Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/6b1e95-bc53-48ca-a1ee-b543f853ff25/1/Sr2bnDk0z7v_DBgl_M1n43i_63Q.roa
File: Sr2bnDk0z7v_DBgl_M1n43i_63Q.roa (raw, json)
Hash identifier: 9uRMTo5+MIV2kWiY0m9sKlRsun8JDtO5YGLqB+ATCLs=
Subject key identifier: 4A:BD:9B:9C:39:34:CF:BB:FF:0C:18:25:FC:CD:67:E3:78:BF:EB:74
Certificate issuer: /CN=d834ed2f9e2cef4701021e75ff454164fedc7c51
Certificate serial: 2AB7AB
Authority key identifier: D8:34:ED:2F:9E:2C:EF:47:01:02:1E:75:FF:45:41:64:FE:DC:7C:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2DTtL54s70cBAh51_0VBZP7cfFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/6b1e95-bc53-48ca-a1ee-b543f853ff25/1/Sr2bnDk0z7v_DBgl_M1n43i_63Q.roa
Signing time: Sat 01 Jan 2022 01:03:20 +0000
ROA not before: Sat 01 Jan 2022 01:03:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200845
IP address blocks: 45.8.49.0/24 maxlen: 24
45.8.48.0/23 maxlen: 23
45.8.48.0/24 maxlen: 24
45.8.50.0/23 maxlen: 23
45.8.51.0/24 maxlen: 24
45.8.50.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2799531 (0x2ab7ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d834ed2f9e2cef4701021e75ff454164fedc7c51
Validity
Not Before: Jan 1 01:03:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4abd9b9c3934cfbbff0c1825fccd67e378bfeb74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:c5:eb:5b:0f:20:ac:d7:86:75:bb:e5:fb:43:
47:c7:06:db:99:f8:84:9c:51:eb:a5:f2:dc:fd:40:
2c:ee:cd:ab:6e:3b:80:c5:3d:84:63:f2:59:75:f9:
19:1f:ff:a2:2a:d3:94:e5:a4:d6:35:d5:fe:aa:98:
a8:d0:24:ef:a8:db:b1:b3:30:56:05:af:03:3b:bb:
c6:2f:d1:01:87:74:8a:98:49:ab:c7:92:64:ac:2e:
19:1c:b7:9d:13:d4:69:0c:2c:dd:ae:24:b5:0a:d0:
8f:91:83:95:61:8b:f9:92:c9:4a:fe:59:93:60:3b:
67:b9:da:0a:94:9a:36:5f:c9:0e:51:8b:3a:29:c5:
ad:15:d3:cf:e5:f3:39:81:76:3f:3e:55:6c:12:c7:
fa:04:91:e2:2a:fe:d6:57:eb:2b:c0:64:cc:09:b4:
30:11:2d:8b:d6:8d:6c:7a:18:48:4b:91:0e:62:68:
af:92:24:1b:60:f2:72:cf:5b:6c:98:96:72:e7:ad:
b3:f7:ba:18:32:64:ee:d0:fc:15:34:05:96:fe:88:
4e:b5:42:66:91:37:37:55:4d:43:6b:02:e0:53:e5:
04:5f:67:57:a4:6f:8c:4a:6e:7c:7d:53:15:59:4d:
07:19:31:df:49:36:13:cc:ab:2f:a2:cd:32:c2:0f:
85:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:BD:9B:9C:39:34:CF:BB:FF:0C:18:25:FC:CD:67:E3:78:BF:EB:74
X509v3 Authority Key Identifier:
keyid:D8:34:ED:2F:9E:2C:EF:47:01:02:1E:75:FF:45:41:64:FE:DC:7C:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2DTtL54s70cBAh51_0VBZP7cfFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/6b1e95-bc53-48ca-a1ee-b543f853ff25/1/Sr2bnDk0z7v_DBgl_M1n43i_63Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/6b1e95-bc53-48ca-a1ee-b543f853ff25/1/2DTtL54s70cBAh51_0VBZP7cfFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.48.0/22
