Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/70db6c-d162-4d49-8849-d2accda08bee/1/TVGZRY6T5KwHmKP1t_4Wrnoy12k.roa
File: TVGZRY6T5KwHmKP1t_4Wrnoy12k.roa (raw, json)
Hash identifier: M1G5zJV8ifEJHHcJ0Qff5bcDPjiEX9+4bGHH24aae8Y=
Subject key identifier: 4D:51:99:45:8E:93:E4:AC:07:98:A3:F5:B7:FE:16:AE:7A:32:D7:69
Certificate issuer: /CN=5d55260cebf2a73ca14709d96d24a5ff3bcb5dc4
Certificate serial: 018570FBAE2B703ACA5704F2EB0FA35F97D1
Authority key identifier: 5D:55:26:0C:EB:F2:A7:3C:A1:47:09:D9:6D:24:A5:FF:3B:CB:5D:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XVUmDOvypzyhRwnZbSSl_zvLXcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/70db6c-d162-4d49-8849-d2accda08bee/1/TVGZRY6T5KwHmKP1t_4Wrnoy12k.roa
Signing time: Mon 02 Jan 2023 05:37:00 +0000
ROA not before: Mon 02 Jan 2023 05:37:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60721
IP address blocks: 45.155.124.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:fb:ae:2b:70:3a:ca:57:04:f2:eb:0f:a3:5f:97:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d55260cebf2a73ca14709d96d24a5ff3bcb5dc4
Validity
Not Before: Jan 2 05:37:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4d5199458e93e4ac0798a3f5b7fe16ae7a32d769
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:4b:e0:86:af:05:8b:17:0d:56:1d:f7:c9:a8:
2a:4e:72:df:9f:43:8a:ee:47:51:c2:6f:07:77:8c:
9d:72:b6:70:d2:66:1c:a1:98:75:66:c2:e9:0a:4a:
a6:78:66:21:71:4b:87:74:a6:74:ce:2b:a1:d2:c9:
af:e4:67:06:81:05:12:fd:7d:6e:b0:01:ea:c6:d4:
40:51:fe:54:32:6b:8e:d6:c1:df:0e:a4:d4:99:03:
1f:6e:16:ef:8a:64:77:7a:52:d2:1c:3a:53:05:81:
37:8d:5c:b6:ce:4d:46:34:62:38:c7:fb:00:b7:c8:
ff:f4:f0:e3:de:cb:bb:ad:09:7a:bc:75:d3:95:c9:
c6:0f:e5:d3:97:ab:40:54:9b:80:7c:0c:b3:0f:f7:
59:2b:29:f0:9f:5b:a6:9e:02:aa:c7:57:25:70:15:
be:d9:40:37:ec:6e:e9:a1:ea:40:2e:f4:9a:4f:f9:
d0:b5:90:cb:8b:c7:c5:52:7b:16:cb:20:98:43:f3:
bd:5e:fe:f1:67:74:00:14:a0:b7:c6:d7:0b:59:2d:
5c:bd:d1:9f:13:5b:76:18:56:61:25:37:1c:e0:c7:
6d:0d:c8:54:03:41:ae:9d:bd:df:67:b7:6b:d1:0c:
9f:de:d9:71:43:40:d7:1d:22:24:f1:d8:b6:7a:52:
72:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:51:99:45:8E:93:E4:AC:07:98:A3:F5:B7:FE:16:AE:7A:32:D7:69
X509v3 Authority Key Identifier:
keyid:5D:55:26:0C:EB:F2:A7:3C:A1:47:09:D9:6D:24:A5:FF:3B:CB:5D:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XVUmDOvypzyhRwnZbSSl_zvLXcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/70db6c-d162-4d49-8849-d2accda08bee/1/TVGZRY6T5KwHmKP1t_4Wrnoy12k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/70db6c-d162-4d49-8849-d2accda08bee/1/XVUmDOvypzyhRwnZbSSl_zvLXcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.124.0/24
