Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/c57839-5b81-4df4-88f0-149d8a8e1fcd/1/mWxfNspyinQokA0zJ5e0Uv0Ip-4.roa
File: mWxfNspyinQokA0zJ5e0Uv0Ip-4.roa (raw, json)
Hash identifier: l2bpP4+rz36V9Mxkjd0DzGUSeropYuWYGsmwoRmNCqw=
Subject key identifier: 99:6C:5F:36:CA:72:8A:74:28:90:0D:33:27:97:B4:52:FD:08:A7:EE
Certificate issuer: /CN=37a8b5a1895c5088205095c2f7a5efe91d539e45
Certificate serial: 018456EE8866D4D80512217A98840D32B8F1
Authority key identifier: 37:A8:B5:A1:89:5C:50:88:20:50:95:C2:F7:A5:EF:E9:1D:53:9E:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N6i1oYlcUIggUJXC96Xv6R1TnkU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/c57839-5b81-4df4-88f0-149d8a8e1fcd/1/mWxfNspyinQokA0zJ5e0Uv0Ip-4.roa
Signing time: Tue 08 Nov 2022 11:09:43 +0000
ROA not before: Tue 08 Nov 2022 11:09:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8100
IP address blocks: 45.128.232.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:56:ee:88:66:d4:d8:05:12:21:7a:98:84:0d:32:b8:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37a8b5a1895c5088205095c2f7a5efe91d539e45
Validity
Not Before: Nov 8 11:09:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=996c5f36ca728a7428900d332797b452fd08a7ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:89:29:b6:c5:98:83:0b:b8:04:93:7f:57:01:
d6:ab:e1:c2:56:27:0e:4c:8c:35:60:aa:72:d2:54:
db:bf:2b:b7:e4:79:8b:a0:4f:28:1e:8e:a6:27:5e:
5a:36:92:49:46:66:d2:9b:3c:91:9a:af:df:0e:d3:
26:2e:8f:95:44:17:33:48:84:f8:2b:77:ac:f5:9b:
74:09:2d:93:2b:48:40:71:1a:97:15:fe:2e:bf:91:
18:be:5f:2c:f1:81:34:82:0f:bc:24:cf:b1:ee:a9:
32:1b:ae:3a:7d:cf:5b:eb:81:ca:b7:d9:a4:e8:82:
d0:f1:8e:54:ce:22:fe:6f:10:80:fb:b7:16:b0:4e:
c3:2b:55:93:82:78:bc:6e:4c:6f:e8:91:18:e1:71:
27:cf:fb:aa:bd:26:10:6d:bb:0c:62:9a:a0:43:20:
fe:b5:4f:f4:f0:70:57:38:85:41:54:9c:0a:4e:f8:
e2:3d:7f:8a:bf:e2:0a:f6:32:9d:b5:2f:86:4d:0d:
5e:72:8c:e6:fa:a4:2b:d3:dc:30:1c:48:86:47:66:
90:93:85:59:1a:00:ba:17:97:24:18:30:09:2d:b2:
75:36:df:79:55:71:79:8e:52:06:3e:25:99:35:fe:
b4:e2:a8:ae:06:c3:71:33:48:3e:db:15:b5:75:a2:
84:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:6C:5F:36:CA:72:8A:74:28:90:0D:33:27:97:B4:52:FD:08:A7:EE
X509v3 Authority Key Identifier:
keyid:37:A8:B5:A1:89:5C:50:88:20:50:95:C2:F7:A5:EF:E9:1D:53:9E:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N6i1oYlcUIggUJXC96Xv6R1TnkU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/c57839-5b81-4df4-88f0-149d8a8e1fcd/1/mWxfNspyinQokA0zJ5e0Uv0Ip-4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/c57839-5b81-4df4-88f0-149d8a8e1fcd/1/N6i1oYlcUIggUJXC96Xv6R1TnkU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.232.0/23
