Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/KAerhtogDYklVOMoumCdC7KMUZ0.roa
File: KAerhtogDYklVOMoumCdC7KMUZ0.roa (raw, json)
Hash identifier: uHPlMEHnmpL7oizpDJQJuVIne14M/T3MVIdZjg58sWw=
Subject key identifier: 28:07:AB:86:DA:20:0D:89:25:54:E3:28:BA:60:9D:0B:B2:8C:51:9D
Certificate issuer: /CN=ff82309a6814678ad72e3f31a4fe0272f40bd986
Certificate serial: 018F2D5B8153924FEF4492CE65F2389478BE
Authority key identifier: FF:82:30:9A:68:14:67:8A:D7:2E:3F:31:A4:FE:02:72:F4:0B:D9:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/KAerhtogDYklVOMoumCdC7KMUZ0.roa
Signing time: Tue 30 Apr 2024 04:55:22 +0000
ROA not before: Tue 30 Apr 2024 04:55:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 45.145.16.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:2d:5b:81:53:92:4f:ef:44:92:ce:65:f2:38:94:78:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff82309a6814678ad72e3f31a4fe0272f40bd986
Validity
Not Before: Apr 30 04:55:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2807ab86da200d892554e328ba609d0bb28c519d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:57:16:2f:f8:55:2c:73:43:23:74:85:87:5b:
d6:b4:5e:98:2f:ce:d4:28:9a:b1:20:8b:9f:c6:4d:
14:66:39:bb:12:76:ba:83:f8:84:8a:07:46:78:ca:
e5:95:56:6e:76:9a:32:1b:ba:5a:8f:b0:00:2d:38:
bc:c4:39:03:57:6c:77:35:d1:d5:6f:3c:d7:87:1f:
56:ad:9c:bd:78:ea:49:a4:98:bc:2b:52:20:36:2f:
11:02:6a:00:42:c9:87:e2:61:34:82:3e:0f:ec:fd:
30:d1:37:29:06:ed:e8:6f:4d:96:8e:04:07:2f:de:
99:85:30:17:40:2a:c8:08:86:88:38:7d:70:38:31:
fd:29:4a:19:1e:39:07:db:1d:0d:58:b8:81:59:b4:
9a:a1:fd:3c:ce:56:18:1a:3c:cf:75:54:00:7d:93:
ef:0a:56:27:fe:59:bf:ea:a3:8f:f4:de:f8:09:c2:
f2:8b:83:2f:3a:a0:f2:b2:a3:78:4d:00:f4:29:25:
b3:f3:69:70:79:1c:e0:12:a3:91:83:9f:ed:9b:05:
ae:5e:a2:d3:c5:96:2e:cf:4b:3c:65:2c:27:99:88:
68:fa:51:f6:43:6d:3e:bb:06:03:32:18:36:71:d0:
4b:2e:76:c8:82:c8:85:bb:98:b9:58:df:13:a1:c5:
00:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:07:AB:86:DA:20:0D:89:25:54:E3:28:BA:60:9D:0B:B2:8C:51:9D
X509v3 Authority Key Identifier:
keyid:FF:82:30:9A:68:14:67:8A:D7:2E:3F:31:A4:FE:02:72:F4:0B:D9:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/KAerhtogDYklVOMoumCdC7KMUZ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.145.16.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:7c:cb:d9:bb:68:eb:b9:69:32:5d:f4:f8:2d:b1:7e:03:43:
51:4e:34:92:34:4d:40:63:ad:dc:07:fc:6b:b8:00:fd:08:70:
