:67:22:20:db:03:10:52:c8:
ea:30:c1:2e:04:34:da:3e:68:90:73:c1:f7:3b:7c:
7d:dd:91:14:d4:5f:af:cf:14:2f:b5:fc:ec:b1:34:
5b:11:98:43:00:8a:cb:eb:c2:2c:27:ff:e1:e2:97:
fb:b4:1a:b7:76:f8:33:71:7c:19:09:88:62:c8:e7:
72:ef:e9:3d:68:32:e1:e6:3c:b0:5f:68:c8:7a:d8:
50:94:01:72:e7:3e:a8:3e:f0:c1:51:75:87:97:c3:
5e:bf:3d:ae:94:ef:eb:36:0c:5c:44:81:93:0a:f9:
5e:a0:d4:7f:56:3d:95:52:9d:2b:d6:31:6f:02:64:
a9:ab:bb:6f:42:25:c1:7e:c8:44:e5:ad:fa:1e:b9:
2b:e8:91:48:5b:d3:20:2e:c2:d2:a2:18:ad:88:79:
9f:0d:d6:b4:13:8a:8b:90:8c:40:88:ab:b0:ab:0b:
f3:63:75:8e:bf:21:ba:7d:0c:8f:0e:82:ca:83:c1:
89:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:45:CC:54:92:46:45:39:3B:48:00:12:90:77:E0:06:AF:3E:49:22
X509v3 Authority Key Identifier:
keyid:22:5E:7B:A9:10:67:9E:CE:28:9A:46:78:AA:DF:F0:F9:D2:C1:D1:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Il57qRBnns4omkZ4qt_w-dLB0aE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/231914-032a-41ef-8975-9533a8491425/1/C0XMVJJGRTk7SAASkHfgBq8-SSI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/231914-032a-41ef-8975-9533a8491425/1/Il57qRBnns4omkZ4qt_w-dLB0aE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.68.0/24
Signature Algorithm: sha256WithRSAEncryption
45:b6:c3:18:70:09:6d:56:cd:c6:33:18:3b:d7:4e:87:67:ae:
af:1f:31:0f:bc:18:ab:84:dc:bb:68:54:2d:46:5c:17:29:76:
d0:ec:6e:59:fc:aa:e1:00:49:21:71:5f:a0:0c:a9:2d:46:aa:
91:f3:9c:08:4e:d2:a6:b9:c7:a7:25:3b:d0:8a:4e:dd:cc:6b:
83:61:90:b5:26:b6:5d:a5:e4:27:60:fc:15:e9:9e:37:d0:ff:
5f:04:15:2e:30:ad:73:cd:2a:b9:66:52:d0:d9:7a:d0:93:fb:
91:7e:1b:ac:7c:a5:2a:70:a8:b2:f9:d3:1a:43:bc:d1:59:bc:
0f:3d:c3:29:e4:49:b3:ef:7b:0d:38:2c:2d:8d:cd:61:b6:e8:
a3:5e:80:36:d4:0d:fa:68:6c:b9:fc:fb:e7:9f:3b:c9:c2:f7:
87:1f:66:6b:0a:ef:b2:ff:98:04:4d:fb:de:53:5f:7a:53:60:
db:b0:f9:63:e3:f3:1b:60:b8:9b:bc:69:48:04:b7:a3:97:20:
f7:22:47:83:8c:bc:c1:2c:59:c1:38:55:5f:10:d6:83:a9:a4:
43:96:09:88:2a:38:d1:7f:9d:78:72:15:08:da:65:3d:18:87:
0c:09:be:87:1d:a9:c2:81:fc:ed:03:58:6d:a7:3d:64:a5:3c:
4c:e7:05:e3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVuL4wQ4gJhy4DFnifMw7U3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyNWU3YmE5MTA2NzllY2UyODlhNDY3OGFhZGZmMGY5ZDJj
MWQxYTEwHhcNMjMwMTAxMTYzNDQ3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYjQ1Y2M1NDkyNDY0NTM5M2I0ODAwMTI5MDc3ZTAwNmFmM2U0OTIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjka+jx9TES4HF4CAnA5Hz17RaTPt
32Gb5MxEy+dDYF72IdeHcOtQNLh3uvnarqDbzHl4Zf5hokaO5xF9COSubtPtZyIg
2wMQUsjqMMEuBDTaPmiQc8H3O3x93ZEU1F+vzxQvtfzssTRbEZhDAIrL68IsJ//h
4pf7tBq3dvgzcXwZCYhiyOdy7+k9aDLh5jywX2jIethQlAFy5z6oPvDBUXWHl8Ne
vz2ulO/rNgxcRIGTCvleoNR/Vj2VUp0r1jFvAmSpq7tvQiXBfshE5a36Hrkr6JFI
W9MgLsLSohitiHmfDda0E4qLkIxAiKuwqwvzY3WOvyG6fQyPDoLKg8GJKwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAtFzFSSRkU5O0gAEpB34AavPkkiMB8GA1UdIwQY
MBaAFCJee6kQZ57OKJpGeKrf8PnSwdGhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSWw1N3FSQm5uczRvbWtaNHF0X3ctZExCMGFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS8yMzE5MTQtMDMyYS00MWVmLTg5NzUt
OTUzM2E4NDkxNDI1LzEvQzBYTVZKSkdSVGs3U0FBU2tIZmdCcTgtU1NJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NS8yMzE5MTQtMDMyYS00MWVmLTg5NzUtOTUzM2E4NDkxNDI1
LzEvSWw1N3FSQm5uczRvbWtaNHF0X3ctZExCMGFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYBEMA0G
CSqGSIb3DQEBCwUAA4IBAQBFtsMYcAltVs3GMxg7106HZ66vHzEPvBirhNy7aFQt
RlwXKXbQ7G5Z/KrhAEkhcV+gDKktRqqR85wITtKmucenJTvQik7dzGuDYZC1JrZd
peQnYPwV6Z430P9fBBUuMK1zzSq5ZlLQ2XrQk/uRfhusfKUqcKiy+dMaQ7zRWbwP
PcMp5Emz73sNOCwtjc1htuijXoA21A36aGy5/PvnnzvJwveHH2ZrCu+y/5gETfve
U196U2DbsPlj4/MbYLibvGlIBLejlyD3IkeDjLzBLFnBOFVfENaDqaRDlgmIKjjR
f514chUI2mU9GIcMCb6HHanCgfztA1htpz1kpTxM5wXj
-----END CERTIFICATE-----
Generated at Fri Dec 29 10:23:46 2023 by rpki-client on console-ams.rpki-client.org