Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/1e1tOcPL4hmrhplZQlO6tMSLOag.roa
File: 1e1tOcPL4hmrhplZQlO6tMSLOag.roa (raw, json)
Hash identifier: 8iPzWsEVj5ksHKouuEfg2QiqJJ9hVWhCJnwNuYh2MLw=
Subject key identifier: D5:ED:6D:39:C3:CB:E2:19:AB:86:99:59:42:53:BA:B4:C4:8B:39:A8
Certificate issuer: /CN=62fa765a393369c96d8d836f23f76e67489c7dde
Certificate serial: 08D88D14
Authority key identifier: 62:FA:76:5A:39:33:69:C9:6D:8D:83:6F:23:F7:6E:67:48:9C:7D:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yvp2WjkzacltjYNvI_duZ0icfd4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/1e1tOcPL4hmrhplZQlO6tMSLOag.roa
Signing time: Sat 01 Jan 2022 07:55:54 +0000
ROA not before: Sat 01 Jan 2022 07:55:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60721
IP address blocks: 45.66.148.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 148409620 (0x8d88d14)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fa765a393369c96d8d836f23f76e67489c7dde
Validity
Not Before: Jan 1 07:55:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d5ed6d39c3cbe219ab8699594253bab4c48b39a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:cd:37:2f:46:e4:67:c9:38:97:04:dd:8a:32:
15:13:f3:55:bf:9d:16:18:f6:44:92:7d:ae:95:81:
b7:2c:2d:dc:e2:0d:0e:a3:aa:42:a2:18:4f:5b:30:
80:a5:18:f3:23:7d:bb:3e:f1:c8:f6:a0:0d:ad:b3:
49:e5:3c:f4:4a:f1:ee:68:c4:33:54:31:66:e9:a8:
54:2d:57:7c:36:38:01:30:1e:18:65:71:4e:a9:3a:
fc:2b:7c:c3:66:f4:9a:4a:82:e7:f2:10:48:bb:c1:
3d:7e:fb:1a:24:ad:04:87:79:c9:54:17:d2:15:72:
6a:f9:26:93:6e:bf:28:b3:37:ef:55:70:b8:d7:32:
d1:af:b7:35:66:a7:c7:c7:61:d2:ca:96:4d:82:c3:
72:ba:9b:ea:d3:26:4a:e1:23:a1:ef:ba:8d:0c:37:
16:43:9d:29:00:c1:e2:e5:ac:9b:91:3a:6f:15:02:
e9:0f:87:ce:5b:d5:57:92:d9:e2:8c:d4:b0:f3:46:
6b:de:7f:86:56:b0:f9:1a:05:b9:41:32:91:36:8d:
f7:6b:9f:81:c3:54:7f:b6:e9:f7:25:ed:0b:76:86:
4c:95:7c:de:e5:1c:81:96:d0:7d:bc:ed:56:93:b7:
09:f2:94:86:af:e4:92:55:99:b2:7e:e2:49:3d:03:
04:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:ED:6D:39:C3:CB:E2:19:AB:86:99:59:42:53:BA:B4:C4:8B:39:A8
X509v3 Authority Key Identifier:
keyid:62:FA:76:5A:39:33:69:C9:6D:8D:83:6F:23:F7:6E:67:48:9C:7D:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yvp2WjkzacltjYNvI_duZ0icfd4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/1e1tOcPL4hmrhplZQlO6tMSLOag.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/Yvp2WjkzacltjYNvI_duZ0icfd4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.66.148.0/24
Signature Algorithm: sha256WithRSAEncryption
