Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/7e993e-b01e-4a95-a4a2-ba7c456a667f/1/wdNmxZm4xsw6IrIpn3G3r1PvDV4.roa
File: wdNmxZm4xsw6IrIpn3G3r1PvDV4.roa (raw, json)
Hash identifier: WCe9k4S/BXOE0PJa/7g5JEg6xp8e918YcA2uLbkfJqI=
Subject key identifier: C1:D3:66:C5:99:B8:C6:CC:3A:22:B2:29:9F:71:B7:AF:53:EF:0D:5E
Certificate issuer: /CN=7f5ded3c0fd8a7d659b3edc54529cb6db7a85a45
Certificate serial: 01856F94A61AC2F04994320522CEC703D2E6
Authority key identifier: 7F:5D:ED:3C:0F:D8:A7:D6:59:B3:ED:C5:45:29:CB:6D:B7:A8:5A:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f13tPA_Yp9ZZs-3FRSnLbbeoWkU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/7e993e-b01e-4a95-a4a2-ba7c456a667f/1/wdNmxZm4xsw6IrIpn3G3r1PvDV4.roa
Signing time: Sun 01 Jan 2023 23:04:50 +0000
ROA not before: Sun 01 Jan 2023 23:04:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211500
IP address blocks: 45.136.109.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:94:a6:1a:c2:f0:49:94:32:05:22:ce:c7:03:d2:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f5ded3c0fd8a7d659b3edc54529cb6db7a85a45
Validity
Not Before: Jan 1 23:04:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c1d366c599b8c6cc3a22b2299f71b7af53ef0d5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c3:e9:16:84:16:b7:6f:c4:bb:b5:c6:07:66:
96:01:61:75:a8:00:1e:16:09:07:85:5a:01:42:c8:
3a:06:bb:60:f3:01:e6:a0:bc:84:ea:60:b0:6a:20:
a8:c3:48:6e:12:9a:4c:33:20:4d:d5:bd:b9:57:1b:
72:ef:c6:c0:27:95:fb:af:f4:a3:63:5d:d3:d2:19:
dd:07:8e:42:93:6f:7c:e7:fa:b8:4e:49:e8:d5:c2:
42:9c:3a:0a:5b:c4:79:b8:9d:88:52:e1:e1:b2:d5:
57:49:e6:e4:e5:64:b2:6c:14:78:43:83:8a:a1:3f:
a9:62:da:bd:3a:73:7e:6d:68:e9:d3:b7:b8:0d:7b:
9d:bd:98:1d:f9:ff:a0:0e:94:5d:7c:f5:1f:9c:43:
9e:55:10:66:45:e0:f1:4b:81:40:e4:42:4d:bf:ab:
a8:41:3b:d8:de:02:39:c4:fe:6d:16:65:8f:81:d3:
dc:2f:16:76:54:e3:ff:c8:4c:13:bf:9f:a4:b7:a1:
1e:91:95:c1:55:53:92:88:e2:5f:a3:95:fc:52:41:
fc:6d:a8:51:a9:b2:f6:93:45:a0:ef:61:8f:d5:6a:
98:a2:35:a8:ef:bc:18:3c:cb:69:03:e1:55:ea:07:
e4:29:56:3f:4a:eb:8d:be:83:20:e7:3f:64:9c:f4:
1c:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:D3:66:C5:99:B8:C6:CC:3A:22:B2:29:9F:71:B7:AF:53:EF:0D:5E
X509v3 Authority Key Identifier:
keyid:7F:5D:ED:3C:0F:D8:A7:D6:59:B3:ED:C5:45:29:CB:6D:B7:A8:5A:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f13tPA_Yp9ZZs-3FRSnLbbeoWkU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/7e993e-b01e-4a95-a4a2-ba7c456a667f/1/wdNmxZm4xsw6IrIpn3G3r1PvDV4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/7e993e-b01e-4a95-a4a2-ba7c456a667f/1/f13tPA_Yp9ZZs-3FRSnLbbeoWkU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.136.109.0/24