b0:e4:b6:65:4d:9a:fb:84:9e:66:20:3b:57:66:e4:6e:21:0b:
22:6f:3b:ed:19:4c:7e:25:ef:ca:84:4b:62:18:ca:1f:cb:43:
52:ef:18:07:a4:fd:f7:31:f2:85:82:1d:e8:27:7a:14:79:ea:
be:fc:d5:c1:2b:95:ba:9d:0f:f9:34:30:3a:18:f4:61:58:a4:
bb:24:5e:27:9b:ec:bd:17:ed:7f:9c:2d:50:0b:77:25:99:ca:
77:fd:6e:bb:dd:6f:fa:2a:af:82:67:c6:5f:40:21:7b:0f:1b:
20:34:f1:5c:c2:51:20:81:99:41:ac:aa:6a:62:cb:83:99:7c:
ba:45:22:83:a4:94:5b:9b:86:ab:f7:fa:94:9e:7f:ac:84:bd:
2d:75:33:15:8f:de:3b:1b:8c:15:28:70:1e:dc:4a:95:40:e7:
8f:22:7e:63:4b:a6:bd:e2:26:85:4d:4e:f8:f8:da:9f:5f:23:
b1:47:bb:22:ca:e9:13:e7:e9:3b:a3:97:e2:7c:8f:7a:2f:9c:
f5:28:f0:83:6f:d0:60:7b:72:6a:cd:b1:7c:72:83:09:c6:42:
63:8d:ab:60
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY8tW4FTkk/vRJLOZfI4lHi+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmODIzMDlhNjgxNDY3OGFkNzJlM2YzMWE0ZmUwMjcyZjQw
YmQ5ODYwHhcNMjQwNDMwMDQ1NTIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyODA3YWI4NmRhMjAwZDg5MjU1NGUzMjhiYTYwOWQwYmIyOGM1MTlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoVcWL/hVLHNDI3SFh1vWtF6YL87U
KJqxIIufxk0UZjm7Ena6g/iEigdGeMrllVZudpoyG7paj7AALTi8xDkDV2x3NdHV
bzzXhx9WrZy9eOpJpJi8K1IgNi8RAmoAQsmH4mE0gj4P7P0w0TcpBu3ob02WjgQH
L96ZhTAXQCrICIaIOH1wODH9KUoZHjkH2x0NWLiBWbSaof08zlYYGjzPdVQAfZPv
ClYn/lm/6qOP9N74CcLyi4MvOqDysqN4TQD0KSWz82lweRzgEqORg5/tmwWuXqLT
xZYuz0s8ZSwnmYho+lH2Q20+uwYDMhg2cdBLLnbIgsiFu5i5WN8TocUADwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCgHq4baIA2JJVTjKLpgnQuyjFGdMB8GA1UdIwQY
MBaAFP+CMJpoFGeK1y4/MaT+AnL0C9mGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvXzRJd21tZ1VaNHJYTGo4eHBQNENjdlFMMllZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC85ZmE4M2QtYjJhMy00NWU0LTg0OTkt
ZjUyNTgxNjQwMmJkLzEvS0Flcmh0b2dEWWtsVk9Nb3VtQ2RDN0tNVVowLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC85ZmE4M2QtYjJhMy00NWU0LTg0OTktZjUyNTgxNjQwMmJk
LzEvXzRJd21tZ1VaNHJYTGo4eHBQNENjdlFMMllZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZEQMA0G
CSqGSIb3DQEBCwUAA4IBAQA/fMvZu2jruWkyXfT4LbF+A0NRTjSSNE1AY63cB/xr
uAD9CHCw5LZlTZr7hJ5mIDtXZuRuIQsibzvtGUx+Je/KhEtiGMofy0NS7xgHpP33
MfKFgh3oJ3oUeeq+/NXBK5W6nQ/5NDA6GPRhWKS7JF4nm+y9F+1/nC1QC3clmcp3
/W673W/6Kq+CZ8ZfQCF7DxsgNPFcwlEggZlBrKpqYsuDmXy6RSKDpJRbm4ar9/qU
nn+shL0tdTMVj947G4wVKHAe3EqVQOePIn5jS6a94iaFTU74+NqfXyOxR7siyukT
5+k7o5fifI96L5z1KPCDb9Bge3JqzbF8coMJxkJjjatg
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:30:08 2025 by rpki-client