Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/4b288a-a134-406a-952b-a7e440b528d0/1/Sx0FrA2F8sbLiNIZb1lOdHsRtYQ.roa
File: Sx0FrA2F8sbLiNIZb1lOdHsRtYQ.roa (raw, json)
Hash identifier: SbzuxRmXkH5LgziBHnZ26JX1Sysj9j8NcFod9SUcB1M=
Subject key identifier: 4B:1D:05:AC:0D:85:F2:C6:CB:88:D2:19:6F:59:4E:74:7B:11:B5:84
Certificate issuer: /CN=b2f0bbb148be5c01564f4b8957e76ce186ad2940
Certificate serial: 07F71ED9
Authority key identifier: B2:F0:BB:B1:48:BE:5C:01:56:4F:4B:89:57:E7:6C:E1:86:AD:29:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/svC7sUi-XAFWT0uJV-ds4YatKUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/4b288a-a134-406a-952b-a7e440b528d0/1/Sx0FrA2F8sbLiNIZb1lOdHsRtYQ.roa
Signing time: Sat 01 Jan 2022 07:57:54 +0000
ROA not before: Sat 01 Jan 2022 07:57:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41230
IP address blocks: 45.81.120.0/22 maxlen: 22
2a0e:5680::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 133635801 (0x7f71ed9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0bbb148be5c01564f4b8957e76ce186ad2940
Validity
Not Before: Jan 1 07:57:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4b1d05ac0d85f2c6cb88d2196f594e747b11b584
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:b7:0a:9a:46:7e:d6:3e:ca:8c:23:f8:c1:16:
41:2f:b5:f5:6d:63:b5:59:f3:dd:4c:da:65:18:46:
71:77:70:78:96:a2:b8:fa:cd:d8:45:fd:67:d4:80:
3f:06:26:99:f9:1d:10:80:58:7b:c3:b4:e1:37:ee:
83:51:45:43:90:76:3a:94:62:16:1e:fa:63:48:10:
38:4a:87:b8:d1:73:d7:36:66:e5:1b:f5:f7:e5:dd:
d4:4e:9f:03:8d:ce:17:af:1f:8c:8a:13:5a:88:f9:
e7:c9:38:69:08:06:a4:1e:da:9a:97:f8:da:ff:8a:
ce:c3:9c:4e:60:a4:e6:ef:05:92:ca:c7:bc:70:2b:
5e:2a:dc:a8:e1:dd:43:9a:6f:52:08:c9:de:d5:dc:
d5:17:aa:d2:f4:03:32:a7:c5:69:e5:84:20:08:7b:
80:35:13:70:e6:c5:5b:c2:9d:f8:af:d4:83:c6:b5:
4f:1a:17:23:fd:b2:70:b1:fa:4c:65:c3:b9:1e:d0:
c9:33:9c:ac:7b:4a:3f:24:c2:91:89:35:aa:14:42:
76:df:b7:42:c6:f3:f9:e5:18:ae:ba:7b:ea:7d:eb:
6b:4e:89:a8:6c:b2:44:70:ee:da:30:54:a3:42:f1:
08:c4:bb:0a:c4:3f:aa:c5:3b:65:7a:0d:42:db:7a:
ba:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:1D:05:AC:0D:85:F2:C6:CB:88:D2:19:6F:59:4E:74:7B:11:B5:84
X509v3 Authority Key Identifier:
keyid:B2:F0:BB:B1:48:BE:5C:01:56:4F:4B:89:57:E7:6C:E1:86:AD:29:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/svC7sUi-XAFWT0uJV-ds4YatKUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/4b288a-a134-406a-952b-a7e440b528d0/1/Sx0FrA2F8sbLiNIZb1lOdHsRtYQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/4b288a-a134-406a-952b-a7e440b528d0/1/svC7sUi-XAFWT0uJV-ds4YatKUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.120.0/22
