Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/d4c940-edb8-49d0-a775-848750e68646/1/dEHKiSDTggn9FKiBwwLsxiQFtdE.roa
File: dEHKiSDTggn9FKiBwwLsxiQFtdE.roa (raw, json)
Hash identifier: eNK0EyjBVAhlKR4G8r6mB8/FZei/wd1ooC5xTfI5K9Q=
Subject key identifier: 74:41:CA:89:20:D3:82:09:FD:14:A8:81:C3:02:EC:C6:24:05:B5:D1
Certificate issuer: /CN=d3c14142fc885708d0cf28d580cd2c16dbc14a25
Certificate serial: 841833
Authority key identifier: D3:C1:41:42:FC:88:57:08:D0:CF:28:D5:80:CD:2C:16:DB:C1:4A:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/08FBQvyIVwjQzyjVgM0sFtvBSiU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/d4c940-edb8-49d0-a775-848750e68646/1/dEHKiSDTggn9FKiBwwLsxiQFtdE.roa
Signing time: Sat 01 Jan 2022 01:57:51 +0000
ROA not before: Sat 01 Jan 2022 01:57:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29119
IP address blocks: 45.90.52.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8656947 (0x841833)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3c14142fc885708d0cf28d580cd2c16dbc14a25
Validity
Not Before: Jan 1 01:57:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7441ca8920d38209fd14a881c302ecc62405b5d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:a9:12:c8:ec:c4:2c:eb:8e:59:01:23:3d:39:
e8:ff:4a:f1:a7:52:c9:b2:32:37:da:ce:4b:88:26:
0c:7d:f9:56:11:af:ea:50:d3:1d:f7:44:68:ba:c7:
3d:a4:03:33:f8:1e:ae:b8:03:31:c1:03:58:02:7b:
08:cc:0c:75:4c:50:bf:98:a4:30:88:43:22:98:fa:
53:95:92:f8:f1:d3:7e:bc:00:4b:d2:ee:83:28:da:
5b:e8:15:72:b6:4e:56:1a:ef:20:18:25:b3:bd:0e:
24:32:1d:b8:6d:0f:f0:47:e0:80:c3:9b:45:6d:31:
8e:53:6b:54:23:90:d3:17:4c:fa:ab:28:24:ff:bd:
cb:f5:fc:80:77:46:d9:d9:05:44:1a:75:17:75:01:
32:9f:2d:0a:88:7e:9f:c5:9b:44:05:32:55:58:00:
f0:3e:0c:05:c5:b3:7e:59:02:34:3a:6d:44:35:97:
f2:f0:23:b5:3c:b2:e5:52:c5:95:5f:1a:ba:e0:05:
b9:2a:66:b3:76:11:82:d3:de:d8:98:ec:37:5a:cf:
89:e4:21:a6:03:b6:2f:70:27:1e:7d:2f:1b:48:9e:
cd:78:5c:66:ba:5c:ef:70:68:11:c7:0b:bc:57:7f:
6b:20:c9:fb:6c:d4:15:d0:19:64:14:0f:4c:0b:1b:
5f:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:41:CA:89:20:D3:82:09:FD:14:A8:81:C3:02:EC:C6:24:05:B5:D1
X509v3 Authority Key Identifier:
keyid:D3:C1:41:42:FC:88:57:08:D0:CF:28:D5:80:CD:2C:16:DB:C1:4A:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/08FBQvyIVwjQzyjVgM0sFtvBSiU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/d4c940-edb8-49d0-a775-848750e68646/1/dEHKiSDTggn9FKiBwwLsxiQFtdE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/d4c940-edb8-49d0-a775-848750e68646/1/08FBQvyIVwjQzyjVgM0sFtvBSiU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.90.52.0/22