Signature Algorithm: sha256WithRSAEncryption
38:84:44:c5:4d:c4:82:eb:e9:31:57:3d:23:e1:b9:a8:f9:82:
f7:8e:dc:aa:7c:2d:69:82:0c:c0:5a:90:18:94:37:b5:74:59:
46:f5:1b:c2:52:83:70:12:d4:a3:3e:2f:bc:95:92:2c:80:e8:
18:19:51:8f:d0:6d:33:08:f4:db:fa:9e:60:db:49:1d:16:bd:
44:b3:40:d9:40:88:94:ef:96:69:90:74:1c:34:75:b1:ba:4f:
b9:5b:8e:01:9f:f0:a7:23:82:0c:77:8f:ba:68:54:75:f2:ee:
4f:c3:82:d8:e3:ea:c6:e0:22:80:cc:57:30:ef:d6:55:f3:88:
fe:26:46:1b:84:30:9f:e8:e5:b9:a6:e8:45:f0:4a:5b:4c:15:
ac:b9:ab:57:c6:03:7a:1a:bc:24:08:ca:6a:e7:5f:10:a5:ca:
46:49:89:36:36:5e:21:4a:44:22:f2:a0:f1:3f:cd:11:4a:1b:
46:c4:40:15:95:6e:85:95:9d:15:0f:ea:68:7f:1d:fb:da:a9:
65:34:fc:01:de:8a:0b:aa:e8:81:28:0b:b4:b8:16:40:58:cc:
de:c0:b7:c3:3a:60:3e:c8:bc:a9:56:4d:d5:6b:20:59:03:c4:
3d:2f:48:41:ac:f1:9f:fd:98:1c:24:f5:62:f0:2a:a9:85:c8:
a1:13:97:47
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVvlKYawvBJlDIFIs7HA9LmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdmNWRlZDNjMGZkOGE3ZDY1OWIzZWRjNTQ1MjljYjZkYjdh
ODVhNDUwHhcNMjMwMTAxMjMwNDUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMWQzNjZjNTk5YjhjNmNjM2EyMmIyMjk5ZjcxYjdhZjUzZWYwZDVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv8PpFoQWt2/Eu7XGB2aWAWF1qAAe
FgkHhVoBQsg6Brtg8wHmoLyE6mCwaiCow0huEppMMyBN1b25Vxty78bAJ5X7r/Sj
Y13T0hndB45Ck2985/q4Tkno1cJCnDoKW8R5uJ2IUuHhstVXSebk5WSybBR4Q4OK
oT+pYtq9OnN+bWjp07e4DXudvZgd+f+gDpRdfPUfnEOeVRBmReDxS4FA5EJNv6uo
QTvY3gI5xP5tFmWPgdPcLxZ2VOP/yEwTv5+kt6EekZXBVVOSiOJfo5X8UkH8bahR
qbL2k0Wg72GP1WqYojWo77wYPMtpA+FV6gfkKVY/SuuNvoMg5z9knPQclwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMHTZsWZuMbMOiKyKZ9xt69T7w1eMB8GA1UdIwQY
MBaAFH9d7TwP2KfWWbPtxUUpy223qFpFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZjEzdFBBX1lwOVpacy0zRlJTbkxiYmVvV2tVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS83ZTk5M2UtYjAxZS00YTk1LWE0YTIt
YmE3YzQ1NmE2NjdmLzEvd2RObXhabTR4c3c2SXJJcG4zRzNyMVB2RFY0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS83ZTk5M2UtYjAxZS00YTk1LWE0YTItYmE3YzQ1NmE2Njdm
LzEvZjEzdFBBX1lwOVpacy0zRlJTbkxiYmVvV2tVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYhtMA0G
CSqGSIb3DQEBCwUAA4IBAQA4hETFTcSC6+kxVz0j4bmo+YL3jtyqfC1pggzAWpAY
lDe1dFlG9RvCUoNwEtSjPi+8lZIsgOgYGVGP0G0zCPTb+p5g20kdFr1Es0DZQIiU
75ZpkHQcNHWxuk+5W44Bn/CnI4IMd4+6aFR18u5Pw4LY4+rG4CKAzFcw79ZV84j+
JkYbhDCf6OW5puhF8EpbTBWsuatXxgN6GrwkCMpq518QpcpGSYk2Nl4hSkQi8qDx
P80RShtGxEAVlW6FlZ0VD+pofx372qllNPwB3ooLquiBKAu0uBZAWMzewLfDOmA+
yLypVk3VayBZA8Q9L0hBrPGf/ZgcJPVi8CqphcihE5dH
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:08 2024 by rpki-client on console-ams.rpki-client.org