Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/006918-6d30-461a-9c1d-4479e475975b/1/5tQBIguk56OfZaSvxuYLUkE2XUg.roa
File: 5tQBIguk56OfZaSvxuYLUkE2XUg.roa (raw, json)
Hash identifier: gZnQvXhWEqq5IN5BFInnEJ9FYOZexGpTRAc3rqNDjPQ=
Subject key identifier: E6:D4:01:22:0B:A4:E7:A3:9F:65:A4:AF:C6:E6:0B:52:41:36:5D:48
Certificate issuer: /CN=ffe14794c66d5f36b922f3595420b78ac1b78578
Certificate serial: 018570303B99418572D289BFAD41F4C07879
Authority key identifier: FF:E1:47:94:C6:6D:5F:36:B9:22:F3:59:54:20:B7:8A:C1:B7:85:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_-FHlMZtXza5IvNZVCC3isG3hXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/006918-6d30-461a-9c1d-4479e475975b/1/5tQBIguk56OfZaSvxuYLUkE2XUg.roa
Signing time: Mon 02 Jan 2023 01:54:47 +0000
ROA not before: Mon 02 Jan 2023 01:54:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197740
IP address blocks: 45.151.74.0/23 maxlen: 23
45.151.72.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:30:3b:99:41:85:72:d2:89:bf:ad:41:f4:c0:78:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffe14794c66d5f36b922f3595420b78ac1b78578
Validity
Not Before: Jan 2 01:54:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e6d401220ba4e7a39f65a4afc6e60b5241365d48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:3d:08:64:18:6b:80:2e:d9:76:2b:7e:1f:0c:
48:51:e7:b8:bf:da:ec:ee:a9:fb:cc:47:63:1a:37:
ca:d0:9f:79:3f:38:95:6a:85:f6:46:2f:e4:cc:db:
22:ce:a9:2a:72:25:c2:26:6b:df:cc:f6:3d:80:f7:
af:ae:5b:75:73:ca:e4:35:b1:65:c6:ab:38:13:19:
a9:88:97:0d:96:fd:31:be:cd:0b:d6:c1:45:32:53:
32:2f:4d:4e:7b:5f:b3:a9:72:61:94:95:3c:7f:c9:
8d:b6:3a:3b:52:dd:d7:b5:ed:08:b8:03:dd:f6:b0:
28:c3:93:63:6b:a6:7b:1a:5b:51:0e:e1:06:d8:c7:
55:f1:d4:23:1d:10:a6:12:8d:71:e7:eb:66:12:ee:
b9:79:32:76:c9:05:8b:46:c4:bf:90:a4:95:23:bd:
89:59:a6:b0:f8:51:9b:d5:0e:03:81:79:f4:bb:2c:
e4:39:f7:aa:7d:47:cf:63:75:b1:cb:ad:93:9f:0b:
cf:66:26:5e:9e:f7:7e:3f:e0:ed:f2:4b:36:2b:a2:
12:1a:ef:40:9a:45:5b:98:9a:27:13:ea:f0:3c:a0:
9d:2b:7b:da:24:aa:cb:02:7f:ba:92:b5:be:b2:40:
fa:88:22:d2:1d:22:ef:f5:3a:34:2c:ed:ac:8a:9c:
7c:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:D4:01:22:0B:A4:E7:A3:9F:65:A4:AF:C6:E6:0B:52:41:36:5D:48
X509v3 Authority Key Identifier:
keyid:FF:E1:47:94:C6:6D:5F:36:B9:22:F3:59:54:20:B7:8A:C1:B7:85:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_-FHlMZtXza5IvNZVCC3isG3hXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/006918-6d30-461a-9c1d-4479e475975b/1/5tQBIguk56OfZaSvxuYLUkE2XUg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/006918-6d30-461a-9c1d-4479e475975b/1/_-FHlMZtXza5IvNZVCC3isG3hXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.72.0/22
