Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/BqgSvgvgq1kAKxwdh1vp6k6WhcI.roa
File: BqgSvgvgq1kAKxwdh1vp6k6WhcI.roa (raw, json)
Hash identifier: PT02nLLrcEWfszP/4yjTCUQPN98JoHo5b7WmPKzfQzM=
Subject key identifier: 06:A8:12:BE:0B:E0:AB:59:00:2B:1C:1D:87:5B:E9:EA:4E:96:85:C2
Certificate issuer: /CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
Certificate serial: 0185E5801109B369F76AC24BEF3065435117
Authority key identifier: 21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/BqgSvgvgq1kAKxwdh1vp6k6WhcI.roa
Signing time: Tue 24 Jan 2023 20:37:33 +0000
ROA not before: Tue 24 Jan 2023 20:37:33 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 55286
IP address blocks: 45.132.97.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:e5:80:11:09:b3:69:f7:6a:c2:4b:ef:30:65:43:51:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
Validity
Not Before: Jan 24 20:37:33 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=06a812be0be0ab59002b1c1d875be9ea4e9685c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:f5:55:47:3a:54:0a:27:87:fd:7f:ac:19:70:
c4:22:10:53:0b:ef:17:cb:d3:a8:d9:04:48:b3:0a:
f1:9d:07:a8:35:eb:cc:49:31:a1:f9:a6:ea:8f:1b:
92:0e:1e:de:4b:7d:a3:58:f0:7b:47:24:f6:10:25:
6b:29:ea:2f:7a:4e:1c:29:1e:54:23:1d:a7:7e:30:
d4:42:62:31:63:2f:f6:5b:76:52:8c:2f:57:63:9d:
0e:bb:af:75:48:8e:63:df:98:21:0a:ea:31:e9:f9:
90:e8:c6:99:1a:23:e4:3b:70:7a:17:fc:55:0c:0e:
da:a1:87:17:c5:c7:83:9a:25:c6:fe:cf:53:59:f8:
99:d3:ef:d9:62:36:05:15:0a:10:c2:75:89:6d:a6:
01:67:7b:b3:ab:2f:66:a8:ae:0e:a3:c4:0b:ab:45:
a8:13:2a:db:38:34:2a:68:5c:b3:0b:b6:80:9f:46:
5c:f9:1e:bc:3d:d0:72:c0:67:d5:34:9e:ae:de:64:
8d:63:5e:11:16:7d:9e:ce:b7:3a:f6:83:18:b3:66:
dd:76:8b:2f:fe:9b:56:43:39:d6:b0:83:51:e1:87:
55:d0:ee:95:54:1a:74:f9:36:7d:89:18:ea:86:47:
77:f7:c4:92:64:a4:35:5c:21:d9:b6:cf:ee:8c:11:
31:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:A8:12:BE:0B:E0:AB:59:00:2B:1C:1D:87:5B:E9:EA:4E:96:85:C2
X509v3 Authority Key Identifier:
keyid:21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/BqgSvgvgq1kAKxwdh1vp6k6WhcI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/IYFM8so-F5k0nM1Mfmp21j-DSj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.97.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:6b:84:7f:be:b9:9f:c5:80:3c:77:00:24:5f:9b:bc:b6:b5:
c2:77:48:4e:71:84:68:d8:6e:3d:ee:2d:7b:65:1d:1b:ed:67:
e2:2b:94:c1:8f:d8:88:fa:12:ff:42:2d:c6:e3:39:7a:06:02:
61:90:a8:90:1f:f4:9e:52:2c:dc:cc:e9:d7:9d:c4:44:fa:24:
2a:8f:e2:30:1e:42:ad:17:77:d2:86:61:ba:37:9d:28:63:70:
ab:37:66:22:c8:c4:83:3b:55:50:ba:a8:b3:9e:ad:1a:ec:55:
c1:f5:7d:8a:07:0a:3c:6e:dc:69:d8:23:d9:90:05:99:ad:cb:
09:7b:2c:af:75:46:9c:ba:31:f8:89:3a:94:0c:5c:ba:1c:0d:
41:f8:d7:61:e8:02:94:58:32:46:1f:9e:1f:c6:b0:f7:6d:66:
9c:03:76:78:0b:04:e1:4b:d4:7a:10:ce:c9:a2:f4:f1:b5:83:
f9:b6:eb:93:bf:5d:ea:bd:c9:51:80:97:1d:44:cc:ac:0f:c7:
e5:52:9c:71:fb:23:22:c5:b9:64:02:de:ad:47:ef:4c:70:1e:
3b:09:ab:98:05:28:1b:1e:c8:95:36:14:e1:ed:8a:06:3d:9a:
23:41:63:b7:4c:d5:e3:4d:f7:85:eb:d7:29:b6:72:2d:1f:67:
15:a4:58:5a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYXlgBEJs2n3asJL7zBlQ1EXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxODE0Y2YyY2EzZTE3OTkzNDljY2Q0YzdlNmE3NmQ2M2Y4
MzRhM2QwHhcNMjMwMTI0MjAzNzMzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNmE4MTJiZTBiZTBhYjU5MDAyYjFjMWQ4NzViZTllYTRlOTY4NWMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4fVVRzpUCieH/X+sGXDEIhBTC+8X
y9Oo2QRIswrxnQeoNevMSTGh+abqjxuSDh7eS32jWPB7RyT2ECVrKeovek4cKR5U
Ix2nfjDUQmIxYy/2W3ZSjC9XY50Ou691SI5j35ghCuox6fmQ6MaZGiPkO3B6F/xV
DA7aoYcXxceDmiXG/s9TWfiZ0+/ZYjYFFQoQwnWJbaYBZ3uzqy9mqK4Oo8QLq0Wo
EyrbODQqaFyzC7aAn0Zc+R68PdBywGfVNJ6u3mSNY14RFn2ezrc69oMYs2bddosv
/ptWQznWsINR4YdV0O6VVBp0+TZ9iRjqhkd398SSZKQ1XCHZts/ujBExiwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAaoEr4L4KtZACscHYdb6epOloXCMB8GA1UdIwQY
MBaAFCGBTPLKPheZNJzNTH5qdtY/g0o9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVlGTThzby1GNWswbk0xTWZtcDIxai1EU2owLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC8wMWY4NTMtZDQ0NS00YWNlLWE4ZDgt
MjI3MDFiNGJiNDA3LzEvQnFnU3ZndmdxMWtBS3h3ZGgxdnA2azZXaGNJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC8wMWY4NTMtZDQ0NS00YWNlLWE4ZDgtMjI3MDFiNGJiNDA3
LzEvSVlGTThzby1GNWswbk0xTWZtcDIxai1EU2owLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYRhMA0G
CSqGSIb3DQEBCwUAA4IBAQCma4R/vrmfxYA8dwAkX5u8trXCd0hOcYRo2G497i17
ZR0b7WfiK5TBj9iI+hL/Qi3G4zl6BgJhkKiQH/SeUizczOnXncRE+iQqj+IwHkKt
F3fShmG6N50oY3CrN2YiyMSDO1VQuqiznq0a7FXB9X2KBwo8btxp2CPZkAWZrcsJ
eyyvdUacujH4iTqUDFy6HA1B+Ndh6AKUWDJGH54fxrD3bWacA3Z4CwThS9R6EM7J
ovTxtYP5tuuTv13qvclRgJcdRMysD8flUpxx+yMixblkAt6tR+9McB47CauYBSgb
HsiVNhTh7YoGPZojQWO3TNXjTfeF69cptnItH2cVpFha
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:50 2024 by rpki-client on console-fra.rpki-client.org