Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/861f56-9602-4103-ad9d-42083e0c04f8/1/APvD6_VqDtU_B9tJ1fzjfRi49Mg.roa
File: APvD6_VqDtU_B9tJ1fzjfRi49Mg.roa (raw, json)
Hash identifier: vtxcA4fKAtBVLvLjZsUA3ip4KsJvsW2Z7qNU2GOkRI8=
Subject key identifier: 00:FB:C3:EB:F5:6A:0E:D5:3F:07:DB:49:D5:FC:E3:7D:18:B8:F4:C8
Certificate issuer: /CN=bf076a873d848b8da36db3fc55520b400c58bb45
Certificate serial: 0185710C13E56981A7AC268EA0CBA065456E
Authority key identifier: BF:07:6A:87:3D:84:8B:8D:A3:6D:B3:FC:55:52:0B:40:0C:58:BB:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vwdqhz2Ei42jbbP8VVILQAxYu0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/861f56-9602-4103-ad9d-42083e0c04f8/1/APvD6_VqDtU_B9tJ1fzjfRi49Mg.roa
Signing time: Mon 02 Jan 2023 05:54:54 +0000
ROA not before: Mon 02 Jan 2023 05:54:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39855
IP address blocks: 45.157.139.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:0c:13:e5:69:81:a7:ac:26:8e:a0:cb:a0:65:45:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf076a873d848b8da36db3fc55520b400c58bb45
Validity
Not Before: Jan 2 05:54:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=00fbc3ebf56a0ed53f07db49d5fce37d18b8f4c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:0f:ff:90:c1:03:8d:d4:3a:9a:b2:ac:40:38:
64:8f:64:9d:af:3a:c4:30:da:c1:96:c5:fd:c2:e1:
a2:08:cf:c5:da:c9:01:ef:9b:b6:1f:03:0e:b8:58:
af:cc:6e:c2:51:76:cb:b1:af:8f:c4:1b:ff:1d:ba:
0b:ab:8d:e7:94:4c:9e:df:c8:b4:c0:54:ee:11:5e:
b8:5e:aa:1a:33:a5:be:36:7c:97:3a:2a:00:aa:78:
89:34:d4:cc:88:b4:58:43:d1:5e:bf:4e:1f:cf:9e:
aa:76:96:4f:85:3f:ff:16:5b:4f:06:b6:9b:48:4f:
9c:16:83:f1:69:bb:bf:1f:37:94:5a:29:e9:a1:e9:
c4:74:67:c6:50:e5:ca:ea:91:d7:0c:87:d3:56:54:
39:6c:be:77:82:b7:b8:63:4d:15:23:75:23:71:76:
45:b2:5c:e0:1b:6a:33:5e:ab:15:d3:e8:2b:19:ce:
76:c4:be:ad:95:72:57:1c:1e:d4:66:54:bf:0f:74:
32:09:39:51:83:25:14:9c:e6:b8:66:42:db:d5:2a:
1e:06:bd:d6:17:cf:36:af:4e:89:1d:a5:ec:42:38:
79:aa:4e:4e:af:3c:14:3f:4d:c0:47:a8:7a:22:c8:
d5:2f:2d:13:b8:3a:ed:ba:18:57:d1:2c:e2:92:75:
ad:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:FB:C3:EB:F5:6A:0E:D5:3F:07:DB:49:D5:FC:E3:7D:18:B8:F4:C8
X509v3 Authority Key Identifier:
keyid:BF:07:6A:87:3D:84:8B:8D:A3:6D:B3:FC:55:52:0B:40:0C:58:BB:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vwdqhz2Ei42jbbP8VVILQAxYu0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/861f56-9602-4103-ad9d-42083e0c04f8/1/APvD6_VqDtU_B9tJ1fzjfRi49Mg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/861f56-9602-4103-ad9d-42083e0c04f8/1/vwdqhz2Ei42jbbP8VVILQAxYu0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.157.139.0/24
