Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/69817d-42e8-45a1-9d54-3ada4d4aed5a/1/5tRmajIrc_ph-iW-vIrslws3oRk.roa
File: 5tRmajIrc_ph-iW-vIrslws3oRk.roa (raw, json)
Hash identifier: 3Zua9ks/qVQaEOo0IhmSzzv0h3vWIPcm3mAHhfAB4Qc=
Subject key identifier: E6:D4:66:6A:32:2B:73:FA:61:FA:25:BE:BC:8A:EC:97:0B:37:A1:19
Certificate issuer: /CN=425e132c37f05117dab94af1869a7149c6408d80
Certificate serial: 0184A5BBC2D3B91A4B8DF7212B8177EB63FF
Authority key identifier: 42:5E:13:2C:37:F0:51:17:DA:B9:4A:F1:86:9A:71:49:C6:40:8D:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ql4TLDfwURfauUrxhppxScZAjYA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/69817d-42e8-45a1-9d54-3ada4d4aed5a/1/5tRmajIrc_ph-iW-vIrslws3oRk.roa
Signing time: Wed 23 Nov 2022 18:24:16 +0000
ROA not before: Wed 23 Nov 2022 18:24:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207459
IP address blocks: 45.81.58.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:a5:bb:c2:d3:b9:1a:4b:8d:f7:21:2b:81:77:eb:63:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=425e132c37f05117dab94af1869a7149c6408d80
Validity
Not Before: Nov 23 18:24:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e6d4666a322b73fa61fa25bebc8aec970b37a119
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:98:ee:bf:b1:37:83:c9:31:99:80:a7:28:31:
56:39:28:ad:be:79:d1:ac:14:92:28:c3:94:4a:23:
99:87:dd:1e:f2:7e:14:ad:34:ea:a1:63:b6:2d:96:
0d:53:bb:1f:50:ef:fc:e8:c8:df:82:3f:af:9a:d6:
37:fe:a8:c8:01:3a:44:34:93:c4:28:91:64:a5:e4:
12:2b:40:34:38:2f:be:c3:00:1f:df:24:c8:90:e4:
0e:44:f5:a9:92:d5:42:97:11:d9:1c:b5:ef:fe:3b:
37:e1:d9:80:a8:a4:d0:00:69:9b:d7:71:60:b5:8a:
44:e0:85:c0:bf:32:34:a8:26:b1:b1:1e:2b:86:68:
c7:f4:9f:43:44:db:f7:21:72:d9:a4:ce:1e:3d:eb:
02:1f:15:f1:72:78:21:e4:21:ec:da:55:da:29:1a:
40:b1:52:12:6f:16:a6:27:9a:d0:14:cd:28:8a:cd:
12:48:f1:62:6f:6d:55:ab:c9:37:fa:a1:34:15:db:
ff:72:c5:72:87:87:c1:81:eb:3e:24:30:c0:1c:44:
03:86:79:c6:31:62:cd:56:4b:30:3a:43:c8:b1:ed:
af:21:62:03:33:09:0f:6d:18:c3:fe:b4:ae:c1:51:
39:c2:89:c8:92:41:c7:5f:69:34:09:da:85:c0:20:
5d:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:D4:66:6A:32:2B:73:FA:61:FA:25:BE:BC:8A:EC:97:0B:37:A1:19
X509v3 Authority Key Identifier:
keyid:42:5E:13:2C:37:F0:51:17:DA:B9:4A:F1:86:9A:71:49:C6:40:8D:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ql4TLDfwURfauUrxhppxScZAjYA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/69817d-42e8-45a1-9d54-3ada4d4aed5a/1/5tRmajIrc_ph-iW-vIrslws3oRk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/69817d-42e8-45a1-9d54-3ada4d4aed5a/1/Ql4TLDfwURfauUrxhppxScZAjYA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.58.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:ca:ba:4f:01:3d:e9:1e:c0:f6:72:45:cf:1f:35:c4:54:c5:
0b:3e:fb:fa:67:a7:24:0c:c8:d1:bc:bf:b8:40:4f:34:2b:15:
57:d0:f8:8f:5a:25:86:36:a6:e0:cf:bc:7f:43:b8:88:d0:28:
89:b3:e8:46:6e:d6:f3:1c:ec:1d:6b:a4:92:8b:36:95:59:a9:
dd:60:17:02:8f:da:fc:5a:c6:87:18:2a:a4:06:26:df:67:1b:
44:1c:df:53:6b:e3:a0:4a:86:18:22:b6:ac:ff:f3:40:f1:17:
56:51:f3:b5:4d:79:33:40:b1:b0:25:04:11:94:b4:55:9d:41:
9f:b8:22:e4:dc:b2:2f:e8:75:5b:71:f0:6f:75:61:90:0b:20:
9f:71:08:35:1c:f9:f5:78:94:de:d7:88:6d:a6:6e:f3:7d:c9:
91:82:c1:e7:ea:ec:28:e7:c0:1e:75:6b:19:6e:e8:56:9b:7a:
00:a0:51:40:a3:f7:51:7b:69:a1:bc:50:1d:6e:5e:b2:8a:50:
c3:7b:bc:9c:47:9e:37:38:33:3c:3c:e2:50:67:3e:be:68:05:
c1:b7:23:69:85:07:06:a3:c8:9f:90:7b:3c:e7:da:a0:7e:75:
12:be:98:d9:49:70:c5:8d:be:01:11:fe:b2:a6:83:1b:11:0a:
a7:27:29:10
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYSlu8LTuRpLjfchK4F362P/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyNWUxMzJjMzdmMDUxMTdkYWI5NGFmMTg2OWE3MTQ5YzY0
MDhkODAwHhcNMjIxMTIzMTgyNDE2WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNmQ0NjY2YTMyMmI3M2ZhNjFmYTI1YmViYzhhZWM5NzBiMzdhMTE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAppjuv7E3g8kxmYCnKDFWOSitvnnR
rBSSKMOUSiOZh90e8n4UrTTqoWO2LZYNU7sfUO/86Mjfgj+vmtY3/qjIATpENJPE
KJFkpeQSK0A0OC++wwAf3yTIkOQORPWpktVClxHZHLXv/js34dmAqKTQAGmb13Fg
tYpE4IXAvzI0qCaxsR4rhmjH9J9DRNv3IXLZpM4ePesCHxXxcngh5CHs2lXaKRpA
sVISbxamJ5rQFM0ois0SSPFib21Vq8k3+qE0Fdv/csVyh4fBges+JDDAHEQDhnnG
MWLNVkswOkPIse2vIWIDMwkPbRjD/rSuwVE5wonIkkHHX2k0CdqFwCBdDQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFObUZmoyK3P6YfolvryK7JcLN6EZMB8GA1UdIwQY
MBaAFEJeEyw38FEX2rlK8YaacUnGQI2AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWw0VExEZndVUmZhdVVyeGhwcHhTY1pBallBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy82OTgxN2QtNDJlOC00NWExLTlkNTQt
M2FkYTRkNGFlZDVhLzEvNXRSbWFqSXJjX3BoLWlXLXZJcnNsd3Mzb1JrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy82OTgxN2QtNDJlOC00NWExLTlkNTQtM2FkYTRkNGFlZDVh
LzEvUWw0VExEZndVUmZhdVVyeGhwcHhTY1pBallBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALVE6MA0G
CSqGSIb3DQEBCwUAA4IBAQAMyrpPAT3pHsD2ckXPHzXEVMULPvv6Z6ckDMjRvL+4
QE80KxVX0PiPWiWGNqbgz7x/Q7iI0CiJs+hGbtbzHOwda6SSizaVWandYBcCj9r8
WsaHGCqkBibfZxtEHN9Ta+OgSoYYIras//NA8RdWUfO1TXkzQLGwJQQRlLRVnUGf
uCLk3LIv6HVbcfBvdWGQCyCfcQg1HPn1eJTe14htpm7zfcmRgsHn6uwo58AedWsZ
buhWm3oAoFFAo/dRe2mhvFAdbl6yilDDe7ycR543ODM8POJQZz6+aAXBtyNphQcG
o8ifkHs859qgfnUSvpjZSXDFjb4BEf6ypoMbEQqnJykQ
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:50 2024 by rpki-client on console-fra.rpki-client.org