Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/2dba51-ead5-4282-abb0-d062b199aaef/1/RkY52MruIYGMT7VjzgbKvQL2NO4.roa
File: RkY52MruIYGMT7VjzgbKvQL2NO4.roa (raw, json)
Hash identifier: +EC5SER05W7bq98l2ZlGkEu4lS7UQ8pIu2Qob9cXFFQ=
Subject key identifier: 46:46:39:D8:CA:EE:21:81:8C:4F:B5:63:CE:06:CA:BD:02:F6:34:EE
Certificate issuer: /CN=ee87a815df75f2ad7d22e0bebf76f38c49b3ffc5
Certificate serial: 035D54BF
Authority key identifier: EE:87:A8:15:DF:75:F2:AD:7D:22:E0:BE:BF:76:F3:8C:49:B3:FF:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7oeoFd918q19IuC-v3bzjEmz_8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/2dba51-ead5-4282-abb0-d062b199aaef/1/RkY52MruIYGMT7VjzgbKvQL2NO4.roa
Signing time: Sat 01 Jan 2022 15:01:43 +0000
ROA not before: Sat 01 Jan 2022 15:01:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57497
IP address blocks: 45.139.102.0/24 maxlen: 24
45.139.103.0/24 maxlen: 24
45.139.100.0/24 maxlen: 24
45.139.101.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 56448191 (0x35d54bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee87a815df75f2ad7d22e0bebf76f38c49b3ffc5
Validity
Not Before: Jan 1 15:01:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=464639d8caee21818c4fb563ce06cabd02f634ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:d8:20:d5:06:2e:6a:81:90:57:27:7b:72:5f:
68:0e:77:e8:8f:c2:1b:39:23:ba:f6:62:48:b4:ea:
a8:f7:7f:4d:02:3b:a8:41:04:96:ab:92:2b:6f:01:
48:2d:4c:f1:f6:9f:59:57:ce:bf:a7:62:01:a7:69:
34:92:8e:c4:b9:3d:a5:ad:70:39:1a:bf:dd:44:dd:
d6:a3:f5:8f:89:88:a9:65:d3:d5:a6:50:ab:10:b4:
8b:9b:19:a3:96:60:4b:32:ed:2f:c4:21:14:5e:6d:
e2:f3:10:06:1c:a8:f3:08:69:cd:71:be:79:d3:2e:
fb:80:9a:ef:48:02:46:a4:d5:b1:2e:0a:59:32:6c:
b9:21:0c:80:fd:ae:58:f9:51:86:c2:d9:48:00:af:
c6:c1:cb:80:12:dc:d3:40:50:ca:09:c3:d7:87:b0:
9b:f7:15:28:6a:43:f0:b2:83:be:8f:13:6c:55:4a:
67:65:60:db:43:15:ed:4a:e4:46:2d:55:9a:ca:e7:
03:94:3f:f5:53:db:a4:ae:02:96:95:c8:24:0d:2e:
d9:61:15:d3:22:f8:b6:5e:ff:50:f9:7e:94:33:b1:
cc:8b:f5:59:fa:22:38:10:55:b3:67:f7:a7:3a:d9:
20:17:7d:54:1f:b9:ca:c5:9c:27:91:f6:3a:2d:11:
bf:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:46:39:D8:CA:EE:21:81:8C:4F:B5:63:CE:06:CA:BD:02:F6:34:EE
X509v3 Authority Key Identifier:
keyid:EE:87:A8:15:DF:75:F2:AD:7D:22:E0:BE:BF:76:F3:8C:49:B3:FF:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7oeoFd918q19IuC-v3bzjEmz_8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2dba51-ead5-4282-abb0-d062b199aaef/1/RkY52MruIYGMT7VjzgbKvQL2NO4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2dba51-ead5-4282-abb0-d062b199aaef/1/7oeoFd918q19IuC-v3bzjEmz_8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.139.100.0/22
