Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/38b542-4677-4a7e-b212-c8acce156f0d/1/ROriCp8zDg-biiMKMRwn0bPcNm0.roa
File: ROriCp8zDg-biiMKMRwn0bPcNm0.roa (raw, json)
Hash identifier: 6SdovcFGlcUkb8Fiq+tO12B4Im1z+Ag9C+wtypykna8=
Subject key identifier: 44:EA:E2:0A:9F:33:0E:0F:9B:8A:23:0A:31:1C:27:D1:B3:DC:36:6D
Certificate issuer: /CN=60c9aa8b71e548bd7565ba663fa32f7d1aec41ab
Certificate serial: 01856EC1F61B3603A5323C3A016B0959470C
Authority key identifier: 60:C9:AA:8B:71:E5:48:BD:75:65:BA:66:3F:A3:2F:7D:1A:EC:41:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YMmqi3HlSL11ZbpmP6MvfRrsQas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/38b542-4677-4a7e-b212-c8acce156f0d/1/ROriCp8zDg-biiMKMRwn0bPcNm0.roa
Signing time: Sun 01 Jan 2023 19:14:43 +0000
ROA not before: Sun 01 Jan 2023 19:14:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213030
IP address blocks: 45.155.225.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:c1:f6:1b:36:03:a5:32:3c:3a:01:6b:09:59:47:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60c9aa8b71e548bd7565ba663fa32f7d1aec41ab
Validity
Not Before: Jan 1 19:14:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=44eae20a9f330e0f9b8a230a311c27d1b3dc366d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:c8:59:d8:41:a3:ef:c5:48:5b:e1:b4:aa:ca:
aa:2e:ee:92:4f:47:db:a7:72:f2:c0:12:32:1d:16:
91:ec:6d:73:a1:8d:e4:c2:d6:e7:27:16:c6:b8:70:
bc:50:b4:6b:bf:99:73:a2:4f:d3:b1:be:cf:4f:12:
95:86:34:78:cf:28:50:0b:32:5d:51:c9:f1:ec:47:
13:7a:89:db:22:9e:36:87:6e:37:2a:89:6a:b3:cc:
a7:35:ff:6a:2c:7c:23:43:d3:53:63:99:67:3a:3b:
b1:2d:47:d4:80:a7:75:6e:46:77:42:cf:cd:d9:4f:
14:5a:7e:55:cd:34:95:42:43:f3:a2:cc:72:b0:84:
55:1d:98:02:2c:ee:76:65:f4:83:1f:b2:dc:b5:34:
3f:a9:17:9a:fa:ba:b2:b0:80:b8:2e:0b:a2:63:b9:
91:fe:9b:f6:2d:97:21:e6:c0:ce:0e:c9:d1:a0:ba:
38:2a:21:41:66:3a:1a:8b:41:33:b1:b3:c9:a9:0d:
15:e5:cd:50:5e:d2:0c:8f:79:b5:2f:ba:08:0c:77:
76:07:1e:49:01:09:cd:0c:ea:27:d4:47:31:0a:bf:
60:80:67:83:67:4e:7d:53:57:1f:08:9b:76:36:dc:
0d:fc:f0:72:28:a7:ab:88:c4:5b:de:bc:4e:79:8b:
a7:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:EA:E2:0A:9F:33:0E:0F:9B:8A:23:0A:31:1C:27:D1:B3:DC:36:6D
X509v3 Authority Key Identifier:
keyid:60:C9:AA:8B:71:E5:48:BD:75:65:BA:66:3F:A3:2F:7D:1A:EC:41:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YMmqi3HlSL11ZbpmP6MvfRrsQas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/38b542-4677-4a7e-b212-c8acce156f0d/1/ROriCp8zDg-biiMKMRwn0bPcNm0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/38b542-4677-4a7e-b212-c8acce156f0d/1/YMmqi3HlSL11ZbpmP6MvfRrsQas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.225.0/24
