Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/1229e4-940b-4628-b41f-80f14c671d6e/1/97mHOOGRxZMkunstg7fC39sUh7Q.roa
File: 97mHOOGRxZMkunstg7fC39sUh7Q.roa (raw, json)
Hash identifier: MadRYc+cfUAnyzw8NCpPfUbuqTY0gJx+6rwQpSHivZU=
Subject key identifier: F7:B9:87:38:E1:91:C5:93:24:BA:7B:2D:83:B7:C2:DF:DB:14:87:B4
Certificate issuer: /CN=525c79479aeb01d1a60257dc07904b9f5b9a6791
Certificate serial: 01530C1E
Authority key identifier: 52:5C:79:47:9A:EB:01:D1:A6:02:57:DC:07:90:4B:9F:5B:9A:67:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ulx5R5rrAdGmAlfcB5BLn1uaZ5E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/1229e4-940b-4628-b41f-80f14c671d6e/1/97mHOOGRxZMkunstg7fC39sUh7Q.roa
Signing time: Mon 21 Mar 2022 09:20:14 +0000
ROA not before: Mon 21 Mar 2022 09:20:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208414
IP address blocks: 45.138.105.0/24 maxlen: 24
45.138.104.0/24 maxlen: 24
45.138.104.0/22 maxlen: 22
45.138.107.0/24 maxlen: 24
45.138.106.0/24 maxlen: 24
2a0e:acc0:ac08::/48 maxlen: 48
2a0e:acc0:ac03::/48 maxlen: 48
2a0e:acc0:ac01::/48 maxlen: 48
2a0e:acc0:ac07::/48 maxlen: 48
2a0e:acc0:ac02::/48 maxlen: 48
2a0e:acc0:ac05::/48 maxlen: 48
2a0e:acc0::/48 maxlen: 48
2a0e:acc0:ac06::/48 maxlen: 48
2a0e:acc0:ac04::/48 maxlen: 48
2a0e:acc0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22219806 (0x1530c1e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=525c79479aeb01d1a60257dc07904b9f5b9a6791
Validity
Not Before: Mar 21 09:20:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f7b98738e191c59324ba7b2d83b7c2dfdb1487b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:f6:a9:bc:39:f4:d1:27:c2:ff:77:0f:74:47:
40:79:75:23:fa:83:5f:b8:04:27:9a:97:46:c3:a0:
14:29:6f:31:89:9e:e0:0f:cc:c3:9c:8b:f4:7c:f0:
a6:89:72:6f:d9:34:52:54:84:9d:d4:3d:96:27:06:
7b:2e:7f:2f:58:b1:91:86:06:ec:6d:66:e4:e4:9d:
eb:f3:70:b4:d3:af:f6:f9:99:85:c1:41:e0:7f:ae:
47:2d:b7:d7:a5:c8:d0:6a:78:f7:f8:2c:65:2f:f3:
d1:bd:55:89:90:58:36:06:4c:f4:f5:ef:0c:29:47:
95:f2:bc:b6:b0:a1:dc:5d:35:be:03:c9:80:b3:57:
f8:5a:8d:e7:9b:39:ae:ce:90:a0:e0:57:48:00:90:
05:6d:32:20:9f:5a:1e:c6:f7:bb:66:60:6f:ae:94:
58:70:1e:cd:54:0c:a1:09:c3:a9:e7:46:32:48:2c:
37:bb:1b:a5:1f:cd:fa:0a:7d:ee:d9:ec:b7:3e:83:
26:7b:b8:b0:86:a8:3f:d6:3d:22:24:4d:30:9f:5c:
c6:da:86:3c:cc:34:60:4e:fd:bc:cf:ac:6b:8e:63:
30:6a:60:3e:a3:38:55:37:d0:10:49:64:04:fb:e7:
e3:a4:e7:ab:e5:03:d9:9d:c2:b4:a9:70:fd:21:d8:
b6:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:B9:87:38:E1:91:C5:93:24:BA:7B:2D:83:B7:C2:DF:DB:14:87:B4
X509v3 Authority Key Identifier:
keyid:52:5C:79:47:9A:EB:01:D1:A6:02:57:DC:07:90:4B:9F:5B:9A:67:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ulx5R5rrAdGmAlfcB5BLn1uaZ5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/1229e4-940b-4628-b41f-80f14c671d6e/1/97mHOOGRxZMkunstg7fC39sUh7Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/1229e4-940b-4628-b41f-80f14c671d6e/1/Ulx5R5rrAdGmAlfcB5BLn1uaZ5E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.138.104.0/22
