Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/YXGn7YKfUnNURfDzo8o8hLuOG_0.roa
File: YXGn7YKfUnNURfDzo8o8hLuOG_0.roa (raw, json)
Hash identifier: xUFHTIB6CvmnSrVUWvgpZS8IduQKQxs06ZffOFlJGTc=
Subject key identifier: 61:71:A7:ED:82:9F:52:73:54:45:F0:F3:A3:CA:3C:84:BB:8E:1B:FD
Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Certificate serial: 018FCA779D5622A86C7E3FD6015E6CF66DAF
Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/YXGn7YKfUnNURfDzo8o8hLuOG_0.roa
Signing time: Thu 30 May 2024 17:06:27 +0000
ROA not before: Thu 30 May 2024 17:06:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44559
IP address blocks: 45.130.145.0/24 maxlen: 24
45.130.148.0/24 maxlen: 24
45.130.149.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:ca:77:9d:56:22:a8:6c:7e:3f:d6:01:5e:6c:f6:6d:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Validity
Not Before: May 30 17:06:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6171a7ed829f52735445f0f3a3ca3c84bb8e1bfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:1c:d9:ae:4f:45:d2:8c:8d:02:db:83:ea:aa:
dc:9d:99:90:62:fd:6f:58:1e:5a:35:22:34:64:0e:
f1:15:66:a0:dc:00:38:92:16:57:aa:3b:7c:38:82:
74:e0:6f:e2:96:11:4c:9d:0f:05:e3:df:a3:1d:87:
f9:6e:05:c6:d6:0f:40:a5:22:2d:96:73:c9:d8:31:
20:27:07:71:ec:90:70:5a:1e:2a:a2:49:61:52:28:
09:3d:18:05:1c:90:a6:4d:6d:a8:5c:17:3f:83:4b:
d8:c9:fd:1e:6c:6d:72:c4:e2:d1:ac:67:92:6a:6a:
90:ec:c4:5c:8a:83:42:61:cc:22:f6:a4:1c:b2:b7:
8f:06:35:2d:8c:af:69:f2:2c:49:ae:17:8c:17:22:
83:56:3e:69:79:8f:30:7d:6e:ea:1a:e9:35:16:47:
e2:f4:8b:a1:89:ab:a4:54:65:68:31:9d:be:17:e9:
f4:f9:b0:6c:b6:18:aa:79:93:2f:c4:98:78:5c:98:
fb:b2:51:a3:df:be:3e:73:1a:30:63:50:8c:ff:d6:
c6:a0:a5:9e:5b:69:16:ae:02:37:f6:96:c8:1e:a5:
33:b2:10:77:08:cd:b7:a1:7f:3e:a0:b9:63:5d:73:
fd:f5:47:e9:79:45:af:c5:0d:e3:8d:d9:7d:9a:a5:
99:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:71:A7:ED:82:9F:52:73:54:45:F0:F3:A3:CA:3C:84:BB:8E:1B:FD
X509v3 Authority Key Identifier:
keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/YXGn7YKfUnNURfDzo8o8hLuOG_0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.130.145.0/24
45.130.148.0/23
Signature Algorithm: sha256WithRSAEncryption
47:7b:23:0b:e9:0a:3e:8a:3b:9f:b6:ab:00:e5:d7:c4:9d:55:
5b:b7:05:54:2b:f2:bc:5d:13:ad:f3:b5:27:82:69:44:8a:49:
12:50:24:9d:c8:26:e1:7c:f4:c6:02:76:68:30:17:92:28:1d:
