Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/006918-6d30-461a-9c1d-4479e475975b/1/mm4G_kxmc3khUL72Vtyt75NXdvY.roa
File: mm4G_kxmc3khUL72Vtyt75NXdvY.roa (raw, json)
Hash identifier: 3D6zGHxtbilkh/QsagGQMVXnL43yfgX20RXH6FjNK5Q=
Subject key identifier: 9A:6E:06:FE:4C:66:73:79:21:50:BE:F6:56:DC:AD:EF:93:57:76:F6
Certificate issuer: /CN=ffe14794c66d5f36b922f3595420b78ac1b78578
Certificate serial: 06163F82
Authority key identifier: FF:E1:47:94:C6:6D:5F:36:B9:22:F3:59:54:20:B7:8A:C1:B7:85:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_-FHlMZtXza5IvNZVCC3isG3hXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/006918-6d30-461a-9c1d-4479e475975b/1/mm4G_kxmc3khUL72Vtyt75NXdvY.roa
Signing time: Sat 01 Jan 2022 06:58:13 +0000
ROA not before: Sat 01 Jan 2022 06:58:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 197740
IP address blocks: 45.151.74.0/23 maxlen: 23
45.151.72.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102121346 (0x6163f82)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffe14794c66d5f36b922f3595420b78ac1b78578
Validity
Not Before: Jan 1 06:58:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9a6e06fe4c6673792150bef656dcadef935776f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:04:d2:b8:6b:ba:cc:6e:f0:80:5d:05:c4:3e:
66:29:1a:c9:7e:79:e5:08:0e:ed:aa:3a:d5:fb:2f:
0a:75:cb:04:7e:78:92:29:b2:38:f9:23:f0:20:d2:
b4:ee:47:b5:00:ea:1b:01:04:71:1b:e6:3e:a7:ff:
70:fd:e2:31:ec:0d:33:48:c4:c9:27:cf:7f:21:19:
56:40:68:22:05:7b:92:a9:63:b8:9a:fe:ef:cc:f2:
7f:7f:00:21:25:00:f5:8b:89:84:27:5a:36:04:1a:
07:f6:04:f5:2b:4f:3b:ab:80:28:e6:9b:cd:4c:6a:
df:06:64:77:5c:3c:6a:f4:98:db:55:65:59:33:ea:
bf:37:cc:22:ec:0a:c0:d8:dc:7d:50:7f:ea:89:d9:
71:b6:57:c4:00:a6:6a:6c:dd:cf:19:bd:ad:6f:51:
88:c4:03:51:52:cc:45:e5:62:a6:15:cb:c1:8e:58:
b0:25:d5:7f:4a:b6:6b:f5:1c:33:b7:de:c6:07:b5:
7c:6c:bf:8b:c0:72:18:b2:e0:da:7c:ae:5e:f5:29:
15:fc:02:a0:2f:48:5b:fe:71:96:da:12:c3:a4:4a:
8c:ab:c3:b8:7b:68:a1:08:55:7c:19:54:28:6d:97:
d6:21:ff:e9:0d:a2:cd:3c:01:d3:42:84:fb:2c:d3:
78:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:6E:06:FE:4C:66:73:79:21:50:BE:F6:56:DC:AD:EF:93:57:76:F6
X509v3 Authority Key Identifier:
keyid:FF:E1:47:94:C6:6D:5F:36:B9:22:F3:59:54:20:B7:8A:C1:B7:85:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_-FHlMZtXza5IvNZVCC3isG3hXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/006918-6d30-461a-9c1d-4479e475975b/1/mm4G_kxmc3khUL72Vtyt75NXdvY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/006918-6d30-461a-9c1d-4479e475975b/1/_-FHlMZtXza5IvNZVCC3isG3hXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.72.0/22