Signature Algorithm: sha256WithRSAEncryption
69:18:a7:52:4a:49:44:ee:1b:54:b7:10:52:e4:d7:34:52:2c:
5d:86:6f:ad:d0:f1:fd:2d:05:1c:b4:59:a4:1f:56:7f:3f:b5:
42:3e:39:59:87:04:88:45:51:7c:7b:2e:54:e8:4a:b4:20:d1:
37:07:37:23:12:68:07:f9:b7:21:fd:59:4d:b1:2b:ea:7d:b0:
89:62:a8:a7:f5:4e:bc:c1:97:a9:ca:cf:82:ee:0c:4a:34:68:
ef:88:b6:55:78:db:b6:2d:f2:2b:05:a6:03:45:51:7d:9f:58:
ee:fe:88:49:6b:41:b8:e4:50:3c:a2:05:55:b6:3f:dd:d6:09:
75:87:13:84:28:3a:0c:0f:48:83:ac:9e:ea:51:c1:95:71:ff:
60:27:5f:72:b2:27:ec:a3:09:f5:77:7f:0f:b1:e7:5e:30:14:
9d:56:62:e7:46:fa:9b:94:96:e0:2c:08:dd:08:51:c3:e2:88:
90:6d:2a:c6:06:e8:62:2a:77:a2:4b:30:74:e6:48:48:58:89:
b6:d8:2a:fa:fa:e2:2b:52:62:67:be:46:d3:02:c0:48:2a:7f:
09:25:99:6c:e4:a4:77:a2:88:96:2c:1e:d1:2e:ce:69:1e:ee:
2d:f8:43:64:9f:3a:96:a0:06:54:1c:7d:b2:df:0a:56:87:33:
b6:4d:40:bc
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEA11UvzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhl
ZTg3YTgxNWRmNzVmMmFkN2QyMmUwYmViZjc2ZjM4YzQ5YjNmZmM1MB4XDTIyMDEw
MTE1MDE0M1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNDY0NjM5ZDhjYWVl
MjE4MThjNGZiNTYzY2UwNmNhYmQwMmY2MzRlZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJvYINUGLmqBkFcne3JfaA536I/CGzkjuvZiSLTqqPd/TQI7
qEEElquSK28BSC1M8fafWVfOv6diAadpNJKOxLk9pa1wORq/3UTd1qP1j4mIqWXT
1aZQqxC0i5sZo5ZgSzLtL8QhFF5t4vMQBhyo8whpzXG+edMu+4Ca70gCRqTVsS4K
WTJsuSEMgP2uWPlRhsLZSACvxsHLgBLc00BQygnD14ewm/cVKGpD8LKDvo8TbFVK
Z2Vg20MV7UrkRi1VmsrnA5Q/9VPbpK4ClpXIJA0u2WEV0yL4tl7/UPl+lDOxzIv1
WfoiOBBVs2f3pzrZIBd9VB+5ysWcJ5H2Oi0Rvz0CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRGRjnYyu4hgYxPtWPOBsq9AvY07jAfBgNVHSMEGDAWgBTuh6gV33XyrX0i
4L6/dvOMSbP/xTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzdvZW9GZDkxOHExOUl1Qy12M2J6akVtel84VS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZDIvMmRiYTUxLWVhZDUtNDI4Mi1hYmIwLWQwNjJiMTk5YWFlZi8x
L1JrWTUyTXJ1SVlHTVQ3Vmp6Z2JLdlFMMk5PNC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDIv
MmRiYTUxLWVhZDUtNDI4Mi1hYmIwLWQwNjJiMTk5YWFlZi8xLzdvZW9GZDkxOHEx
OUl1Qy12M2J6akVtel84VS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAi2LZDANBgkqhkiG9w0BAQsFAAOC
AQEAaRinUkpJRO4bVLcQUuTXNFIsXYZvrdDx/S0FHLRZpB9Wfz+1Qj45WYcEiEVR
fHsuVOhKtCDRNwc3IxJoB/m3If1ZTbEr6n2wiWKop/VOvMGXqcrPgu4MSjRo74i2
VXjbti3yKwWmA0VRfZ9Y7v6ISWtBuORQPKIFVbY/3dYJdYcThCg6DA9Ig6ye6lHB
lXH/YCdfcrIn7KMJ9Xd/D7HnXjAUnVZi50b6m5SW4CwI3QhRw+KIkG0qxgboYip3
okswdOZISFiJttgq+vriK1JiZ75G0wLASCp/CSWZbOSkd6KIliwe0S7OaR7uLfhD
ZJ86lqAGVBx9st8KVocztk1AvA==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:24 2023 by rpki-client on console-fra.rpki-client.org