Signature Algorithm: sha256WithRSAEncryption
33:85:dd:b1:63:e3:e6:5a:9c:8e:88:a8:63:92:b0:90:08:30:
1f:88:e1:07:e4:2b:b9:b0:38:0b:90:d8:c1:7a:b5:fd:3b:94:
15:6a:ee:7c:c0:e1:9f:d1:6c:93:e1:c8:0b:61:8a:84:b9:c9:
00:6b:6f:a1:3d:ed:db:26:f3:33:44:d3:4e:dc:b6:73:b9:f0:
cf:99:2e:81:8e:b6:4b:66:37:97:f4:4f:d7:b7:49:9c:3e:53:
ab:e4:5e:89:cb:d6:34:e7:c4:33:9f:cb:26:53:30:bc:cd:8d:
1d:71:8a:d6:d8:d2:c4:03:04:89:6a:17:cb:da:46:a9:e6:00:
94:8e:8e:92:65:ae:d7:10:94:37:da:fd:a7:d2:d5:e7:6e:ae:
a8:30:b6:f2:c2:c2:4b:69:22:ee:ab:bc:f4:c5:fd:b7:74:00:
9a:e4:dc:ff:41:43:6a:bf:d4:98:d1:60:52:8b:fe:e5:f6:9e:
bc:11:b5:a1:c6:87:b8:f6:56:d1:43:18:41:dc:45:06:c3:15:
84:5a:08:48:b7:0e:b3:55:84:13:26:9e:4e:f9:7e:8c:3a:6a:
2c:20:15:05:c6:2f:61:16:7b:1f:4e:aa:42:21:c3:7b:b6:c2:
bd:4a:20:58:31:ac:e5:e3:d0:a0:c4:0b:e7:64:8e:c5:f1:87:
3b:f7:e4:69
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVwMDuZQYVy0om/rUH0wHh5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmZTE0Nzk0YzY2ZDVmMzZiOTIyZjM1OTU0MjBiNzhhYzFi
Nzg1NzgwHhcNMjMwMTAyMDE1NDQ3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNmQ0MDEyMjBiYTRlN2EzOWY2NWE0YWZjNmU2MGI1MjQxMzY1ZDQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgj0IZBhrgC7Zdit+HwxIUee4v9rs
7qn7zEdjGjfK0J95PziVaoX2Ri/kzNsizqkqciXCJmvfzPY9gPevrlt1c8rkNbFl
xqs4ExmpiJcNlv0xvs0L1sFFMlMyL01Oe1+zqXJhlJU8f8mNtjo7Ut3Xte0IuAPd
9rAow5Nja6Z7GltRDuEG2MdV8dQjHRCmEo1x5+tmEu65eTJ2yQWLRsS/kKSVI72J
Waaw+FGb1Q4DgXn0uyzkOfeqfUfPY3Wxy62TnwvPZiZenvd+P+Dt8ks2K6ISGu9A
mkVbmJonE+rwPKCdK3vaJKrLAn+6krW+skD6iCLSHSLv9To0LO2sipx8JQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFObUASILpOejn2Wkr8bmC1JBNl1IMB8GA1UdIwQY
MBaAFP/hR5TGbV82uSLzWVQgt4rBt4V4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvXy1GSGxNWnRYemE1SXZOWlZDQzNpc0czaFhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC8wMDY5MTgtNmQzMC00NjFhLTljMWQt
NDQ3OWU0NzU5NzViLzEvNXRRQklndWs1Nk9mWmFTdnh1WUxVa0UyWFVnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC8wMDY5MTgtNmQzMC00NjFhLTljMWQtNDQ3OWU0NzU5NzVi
LzEvXy1GSGxNWnRYemE1SXZOWlZDQzNpc0czaFhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLZdIMA0G
CSqGSIb3DQEBCwUAA4IBAQAzhd2xY+PmWpyOiKhjkrCQCDAfiOEH5Cu5sDgLkNjB
erX9O5QVau58wOGf0WyT4cgLYYqEuckAa2+hPe3bJvMzRNNO3LZzufDPmS6BjrZL
ZjeX9E/Xt0mcPlOr5F6Jy9Y058Qzn8smUzC8zY0dcYrW2NLEAwSJahfL2kap5gCU
jo6SZa7XEJQ32v2n0tXnbq6oMLbywsJLaSLuq7z0xf23dACa5Nz/QUNqv9SY0WBS
i/7l9p68EbWhxoe49lbRQxhB3EUGwxWEWghItw6zVYQTJp5O+X6MOmosIBUFxi9h
FnsfTqpCIcN7tsK9SiBYMazl49CgxAvnZI7F8Yc79+Rp
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:00 2024 by rpki-client on console-ams.rpki-client.org