Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/ce7f6c-06a6-481f-87f9-6021aa334fa5/1/a4cLgLX0v20ya9RcTPXKJ5t1wko.roa
File: a4cLgLX0v20ya9RcTPXKJ5t1wko.roa (raw, json)
Hash identifier: ir1UxuyHU1rgOmuWb7U68TcHV0GWat23R/klTRGy7XU=
Subject key identifier: 6B:87:0B:80:B5:F4:BF:6D:32:6B:D4:5C:4C:F5:CA:27:9B:75:C2:4A
Certificate issuer: /CN=10c06ca931cb67464e76fbefb3db68f3f12acd41
Certificate serial: 67C31E
Authority key identifier: 10:C0:6C:A9:31:CB:67:46:4E:76:FB:EF:B3:DB:68:F3:F1:2A:CD:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EMBsqTHLZ0ZOdvvvs9to8_EqzUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/ce7f6c-06a6-481f-87f9-6021aa334fa5/1/a4cLgLX0v20ya9RcTPXKJ5t1wko.roa
Signing time: Thu 23 Jun 2022 17:01:19 +0000
ROA not before: Thu 23 Jun 2022 17:01:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209371
IP address blocks: 45.149.233.0/24 maxlen: 24
45.149.232.0/24 maxlen: 24
45.149.234.0/24 maxlen: 24
45.149.235.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6800158 (0x67c31e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10c06ca931cb67464e76fbefb3db68f3f12acd41
Validity
Not Before: Jun 23 17:01:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6b870b80b5f4bf6d326bd45c4cf5ca279b75c24a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:9e:41:28:11:b6:21:22:db:fa:41:48:fc:49:
71:4e:53:85:e7:c1:2a:0d:00:b0:47:39:6d:75:ec:
4b:94:8a:35:39:55:55:5a:ef:5b:f0:e5:ff:ea:5d:
d0:b0:79:4e:b1:e2:b5:b6:72:12:c3:45:0e:fa:73:
67:17:59:50:2e:da:da:9a:06:7c:e0:7f:d6:48:cc:
06:1d:e9:7f:f3:c4:d7:0a:7d:13:d9:5b:c4:f1:57:
5e:92:fd:dc:c5:52:14:86:be:35:82:9b:d6:b2:69:
00:15:92:22:bd:8b:58:67:b7:17:a9:44:d6:1e:59:
30:0b:47:aa:7b:f8:0f:2d:92:fd:f7:fd:50:e4:90:
a0:35:dc:d8:ef:f4:75:9c:84:40:60:e4:d5:4d:e6:
99:4d:ac:0a:1a:c2:01:4b:b9:22:3e:22:13:98:31:
39:db:aa:61:b2:ca:62:5b:50:99:14:00:31:14:32:
ae:a8:08:02:3f:5c:06:a9:18:b1:67:60:80:ed:ba:
0e:7e:10:89:d9:4e:ce:4b:c1:5d:f3:11:d8:62:c1:
ad:45:e7:47:98:aa:4d:78:63:46:1d:99:da:4d:91:
93:7f:33:a3:00:50:16:a2:21:a6:88:a2:ae:d0:d6:
05:60:d0:4f:a0:7f:57:85:1f:4c:0a:5a:3b:eb:35:
c6:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:87:0B:80:B5:F4:BF:6D:32:6B:D4:5C:4C:F5:CA:27:9B:75:C2:4A
X509v3 Authority Key Identifier:
keyid:10:C0:6C:A9:31:CB:67:46:4E:76:FB:EF:B3:DB:68:F3:F1:2A:CD:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EMBsqTHLZ0ZOdvvvs9to8_EqzUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/ce7f6c-06a6-481f-87f9-6021aa334fa5/1/a4cLgLX0v20ya9RcTPXKJ5t1wko.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/ce7f6c-06a6-481f-87f9-6021aa334fa5/1/EMBsqTHLZ0ZOdvvvs9to8_EqzUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.232.0/22