IPv6:
2a0e:acc0::/29
Signature Algorithm: sha256WithRSAEncryption
95:ae:28:dc:c4:4d:86:94:9d:97:4f:78:96:8f:fe:7f:35:2a:
8b:d9:14:e0:8f:60:60:dd:af:80:88:f7:24:f9:32:0f:16:69:
bf:55:df:cb:e0:87:a7:7c:30:58:7f:e1:8e:00:32:75:df:01:
57:ed:11:b4:61:e9:d5:e2:32:06:27:f0:26:7d:03:77:e1:00:
ec:d9:a3:ab:22:74:b7:f8:92:22:6d:01:bc:fa:f7:35:6a:d1:
25:48:c8:55:f6:54:45:f3:f0:d6:59:05:af:a3:b4:a3:1d:92:
de:29:11:77:d7:dc:17:6e:99:90:6e:57:39:ea:cd:b1:52:e8:
5d:23:9f:6d:59:56:c1:dc:46:f4:cb:ee:09:00:f0:50:fc:93:
4f:dc:eb:73:f1:f0:a3:d3:57:c2:43:aa:4b:58:c5:48:40:3a:
4f:d7:6e:18:eb:2a:61:3a:d8:fc:6a:14:a1:63:2a:f8:94:47:
24:8a:23:c7:f1:d7:53:27:c7:3f:4c:88:e1:ae:74:81:8d:8e:
e5:ea:45:45:a3:01:81:ab:f4:4a:30:9d:5a:a7:b4:ab:2d:13:
ff:7c:09:b0:ff:d0:44:c3:30:a8:93:5c:1b:bd:46:f0:6d:cb:
9f:e1:01:7f:b1:b9:25:a7:c3:3d:b8:92:e1:7e:c4:49:4a:5a:
50:c6:a8:db
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgIEAVMMHjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
MjVjNzk0NzlhZWIwMWQxYTYwMjU3ZGMwNzkwNGI5ZjViOWE2NzkxMB4XDTIyMDMy
MTA5MjAxNFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZjdiOTg3MzhlMTkx
YzU5MzI0YmE3YjJkODNiN2MyZGZkYjE0ODdiNDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANH2qbw59NEnwv93D3RHQHl1I/qDX7gEJ5qXRsOgFClvMYme
4A/Mw5yL9Hzwpolyb9k0UlSEndQ9licGey5/L1ixkYYG7G1m5OSd6/NwtNOv9vmZ
hcFB4H+uRy2316XI0Gp49/gsZS/z0b1ViZBYNgZM9PXvDClHlfK8trCh3F01vgPJ
gLNX+FqN55s5rs6QoOBXSACQBW0yIJ9aHsb3u2Zgb66UWHAezVQMoQnDqedGMkgs
N7sbpR/N+gp97tnstz6DJnu4sIaoP9Y9IiRNMJ9cxtqGPMw0YE79vM+sa45jMGpg
PqM4VTfQEElkBPvn46Tnq+UD2Z3CtKlw/SHYtrcCAwEAAaOCAhgwggIUMB0GA1Ud
DgQWBBT3uYc44ZHFkyS6ey2Dt8Lf2xSHtDAfBgNVHSMEGDAWgBRSXHlHmusB0aYC
V9wHkEufW5pnkTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1VseDVSNXJyQWRHbUFsZmNCNUJMbjF1YVo1RS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMjAvMTIyOWU0LTk0MGItNDYyOC1iNDFmLTgwZjE0YzY3MWQ2ZS8x
Lzk3bUhPT0dSeFpNa3Vuc3RnN2ZDMzlzVWg3US5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjAv
MTIyOWU0LTk0MGItNDYyOC1iNDFmLTgwZjE0YzY3MWQ2ZS8xL1VseDVSNXJyQWRH
bUFsZmNCNUJMbjF1YVo1RS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAi2KaDANBAIAAjAHAwUDKg6swDAN
BgkqhkiG9w0BAQsFAAOCAQEAla4o3MRNhpSdl094lo/+fzUqi9kU4I9gYN2vgIj3
JPkyDxZpv1Xfy+CHp3wwWH/hjgAydd8BV+0RtGHp1eIyBifwJn0Dd+EA7NmjqyJ0
t/iSIm0BvPr3NWrRJUjIVfZURfPw1lkFr6O0ox2S3ikRd9fcF26ZkG5XOerNsVLo
XSOfbVlWwdxG9MvuCQDwUPyTT9zrc/Hwo9NXwkOqS1jFSEA6T9duGOsqYTrY/GoU
oWMq+JRHJIojx/HXUyfHP0yI4a50gY2O5epFRaMBgav0SjCdWqe0qy0T/3wJsP/Q
RMMwqJNcG71G8G3Ln+EBf7G5JafDPbiS4X7ESUpaUMao2w==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:59 2024 by rpki-client on console-fra.rpki-client.org