Signature Algorithm: sha256WithRSAEncryption
56:1c:47:0f:28:6a:0c:c5:0a:8c:be:0f:d3:03:51:ed:00:4f:
56:ea:5a:80:f9:36:5d:60:4e:2d:96:e0:07:93:e2:24:c2:d8:
b0:c4:1c:e4:28:40:cb:eb:2e:5f:53:d0:bf:38:be:76:e4:78:
a7:b6:22:9c:df:c0:5f:a9:32:8a:31:83:37:38:7b:d4:e2:44:
c7:14:05:11:5e:38:fe:b8:72:3c:01:d5:f7:79:34:07:ce:e6:
2e:93:a6:44:5e:5d:7e:a8:8c:84:82:a9:b7:9d:b4:cb:69:c9:
66:e9:e3:db:45:5e:79:e9:e4:e1:cc:e1:30:30:52:6b:13:88:
48:be:6e:b8:39:f4:3b:f5:f4:f0:ad:2c:09:60:51:fa:67:2d:
b7:b6:3b:8d:3d:5f:90:d4:e0:06:72:a2:ed:a9:e1:86:82:75:
1e:a3:94:5d:e0:29:79:56:b3:12:22:25:90:d2:ce:8e:4c:f7:
28:0f:29:7c:0b:40:89:22:ed:a5:d8:77:62:29:12:c0:93:69:
44:43:75:ea:66:a6:8a:f6:fe:b6:4d:95:4a:a8:b4:04:8c:2c:
c1:12:ae:d5:8a:32:92:96:98:7c:45:2a:90:5b:f0:02:f6:3d:
8b:66:55:af:55:6c:5b:11:84:a7:35:48:62:d0:b9:9b:ce:a1:
06:13:38:32
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAIQYMzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhk
M2MxNDE0MmZjODg1NzA4ZDBjZjI4ZDU4MGNkMmMxNmRiYzE0YTI1MB4XDTIyMDEw
MTAxNTc1MVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNzQ0MWNhODkyMGQz
ODIwOWZkMTRhODgxYzMwMmVjYzYyNDA1YjVkMTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKOpEsjsxCzrjlkBIz056P9K8adSybIyN9rOS4gmDH35VhGv
6lDTHfdEaLrHPaQDM/gerrgDMcEDWAJ7CMwMdUxQv5ikMIhDIpj6U5WS+PHTfrwA
S9LugyjaW+gVcrZOVhrvIBgls70OJDIduG0P8EfggMObRW0xjlNrVCOQ0xdM+qso
JP+9y/X8gHdG2dkFRBp1F3UBMp8tCoh+n8WbRAUyVVgA8D4MBcWzflkCNDptRDWX
8vAjtTyy5VLFlV8auuAFuSpms3YRgtPe2JjsN1rPieQhpgO2L3AnHn0vG0iezXhc
Zrpc73BoEccLvFd/ayDJ+2zUFdAZZBQPTAsbX4MCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBR0QcqJINOCCf0UqIHDAuzGJAW10TAfBgNVHSMEGDAWgBTTwUFC/IhXCNDP
KNWAzSwW28FKJTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzA4RkJRdnlJVndqUXp5alZnTTBzRnR2QlNpVS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMGEvZDRjOTQwLWVkYjgtNDlkMC1hNzc1LTg0ODc1MGU2ODY0Ni8x
L2RFSEtpU0RUZ2duOUZLaUJ3d0xzeGlRRnRkRS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGEv
ZDRjOTQwLWVkYjgtNDlkMC1hNzc1LTg0ODc1MGU2ODY0Ni8xLzA4RkJRdnlJVndq
UXp5alZnTTBzRnR2QlNpVS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAi1aNDANBgkqhkiG9w0BAQsFAAOC
AQEAVhxHDyhqDMUKjL4P0wNR7QBPVupagPk2XWBOLZbgB5PiJMLYsMQc5ChAy+su
X1PQvzi+duR4p7YinN/AX6kyijGDNzh71OJExxQFEV44/rhyPAHV93k0B87mLpOm
RF5dfqiMhIKpt520y2nJZunj20Veeenk4czhMDBSaxOISL5uuDn0O/X08K0sCWBR
+mctt7Y7jT1fkNTgBnKi7anhhoJ1HqOUXeApeVazEiIlkNLOjkz3KA8pfAtAiSLt
pdh3YikSwJNpREN16mamivb+tk2VSqi0BIwswRKu1YoykpaYfEUqkFvwAvY9i2ZV
r1VsWxGEpzVIYtC5m86hBhM4Mg==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:21 2023 by rpki-client on console-ams.rpki-client.org