Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ce8619-0b3c-4d15-bd7b-c0e72e2ab802/1/uwklKZ0dqTkQoEWzsydrZKamhbs.roa
File: uwklKZ0dqTkQoEWzsydrZKamhbs.roa (raw, json)
Hash identifier: ZZIiyXeIPhjZT0sMlBlVqayzl7dlxLsmlJQYqUdu8y4=
Subject key identifier: BB:09:25:29:9D:1D:A9:39:10:A0:45:B3:B3:27:6B:64:A6:A6:85:BB
Certificate issuer: /CN=cefff6ae51ea2a679f745fd8cc3984315e57299b
Certificate serial: 01826D23FA7AAF216712B294F6D0DBAA0109
Authority key identifier: CE:FF:F6:AE:51:EA:2A:67:9F:74:5F:D8:CC:39:84:31:5E:57:29:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zv_2rlHqKmefdF_YzDmEMV5XKZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ce8619-0b3c-4d15-bd7b-c0e72e2ab802/1/uwklKZ0dqTkQoEWzsydrZKamhbs.roa
Signing time: Fri 05 Aug 2022 08:34:10 +0000
ROA not before: Fri 05 Aug 2022 08:34:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 45.149.62.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:6d:23:fa:7a:af:21:67:12:b2:94:f6:d0:db:aa:01:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cefff6ae51ea2a679f745fd8cc3984315e57299b
Validity
Not Before: Aug 5 08:34:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bb0925299d1da93910a045b3b3276b64a6a685bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:dd:10:35:c3:4e:54:27:83:77:bf:11:ea:86:
77:3e:d6:bf:63:7f:c2:77:99:1d:0d:40:f8:19:86:
61:b1:7d:f8:52:c3:ff:f6:7f:77:40:b2:c4:43:f5:
3b:be:98:1e:2c:0f:89:f8:bb:63:18:70:f6:90:ff:
fe:7d:8c:25:39:a8:ca:5f:68:39:a3:0a:4e:71:69:
bb:62:33:cb:fb:a0:e6:96:a0:eb:4a:f1:eb:c6:7e:
a7:dd:76:40:49:d7:72:10:e0:fa:e4:47:ef:fc:d8:
9a:1f:1f:c3:08:4e:9a:9c:83:87:2a:eb:1a:fb:08:
1d:94:e9:b5:90:67:a2:26:d4:e4:e4:6e:e0:de:da:
b4:69:af:83:d3:db:aa:ee:ad:2d:2b:c2:f6:88:09:
5c:22:72:a7:ab:86:1e:e7:9b:b7:3f:40:77:f1:62:
58:da:7c:d7:64:3d:d0:32:31:2d:98:49:84:1b:8f:
b6:85:d6:17:c1:57:3a:26:a9:5b:a4:69:41:40:80:
48:de:f2:e2:c7:88:d3:f2:f3:6d:64:3d:6c:77:82:
d4:1f:fd:7c:f1:4a:0e:5f:8d:e3:a9:c0:f0:a3:ae:
80:ad:67:28:53:89:5a:1a:29:c4:4a:11:67:13:aa:
b8:a2:90:24:5c:22:35:24:c6:f2:f1:ec:89:27:60:
db:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:09:25:29:9D:1D:A9:39:10:A0:45:B3:B3:27:6B:64:A6:A6:85:BB
X509v3 Authority Key Identifier:
keyid:CE:FF:F6:AE:51:EA:2A:67:9F:74:5F:D8:CC:39:84:31:5E:57:29:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zv_2rlHqKmefdF_YzDmEMV5XKZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ce8619-0b3c-4d15-bd7b-c0e72e2ab802/1/uwklKZ0dqTkQoEWzsydrZKamhbs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ce8619-0b3c-4d15-bd7b-c0e72e2ab802/1/zv_2rlHqKmefdF_YzDmEMV5XKZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.62.0/24