Signature Algorithm: sha256WithRSAEncryption
56:ab:8c:63:39:d6:25:a6:e7:73:01:ca:44:fe:e3:3c:84:ed:
ff:8d:ff:f7:f2:c8:8b:9f:94:07:94:d6:8b:e7:f6:da:50:aa:
f8:65:94:86:0e:a9:48:42:aa:6e:c4:4c:ff:74:12:13:ac:15:
72:75:64:12:52:98:2a:96:21:15:91:b4:92:80:84:cc:9b:e8:
b5:ab:3f:1d:47:8c:44:e7:51:f5:5e:9f:ea:c0:0e:b9:99:06:
af:c2:cd:80:14:8b:66:14:49:82:40:07:15:f6:a0:7e:e0:93:
07:6e:34:b1:bb:ef:b0:e6:52:74:4a:7d:a2:75:ad:9d:dc:c0:
7e:bb:17:2b:07:22:bc:64:e9:ad:f7:07:ed:9a:9b:91:44:3d:
53:0c:50:f0:49:91:89:14:60:02:1f:2f:0a:38:f8:27:0e:73:
0d:22:59:70:82:e6:c2:75:d1:c0:74:89:d0:7d:23:ab:fb:58:
38:3e:3f:a1:47:26:0c:0a:09:7d:35:ea:0c:11:70:e3:6b:44:
02:84:c8:70:be:58:8d:b2:51:9c:4b:41:2c:f8:dc:ed:01:6f:
e3:eb:93:cb:79:52:c7:e3:eb:01:e3:fd:fb:61:08:d1:e2:2c:
d3:bd:84:2a:49:74:e8:ad:1f:bf:3b:c7:44:ca:df:1a:54:3b:
ba:fa:98:82
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVw+64rcDrKVwTy6w+jX5fRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkNTUyNjBjZWJmMmE3M2NhMTQ3MDlkOTZkMjRhNWZmM2Jj
YjVkYzQwHhcNMjMwMTAyMDUzNzAwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZDUxOTk0NThlOTNlNGFjMDc5OGEzZjViN2ZlMTZhZTdhMzJkNzY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArkvghq8FixcNVh33yagqTnLfn0OK
7kdRwm8Hd4ydcrZw0mYcoZh1ZsLpCkqmeGYhcUuHdKZ0ziuh0smv5GcGgQUS/X1u
sAHqxtRAUf5UMmuO1sHfDqTUmQMfbhbvimR3elLSHDpTBYE3jVy2zk1GNGI4x/sA
t8j/9PDj3su7rQl6vHXTlcnGD+XTl6tAVJuAfAyzD/dZKynwn1umngKqx1clcBW+
2UA37G7poepALvSaT/nQtZDLi8fFUnsWyyCYQ/O9Xv7xZ3QAFKC3xtcLWS1cvdGf
E1t2GFZhJTcc4MdtDchUA0Gunb3fZ7dr0Qyf3tlxQ0DXHSIk8di2elJyywIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFE1RmUWOk+SsB5ij9bf+Fq56MtdpMB8GA1UdIwQY
MBaAFF1VJgzr8qc8oUcJ2W0kpf87y13EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWFZVbURPdnlwenloUnduWmJTU2xfenZMWGNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi83MGRiNmMtZDE2Mi00ZDQ5LTg4NDkt
ZDJhY2NkYTA4YmVlLzEvVFZHWlJZNlQ1S3dIbUtQMXRfNFdybm95MTJrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi83MGRiNmMtZDE2Mi00ZDQ5LTg4NDktZDJhY2NkYTA4YmVl
LzEvWFZVbURPdnlwenloUnduWmJTU2xfenZMWGNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZt8MA0G
CSqGSIb3DQEBCwUAA4IBAQBWq4xjOdYlpudzAcpE/uM8hO3/jf/38siLn5QHlNaL
5/baUKr4ZZSGDqlIQqpuxEz/dBITrBVydWQSUpgqliEVkbSSgITMm+i1qz8dR4xE
51H1Xp/qwA65mQavws2AFItmFEmCQAcV9qB+4JMHbjSxu++w5lJ0Sn2ida2d3MB+
uxcrByK8ZOmt9wftmpuRRD1TDFDwSZGJFGACHy8KOPgnDnMNIllwgubCddHAdInQ
fSOr+1g4Pj+hRyYMCgl9NeoMEXDja0QChMhwvliNslGcS0Es+NztAW/j65PLeVLH
4+sB4/37YQjR4izTvYQqSXTorR+/O8dEyt8aVDu6+piC
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:37 2024 by rpki-client on console-fra.rpki-client.org