Signature Algorithm: sha256WithRSAEncryption
15:16:d8:df:6d:6a:ad:e5:47:1e:73:21:fd:c5:01:57:16:2c:
e7:22:86:28:e3:7b:ce:08:59:8a:ca:bd:00:7e:f5:d9:13:a6:
e9:83:75:f7:1a:c7:dc:c9:88:f7:5c:2e:d8:73:ee:70:04:28:
9c:15:99:7c:87:0c:ab:6a:1e:28:42:ac:a8:b9:77:26:46:63:
77:f4:a7:fd:41:d6:fa:b7:31:04:9b:79:15:48:78:54:14:1f:
ed:5b:90:fa:f8:a2:5a:17:cb:5f:f3:b8:09:1f:cc:54:af:01:
5d:a0:ee:09:2a:30:d0:66:a5:38:48:bf:79:22:75:eb:52:bb:
4c:a3:39:2a:08:c7:41:4c:e2:24:21:04:67:81:b3:61:7b:18:
fd:31:62:be:12:d8:4b:65:0f:fb:4c:49:21:40:92:e6:db:75:
1b:67:ee:68:76:a1:00:fb:49:6e:7f:24:1d:33:52:47:c6:a0:
93:73:31:be:d5:2f:21:d2:70:0f:de:40:44:fe:d9:77:eb:ff:
44:28:3e:57:40:99:19:0c:4d:ef:b4:f6:98:48:0b:50:a8:f1:
f2:9b:2f:85:a5:0b:43:7a:c2:1e:cb:f1:06:14:fe:a1:1b:2e:
ef:c4:a7:ee:a2:78:0a:4c:2f:92:c4:75:d1:53:65:4c:6a:a4:
fc:49:13:ad
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVxDBPlaYGnrCaOoMugZUVuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmMDc2YTg3M2Q4NDhiOGRhMzZkYjNmYzU1NTIwYjQwMGM1
OGJiNDUwHhcNMjMwMTAyMDU1NDU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMGZiYzNlYmY1NmEwZWQ1M2YwN2RiNDlkNWZjZTM3ZDE4YjhmNGM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgA//kMEDjdQ6mrKsQDhkj2SdrzrE
MNrBlsX9wuGiCM/F2skB75u2HwMOuFivzG7CUXbLsa+PxBv/HboLq43nlEye38i0
wFTuEV64XqoaM6W+NnyXOioAqniJNNTMiLRYQ9Fev04fz56qdpZPhT//FltPBrab
SE+cFoPxabu/HzeUWinpoenEdGfGUOXK6pHXDIfTVlQ5bL53gre4Y00VI3UjcXZF
slzgG2ozXqsV0+grGc52xL6tlXJXHB7UZlS/D3QyCTlRgyUUnOa4ZkLb1SoeBr3W
F882r06JHaXsQjh5qk5OrzwUP03AR6h6IsjVLy0TuDrtuhhX0SziknWtBwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAD7w+v1ag7VPwfbSdX8430YuPTIMB8GA1UdIwQY
MBaAFL8Haoc9hIuNo22z/FVSC0AMWLtFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdndkcWh6MkVpNDJqYmJQOFZWSUxRQXhZdTBVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS84NjFmNTYtOTYwMi00MTAzLWFkOWQt
NDIwODNlMGMwNGY4LzEvQVB2RDZfVnFEdFVfQjl0SjFmempmUmk0OU1nLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS84NjFmNTYtOTYwMi00MTAzLWFkOWQtNDIwODNlMGMwNGY4
LzEvdndkcWh6MkVpNDJqYmJQOFZWSUxRQXhZdTBVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZ2LMA0G
CSqGSIb3DQEBCwUAA4IBAQAVFtjfbWqt5UcecyH9xQFXFiznIoYo43vOCFmKyr0A
fvXZE6bpg3X3GsfcyYj3XC7Yc+5wBCicFZl8hwyrah4oQqyouXcmRmN39Kf9Qdb6
tzEEm3kVSHhUFB/tW5D6+KJaF8tf87gJH8xUrwFdoO4JKjDQZqU4SL95InXrUrtM
ozkqCMdBTOIkIQRngbNhexj9MWK+EthLZQ/7TEkhQJLm23UbZ+5odqEA+0lufyQd
M1JHxqCTczG+1S8h0nAP3kBE/tl36/9EKD5XQJkZDE3vtPaYSAtQqPHymy+FpQtD
esIey/EGFP6hGy7vxKfuongKTC+SxHXRU2VMaqT8SROt
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:26 2024 by rpki-client on console-ams.rpki-client.org