Signature Algorithm: sha256WithRSAEncryption
98:b8:01:89:f0:bb:41:3e:a1:96:3a:5a:26:25:09:f9:23:17:
d9:b3:1f:b7:17:af:bd:55:f9:cc:b6:62:28:9a:8d:a6:07:a9:
69:da:fd:a5:20:d9:dd:d3:b3:1a:a3:a6:9d:0e:72:05:08:5b:
df:69:6c:cb:2a:c2:9b:31:d2:22:f7:83:38:2e:2d:df:93:da:
5a:05:68:84:63:94:9a:d8:21:f4:8b:18:ee:11:8b:f3:61:56:
32:84:61:08:88:84:8a:a2:62:e1:01:2c:c9:a2:42:6a:0f:8a:
64:5f:8b:74:e9:45:9f:c0:dd:ff:ce:e7:20:b6:d5:36:ce:ed:
df:58:bb:66:99:26:38:84:ff:b3:ae:cd:86:cd:e8:ba:ca:96:
2a:0f:94:64:1f:71:73:f5:19:bc:14:20:ca:43:4a:a7:5a:98:
05:70:45:13:15:ce:e2:65:28:68:60:0c:bb:f5:7a:2d:c1:9b:
cd:00:02:53:e5:36:1f:5e:4e:90:51:f9:fc:4b:5d:d6:36:5d:
f7:d3:57:2e:e1:6d:3d:7f:a3:0a:da:73:16:ca:45:93:81:2e:
30:52:d8:f4:4e:ac:20:7b:19:1b:67:e4:7e:a6:e2:f9:d8:50:
6b:a8:64:7d:2f:fc:58:bb:b8:00:36:9e:bf:a6:2b:43:4d:c7:
56:86:2f:7d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYJtI/p6ryFnErKU9tDbqgEJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlZmZmNmFlNTFlYTJhNjc5Zjc0NWZkOGNjMzk4NDMxNWU1
NzI5OWIwHhcNMjIwODA1MDgzNDEwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYjA5MjUyOTlkMWRhOTM5MTBhMDQ1YjNiMzI3NmI2NGE2YTY4NWJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAld0QNcNOVCeDd78R6oZ3Pta/Y3/C
d5kdDUD4GYZhsX34UsP/9n93QLLEQ/U7vpgeLA+J+LtjGHD2kP/+fYwlOajKX2g5
owpOcWm7YjPL+6DmlqDrSvHrxn6n3XZASddyEOD65Efv/NiaHx/DCE6anIOHKusa
+wgdlOm1kGeiJtTk5G7g3tq0aa+D09uq7q0tK8L2iAlcInKnq4Ye55u3P0B38WJY
2nzXZD3QMjEtmEmEG4+2hdYXwVc6JqlbpGlBQIBI3vLix4jT8vNtZD1sd4LUH/18
8UoOX43jqcDwo66ArWcoU4laGinEShFnE6q4opAkXCI1JMby8eyJJ2DbaQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLsJJSmdHak5EKBFs7Mna2SmpoW7MB8GA1UdIwQY
MBaAFM7/9q5R6ipnn3Rf2Mw5hDFeVymbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvenZfMnJsSHFLbWVmZEZfWXpEbUVNVjVYS1pzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9jZTg2MTktMGIzYy00ZDE1LWJkN2It
YzBlNzJlMmFiODAyLzEvdXdrbEtaMGRxVGtRb0VXenN5ZHJaS2FtaGJzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC9jZTg2MTktMGIzYy00ZDE1LWJkN2ItYzBlNzJlMmFiODAy
LzEvenZfMnJsSHFLbWVmZEZfWXpEbUVNVjVYS1pzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZU+MA0G
CSqGSIb3DQEBCwUAA4IBAQCYuAGJ8LtBPqGWOlomJQn5IxfZsx+3F6+9VfnMtmIo
mo2mB6lp2v2lINnd07Mao6adDnIFCFvfaWzLKsKbMdIi94M4Li3fk9paBWiEY5Sa
2CH0ixjuEYvzYVYyhGEIiISKomLhASzJokJqD4pkX4t06UWfwN3/zucgttU2zu3f
WLtmmSY4hP+zrs2Gzei6ypYqD5RkH3Fz9Rm8FCDKQ0qnWpgFcEUTFc7iZShoYAy7
9XotwZvNAAJT5TYfXk6QUfn8S13WNl3301cu4W09f6MK2nMWykWTgS4wUtj0Tqwg
exkbZ+R+puL52FBrqGR9L/xYu7gANp6/pitDTcdWhi99
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:14 2023 by rpki-client on console-fra.rpki-client.org