Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/38b542-4677-4a7e-b212-c8acce156f0d/1/efiNVg0dOGag3ikDA-RlXpcGHRA.roa
File: efiNVg0dOGag3ikDA-RlXpcGHRA.roa (raw, json)
Hash identifier: iZgSBJTE7Z3cJqT1wHVDYM3fd0h9+73zwMGbGTL1qfs=
Subject key identifier: 79:F8:8D:56:0D:1D:38:66:A0:DE:29:03:03:E4:65:5E:97:06:1D:10
Certificate issuer: /CN=60c9aa8b71e548bd7565ba663fa32f7d1aec41ab
Certificate serial: 01843DF2C1E4ACA629AC1A74365A0FEE0E45
Authority key identifier: 60:C9:AA:8B:71:E5:48:BD:75:65:BA:66:3F:A3:2F:7D:1A:EC:41:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YMmqi3HlSL11ZbpmP6MvfRrsQas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/38b542-4677-4a7e-b212-c8acce156f0d/1/efiNVg0dOGag3ikDA-RlXpcGHRA.roa
Signing time: Thu 03 Nov 2022 14:43:50 +0000
ROA not before: Thu 03 Nov 2022 14:43:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 150179
IP address blocks: 45.155.227.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:3d:f2:c1:e4:ac:a6:29:ac:1a:74:36:5a:0f:ee:0e:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60c9aa8b71e548bd7565ba663fa32f7d1aec41ab
Validity
Not Before: Nov 3 14:43:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=79f88d560d1d3866a0de290303e4655e97061d10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:98:08:2c:92:0b:e4:cc:62:a2:61:0e:c4:cd:
4a:ba:4e:30:8e:d4:a4:5b:23:da:b3:9b:91:9e:f5:
75:23:c7:3c:ae:3c:87:49:8e:b2:d1:ba:1f:7e:ef:
ca:ed:41:6b:0c:61:42:33:df:b6:6e:86:5c:39:cf:
9a:e7:f1:78:33:9c:35:5c:13:eb:16:f2:a1:29:64:
c1:9c:e1:ea:40:7f:1c:e7:2e:7f:98:74:4b:14:d8:
d1:11:e3:b3:c9:b6:ed:09:61:d3:6b:5a:23:d2:04:
82:9c:a5:8c:3f:b9:f1:6f:44:9c:74:4b:31:01:67:
c5:e4:35:14:fa:a6:43:71:2f:a2:9f:a8:07:85:ed:
13:00:27:08:ea:20:91:5f:bf:b6:b2:b2:3f:a4:78:
4a:69:68:33:24:62:c5:54:24:b0:1f:35:03:bb:29:
c6:ba:d0:31:e6:c4:01:c2:66:d1:4e:83:1d:85:fb:
f8:4a:3a:28:19:77:6b:0f:d0:40:e1:ca:0f:4c:11:
51:96:03:d9:7c:7c:cb:7b:fc:31:88:5c:20:34:1d:
10:5d:42:65:e4:37:a9:63:73:0a:95:e4:15:6e:92:
a5:a3:37:4c:b6:04:39:82:fc:b9:62:d3:a2:a7:92:
1a:e9:68:a6:45:ca:2f:c0:5c:1a:cb:77:85:2a:4f:
55:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:F8:8D:56:0D:1D:38:66:A0:DE:29:03:03:E4:65:5E:97:06:1D:10
X509v3 Authority Key Identifier:
keyid:60:C9:AA:8B:71:E5:48:BD:75:65:BA:66:3F:A3:2F:7D:1A:EC:41:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YMmqi3HlSL11ZbpmP6MvfRrsQas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/38b542-4677-4a7e-b212-c8acce156f0d/1/efiNVg0dOGag3ikDA-RlXpcGHRA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/38b542-4677-4a7e-b212-c8acce156f0d/1/YMmqi3HlSL11ZbpmP6MvfRrsQas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.227.0/24