44:dd:b4:df:e8:bf:89:2c:56:fb:8e:85:6a:ca:2e:a1:27:ce:
f4:79:79:be:fd:7f:b5:8b:17:4c:6c:6f:4e:d8:bf:97:d8:d0:
20:ff:25:5d:f0:04:5c:c4:e3:7b:95:ca:7c:20:bc:dd:21:16:
8b:f7:df:30:8c:e3:9c:0b:65:aa:6b:ba:76:46:d2:06:57:ba:
90:e2:fa:a4:e9:0c:db:34:35:ae:ca:28:dc:1c:a7:da:e1:aa:
45:64:1d:b9:86:6a:ca:82:ad:32:35:d0:41:b4:77:e1:ca:35:
bc:76:e4:09:6f:66:79:43:f5:df:0d:82:e5:27:99:0f:7e:32:
3b:14:0f:b5:f5:c3:16:a8:ee:23:7c:7f:94:03:f4:78:ef:b0:
68:70:a9:c1:e7:ed:56:52:56:ec:67:ff:c5:9a:03:bc:a4:c7:
f7:47:a4:35:e2:3e:7f:fc:a4:7a:80:82:95:47:5f:08:24:0c:
1a:38:12:2b:65:d5:68:ab:72:1f:81:f1:93:a7:b7:6e:c0:6a:
3e:49:c3:81
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAY/Kd51WIqhsfj/WAV5s9m2vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlYmJmMzE3ZTVmYWY1ZWYwMmM5Y2NlNzk1MjdkNWU3NGI4
YWJjYzUwHhcNMjQwNTMwMTcwNjI3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MTcxYTdlZDgyOWY1MjczNTQ0NWYwZjNhM2NhM2M4NGJiOGUxYmZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqRzZrk9F0oyNAtuD6qrcnZmQYv1v
WB5aNSI0ZA7xFWag3AA4khZXqjt8OIJ04G/ilhFMnQ8F49+jHYf5bgXG1g9ApSIt
lnPJ2DEgJwdx7JBwWh4qoklhUigJPRgFHJCmTW2oXBc/g0vYyf0ebG1yxOLRrGeS
amqQ7MRcioNCYcwi9qQcsrePBjUtjK9p8ixJrheMFyKDVj5peY8wfW7qGuk1Fkfi
9IuhiaukVGVoMZ2+F+n0+bBsthiqeZMvxJh4XJj7slGj374+cxowY1CM/9bGoKWe
W2kWrgI39pbIHqUzshB3CM23oX8+oLljXXP99UfpeUWvxQ3jjdl9mqWZGQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFGFxp+2Cn1JzVEXw86PKPIS7jhv9MB8GA1UdIwQY
MBaAFO678xfl+vXvAsnM55Un1edLirzFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3J2ekYtWDY5ZThDeWN6bmxTZlY1MHVLdk1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi82ZGVjNjMtYjlkOS00ODBiLWFlYjMt
NmZlOWJmNjA1NjFjLzEvWVhHbjdZS2ZVbk5VUmZEem84bzhoTHVPR18wLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi82ZGVjNjMtYjlkOS00ODBiLWFlYjMtNmZlOWJmNjA1NjFj
LzEvN3J2ekYtWDY5ZThDeWN6bmxTZlY1MHVLdk1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALYKRAwQB
LYKUMA0GCSqGSIb3DQEBCwUAA4IBAQBHeyML6Qo+ijuftqsA5dfEnVVbtwVUK/K8
XROt87UngmlEikkSUCSdyCbhfPTGAnZoMBeSKB1E3bTf6L+JLFb7joVqyi6hJ870
eXm+/X+1ixdMbG9O2L+X2NAg/yVd8ARcxON7lcp8ILzdIRaL998wjOOcC2Wqa7p2
RtIGV7qQ4vqk6QzbNDWuyijcHKfa4apFZB25hmrKgq0yNdBBtHfhyjW8duQJb2Z5
Q/XfDYLlJ5kPfjI7FA+19cMWqO4jfH+UA/R477BocKnB5+1WUlbsZ//FmgO8pMf3
R6Q14j5//KR6gIKVR18IJAwaOBIrZdVoq3IfgfGTp7duwGo+ScOB
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:14:37 2025 by rpki-client