Signature Algorithm: sha256WithRSAEncryption
a1:87:8b:71:fa:3a:d0:f5:3c:6e:5c:e8:d5:e2:e4:87:af:c2:
39:9c:b3:5c:0a:66:93:2c:ef:42:bc:f6:d8:e7:bc:e1:c8:a4:
0e:2a:ce:fb:1c:c2:55:83:14:98:ec:17:4f:91:36:3a:de:e5:
7e:c6:01:a0:5f:f0:57:0b:64:89:cb:ba:5a:95:3f:77:85:03:
02:a5:f6:91:1f:75:12:ad:bd:68:e9:4d:01:66:9b:25:1d:0d:
79:66:5e:0d:37:06:e9:37:89:01:ad:46:a7:ae:0d:58:4d:6f:
f0:62:38:ed:60:06:a4:64:fb:bf:41:66:e8:d6:2c:c0:34:23:
5a:f2:a2:30:8b:d7:2f:77:82:70:bf:c0:ef:0e:cc:7c:be:18:
3b:bb:bc:51:0c:81:81:43:6a:85:36:09:c4:ed:5c:b7:9b:f9:
bd:6f:80:1b:37:64:94:ca:9d:5a:ea:63:c8:6c:61:54:eb:88:
5c:db:5a:d4:fa:ad:69:46:b6:01:64:96:b3:84:49:51:03:cf:
a3:08:83:39:85:17:bb:72:5a:c1:8d:5e:a2:2f:fa:20:ec:29:
6f:4a:d0:12:6c:69:37:21:d3:10:d8:7d:9f:eb:75:44:f5:01:
8b:41:5d:2c:e2:19:a3:53:28:07:8b:4c:d9:01:29:3e:04:f0:
93:24:34:03
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgIDKrerMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGQ4
MzRlZDJmOWUyY2VmNDcwMTAyMWU3NWZmNDU0MTY0ZmVkYzdjNTEwHhcNMjIwMTAx
MDEwMzIwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyg0YWJkOWI5YzM5MzRj
ZmJiZmYwYzE4MjVmY2NkNjdlMzc4YmZlYjc0MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAzcXrWw8grNeGdbvl+0NHxwbbmfiEnFHrpfLc/UAs7s2rbjuA
xT2EY/JZdfkZH/+iKtOU5aTWNdX+qpio0CTvqNuxszBWBa8DO7vGL9EBh3SKmEmr
x5JkrC4ZHLedE9RpDCzdriS1CtCPkYOVYYv5kslK/lmTYDtnudoKlJo2X8kOUYs6
KcWtFdPP5fM5gXY/PlVsEsf6BJHiKv7WV+srwGTMCbQwES2L1o1sehhIS5EOYmiv
kiQbYPJyz1tsmJZy562z97oYMmTu0PwVNAWW/ohOtUJmkTc3VU1DawLgU+UEX2dX
pG+MSm58fVMVWU0HGTHfSTYTzKsvos0ywg+FfQIDAQABo4ICCTCCAgUwHQYDVR0O
BBYEFEq9m5w5NM+7/wwYJfzNZ+N4v+t0MB8GA1UdIwQYMBaAFNg07S+eLO9HAQIe
df9FQWT+3HxRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
MkRUdEw1NHM3MGNCQWg1MV8wVkJaUDdjZkZFLmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC8wZS82YjFlOTUtYmM1My00OGNhLWExZWUtYjU0M2Y4NTNmZjI1LzEv
U3IyYm5EazB6N3ZfREJnbF9NMW40M2lfNjNRLnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS82
YjFlOTUtYmM1My00OGNhLWExZWUtYjU0M2Y4NTNmZjI1LzEvMkRUdEw1NHM3MGNC
QWg1MV8wVkJaUDdjZkZFLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLQgwMA0GCSqGSIb3DQEBCwUAA4IB
AQChh4tx+jrQ9TxuXOjV4uSHr8I5nLNcCmaTLO9CvPbY57zhyKQOKs77HMJVgxSY
7BdPkTY63uV+xgGgX/BXC2SJy7palT93hQMCpfaRH3USrb1o6U0BZpslHQ15Zl4N
NwbpN4kBrUanrg1YTW/wYjjtYAakZPu/QWbo1izANCNa8qIwi9cvd4Jwv8DvDsx8
vhg7u7xRDIGBQ2qFNgnE7Vy3m/m9b4AbN2SUyp1a6mPIbGFU64hc21rU+q1pRrYB
ZJazhElRA8+jCIM5hRe7clrBjV6iL/og7ClvStASbGk3IdMQ2H2f63VE9QGLQV0s
4hmjUygHi0zZASk+BPCTJDQD
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:53 2024 by rpki-client on console-fra.rpki-client.org