IPv6:
2a0e:5680::/29
Signature Algorithm: sha256WithRSAEncryption
87:b1:12:1b:ff:84:71:80:6d:2f:ea:eb:4b:9f:6f:15:90:73:
40:b6:ad:23:24:85:52:fd:89:0a:9f:4f:e0:35:3c:3a:10:ca:
b5:19:50:27:85:33:e4:f4:77:e1:44:f4:56:75:97:24:ab:9a:
eb:8d:c0:78:cf:a8:d1:8b:64:89:6d:a4:59:a0:d0:a2:ee:63:
da:ee:a4:f5:df:99:c6:61:9c:de:3e:bd:22:dc:4e:4a:80:2c:
8b:3a:76:87:c3:d3:42:a3:da:64:52:89:84:28:a6:26:de:d1:
08:83:dc:e7:7e:e6:9d:e8:be:d6:ab:c5:9e:e1:ae:c7:56:67:
11:1e:3d:50:6c:9a:89:64:7a:7b:a7:99:54:29:00:bf:37:c7:
fb:22:5a:74:55:ec:74:6b:f1:4f:8b:03:0f:cf:29:7c:96:1d:
49:fe:84:a8:48:ea:ea:a8:aa:07:d0:6b:5e:ee:fc:43:3b:5c:
57:1e:9b:00:f0:06:88:b9:35:98:8a:10:38:eb:60:79:96:46:
86:d6:8d:7c:3c:27:db:dc:48:cf:6f:d7:6c:a1:9a:25:fe:23:
c6:63:37:58:54:12:3d:62:e1:d8:35:28:69:4c:0d:e5:f5:53:
f4:3d:36:ab:d1:2b:e5:b1:9b:a4:4a:94:5e:b9:41:42:65:1d:
39:1f:29:58
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgIEB/ce2TANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhi
MmYwYmJiMTQ4YmU1YzAxNTY0ZjRiODk1N2U3NmNlMTg2YWQyOTQwMB4XDTIyMDEw
MTA3NTc1NFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNGIxZDA1YWMwZDg1
ZjJjNmNiODhkMjE5NmY1OTRlNzQ3YjExYjU4NDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMu3CppGftY+yowj+MEWQS+19W1jtVnz3UzaZRhGcXdweJai
uPrN2EX9Z9SAPwYmmfkdEIBYe8O04Tfug1FFQ5B2OpRiFh76Y0gQOEqHuNFz1zZm
5Rv19+Xd1E6fA43OF68fjIoTWoj558k4aQgGpB7ampf42v+KzsOcTmCk5u8FksrH
vHArXircqOHdQ5pvUgjJ3tXc1Req0vQDMqfFaeWEIAh7gDUTcObFW8Kd+K/Ug8a1
TxoXI/2ycLH6TGXDuR7QyTOcrHtKPyTCkYk1qhRCdt+3Qsbz+eUYrrp76n3ra06J
qGyyRHDu2jBUo0LxCMS7CsQ/qsU7ZXoNQtt6umcCAwEAAaOCAhgwggIUMB0GA1Ud
DgQWBBRLHQWsDYXyxsuI0hlvWU50exG1hDAfBgNVHSMEGDAWgBSy8LuxSL5cAVZP
S4lX52zhhq0pQDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3N2QzdzVWktWEFGV1QwdUpWLWRzNFlhdEtVQS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMGQvNGIyODhhLWExMzQtNDA2YS05NTJiLWE3ZTQ0MGI1MjhkMC8x
L1N4MEZyQTJGOHNiTGlOSVpiMWxPZEhzUnRZUS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGQv
NGIyODhhLWExMzQtNDA2YS05NTJiLWE3ZTQ0MGI1MjhkMC8xL3N2QzdzVWktWEFG
V1QwdUpWLWRzNFlhdEtVQS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAi1ReDANBAIAAjAHAwUDKg5WgDAN
BgkqhkiG9w0BAQsFAAOCAQEAh7ESG/+EcYBtL+rrS59vFZBzQLatIySFUv2JCp9P
4DU8OhDKtRlQJ4Uz5PR34UT0VnWXJKua643AeM+o0YtkiW2kWaDQou5j2u6k9d+Z
xmGc3j69ItxOSoAsizp2h8PTQqPaZFKJhCimJt7RCIPc537mnei+1qvFnuGux1Zn
ER49UGyaiWR6e6eZVCkAvzfH+yJadFXsdGvxT4sDD88pfJYdSf6EqEjq6qiqB9Br
Xu78QztcVx6bAPAGiLk1mIoQOOtgeZZGhtaNfDwn29xIz2/XbKGaJf4jxmM3WFQS
PWLh2DUoaUwN5fVT9D02q9Er5bGbpEqUXrlBQmUdOR8pWA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:44 2024 by rpki-client on console-fra.rpki-client.org