Signature Algorithm: sha256WithRSAEncryption
9c:c8:1d:b9:55:c7:90:c8:c2:47:b0:ac:13:00:20:31:8b:23:
8f:86:4f:61:23:2e:d2:f2:91:b8:cc:44:9c:9c:bc:00:53:df:
79:29:aa:f9:87:a9:82:25:8d:22:3f:76:5e:78:0f:73:87:41:
ce:5a:b2:2c:3e:bf:3e:be:22:e3:38:94:73:76:84:ab:f7:6b:
e7:25:35:4c:b2:33:c8:30:ee:63:79:be:20:74:b3:b0:fb:39:
01:be:0e:15:08:0f:72:23:a6:78:2c:09:66:f1:9d:27:a7:23:
d1:e4:ef:b2:12:f1:12:d4:48:a2:6a:c8:2e:3d:73:66:0b:6e:
f0:48:6d:33:85:21:a4:f1:b2:0f:31:a6:79:c1:21:27:47:88:
53:8f:bb:84:53:23:e6:0d:9d:f6:13:90:60:b5:e7:df:8b:a1:
92:dc:52:8f:3c:3f:b9:5e:3d:29:26:1c:64:40:01:07:61:4b:
ba:7e:34:58:a5:bd:a9:e5:0e:d1:5b:42:a3:99:00:af:9d:b3:
fe:30:f4:0f:3f:65:0d:a2:cb:e8:ba:d0:da:4a:55:c8:4e:f9:
47:5a:33:9c:4a:cf:f5:1d:fd:4b:7d:ac:61:23:5e:e3:05:0e:
35:79:39:16:7a:e9:4d:21:e0:84:11:5d:0f:5a:39:9b:15:f2:
48:fb:c4:63
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBhY/gjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhm
ZmUxNDc5NGM2NmQ1ZjM2YjkyMmYzNTk1NDIwYjc4YWMxYjc4NTc4MB4XDTIyMDEw
MTA2NTgxM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOWE2ZTA2ZmU0YzY2
NzM3OTIxNTBiZWY2NTZkY2FkZWY5MzU3NzZmNjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAPUE0rhrusxu8IBdBcQ+ZikayX555QgO7ao61fsvCnXLBH54
kimyOPkj8CDStO5HtQDqGwEEcRvmPqf/cP3iMewNM0jEySfPfyEZVkBoIgV7kqlj
uJr+78zyf38AISUA9YuJhCdaNgQaB/YE9StPO6uAKOabzUxq3wZkd1w8avSY21Vl
WTPqvzfMIuwKwNjcfVB/6onZcbZXxACmamzdzxm9rW9RiMQDUVLMReViphXLwY5Y
sCXVf0q2a/UcM7fexge1fGy/i8ByGLLg2nyuXvUpFfwCoC9IW/5xltoSw6RKjKvD
uHtooQhVfBlUKG2X1iH/6Q2izTwB00KE+yzTeD0CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSabgb+TGZzeSFQvvZW3K3vk1d29jAfBgNVHSMEGDAWgBT/4UeUxm1fNrki
81lUILeKwbeFeDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L18tRkhsTVp0WHphNUl2TlpWQ0MzaXNHM2hYZy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYzAvMDA2OTE4LTZkMzAtNDYxYS05YzFkLTQ0NzllNDc1OTc1Yi8x
L21tNEdfa3htYzNraFVMNzJWdHl0NzVOWGR2WS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzAv
MDA2OTE4LTZkMzAtNDYxYS05YzFkLTQ0NzllNDc1OTc1Yi8xL18tRkhsTVp0WHph
NUl2TlpWQ0MzaXNHM2hYZy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAi2XSDANBgkqhkiG9w0BAQsFAAOC
AQEAnMgduVXHkMjCR7CsEwAgMYsjj4ZPYSMu0vKRuMxEnJy8AFPfeSmq+YepgiWN
Ij92XngPc4dBzlqyLD6/Pr4i4ziUc3aEq/dr5yU1TLIzyDDuY3m+IHSzsPs5Ab4O
FQgPciOmeCwJZvGdJ6cj0eTvshLxEtRIomrILj1zZgtu8EhtM4UhpPGyDzGmecEh
J0eIU4+7hFMj5g2d9hOQYLXn34uhktxSjzw/uV49KSYcZEABB2FLun40WKW9qeUO
0VtCo5kAr52z/jD0Dz9lDaLL6LrQ2kpVyE75R1oznErP9R39S32sYSNe4wUONXk5
FnrpTSHghBFdD1o5mxXySPvEYw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:00 2024 by rpki-client on console-ams.rpki-client.org