Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/2dba51-ead5-4282-abb0-d062b199aaef/1/4bTqHt81OI-pYGL0Etst54YNvqQ.roa
File: 4bTqHt81OI-pYGL0Etst54YNvqQ.roa (raw, json)
Hash identifier: tnN8/PEdH8enJQz/Qoivi31En+kqs8qOMQ/yKrwhicw=
Subject key identifier: E1:B4:EA:1E:DF:35:38:8F:A9:60:62:F4:12:DB:2D:E7:86:0D:BE:A4
Certificate issuer: /CN=ee87a815df75f2ad7d22e0bebf76f38c49b3ffc5
Certificate serial: 035C5C33
Authority key identifier: EE:87:A8:15:DF:75:F2:AD:7D:22:E0:BE:BF:76:F3:8C:49:B3:FF:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7oeoFd918q19IuC-v3bzjEmz_8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/2dba51-ead5-4282-abb0-d062b199aaef/1/4bTqHt81OI-pYGL0Etst54YNvqQ.roa
Signing time: Sat 01 Jan 2022 15:01:43 +0000
ROA not before: Sat 01 Jan 2022 15:01:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48732
IP address blocks: 45.139.102.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 56384563 (0x35c5c33)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee87a815df75f2ad7d22e0bebf76f38c49b3ffc5
Validity
Not Before: Jan 1 15:01:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e1b4ea1edf35388fa96062f412db2de7860dbea4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:37:98:b2:2e:96:e7:01:82:8f:f7:81:ed:d6:
03:f0:60:bd:aa:10:e2:12:59:46:46:fe:d0:46:3e:
e5:23:b7:ca:e3:4c:d6:19:c6:ce:d9:85:90:c2:43:
e3:21:c0:71:6f:5d:15:fa:05:ba:9d:ed:4a:07:4f:
e6:e0:1d:ae:9b:ea:26:99:33:b4:c2:73:a6:fa:e1:
cb:ae:e6:64:7a:56:51:08:6b:ad:01:e3:b9:ce:d7:
20:9f:6e:04:06:8f:06:44:cd:db:60:f2:8b:af:97:
3e:b4:5d:73:4e:04:d7:ab:07:a2:26:34:0c:0e:3a:
47:d1:16:c5:9a:7d:e2:9a:b3:bf:7e:94:1f:a5:a8:
c2:88:27:43:de:e9:94:41:bc:67:ad:50:de:71:7b:
00:c6:e9:57:26:62:01:a3:fb:ed:5f:80:8f:64:49:
b9:c1:82:f5:64:a0:48:65:89:a7:fb:5e:e2:e3:51:
60:84:df:45:63:63:e4:76:48:0c:e7:ed:39:c7:91:
0e:db:9e:1a:14:d8:ca:f2:99:78:d5:05:4b:7d:4f:
19:0a:b8:6e:2c:b1:b4:b0:7f:c8:30:5f:c0:39:00:
2e:68:33:12:bd:4f:45:42:89:35:de:d3:c7:bd:11:
89:60:3c:09:2a:40:65:59:73:2a:46:3a:6a:78:d3:
ae:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:B4:EA:1E:DF:35:38:8F:A9:60:62:F4:12:DB:2D:E7:86:0D:BE:A4
X509v3 Authority Key Identifier:
keyid:EE:87:A8:15:DF:75:F2:AD:7D:22:E0:BE:BF:76:F3:8C:49:B3:FF:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7oeoFd918q19IuC-v3bzjEmz_8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2dba51-ead5-4282-abb0-d062b199aaef/1/4bTqHt81OI-pYGL0Etst54YNvqQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2dba51-ead5-4282-abb0-d062b199aaef/1/7oeoFd918q19IuC-v3bzjEmz_8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.139.102.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:2b:65:fb:19:ca:66:c9:f5:74:a4:56:5d:09:2c:9d:6f:9d:
1c:b1:2f:37:02:f8:dc:fe:93:62:ae:e1:81:d4:15:93:1f:c1:
f6:df:72:51:d2:26:fa:0a:02:82:4b:6a:82:cf:b7:6f:d2:de:
b5:89:2e:9e:68:a3:69:c1:d6:a8:e1:02:9d:f2:a1:d2:8f:04:
a4:d7:c6:38:46:11:38:fc:ca:ee:7c:33:ed:85:8e:0f:01:a8:
b9:a4:ab:3b:f6:29:27:d3:53:43:16:3c:e7:c4:23:aa:24:36:
5a:6e:3d:45:51:c0:0e:12:6f:77:05:6c:a1:09:29:e2:0c:bd:
08:fc:4e:94:d4:3d:1b:7c:e4:b4:23:3c:e7:28:3d:d9:29:84:
43:1d:57:5a:be:f9:b5:75:60:2a:b3:e6:16:45:81:e8:5d:64:
54:4d:78:0d:00:2d:0d:d0:ad:2c:3b:ff:42:4d:5f:37:fb:92:
29:f4:4e:45:0d:fd:75:1a:24:00:a2:10:f1:f4:15:28:22:68:
db:0a:33:3e:dc:12:34:16:e8:f7:de:89:f1:26:36:8c:d4:f1:
56:5c:3f:a2:8a:7d:d7:d0:4a:51:60:4f:83:b7:58:a2:07:df:
51:8b:00:ca:f9:9b:6c:a7:ce:76:95:5a:92:e4:8f:7b:ab:3d:
d0:e7:f5:08
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEA1xcMzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhl
ZTg3YTgxNWRmNzVmMmFkN2QyMmUwYmViZjc2ZjM4YzQ5YjNmZmM1MB4XDTIyMDEw
MTE1MDE0M1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZTFiNGVhMWVkZjM1
Mzg4ZmE5NjA2MmY0MTJkYjJkZTc4NjBkYmVhNDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALY3mLIulucBgo/3ge3WA/BgvaoQ4hJZRkb+0EY+5SO3yuNM
1hnGztmFkMJD4yHAcW9dFfoFup3tSgdP5uAdrpvqJpkztMJzpvrhy67mZHpWUQhr
rQHjuc7XIJ9uBAaPBkTN22Dyi6+XPrRdc04E16sHoiY0DA46R9EWxZp94pqzv36U
H6WowognQ97plEG8Z61Q3nF7AMbpVyZiAaP77V+Aj2RJucGC9WSgSGWJp/te4uNR
YITfRWNj5HZIDOftOceRDtueGhTYyvKZeNUFS31PGQq4biyxtLB/yDBfwDkALmgz
Er1PRUKJNd7Tx70RiWA8CSpAZVlzKkY6anjTrjMCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBThtOoe3zU4j6lgYvQS2y3nhg2+pDAfBgNVHSMEGDAWgBTuh6gV33XyrX0i
4L6/dvOMSbP/xTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzdvZW9GZDkxOHExOUl1Qy12M2J6akVtel84VS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZDIvMmRiYTUxLWVhZDUtNDI4Mi1hYmIwLWQwNjJiMTk5YWFlZi8x
LzRiVHFIdDgxT0ktcFlHTDBFdHN0NTRZTnZxUS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDIv
MmRiYTUxLWVhZDUtNDI4Mi1hYmIwLWQwNjJiMTk5YWFlZi8xLzdvZW9GZDkxOHEx
OUl1Qy12M2J6akVtel84VS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC2LZjANBgkqhkiG9w0BAQsFAAOC
AQEApitl+xnKZsn1dKRWXQksnW+dHLEvNwL43P6TYq7hgdQVkx/B9t9yUdIm+goC
gktqgs+3b9LetYkunmijacHWqOECnfKh0o8EpNfGOEYROPzK7nwz7YWODwGouaSr
O/YpJ9NTQxY858QjqiQ2Wm49RVHADhJvdwVsoQkp4gy9CPxOlNQ9G3zktCM85yg9
2SmEQx1XWr75tXVgKrPmFkWB6F1kVE14DQAtDdCtLDv/Qk1fN/uSKfRORQ39dRok
AKIQ8fQVKCJo2wozPtwSNBbo996J8SY2jNTxVlw/oop919BKUWBPg7dYogffUYsA
yvmbbKfOdpVakuSPe6s90Of1CA==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:24 2023 by rpki-client on console-fra.rpki-client.org