Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/133576-aded-4cd3-b0a1-e4793facd761/1/_Uy_ccpYoMIXSX5k3L2Ur6ZjBPg.roa
File: _Uy_ccpYoMIXSX5k3L2Ur6ZjBPg.roa (raw, json)
Hash identifier: WOKp+PHN0eFFLW9yNbN0+U4a3hD5fXxLGoiiaH662pU=
Subject key identifier: FD:4C:BF:71:CA:58:A0:C2:17:49:7E:64:DC:BD:94:AF:A6:63:04:F8
Certificate issuer: /CN=558935af0465d52bf6a8f19999b94ec5e9a8b7c3
Certificate serial: 018460CB90747E5DA1C654B10B6A7E848B59
Authority key identifier: 55:89:35:AF:04:65:D5:2B:F6:A8:F1:99:99:B9:4E:C5:E9:A8:B7:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYk1rwRl1Sv2qPGZmblOxemot8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/133576-aded-4cd3-b0a1-e4793facd761/1/_Uy_ccpYoMIXSX5k3L2Ur6ZjBPg.roa
Signing time: Thu 10 Nov 2022 09:07:44 +0000
ROA not before: Thu 10 Nov 2022 09:07:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204957
IP address blocks: 45.143.152.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:60:cb:90:74:7e:5d:a1:c6:54:b1:0b:6a:7e:84:8b:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=558935af0465d52bf6a8f19999b94ec5e9a8b7c3
Validity
Not Before: Nov 10 09:07:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fd4cbf71ca58a0c217497e64dcbd94afa66304f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:7a:ef:63:0b:8f:26:61:97:2c:0b:49:fd:59:
5d:d2:f8:c7:f1:ab:aa:66:e9:61:f4:2e:39:24:e4:
e8:d6:61:23:2a:ef:1e:b2:1d:ea:04:2b:13:08:22:
1d:3f:20:a1:62:77:e1:b8:6b:45:28:ff:08:96:cc:
69:4c:db:a3:62:c9:c5:1c:74:97:bd:1c:dc:38:f7:
01:2f:c2:2d:d6:18:15:6e:36:1b:8c:9f:28:8e:5e:
6c:5b:9f:df:58:c3:1f:65:a3:98:96:9b:fe:9c:7d:
f2:f7:6b:b7:4d:51:f6:48:3c:2f:99:66:94:fc:e9:
40:76:00:8c:23:de:f0:dd:79:76:59:67:b6:ae:76:
02:66:50:03:20:c3:d8:58:8a:a9:c9:83:a8:f5:dd:
0d:e1:35:ae:19:d4:f0:9d:a8:15:10:37:64:8c:fc:
1a:ca:bc:76:49:7f:6c:32:cc:fc:07:96:e6:f6:19:
39:10:64:ef:60:f2:44:59:bd:a7:84:d7:e6:22:77:
8a:f6:ef:47:48:4c:53:28:da:4b:d3:17:67:fd:7b:
30:3f:e4:51:db:a8:cc:1f:93:84:0b:7b:9c:2e:e0:
1a:c2:a2:92:3a:67:a7:38:ac:b6:be:93:77:8e:26:
b0:37:26:c4:44:55:0f:e2:ed:9f:9c:11:0b:c1:7e:
f5:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:4C:BF:71:CA:58:A0:C2:17:49:7E:64:DC:BD:94:AF:A6:63:04:F8
X509v3 Authority Key Identifier:
keyid:55:89:35:AF:04:65:D5:2B:F6:A8:F1:99:99:B9:4E:C5:E9:A8:B7:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYk1rwRl1Sv2qPGZmblOxemot8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/133576-aded-4cd3-b0a1-e4793facd761/1/_Uy_ccpYoMIXSX5k3L2Ur6ZjBPg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/133576-aded-4cd3-b0a1-e4793facd761/1/VYk1rwRl1Sv2qPGZmblOxemot8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.143.152.0/22