e2:24:17:76:e4:85:42:d6:f4:e0:f4:3e:90:cc:13:65:13:b4:
93:17:53:a7:f9:e3:33:97:51:a3:e7:63:fc:ff:72:e0:a7:97:
57:33:d3:1d:ff:ac:37:c1:aa:ae:78:ed:83:4a:04:a6:13:33:
c8:75:db:27:17:ff:14:1a:18:40:30:85:80:b7:24:1d:f1:27:
b6:28:7a:d0:81:50:70:3e:c9:dd:e6:ef:91:8e:f0:7f:0e:02:
6f:44:d6:ff:f4:d3:6c:a1:90:bc:e1:d7:14:31:08:b4:65:02:
fd:ac:20:05:67:58:3c:e4:9d:92:46:f6:18:68:99:83:21:10:
11:62:ff:eb:5e:14:f6:84:d4:c3:48:03:84:e2:84:40:9d:2b:
ab:b9:b2:a3:34:58:75:6f:bf:67:0b:4b:e5:b1:24:a4:e3:be:
a6:cf:e1:8a:43:99:93:97:97:e3:e5:d8:23:71:66:b1:67:b6:
6b:d8:67:4b:cc:09:eb:5d:b8:ff:25:cb:56:d7:f3:94:1f:84:
30:e7:93:da:5b:42:1d:cd:61:79:dc:20:4f:9f:32:fc:8a:c4:
a2:93:02:fd:52:0d:10:72:21:b8:43:3b:2d:23:28:36:72:03:
f1:a3:b7:0f:48:2e:87:34:a9:7c:64:be:68:21:77:27:0d:6c:
3d:ea:da:c3
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIECNiNFDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
MmZhNzY1YTM5MzM2OWM5NmQ4ZDgzNmYyM2Y3NmU2NzQ4OWM3ZGRlMB4XDTIyMDEw
MTA3NTU1NFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZDVlZDZkMzljM2Ni
ZTIxOWFiODY5OTU5NDI1M2JhYjRjNDhiMzlhODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMLNNy9G5GfJOJcE3YoyFRPzVb+dFhj2RJJ9rpWBtywt3OIN
DqOqQqIYT1swgKUY8yN9uz7xyPagDa2zSeU89Erx7mjEM1QxZumoVC1XfDY4ATAe
GGVxTqk6/Ct8w2b0mkqC5/IQSLvBPX77GiStBId5yVQX0hVyavkmk26/KLM371Vw
uNcy0a+3NWanx8dh0sqWTYLDcrqb6tMmSuEjoe+6jQw3FkOdKQDB4uWsm5E6bxUC
6Q+HzlvVV5LZ4ozUsPNGa95/hlaw+RoFuUEykTaN92ufgcNUf7bp9yXtC3aGTJV8
3uUcgZbQfbztVpO3CfKUhq/kklWZsn7iST0DBKkCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTV7W05w8viGauGmVlCU7q0xIs5qDAfBgNVHSMEGDAWgBRi+nZaOTNpyW2N
g28j925nSJx93jAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1l2cDJXamt6YWNsdGpZTnZJX2R1WjBpY2ZkNC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZjIvYWRmZjgwLWIyMDctNGZiZC1iZjVlLTA3ZGQxYjRjNTVkOS8x
LzFlMXRPY1BMNGhtcmhwbFpRbE82dE1TTE9hZy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjIv
YWRmZjgwLWIyMDctNGZiZC1iZjVlLTA3ZGQxYjRjNTVkOS8xL1l2cDJXamt6YWNs
dGpZTnZJX2R1WjBpY2ZkNC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC1ClDANBgkqhkiG9w0BAQsFAAOC
AQEA4iQXduSFQtb04PQ+kMwTZRO0kxdTp/njM5dRo+dj/P9y4KeXVzPTHf+sN8Gq
rnjtg0oEphMzyHXbJxf/FBoYQDCFgLckHfEntih60IFQcD7J3ebvkY7wfw4Cb0TW
//TTbKGQvOHXFDEItGUC/awgBWdYPOSdkkb2GGiZgyEQEWL/614U9oTUw0gDhOKE
QJ0rq7myozRYdW+/ZwtL5bEkpOO+ps/hikOZk5eX4+XYI3FmsWe2a9hnS8wJ6124
/yXLVtfzlB+EMOeT2ltCHc1hedwgT58y/IrEopMC/VINEHIhuEM7LSMoNnID8aO3
D0guhzSpfGS+aCF3Jw1sPeraww==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:20 2024 by rpki-client on console-ams.rpki-client.org