Signature Algorithm: sha256WithRSAEncryption
82:34:2b:f4:ce:eb:7f:e7:4c:da:fd:05:e3:d5:f4:ec:e1:05:
68:99:cd:e8:c3:c2:82:cc:87:53:98:b7:df:81:c7:cf:d6:d4:
96:4c:f4:01:dc:64:56:50:50:44:0a:90:8d:fc:b2:41:cb:fc:
20:6d:9e:93:f4:fa:c6:62:81:a7:ef:f3:9d:33:46:4d:9f:2f:
e9:dc:6d:0c:4e:fc:05:8d:ad:30:6b:b3:ce:79:56:a4:7a:30:
33:1a:66:6f:b1:eb:8a:46:d6:37:42:28:e6:e8:b2:ae:78:ff:
5a:75:3f:a4:94:9c:54:66:fc:00:98:34:29:ac:ea:5b:d6:84:
4e:b7:57:12:5b:c4:62:ae:fa:b1:94:92:32:4b:d9:1f:c8:34:
60:47:10:fe:c1:db:69:6f:c8:b4:1f:d2:3b:69:02:eb:04:3a:
be:8d:c5:b3:dd:71:d4:52:73:9f:51:45:21:b2:3c:39:98:1c:
34:0c:2c:d7:39:a6:04:80:24:cd:04:c3:93:ac:fb:f6:75:42:
34:6f:59:1d:7b:21:b6:0c:0e:1e:4c:dd:8d:75:c8:ab:5b:26:
53:4f:09:07:fb:0e:63:f9:da:a1:0e:c9:66:52:be:17:57:d1:
b7:b6:bc:45:45:06:92:12:dd:f6:fa:36:c5:cc:4b:97:70:50:
fa:84:ff:f9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYQ98sHkrKYprBp0NloP7g5FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwYzlhYThiNzFlNTQ4YmQ3NTY1YmE2NjNmYTMyZjdkMWFl
YzQxYWIwHhcNMjIxMTAzMTQ0MzUwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3OWY4OGQ1NjBkMWQzODY2YTBkZTI5MDMwM2U0NjU1ZTk3MDYxZDEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnJgILJIL5MxiomEOxM1Kuk4wjtSk
WyPas5uRnvV1I8c8rjyHSY6y0boffu/K7UFrDGFCM9+2boZcOc+a5/F4M5w1XBPr
FvKhKWTBnOHqQH8c5y5/mHRLFNjREeOzybbtCWHTa1oj0gSCnKWMP7nxb0ScdEsx
AWfF5DUU+qZDcS+in6gHhe0TACcI6iCRX7+2srI/pHhKaWgzJGLFVCSwHzUDuynG
utAx5sQBwmbRToMdhfv4SjooGXdrD9BA4coPTBFRlgPZfHzLe/wxiFwgNB0QXUJl
5DepY3MKleQVbpKlozdMtgQ5gvy5YtOip5Ia6WimRcovwFway3eFKk9VIwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHn4jVYNHThmoN4pAwPkZV6XBh0QMB8GA1UdIwQY
MBaAFGDJqotx5Ui9dWW6Zj+jL30a7EGrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWU1tcWkzSGxTTDExWmJwbVA2TXZmUnJzUWFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS8zOGI1NDItNDY3Ny00YTdlLWIyMTIt
YzhhY2NlMTU2ZjBkLzEvZWZpTlZnMGRPR2FnM2lrREEtUmxYcGNHSFJBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS8zOGI1NDItNDY3Ny00YTdlLWIyMTItYzhhY2NlMTU2ZjBk
LzEvWU1tcWkzSGxTTDExWmJwbVA2TXZmUnJzUWFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZvjMA0G
CSqGSIb3DQEBCwUAA4IBAQCCNCv0zut/50za/QXj1fTs4QVomc3ow8KCzIdTmLff
gcfP1tSWTPQB3GRWUFBECpCN/LJBy/wgbZ6T9PrGYoGn7/OdM0ZNny/p3G0MTvwF
ja0wa7POeVakejAzGmZvseuKRtY3Qijm6LKueP9adT+klJxUZvwAmDQprOpb1oRO
t1cSW8RirvqxlJIyS9kfyDRgRxD+wdtpb8i0H9I7aQLrBDq+jcWz3XHUUnOfUUUh
sjw5mBw0DCzXOaYEgCTNBMOTrPv2dUI0b1kdeyG2DA4eTN2NdcirWyZTTwkH+w5j
+dqhDslmUr4XV9G3trxFRQaSEt32+jbFzEuXcFD6hP/5
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:10 2024 by rpki-client on console-fra.rpki-client.org