Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/TLTbXyrdD1AoKFGBbq5QbWTETsQ.roa
File: TLTbXyrdD1AoKFGBbq5QbWTETsQ.roa (raw, json)
Hash identifier: buvwQhudzpWq/zhOHtc84BMsHXEyZccraoymnv4rozQ=
Subject key identifier: 4C:B4:DB:5F:2A:DD:0F:50:28:28:51:81:6E:AE:50:6D:64:C4:4E:C4
Certificate issuer: /CN=8b37183341a2ab6df3c59ec827ed71200b5a6244
Certificate serial: 019368EEF40948021090DCAEE2262E14333B
Authority key identifier: 8B:37:18:33:41:A2:AB:6D:F3:C5:9E:C8:27:ED:71:20:0B:5A:62:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/TLTbXyrdD1AoKFGBbq5QbWTETsQ.roa
Signing time: Tue 26 Nov 2024 14:45:10 +0000
ROA not before: Tue 26 Nov 2024 14:45:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 142032
IP address blocks: 45.145.230.0/23 maxlen: 23
45.145.230.0/24 maxlen: 24
45.145.231.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:68:ee:f4:09:48:02:10:90:dc:ae:e2:26:2e:14:33:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b37183341a2ab6df3c59ec827ed71200b5a6244
Validity
Not Before: Nov 26 14:45:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4cb4db5f2add0f50282851816eae506d64c44ec4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:be:f8:22:6a:f6:d9:10:c8:41:08:21:df:c2:
a1:18:df:f8:08:df:2e:81:7a:a8:2f:f3:17:f4:07:
f4:09:8b:1e:93:cc:6b:95:b5:70:33:84:3c:e6:96:
b2:0c:ef:19:0b:01:87:3b:62:f4:8b:03:fd:b8:cd:
39:c7:97:6a:65:8f:27:b6:48:e3:7d:52:85:11:21:
bd:e8:d3:c6:95:3c:ed:21:d2:48:ba:cc:5b:c6:82:
a3:9b:d7:45:0d:d8:a2:e9:bc:0f:a1:29:0a:ec:96:
0a:f0:ce:76:5f:e8:37:69:81:bd:58:6f:46:6d:27:
9b:67:3e:d1:41:b9:07:23:1d:26:f8:f6:02:5d:19:
cd:e4:8c:c2:cb:bc:a0:12:d3:86:4b:4b:87:53:7f:
bc:0d:16:de:f6:fc:ca:2c:4b:8e:20:01:f4:6f:5a:
90:db:12:36:a4:e1:7a:8e:05:de:19:38:62:39:a1:
e5:55:fd:6f:1c:f0:f3:e1:53:4d:f9:d1:07:01:50:
11:a2:2a:bf:cd:42:05:3f:67:a8:cc:aa:33:d4:4d:
77:9e:46:6e:7f:bd:00:51:cd:e6:7b:34:8a:13:9c:
c7:8c:ac:98:58:dd:19:68:6f:79:4e:90:42:b0:8e:
02:65:13:a4:06:f5:77:15:76:cb:ed:8a:b2:19:a9:
2a:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:B4:DB:5F:2A:DD:0F:50:28:28:51:81:6E:AE:50:6D:64:C4:4E:C4
X509v3 Authority Key Identifier:
keyid:8B:37:18:33:41:A2:AB:6D:F3:C5:9E:C8:27:ED:71:20:0B:5A:62:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/TLTbXyrdD1AoKFGBbq5QbWTETsQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.145.230.0/23
Signature Algorithm: sha256WithRSAEncryption
12:ec:ae:7d:01:3e:ef:6f:f0:20:e2:ee:e8:98:52:b8:03:52:
