Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ce8619-0b3c-4d15-bd7b-c0e72e2ab802/1/UYj-D13EOG-MGeWgeQlZua4aRq8.roa
File: UYj-D13EOG-MGeWgeQlZua4aRq8.roa (raw, json)
Hash identifier: FMjx3eE6gaXT2GxdF+dVBDSh8ytu3/bxLIWIOMvKVvI=
Subject key identifier: 51:88:FE:0F:5D:C4:38:6F:8C:19:E5:A0:79:09:59:B9:AE:1A:46:AF
Certificate issuer: /CN=cefff6ae51ea2a679f745fd8cc3984315e57299b
Certificate serial: 018239196A4560288FDE45B66FFA55DAAC28
Authority key identifier: CE:FF:F6:AE:51:EA:2A:67:9F:74:5F:D8:CC:39:84:31:5E:57:29:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zv_2rlHqKmefdF_YzDmEMV5XKZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ce8619-0b3c-4d15-bd7b-c0e72e2ab802/1/UYj-D13EOG-MGeWgeQlZua4aRq8.roa
Signing time: Tue 26 Jul 2022 06:02:23 +0000
ROA not before: Tue 26 Jul 2022 06:02:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51765
IP address blocks: 45.149.63.0/24 maxlen: 24
45.149.61.0/24 maxlen: 24
45.149.60.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:39:19:6a:45:60:28:8f:de:45:b6:6f:fa:55:da:ac:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cefff6ae51ea2a679f745fd8cc3984315e57299b
Validity
Not Before: Jul 26 06:02:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5188fe0f5dc4386f8c19e5a0790959b9ae1a46af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:38:47:e8:0e:e3:04:9e:53:fc:98:fd:9e:ce:
af:fc:ac:96:e8:29:88:b2:dd:b0:bd:46:2f:d6:56:
15:28:24:c8:72:0e:e9:96:20:8a:24:84:5b:18:fe:
d0:74:db:5c:0e:1b:3d:c5:b8:da:2d:13:d4:75:46:
cb:2b:40:71:17:f8:64:0f:42:77:4a:b1:9c:e4:0b:
c2:7d:42:02:e4:6c:1a:ec:9d:96:87:98:23:2e:c9:
9e:94:1e:53:f0:c3:15:b7:17:41:9a:3f:65:16:70:
d9:80:88:d8:3d:11:c7:5c:62:79:8e:3d:57:c1:f7:
a0:23:ee:bf:47:c1:0b:24:b4:38:68:b1:a7:e0:ea:
7f:c7:30:cc:09:88:7a:4d:3a:ca:af:10:87:c7:9e:
97:97:17:a1:8c:65:0d:cd:9c:d7:4f:f8:cd:80:8a:
11:ce:3d:f2:18:42:4b:6e:3d:74:d1:20:60:d4:2b:
92:dd:95:20:62:48:4a:1f:c8:b0:f6:13:0c:b7:26:
ff:7f:14:49:96:dc:24:4e:ea:6d:97:9f:47:1f:aa:
95:66:78:40:f8:4b:ac:38:1a:99:e2:1e:19:0f:5c:
86:0b:e0:50:d1:2e:8d:0f:d9:9c:5d:23:78:43:d9:
53:25:51:20:7b:91:18:fa:7e:16:b2:51:0a:7e:c2:
94:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:88:FE:0F:5D:C4:38:6F:8C:19:E5:A0:79:09:59:B9:AE:1A:46:AF
X509v3 Authority Key Identifier:
keyid:CE:FF:F6:AE:51:EA:2A:67:9F:74:5F:D8:CC:39:84:31:5E:57:29:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zv_2rlHqKmefdF_YzDmEMV5XKZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ce8619-0b3c-4d15-bd7b-c0e72e2ab802/1/UYj-D13EOG-MGeWgeQlZua4aRq8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ce8619-0b3c-4d15-bd7b-c0e72e2ab802/1/zv_2rlHqKmefdF_YzDmEMV5XKZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.60.0/23