Signature Algorithm: sha256WithRSAEncryption
1c:ef:e5:cf:71:6a:4e:ba:8d:a3:2f:35:f6:98:6b:ca:78:3e:
8c:a4:eb:e6:4d:52:a6:0f:56:9d:1d:e7:0a:d5:5e:c7:00:03:
2e:d1:92:e8:b5:5f:df:2b:15:23:f1:95:67:fc:16:c0:e5:8c:
5d:98:0e:df:14:f3:e9:f0:74:92:5d:bf:06:5b:ad:83:7f:e7:
3b:40:66:aa:aa:96:c7:6f:9f:50:cc:2b:04:41:60:ce:48:2d:
a0:cc:10:05:67:2a:3e:24:27:f9:76:2d:7f:fa:be:70:ae:0a:
29:6e:9f:3d:59:cf:ad:7e:66:c7:14:1c:1c:8e:3d:d3:7d:98:
63:43:c7:7d:31:35:a1:58:14:2e:4c:89:80:13:40:8a:b0:76:
c3:e2:64:6a:52:0f:38:54:83:70:22:ad:e5:24:40:40:13:d1:
f6:b9:ad:2e:d5:8f:2a:30:03:ca:fe:f9:10:2d:c2:13:17:b8:
9e:4b:6c:68:5c:35:bf:41:4a:83:05:3e:f1:35:b9:01:19:72:
86:1c:4e:1b:f6:27:16:2b:0a:0c:6c:e4:8a:c6:77:2b:5c:9c:
16:17:80:c0:85:19:b4:9e:27:31:9a:98:7f:d8:de:b5:88:ad:
c8:97:74:35:c2:4c:c7:5e:76:89:48:3e:a2:20:72:18:c7:2a:
3c:54:aa:15
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYRgy5B0fl2hxlSxC2p+hItZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1ODkzNWFmMDQ2NWQ1MmJmNmE4ZjE5OTk5Yjk0ZWM1ZTlh
OGI3YzMwHhcNMjIxMTEwMDkwNzQ0WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZDRjYmY3MWNhNThhMGMyMTc0OTdlNjRkY2JkOTRhZmE2NjMwNGY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjHrvYwuPJmGXLAtJ/Vld0vjH8auq
Zulh9C45JOTo1mEjKu8esh3qBCsTCCIdPyChYnfhuGtFKP8IlsxpTNujYsnFHHSX
vRzcOPcBL8It1hgVbjYbjJ8ojl5sW5/fWMMfZaOYlpv+nH3y92u3TVH2SDwvmWaU
/OlAdgCMI97w3Xl2WWe2rnYCZlADIMPYWIqpyYOo9d0N4TWuGdTwnagVEDdkjPwa
yrx2SX9sMsz8B5bm9hk5EGTvYPJEWb2nhNfmIneK9u9HSExTKNpL0xdn/XswP+RR
26jMH5OEC3ucLuAawqKSOmenOKy2vpN3jiawNybERFUP4u2fnBELwX715wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFP1Mv3HKWKDCF0l+ZNy9lK+mYwT4MB8GA1UdIwQY
MBaAFFWJNa8EZdUr9qjxmZm5TsXpqLfDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVllrMXJ3UmwxU3YycVBHWm1ibE94ZW1vdDhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS8xMzM1NzYtYWRlZC00Y2QzLWIwYTEt
ZTQ3OTNmYWNkNzYxLzEvX1V5X2NjcFlvTUlYU1g1azNMMlVyNlpqQlBnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS8xMzM1NzYtYWRlZC00Y2QzLWIwYTEtZTQ3OTNmYWNkNzYx
LzEvVllrMXJ3UmwxU3YycVBHWm1ibE94ZW1vdDhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLY+YMA0G
CSqGSIb3DQEBCwUAA4IBAQAc7+XPcWpOuo2jLzX2mGvKeD6MpOvmTVKmD1adHecK
1V7HAAMu0ZLotV/fKxUj8ZVn/BbA5YxdmA7fFPPp8HSSXb8GW62Df+c7QGaqqpbH
b59QzCsEQWDOSC2gzBAFZyo+JCf5di1/+r5wrgopbp89Wc+tfmbHFBwcjj3TfZhj
Q8d9MTWhWBQuTImAE0CKsHbD4mRqUg84VINwIq3lJEBAE9H2ua0u1Y8qMAPK/vkQ
LcITF7ieS2xoXDW/QUqDBT7xNbkBGXKGHE4b9icWKwoMbOSKxncrXJwWF4DAhRm0
nicxmph/2N61iK3Il3Q1wkzHXnaJSD6iIHIYxyo8VKoV
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:15 2024 by rpki-client on console-ams.rpki-client.org