Signature Algorithm: sha256WithRSAEncryption
4e:01:11:20:d2:f5:24:5d:bd:93:8a:b3:fc:6f:b7:b1:d2:8b:
30:cc:17:2c:69:81:c2:3b:0a:26:45:36:c8:ed:6d:9c:ff:1b:
4a:4b:34:60:87:dc:56:81:6a:fc:49:0b:7c:85:e7:5c:64:82:
9d:f0:61:7b:4a:ff:3f:c0:bb:92:6e:ab:c1:87:89:b5:14:f5:
f5:96:10:b9:12:74:ac:9f:d9:68:8c:15:1b:9d:1b:b9:02:68:
09:50:a1:5b:35:4a:3b:40:db:fa:ad:d9:47:7e:97:f3:01:17:
a9:2a:04:36:ca:b2:04:a6:80:9c:8e:10:96:1d:f6:9d:24:95:
d5:0b:4c:49:af:3c:33:d7:f2:2f:09:60:0c:b8:dd:8c:25:f0:
be:be:b8:a8:d7:89:39:68:ce:da:09:2a:45:dd:2b:54:a4:c3:
54:ce:fb:65:cb:fb:83:d3:ff:ab:27:e3:84:94:bd:f2:a8:41:
71:39:9d:e1:54:db:fc:81:8d:46:31:0d:80:cb:06:ac:83:b0:
7a:d5:8c:a0:34:b2:71:25:d7:23:c5:b4:51:af:7d:3b:d4:c1:
06:f4:37:1d:40:2c:22:1d:33:d0:8c:92:67:96:25:01:b7:b9:
a2:4e:70:d6:32:51:f5:f3:89:c9:dc:37:69:67:33:c4:99:2a:
c8:e3:39:66
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgIDZ8MeMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDEw
YzA2Y2E5MzFjYjY3NDY0ZTc2ZmJlZmIzZGI2OGYzZjEyYWNkNDEwHhcNMjIwNjIz
MTcwMTE5WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyg2Yjg3MGI4MGI1ZjRi
ZjZkMzI2YmQ0NWM0Y2Y1Y2EyNzliNzVjMjRhMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAvJ5BKBG2ISLb+kFI/ElxTlOF58EqDQCwRzltdexLlIo1OVVV
Wu9b8OX/6l3QsHlOseK1tnISw0UO+nNnF1lQLtramgZ84H/WSMwGHel/88TXCn0T
2VvE8Vdekv3cxVIUhr41gpvWsmkAFZIivYtYZ7cXqUTWHlkwC0eqe/gPLZL99/1Q
5JCgNdzY7/R1nIRAYOTVTeaZTawKGsIBS7kiPiITmDE526phsspiW1CZFAAxFDKu
qAgCP1wGqRixZ2CA7boOfhCJ2U7OS8Fd8xHYYsGtRedHmKpNeGNGHZnaTZGTfzOj
AFAWoiGmiKKu0NYFYNBPoH9XhR9MClo76zXGIQIDAQABo4ICCTCCAgUwHQYDVR0O
BBYEFGuHC4C19L9tMmvUXEz1yiebdcJKMB8GA1UdIwQYMBaAFBDAbKkxy2dGTnb7
77PbaPPxKs1BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
RU1Cc3FUSExaMFpPZHZ2dnM5dG84X0VxelVFLmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC8zZC9jZTdmNmMtMDZhNi00ODFmLTg3ZjktNjAyMWFhMzM0ZmE1LzEv
YTRjTGdMWDB2MjB5YTlSY1RQWEtKNXQxd2tvLnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC9j
ZTdmNmMtMDZhNi00ODFmLTg3ZjktNjAyMWFhMzM0ZmE1LzEvRU1Cc3FUSExaMFpP
ZHZ2dnM5dG84X0VxelVFLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLZXoMA0GCSqGSIb3DQEBCwUAA4IB
AQBOAREg0vUkXb2TirP8b7ex0oswzBcsaYHCOwomRTbI7W2c/xtKSzRgh9xWgWr8
SQt8hedcZIKd8GF7Sv8/wLuSbqvBh4m1FPX1lhC5EnSsn9lojBUbnRu5AmgJUKFb
NUo7QNv6rdlHfpfzARepKgQ2yrIEpoCcjhCWHfadJJXVC0xJrzwz1/IvCWAMuN2M
JfC+vrio14k5aM7aCSpF3StUpMNUzvtly/uD0/+rJ+OElL3yqEFxOZ3hVNv8gY1G
MQ2Aywasg7B61YygNLJxJdcjxbRRr3071MEG9DcdQCwiHTPQjJJnliUBt7miTnDW
MlH184nJ3DdpZzPEmSrI4zlm
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:06 2023 by rpki-client on console.sobornost.net