45.149.63.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:e9:a3:fa:8a:28:85:7c:02:30:fb:8e:8c:af:3b:bb:5e:e4:
3a:dc:33:72:e7:7d:6d:fc:e4:58:06:22:82:f8:14:51:96:91:
eb:d4:09:a4:37:9b:42:02:21:04:88:bc:29:f7:ab:ef:63:e8:
23:27:7a:82:ba:7e:66:c3:00:ed:2b:b9:98:2b:89:da:67:0d:
8d:12:41:07:2a:f5:f7:e4:55:55:ac:f1:31:6a:f4:1f:e4:67:
d5:0c:c9:3b:a4:d3:57:dd:8f:b3:a9:6c:d7:29:9d:a1:9d:80:
cd:4d:5e:0b:52:69:fd:91:60:03:0a:2f:d9:a0:03:a4:ca:4d:
ab:f5:46:4c:96:2c:af:b6:89:6d:bf:b0:12:e4:1c:68:b2:39:
4b:49:0f:d5:a0:55:48:82:5d:6b:43:f6:87:d4:75:7a:22:18:
dc:75:0a:54:96:7f:39:86:fd:46:bc:a3:7e:c1:c0:3e:0e:cf:
84:a5:2d:f1:9b:bd:ed:c9:df:a8:28:d6:9b:1d:7a:af:35:f0:
4f:f4:a8:bb:2c:5b:68:0e:4f:69:83:22:28:81:83:69:d1:cc:
d6:11:3f:dd:9b:c5:ef:df:cc:9b:b3:83:8f:79:76:04:62:55:
36:63:99:f8:ec:71:65:4a:8e:2c:77:f4:36:d1:5e:31:bf:b3:
21:89:8a:5c
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYI5GWpFYCiP3kW2b/pV2qwoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlZmZmNmFlNTFlYTJhNjc5Zjc0NWZkOGNjMzk4NDMxNWU1
NzI5OWIwHhcNMjIwNzI2MDYwMjIzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MTg4ZmUwZjVkYzQzODZmOGMxOWU1YTA3OTA5NTliOWFlMWE0NmFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgThH6A7jBJ5T/Jj9ns6v/KyW6CmI
st2wvUYv1lYVKCTIcg7pliCKJIRbGP7QdNtcDhs9xbjaLRPUdUbLK0BxF/hkD0J3
SrGc5AvCfUIC5Gwa7J2Wh5gjLsmelB5T8MMVtxdBmj9lFnDZgIjYPRHHXGJ5jj1X
wfegI+6/R8ELJLQ4aLGn4Op/xzDMCYh6TTrKrxCHx56XlxehjGUNzZzXT/jNgIoR
zj3yGEJLbj100SBg1CuS3ZUgYkhKH8iw9hMMtyb/fxRJltwkTuptl59HH6qVZnhA
+EusOBqZ4h4ZD1yGC+BQ0S6ND9mcXSN4Q9lTJVEge5EY+n4WslEKfsKUqwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFFGI/g9dxDhvjBnloHkJWbmuGkavMB8GA1UdIwQY
MBaAFM7/9q5R6ipnn3Rf2Mw5hDFeVymbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvenZfMnJsSHFLbWVmZEZfWXpEbUVNVjVYS1pzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9jZTg2MTktMGIzYy00ZDE1LWJkN2It
YzBlNzJlMmFiODAyLzEvVVlqLUQxM0VPRy1NR2VXZ2VRbFp1YTRhUnE4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC9jZTg2MTktMGIzYy00ZDE1LWJkN2ItYzBlNzJlMmFiODAy
LzEvenZfMnJsSHFLbWVmZEZfWXpEbUVNVjVYS1pzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBLZU8AwQA
LZU/MA0GCSqGSIb3DQEBCwUAA4IBAQCk6aP6iiiFfAIw+46Mrzu7XuQ63DNy531t
/ORYBiKC+BRRlpHr1AmkN5tCAiEEiLwp96vvY+gjJ3qCun5mwwDtK7mYK4naZw2N
EkEHKvX35FVVrPExavQf5GfVDMk7pNNX3Y+zqWzXKZ2hnYDNTV4LUmn9kWADCi/Z
oAOkyk2r9UZMliyvtoltv7AS5BxosjlLSQ/VoFVIgl1rQ/aH1HV6IhjcdQpUln85
hv1GvKN+wcA+Ds+EpS3xm73tyd+oKNabHXqvNfBP9Ki7LFtoDk9pgyIogYNp0czW
ET/dm8Xv38ybs4OPeXYEYlU2Y5n47HFlSo4sd/Q20V4xv7MhiYpc
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:10:04 2023 by rpki-client on console-ams.rpki-client.org