Signature Algorithm: sha256WithRSAEncryption
ce:4b:ae:eb:a8:59:0d:d9:b8:83:44:b7:23:1e:3f:d4:b6:ed:
b8:6d:81:77:57:69:bb:23:94:47:bc:4b:72:77:94:d5:91:08:
54:27:3a:bc:2d:10:9e:c2:5e:1f:23:16:dd:f8:0b:87:28:56:
35:4b:09:0d:73:fc:76:bf:1e:b1:30:04:cb:e8:25:23:07:32:
78:6f:42:80:6d:64:08:54:15:3f:5f:bf:b7:d1:1c:db:7e:e1:
30:c4:7a:84:da:fd:a7:ca:57:1d:1e:56:1b:2a:32:e5:e4:f2:
58:84:3b:54:6f:25:cb:d7:0d:27:aa:e7:7d:76:3e:87:96:7b:
74:b4:0d:eb:78:3f:f5:0e:cf:17:d1:34:c5:55:a3:f5:74:f6:
a1:f5:4f:c4:b6:55:c5:9d:a8:fe:f7:78:3c:61:c1:f0:db:31:
42:07:da:ae:eb:51:38:b0:c5:1d:a1:41:6c:d3:e3:54:e0:80:
4f:1b:bc:5c:4b:0e:1b:c0:96:c9:2d:a8:c3:e5:ec:69:7d:29:
71:b1:4f:59:06:ae:64:79:0a:ae:7e:ae:8d:89:ff:fb:eb:de:
4e:6b:c7:4e:c6:02:35:39:84:9d:0d:fa:7c:14:8b:80:52:fc:
1f:12:59:b5:9d:4b:f8:d8:5b:48:8d:eb:20:20:91:a8:e7:13:
4e:76:35:46
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVuwfYbNgOlMjw6AWsJWUcMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwYzlhYThiNzFlNTQ4YmQ3NTY1YmE2NjNmYTMyZjdkMWFl
YzQxYWIwHhcNMjMwMTAxMTkxNDQzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NGVhZTIwYTlmMzMwZTBmOWI4YTIzMGEzMTFjMjdkMWIzZGMzNjZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgMhZ2EGj78VIW+G0qsqqLu6ST0fb
p3LywBIyHRaR7G1zoY3kwtbnJxbGuHC8ULRrv5lzok/Tsb7PTxKVhjR4zyhQCzJd
Ucnx7EcTeonbIp42h243Kolqs8ynNf9qLHwjQ9NTY5lnOjuxLUfUgKd1bkZ3Qs/N
2U8UWn5VzTSVQkPzosxysIRVHZgCLO52ZfSDH7LctTQ/qRea+rqysIC4LguiY7mR
/pv2LZch5sDODsnRoLo4KiFBZjoai0EzsbPJqQ0V5c1QXtIMj3m1L7oIDHd2Bx5J
AQnNDOon1EcxCr9ggGeDZ059U1cfCJt2NtwN/PByKKeriMRb3rxOeYunAwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFETq4gqfMw4Pm4ojCjEcJ9Gz3DZtMB8GA1UdIwQY
MBaAFGDJqotx5Ui9dWW6Zj+jL30a7EGrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWU1tcWkzSGxTTDExWmJwbVA2TXZmUnJzUWFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS8zOGI1NDItNDY3Ny00YTdlLWIyMTIt
YzhhY2NlMTU2ZjBkLzEvUk9yaUNwOHpEZy1iaWlNS01Sd24wYlBjTm0wLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS8zOGI1NDItNDY3Ny00YTdlLWIyMTItYzhhY2NlMTU2ZjBk
LzEvWU1tcWkzSGxTTDExWmJwbVA2TXZmUnJzUWFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZvhMA0G
CSqGSIb3DQEBCwUAA4IBAQDOS67rqFkN2biDRLcjHj/Utu24bYF3V2m7I5RHvEty
d5TVkQhUJzq8LRCewl4fIxbd+AuHKFY1SwkNc/x2vx6xMATL6CUjBzJ4b0KAbWQI
VBU/X7+30RzbfuEwxHqE2v2nylcdHlYbKjLl5PJYhDtUbyXL1w0nqud9dj6Hlnt0
tA3reD/1Ds8X0TTFVaP1dPah9U/EtlXFnaj+93g8YcHw2zFCB9qu61E4sMUdoUFs
0+NU4IBPG7xcSw4bwJbJLajD5expfSlxsU9ZBq5keQqufq6Nif/7695Oa8dOxgI1
OYSdDfp8FIuAUvwfElm1nUv42FtIjesgIJGo5xNOdjVG
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:37 2024 by rpki-client on console-ams.rpki-client.org