a1:41:27:4b:ea:54:a3:a1:b4:78:a4:2b:03:42:d7:88:d2:dc:
0b:90:a9:c2:19:38:d4:49:0b:23:5e:8c:50:1a:f9:c7:c6:19:
07:16:f9:05:b3:55:db:46:c8:98:30:7a:69:a1:bb:40:c6:34:
d6:76:7e:63:cd:e8:e2:73:92:70:c9:9a:11:66:c8:5c:55:92:
c2:42:6e:5a:1e:bb:2d:53:22:5f:7d:c6:fc:6f:d5:fc:4b:a7:
5d:67:db:99:31:34:70:d8:45:31:d3:0e:a4:e2:f5:b8:0e:8f:
a6:b9:12:2e:3a:3b:91:8b:da:0f:80:8d:53:c2:f4:58:27:62:
18:72:76:a4:2b:29:ec:4b:f4:11:b3:f7:ac:39:a8:00:89:bd:
65:f1:f6:1a:0c:a3:1f:61:6d:d9:e7:25:33:4e:6d:5f:48:a6:
fa:86:7a:af:73:73:13:a1:a2:28:53:dd:86:43:73:88:59:c3:
e5:2e:b6:26:2a:05:ff:52:2f:de:55:d9:26:29:fc:14:da:f5:
c7:22:9d:0f:72:8f:54:5d:ba:5e:6e:54:0a:85:91:db:8e:2a:
9b:ea:d3:13:a0:57:d8:f5:4b:ad:ad:09:6b:20:bd:d5:6c:1b:
65:d7:0f:3c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZNo7vQJSAIQkNyu4iYuFDM7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiMzcxODMzNDFhMmFiNmRmM2M1OWVjODI3ZWQ3MTIwMGI1
YTYyNDQwHhcNMjQxMTI2MTQ0NTEwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0Y2I0ZGI1ZjJhZGQwZjUwMjgyODUxODE2ZWFlNTA2ZDY0YzQ0ZWM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApL74Imr22RDIQQgh38KhGN/4CN8u
gXqoL/MX9Af0CYsek8xrlbVwM4Q85payDO8ZCwGHO2L0iwP9uM05x5dqZY8ntkjj
fVKFESG96NPGlTztIdJIusxbxoKjm9dFDdii6bwPoSkK7JYK8M52X+g3aYG9WG9G
bSebZz7RQbkHIx0m+PYCXRnN5IzCy7ygEtOGS0uHU3+8DRbe9vzKLEuOIAH0b1qQ
2xI2pOF6jgXeGThiOaHlVf1vHPDz4VNN+dEHAVARoiq/zUIFP2eozKoz1E13nkZu
f70AUc3mezSKE5zHjKyYWN0ZaG95TpBCsI4CZROkBvV3FXbL7YqyGakqewIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEy0218q3Q9QKChRgW6uUG1kxE7EMB8GA1UdIwQY
MBaAFIs3GDNBoqtt88WeyCftcSALWmJEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaXpjWU0wR2lxMjN6eFo3SUotMXhJQXRhWWtRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi8xYzc4ZTMtNjdkNi00ZTkwLWFlYjUt
MDg1MmNiMzUzMjkzLzEvVExUYlh5cmREMUFvS0ZHQmJxNVFiV1RFVHNRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi8xYzc4ZTMtNjdkNi00ZTkwLWFlYjUtMDg1MmNiMzUzMjkz
LzEvaXpjWU0wR2lxMjN6eFo3SUotMXhJQXRhWWtRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLZHmMA0G
CSqGSIb3DQEBCwUAA4IBAQAS7K59AT7vb/Ag4u7omFK4A1KhQSdL6lSjobR4pCsD
QteI0twLkKnCGTjUSQsjXoxQGvnHxhkHFvkFs1XbRsiYMHppobtAxjTWdn5jzeji
c5JwyZoRZshcVZLCQm5aHrstUyJffcb8b9X8S6ddZ9uZMTRw2EUx0w6k4vW4Do+m
uRIuOjuRi9oPgI1TwvRYJ2IYcnakKynsS/QRs/esOagAib1l8fYaDKMfYW3Z5yUz
Tm1fSKb6hnqvc3MToaIoU92GQ3OIWcPlLrYmKgX/Ui/eVdkmKfwU2vXHIp0Pco9U
XbpeblQKhZHbjiqb6tMToFfY9UutrQlrIL3VbBtl1w88
-----END CERTIFICATE-----
Generated at Sat Apr 5 21:55:03 2025 by rpki-client