Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/RTMrF0ajuISZENRvB8321PfBrxk.roa
File: RTMrF0ajuISZENRvB8321PfBrxk.roa (raw, json)
Hash identifier: MdHXoA4079VWQGNa4xxcsTsc/K7m534ppeyQcME7rmM=
Subject key identifier: 45:33:2B:17:46:A3:B8:84:99:10:D4:6F:07:CD:F6:D4:F7:C1:AF:19
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 01859D0C7B72E99D709BE6F20C3B73D4CA22
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/RTMrF0ajuISZENRvB8321PfBrxk.roa
Signing time: Tue 10 Jan 2023 18:58:38 +0000
ROA not before: Tue 10 Jan 2023 18:58:38 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212219
IP address blocks: 45.136.6.0/24 maxlen: 24
45.141.151.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:9d:0c:7b:72:e9:9d:70:9b:e6:f2:0c:3b:73:d4:ca:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Jan 10 18:58:38 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=45332b1746a3b8849910d46f07cdf6d4f7c1af19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:68:a4:18:c7:b0:71:32:f0:87:f6:96:99:67:
2b:b9:31:9d:c2:88:12:95:d7:26:82:2e:ad:9d:0d:
e9:1b:a7:8a:4c:c9:3a:31:65:76:37:d0:42:b9:8a:
c1:28:f9:ef:61:36:b2:14:55:65:8e:45:db:13:7a:
f6:86:0c:72:d4:58:e5:c0:4b:b3:a3:d0:3c:8c:b2:
ad:dc:e0:6b:c3:82:38:61:12:db:a0:90:36:a6:9b:
2d:ab:eb:8e:1a:23:e7:1a:e6:30:aa:e2:f0:8b:ac:
cc:6b:d1:8b:a4:c8:f5:f5:38:dc:f4:fc:20:6b:7c:
4e:52:97:63:a9:0e:65:d6:34:8f:45:60:a1:1d:a5:
9c:47:4e:80:11:cd:da:05:b4:1d:0d:c3:a7:20:52:
17:a0:34:b2:9a:c7:49:a8:42:53:89:0d:f1:d2:b8:
72:52:48:59:ae:f5:d0:25:23:ce:36:97:27:6a:79:
03:82:37:82:43:93:46:57:0c:e4:5a:0a:23:d8:1f:
bd:4c:e8:b6:71:57:84:b5:e8:25:b3:5b:d2:0a:16:
9e:3c:2d:0a:0b:a4:1c:b1:6c:ec:f4:f6:bc:bf:ea:
52:34:19:2a:de:3e:0d:1e:84:f0:8e:fa:48:a8:53:
07:5f:43:29:0d:8d:6a:c5:b1:49:22:aa:70:86:1f:
58:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:33:2B:17:46:A3:B8:84:99:10:D4:6F:07:CD:F6:D4:F7:C1:AF:19
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/RTMrF0ajuISZENRvB8321PfBrxk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.136.6.0/24
45.141.151.0/24
Signature Algorithm: sha256WithRSAEncryption
07:69:af:35:a2:8a:c0:21:88:1f:d4:6a:2d:0a:9a:2b:d5:08:
5c:c3:cc:fe:13:31:01:b2:e7:67:d4:3d:1e:0c:68:b6:cc:17:
ee:9a:58:8e:39:e9:ad:6b:72:64:42:4b:b0:d4:58:df:d9:4c:
7e:ef:ba:b8:95:23:a6:c7:db:c5:45:4f:a8:39:61:2a:64:2d:
de:36:66:5a:8d:1a:2a:89:31:61:e0:cf:2f:ff:e9:ce:99:ab:
24:80:c6:d9:6c:c1:a7:5f:2a:05:73:a6:67:57:46:6b:93:c8:
ae:72:d4:fc:91:05:d6:c4:2d:13:06:18:df:54:09:9f:85:99:
e4:05:0d:3f:e0:5d:7d:66:aa:5b:5f:41:1d:bb:2e:32:80:04:
3b:cd:1e:00:74:64:4f:3e:cb:2e:b9:32:31:e9:c8:57:73:9c:
d0:c0:02:1c:4b:ba:b7:10:d0:10:b8:94:f2:af:df:47:b3:18:
cf:bf:33:2b:43:a1:f2:bf:89:5d:33:bb:26:c8:03:08:fb:87:
7b:e5:71:4e:25:69:83:bd:8c:af:ec:16:dd:7e:40:13:a1:fb:
76:7e:ab:6d:6f:b1:1c:ea:42:6d:fe:72:b9:9a:90:72:7c:61:
e9:6a:d7:85:27:8b:ea:87:cf:68:f4:00:1a:28:80:c3:87:9d:
dc:97:e4:7b
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYWdDHty6Z1wm+byDDtz1MoiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4MDVmMTdjMmQ3MTMzZDJkYWQzYThkZjdlMzUzMTVlMzdl
ZjVkYWYwHhcNMjMwMTEwMTg1ODM4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NTMzMmIxNzQ2YTNiODg0OTkxMGQ0NmYwN2NkZjZkNGY3YzFhZjE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg2ikGMewcTLwh/aWmWcruTGdwogS
ldcmgi6tnQ3pG6eKTMk6MWV2N9BCuYrBKPnvYTayFFVljkXbE3r2hgxy1FjlwEuz
o9A8jLKt3OBrw4I4YRLboJA2ppstq+uOGiPnGuYwquLwi6zMa9GLpMj19Tjc9Pwg
a3xOUpdjqQ5l1jSPRWChHaWcR06AEc3aBbQdDcOnIFIXoDSymsdJqEJTiQ3x0rhy
UkhZrvXQJSPONpcnankDgjeCQ5NGVwzkWgoj2B+9TOi2cVeEtegls1vSChaePC0K
C6QcsWzs9Pa8v+pSNBkq3j4NHoTwjvpIqFMHX0MpDY1qxbFJIqpwhh9YPQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFEUzKxdGo7iEmRDUbwfN9tT3wa8ZMB8GA1UdIwQY
MBaAFEgF8XwtcTPS2tOo3341MV43712vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0FYeGZDMXhNOUxhMDZqZmZqVXhYamZ2WGE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi84ZTA3ZGQtNGZlNS00ODIwLWJjYmUt
NWRkNmUyMmViYWIwLzEvUlRNckYwYWp1SVNaRU5SdkI4MzIxUGZCcnhrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi84ZTA3ZGQtNGZlNS00ODIwLWJjYmUtNWRkNmUyMmViYWIw
LzEvU0FYeGZDMXhNOUxhMDZqZmZqVXhYamZ2WGE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALYgGAwQA
LY2XMA0GCSqGSIb3DQEBCwUAA4IBAQAHaa81oorAIYgf1GotCpor1Qhcw8z+EzEB
sudn1D0eDGi2zBfumliOOemta3JkQkuw1Fjf2Ux+77q4lSOmx9vFRU+oOWEqZC3e
NmZajRoqiTFh4M8v/+nOmaskgMbZbMGnXyoFc6ZnV0Zrk8iuctT8kQXWxC0TBhjf
VAmfhZnkBQ0/4F19ZqpbX0Eduy4ygAQ7zR4AdGRPPssuuTIx6chXc5zQwAIcS7q3
ENAQuJTyr99HsxjPvzMrQ6Hyv4ldM7smyAMI+4d75XFOJWmDvYyv7BbdfkAToft2
fqttb7Ec6kJt/nK5mpByfGHpateFJ4vqh89o9AAaKIDDh53cl+R7
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:43:58 2025 by rpki-client