Signature Algorithm: sha256WithRSAEncryption
66:09:29:84:26:86:5d:c5:72:8e:50:2a:8c:2a:d4:0d:1f:0f:
08:92:89:4c:29:f4:ee:db:7e:cf:c0:39:97:2a:29:1f:47:e1:
7b:c2:bf:54:da:74:78:c4:ba:54:00:95:c1:36:9b:76:67:ef:
3e:67:cf:3d:de:f7:2c:7a:f8:01:b3:f9:55:9b:85:e1:f4:94:
43:ed:c4:82:7c:23:5d:f7:c6:53:b8:2f:fe:7e:c2:1a:a4:9c:
34:47:5c:b0:ae:ef:7d:33:6a:11:8e:b3:cf:f5:2c:6e:0b:8e:
5f:18:fc:85:5c:72:e5:7d:80:79:52:d7:cc:cb:51:fe:5b:b3:
4f:d7:cd:89:1d:be:9e:34:4e:39:45:f8:af:a1:e2:ac:a5:b5:
07:c5:82:c4:01:13:c7:9d:9c:6e:31:6f:1b:b6:97:75:19:cf:
19:06:2a:ba:1f:76:e0:19:b2:fc:6b:d3:90:74:e6:3d:34:0c:
1f:85:6b:65:54:99:06:99:14:e2:1e:41:6f:1b:57:10:ed:07:
60:2a:3b:89:2f:c9:3d:2b:96:5b:ad:08:02:5f:f0:a6:10:a0:
90:1c:0f:9f:95:bb:18:5b:1e:56:f0:6c:3a:a2:92:9a:29:94:
07:e4:00:81:97:79:d3:ab:fc:7e:8d:ec:0a:ef:3b:e1:65:61:
c6:1e:c7:5a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYRW7ohm1NgFEiF6mIQNMrjxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3YThiNWExODk1YzUwODgyMDUwOTVjMmY3YTVlZmU5MWQ1
MzllNDUwHhcNMjIxMTA4MTEwOTQzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5OTZjNWYzNmNhNzI4YTc0Mjg5MDBkMzMyNzk3YjQ1MmZkMDhhN2VlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo4kptsWYgwu4BJN/VwHWq+HCVicO
TIw1YKpy0lTbvyu35HmLoE8oHo6mJ15aNpJJRmbSmzyRmq/fDtMmLo+VRBczSIT4
K3es9Zt0CS2TK0hAcRqXFf4uv5EYvl8s8YE0gg+8JM+x7qkyG646fc9b64HKt9mk
6ILQ8Y5UziL+bxCA+7cWsE7DK1WTgni8bkxv6JEY4XEnz/uqvSYQbbsMYpqgQyD+
tU/08HBXOIVBVJwKTvjiPX+Kv+IK9jKdtS+GTQ1ecozm+qQr09wwHEiGR2aQk4VZ
GgC6F5ckGDAJLbJ1Nt95VXF5jlIGPiWZNf604qiuBsNxM0g+2xW1daKE0wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJlsXzbKcop0KJANMyeXtFL9CKfuMB8GA1UdIwQY
MBaAFDeotaGJXFCIIFCVwvel7+kdU55FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTjZpMW9ZbGNVSWdnVUpYQzk2WHY2UjFUbmtVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9jNTc4MzktNWI4MS00ZGY0LTg4ZjAt
MTQ5ZDhhOGUxZmNkLzEvbVd4Zk5zcHlpblFva0Eweko1ZTBVdjBJcC00LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9jNTc4MzktNWI4MS00ZGY0LTg4ZjAtMTQ5ZDhhOGUxZmNk
LzEvTjZpMW9ZbGNVSWdnVUpYQzk2WHY2UjFUbmtVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLYDoMA0G
CSqGSIb3DQEBCwUAA4IBAQBmCSmEJoZdxXKOUCqMKtQNHw8IkolMKfTu237PwDmX
KikfR+F7wr9U2nR4xLpUAJXBNpt2Z+8+Z8893vcsevgBs/lVm4Xh9JRD7cSCfCNd
98ZTuC/+fsIapJw0R1ywru99M2oRjrPP9SxuC45fGPyFXHLlfYB5UtfMy1H+W7NP
182JHb6eNE45RfivoeKspbUHxYLEARPHnZxuMW8btpd1Gc8ZBiq6H3bgGbL8a9OQ
dOY9NAwfhWtlVJkGmRTiHkFvG1cQ7QdgKjuJL8k9K5ZbrQgCX/CmEKCQHA+flbsY
Wx5W8Gw6opKaKZQH5ACBl3nTq/x+jewK7zvhZWHGHsda
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:58 2024 by rpki-client on console-fra.rpki-client.org