Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/83233c-898e-491d-958c-4fea624413e4/1/4xuhI6tQaq4n8KzsQktWvKZDyGw.roa
File: 4xuhI6tQaq4n8KzsQktWvKZDyGw.roa (raw, json)
Hash identifier: vPJNmwI0mqNIeixrl4pKeutBgbY8gTg2CP+HpZZCorU=
Subject key identifier: E3:1B:A1:23:AB:50:6A:AE:27:F0:AC:EC:42:4B:56:BC:A6:43:C8:6C
Certificate issuer: /CN=00138af66eb4d557fa4b3939c6cbd961a9123560
Certificate serial: 01856F79A3081E83CD3467C77BE89F4D0A87
Authority key identifier: 00:13:8A:F6:6E:B4:D5:57:FA:4B:39:39:C6:CB:D9:61:A9:12:35:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ABOK9m601Vf6Szk5xsvZYakSNWA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/83233c-898e-491d-958c-4fea624413e4/1/4xuhI6tQaq4n8KzsQktWvKZDyGw.roa
Signing time: Sun 01 Jan 2023 22:35:20 +0000
ROA not before: Sun 01 Jan 2023 22:35:20 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 400031
IP address blocks: 45.155.157.0/24 maxlen: 24
45.155.156.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:79:a3:08:1e:83:cd:34:67:c7:7b:e8:9f:4d:0a:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00138af66eb4d557fa4b3939c6cbd961a9123560
Validity
Not Before: Jan 1 22:35:20 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e31ba123ab506aae27f0acec424b56bca643c86c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:9e:26:bb:27:03:3c:5f:67:3f:eb:33:57:de:
c8:17:01:ad:bc:4c:18:05:87:87:14:aa:ac:f3:7b:
09:34:d5:14:7e:fe:64:d4:22:a0:b9:22:62:10:29:
45:9e:59:40:7a:f0:f2:4a:5a:82:87:b6:ed:44:29:
89:eb:3a:2e:bb:a6:90:f0:e6:3c:88:b5:82:e3:ac:
51:e2:d0:88:0b:93:8a:bc:6c:4b:91:2f:7e:4b:5e:
af:f0:2b:c8:13:22:4b:87:d4:d3:b4:6f:58:e5:49:
5c:99:d9:fe:7a:94:f7:96:4c:f3:69:2e:5d:fc:01:
d0:92:d3:86:d8:6a:b8:8d:62:9d:37:09:87:94:0f:
9f:9f:c5:ae:52:7d:54:b6:45:38:71:97:50:8a:ec:
76:68:8e:a4:d5:02:33:fe:94:2b:d4:94:1b:23:e8:
5d:8c:01:e3:b6:8e:5a:a1:6d:13:c4:97:74:4a:d4:
41:3b:f5:85:97:6e:71:f8:f8:4c:11:a4:3c:f2:b9:
ae:dc:26:77:9e:e8:a7:06:59:d9:0f:2f:93:72:33:
89:10:bf:19:29:63:84:3b:27:36:89:05:94:d9:f1:
30:d9:67:5b:58:dc:8a:3c:6e:38:26:88:2f:07:67:
66:be:a6:22:aa:ed:9c:37:3a:be:f3:49:57:f7:45:
38:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:1B:A1:23:AB:50:6A:AE:27:F0:AC:EC:42:4B:56:BC:A6:43:C8:6C
X509v3 Authority Key Identifier:
keyid:00:13:8A:F6:6E:B4:D5:57:FA:4B:39:39:C6:CB:D9:61:A9:12:35:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ABOK9m601Vf6Szk5xsvZYakSNWA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/83233c-898e-491d-958c-4fea624413e4/1/4xuhI6tQaq4n8KzsQktWvKZDyGw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/83233c-898e-491d-958c-4fea624413e4/1/ABOK9m601Vf6Szk5xsvZYakSNWA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.156.0/23
