Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/1229e4-940b-4628-b41f-80f14c671d6e/1/Fj3bdZBCILnqrtGC6d0WfwzbusI.roa
File: Fj3bdZBCILnqrtGC6d0WfwzbusI.roa (raw, json)
Hash identifier: cyOLnmqnjv7yxbdHSw7Xm03rfAFaMFTJ74vBaSFHdo4=
Subject key identifier: 16:3D:DB:75:90:42:20:B9:EA:AE:D1:82:E9:DD:16:7F:0C:DB:BA:C2
Certificate issuer: /CN=525c79479aeb01d1a60257dc07904b9f5b9a6791
Certificate serial: 0200F3C1
Authority key identifier: 52:5C:79:47:9A:EB:01:D1:A6:02:57:DC:07:90:4B:9F:5B:9A:67:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ulx5R5rrAdGmAlfcB5BLn1uaZ5E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/1229e4-940b-4628-b41f-80f14c671d6e/1/Fj3bdZBCILnqrtGC6d0WfwzbusI.roa
Signing time: Mon 06 Jun 2022 14:41:31 +0000
ROA not before: Mon 06 Jun 2022 14:41:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208414
IP address blocks: 45.138.104.0/24 maxlen: 29
45.138.105.0/24 maxlen: 24
45.138.104.0/22 maxlen: 22
45.138.107.0/24 maxlen: 24
45.138.106.0/24 maxlen: 24
2a0e:acc0:ac08::/48 maxlen: 48
2a0e:acc0:ac03::/48 maxlen: 48
2a0e:acc0:ac01::/48 maxlen: 48
2a0e:acc0:ac11::/48 maxlen: 48
2a0e:acc0:ac07::/48 maxlen: 48
2a0e:acc0:ac02::/48 maxlen: 48
2a0e:acc0:ac12::/48 maxlen: 48
2a0e:acc0:ac05::/48 maxlen: 48
2a0e:acc0::/48 maxlen: 48
2a0e:acc0:ac10::/48 maxlen: 48
2a0e:acc0:ac06::/48 maxlen: 48
2a0e:acc0:ac09::/48 maxlen: 48
2a0e:acc0:ac04::/48 maxlen: 48
2a0e:acc0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33616833 (0x200f3c1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=525c79479aeb01d1a60257dc07904b9f5b9a6791
Validity
Not Before: Jun 6 14:41:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=163ddb75904220b9eaaed182e9dd167f0cdbbac2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e2:44:3c:dd:4b:9f:68:fa:e3:d4:cf:b4:76:
9f:68:4d:fa:a2:3f:eb:2e:58:fe:f6:97:f0:a4:53:
b3:e8:fd:4a:ba:c9:93:a1:90:94:02:67:43:de:31:
ad:00:2d:26:b2:01:22:73:4a:d1:8f:1d:6d:b9:ca:
0a:5a:3b:40:15:5d:fc:78:87:07:28:1d:68:d9:8b:
4b:97:a8:63:00:b6:d2:51:94:cb:e1:04:be:99:f5:
3a:d8:a2:fb:57:00:6c:2b:b4:70:60:41:1a:18:af:
c8:d8:b5:61:ae:84:40:2e:ef:0a:dc:f9:8e:cb:5c:
23:e5:d8:6a:e5:48:d8:8e:32:1b:8d:3b:b6:93:35:
c7:fa:1f:d7:af:12:7a:f4:2a:2e:40:0f:d6:9b:43:
ce:7b:e1:f3:f5:26:08:81:d3:22:fb:a3:dd:72:21:
bc:08:f0:0b:95:87:a2:46:3d:d8:47:cc:a5:6d:be:
b9:b2:8f:ce:fa:d8:30:72:2d:16:cd:52:34:e2:13:
0e:a8:58:34:5c:7c:06:cb:05:e2:10:fa:5a:a5:7a:
4a:65:c3:8c:c4:25:52:f8:c8:33:31:61:89:22:8a:
65:7b:a7:09:3e:a2:55:be:5e:57:6b:d0:35:bf:ff:
cc:01:ea:71:b8:83:dc:e1:57:bc:c1:8e:36:7f:9d:
01:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:3D:DB:75:90:42:20:B9:EA:AE:D1:82:E9:DD:16:7F:0C:DB:BA:C2
X509v3 Authority Key Identifier:
keyid:52:5C:79:47:9A:EB:01:D1:A6:02:57:DC:07:90:4B:9F:5B:9A:67:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ulx5R5rrAdGmAlfcB5BLn1uaZ5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/1229e4-940b-4628-b41f-80f14c671d6e/1/Fj3bdZBCILnqrtGC6d0WfwzbusI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/1229e4-940b-4628-b41f-80f14c671d6e/1/Ulx5R5rrAdGmAlfcB5BLn1uaZ5E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.138.104.0/22
IPv6:
2a0e:acc0::/29
Signature Algorithm: sha256WithRSAEncryption
8b:9d:8b:5b:5e:bc:e2:1a:73:da:55:af:72:66:fa:e1:86:13:
b8:0b:ae:b3:b2:73:3d:f9:f0:a0:8b:76:8a:40:8a:47:8c:4f:
45:78:1a:32:11:16:41:bf:c4:96:1c:c6:3b:b8:92:f7:ab:44:
89:90:0c:a4:58:b3:d7:1d:e9:4b:2e:20:67:a4:61:38:f3:1e:
8e:6c:77:7b:29:b5:b5:23:b9:0c:19:8e:b3:20:f5:42:b7:9e:
44:c5:28:c3:07:12:31:a8:ef:ab:59:b8:fe:d1:80:7c:0b:ef:
81:39:ac:26:5e:11:aa:50:ff:97:a3:77:29:94:1b:e1:ab:94:
b1:45:b2:fd:40:39:cc:6a:70:df:4d:f2:a5:0d:30:f1:48:de:
20:e6:13:1f:af:c0:3d:3a:9a:e1:e8:06:c4:9a:9b:f8:68:47:
72:82:0f:24:d4:3f:e0:b9:80:63:ad:67:f4:f1:7a:e1:08:76:
c8:88:16:5d:df:b3:88:12:f4:2b:2e:6c:a5:8f:40:2a:87:7d:
04:0c:19:af:c1:98:27:4b:8d:1a:49:bc:63:7b:aa:45:bd:81:
aa:81:5b:f0:c9:62:f4:a4:b0:16:37:96:ac:74:a0:8c:a1:c2:
04:d9:a3:02:c0:2b:16:a9:e4:ca:78:f0:ce:1a:18:04:95:ee:
56:2e:36:aa
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgIEAgDzwTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
MjVjNzk0NzlhZWIwMWQxYTYwMjU3ZGMwNzkwNGI5ZjViOWE2NzkxMB4XDTIyMDYw
NjE0NDEzMVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMTYzZGRiNzU5MDQy
MjBiOWVhYWVkMTgyZTlkZDE2N2YwY2RiYmFjMjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKjiRDzdS59o+uPUz7R2n2hN+qI/6y5Y/vaX8KRTs+j9SrrJ
k6GQlAJnQ94xrQAtJrIBInNK0Y8dbbnKClo7QBVd/HiHBygdaNmLS5eoYwC20lGU
y+EEvpn1Otii+1cAbCu0cGBBGhivyNi1Ya6EQC7vCtz5jstcI+XYauVI2I4yG407
tpM1x/of168SevQqLkAP1ptDznvh8/UmCIHTIvuj3XIhvAjwC5WHokY92EfMpW2+
ubKPzvrYMHItFs1SNOITDqhYNFx8BssF4hD6WqV6SmXDjMQlUvjIMzFhiSKKZXun
CT6iVb5eV2vQNb//zAHqcbiD3OFXvMGONn+dASMCAwEAAaOCAhgwggIUMB0GA1Ud
DgQWBBQWPdt1kEIguequ0YLp3RZ/DNu6wjAfBgNVHSMEGDAWgBRSXHlHmusB0aYC
V9wHkEufW5pnkTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1VseDVSNXJyQWRHbUFsZmNCNUJMbjF1YVo1RS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMjAvMTIyOWU0LTk0MGItNDYyOC1iNDFmLTgwZjE0YzY3MWQ2ZS8x
L0ZqM2JkWkJDSUxucXJ0R0M2ZDBXZnd6YnVzSS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjAv
MTIyOWU0LTk0MGItNDYyOC1iNDFmLTgwZjE0YzY3MWQ2ZS8xL1VseDVSNXJyQWRH
bUFsZmNCNUJMbjF1YVo1RS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAi2KaDANBAIAAjAHAwUDKg6swDAN
BgkqhkiG9w0BAQsFAAOCAQEAi52LW1684hpz2lWvcmb64YYTuAuus7JzPfnwoIt2
ikCKR4xPRXgaMhEWQb/ElhzGO7iS96tEiZAMpFiz1x3pSy4gZ6RhOPMejmx3eym1
tSO5DBmOsyD1QreeRMUowwcSMajvq1m4/tGAfAvvgTmsJl4RqlD/l6N3KZQb4auU
sUWy/UA5zGpw303ypQ0w8UjeIOYTH6/APTqa4egGxJqb+GhHcoIPJNQ/4LmAY61n
9PF64Qh2yIgWXd+ziBL0Ky5spY9AKod9BAwZr8GYJ0uNGkm8Y3uqRb2BqoFb8Mli
9KSwFjeWrHSgjKHCBNmjAsArFqnkynjwzhoYBJXuVi42qg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:59 2024 by rpki-client on console-fra.rpki-client.org