Signature Algorithm: sha256WithRSAEncryption
99:a1:78:73:22:b8:98:59:4b:5a:c6:22:6e:ce:8c:d7:f4:f8:
c8:19:a8:e2:10:b0:82:e9:b3:43:b5:e6:18:15:a0:42:23:91:
6c:ce:69:78:d0:39:73:05:41:10:dd:1c:ee:19:db:33:65:33:
f5:74:8d:b3:8e:39:b3:c5:9b:31:6f:cb:87:64:d4:20:3a:f0:
31:48:f6:a1:70:87:c6:c5:d6:8d:e8:0b:69:d0:81:25:b6:14:
64:17:9f:23:6e:6f:ae:9b:c2:b7:8c:e9:8a:cf:c1:2b:aa:4e:
9b:9c:88:db:c2:3a:b7:56:e2:02:58:6c:1b:39:12:44:12:7c:
41:25:6f:a8:92:e4:4a:71:f7:0c:e5:36:bb:89:f6:09:96:d3:
8a:8c:55:40:9c:f9:cf:e6:10:d8:7a:ce:9e:1b:66:27:92:62:
12:4c:7f:7b:5e:f9:fb:df:cb:be:e4:78:06:2e:36:af:20:fd:
87:d4:d3:ca:69:cf:4f:79:d4:cf:6c:13:18:02:00:43:ef:93:
27:62:98:6a:6a:2c:b3:81:cd:1b:3c:03:1e:9c:38:e0:6f:7a:
85:21:32:32:e5:71:22:25:b2:76:da:3a:03:1d:71:8b:be:92:
26:e6:69:d6:bf:ef:ad:ad:ed:79:bc:29:64:86:2a:39:00:9a:
a8:2f:c9:fa
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVveaMIHoPNNGfHe+ifTQqHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwMTM4YWY2NmViNGQ1NTdmYTRiMzkzOWM2Y2JkOTYxYTkx
MjM1NjAwHhcNMjMwMTAxMjIzNTIwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMzFiYTEyM2FiNTA2YWFlMjdmMGFjZWM0MjRiNTZiY2E2NDNjODZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjZ4muycDPF9nP+szV97IFwGtvEwY
BYeHFKqs83sJNNUUfv5k1CKguSJiEClFnllAevDySlqCh7btRCmJ6zouu6aQ8OY8
iLWC46xR4tCIC5OKvGxLkS9+S16v8CvIEyJLh9TTtG9Y5Ulcmdn+epT3lkzzaS5d
/AHQktOG2Gq4jWKdNwmHlA+fn8WuUn1UtkU4cZdQiux2aI6k1QIz/pQr1JQbI+hd
jAHjto5aoW0TxJd0StRBO/WFl25x+PhMEaQ88rmu3CZ3nuinBlnZDy+TcjOJEL8Z
KWOEOyc2iQWU2fEw2WdbWNyKPG44JogvB2dmvqYiqu2cNzq+80lX90U4jwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOMboSOrUGquJ/Cs7EJLVrymQ8hsMB8GA1UdIwQY
MBaAFAATivZutNVX+ks5OcbL2WGpEjVgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUJPSzltNjAxVmY2U3prNXhzdlpZYWtTTldBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS84MzIzM2MtODk4ZS00OTFkLTk1OGMt
NGZlYTYyNDQxM2U0LzEvNHh1aEk2dFFhcTRuOEt6c1FrdFd2S1pEeUd3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS84MzIzM2MtODk4ZS00OTFkLTk1OGMtNGZlYTYyNDQxM2U0
LzEvQUJPSzltNjAxVmY2U3prNXhzdlpZYWtTTldBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLZucMA0G
CSqGSIb3DQEBCwUAA4IBAQCZoXhzIriYWUtaxiJuzozX9PjIGajiELCC6bNDteYY
FaBCI5Fszml40DlzBUEQ3RzuGdszZTP1dI2zjjmzxZsxb8uHZNQgOvAxSPahcIfG
xdaN6Atp0IElthRkF58jbm+um8K3jOmKz8Erqk6bnIjbwjq3VuICWGwbORJEEnxB
JW+okuRKcfcM5Ta7ifYJltOKjFVAnPnP5hDYes6eG2YnkmISTH97Xvn738u+5HgG
LjavIP2H1NPKac9PedTPbBMYAgBD75MnYphqaiyzgc0bPAMenDjgb3qFITIy5XEi
JbJ22joDHXGLvpIm5mnWv++tre15vClkhio5AJqoL8n6
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:36 2023 by rpki-client on console-ams.rpki-client.org