Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/840683-519c-4a4d-ae46-069ad3d6e5b0/1/sMoFZ_MXmyugpJ3C5fgHUFZTZ2g.roa
File: sMoFZ_MXmyugpJ3C5fgHUFZTZ2g.roa (raw, json)
Hash identifier: mqMv6famRSZi5kLhp/1qZg4BKRhemDd7fsHQM20c4+g=
Subject key identifier: B0:CA:05:67:F3:17:9B:2B:A0:A4:9D:C2:E5:F8:07:50:56:53:67:68
Certificate issuer: /CN=df83cc17f26bc6a97c44d8a2436a95c72a94bff1
Certificate serial: 018CC26D26215B4C744C1691891427751E6C
Authority key identifier: DF:83:CC:17:F2:6B:C6:A9:7C:44:D8:A2:43:6A:95:C7:2A:94:BF:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/34PMF_Jrxql8RNiiQ2qVxyqUv_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/840683-519c-4a4d-ae46-069ad3d6e5b0/1/sMoFZ_MXmyugpJ3C5fgHUFZTZ2g.roa
Signing time: Mon 01 Jan 2024 00:29:42 +0000
ROA not before: Mon 01 Jan 2024 00:29:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48821
IP address blocks: 45.159.32.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:26:21:5b:4c:74:4c:16:91:89:14:27:75:1e:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df83cc17f26bc6a97c44d8a2436a95c72a94bff1
Validity
Not Before: Jan 1 00:29:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b0ca0567f3179b2ba0a49dc2e5f8075056536768
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:81:2a:df:e4:9b:49:72:e7:2f:3b:a3:22:d0:
ec:ea:ec:12:ec:7e:b7:78:c9:68:78:fe:be:76:22:
a2:06:d7:e4:1d:fd:46:88:c9:f1:c8:b1:2f:f8:e6:
be:d1:c2:26:b5:42:70:d3:a2:ea:d9:8b:f4:39:2f:
45:8e:2f:ae:e0:d5:b2:c7:ec:ce:c1:86:04:3f:33:
67:f0:86:f9:fd:0e:54:ed:29:fd:7b:41:df:0e:63:
a3:b7:6a:d1:4e:28:3f:dc:3e:6b:8f:e8:36:78:fc:
ee:d9:61:ed:77:13:aa:c1:0f:d7:4f:31:29:ed:ca:
0c:25:a6:5a:57:4b:c7:41:5d:57:65:d9:ee:ff:84:
c1:da:7e:61:f3:c3:32:aa:96:38:51:4a:f8:59:82:
9f:a4:5f:d9:d1:30:12:f1:48:8d:4c:3c:c3:a1:6e:
0a:4f:c2:c7:7d:10:d6:51:4b:05:87:26:b3:80:32:
37:31:e2:c0:0b:27:52:8a:9b:24:c4:16:8d:00:cd:
bf:e2:04:f0:b2:2d:58:ab:a2:bc:92:b7:cf:48:b4:
81:e2:69:ad:e4:67:a9:14:02:27:51:ba:c9:4d:b9:
f8:28:0d:f1:b5:08:4c:dd:f4:6b:56:58:24:4a:0a:
fa:a8:e0:29:86:51:ac:c6:d4:de:3d:7c:8d:81:44:
3a:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:CA:05:67:F3:17:9B:2B:A0:A4:9D:C2:E5:F8:07:50:56:53:67:68
X509v3 Authority Key Identifier:
keyid:DF:83:CC:17:F2:6B:C6:A9:7C:44:D8:A2:43:6A:95:C7:2A:94:BF:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/34PMF_Jrxql8RNiiQ2qVxyqUv_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/840683-519c-4a4d-ae46-069ad3d6e5b0/1/sMoFZ_MXmyugpJ3C5fgHUFZTZ2g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/840683-519c-4a4d-ae46-069ad3d6e5b0/1/34PMF_Jrxql8RNiiQ2qVxyqUv_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.159.32.0/22
Signature Algorithm: sha256WithRSAEncryption
13:9e:2a:bb:99:b9:3a:a3:3c:6f:7f:04:5a:fe:d3:f8:36:1e:
5f:35:0a:19:2c:47:37:10:8e:03:f8:68:e1:76:9f:24:f3:19:
af:9c:26:f8:40:3f:48:4c:06:71:4e:cb:5c:da:69:42:76:1d:
ea:e6:fa:e1:c6:7b:36:9b:c3:96:94:0a:bb:1e:7a:2d:cd:71:
e0:ba:29:94:9f:86:5b:27:93:ce:86:05:10:2c:83:4f:ff:24:
96:5c:6b:d9:c1:66:81:33:dd:ee:11:4f:6e:98:c0:e0:10:83:
18:84:7e:4b:62:cf:11:a4:bc:4b:60:fc:b2:eb:95:d9:da:05:
a0:9a:a3:9e:6a:95:e9:4b:f5:12:fa:86:58:33:cc:2f:fb:e0:
48:c0:91:75:9e:58:c7:03:4c:0b:b2:d4:f3:5c:46:06:f0:18:
af:8d:c7:1d:6e:48:6e:81:30:ff:0a:15:a6:b6:2c:88:a6:2d:
a9:ae:1b:83:5e:4d:51:fd:8c:37:04:b4:b3:60:b9:29:8d:a9:
d3:38:c3:88:73:df:6a:f2:7b:98:4d:6a:34:c3:32:05:7e:c4:
7e:10:8e:f3:df:fa:fb:9c:20:9d:ee:ab:b1:26:3b:aa:8f:8d:
01:47:da:b5:8c:c7:b0:66:8e:d2:0d:9e:9f:19:f3:a8:d2:48:
78:35:48:17
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzCbSYhW0x0TBaRiRQndR5sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmODNjYzE3ZjI2YmM2YTk3YzQ0ZDhhMjQzNmE5NWM3MmE5
NGJmZjEwHhcNMjQwMTAxMDAyOTQyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMGNhMDU2N2YzMTc5YjJiYTBhNDlkYzJlNWY4MDc1MDU2NTM2NzY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA84Eq3+SbSXLnLzujItDs6uwS7H63
eMloeP6+diKiBtfkHf1GiMnxyLEv+Oa+0cImtUJw06Lq2Yv0OS9Fji+u4NWyx+zO
wYYEPzNn8Ib5/Q5U7Sn9e0HfDmOjt2rRTig/3D5rj+g2ePzu2WHtdxOqwQ/XTzEp
7coMJaZaV0vHQV1XZdnu/4TB2n5h88MyqpY4UUr4WYKfpF/Z0TAS8UiNTDzDoW4K
T8LHfRDWUUsFhyazgDI3MeLACydSipskxBaNAM2/4gTwsi1Yq6K8krfPSLSB4mmt
5GepFAInUbrJTbn4KA3xtQhM3fRrVlgkSgr6qOAphlGsxtTePXyNgUQ6NQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLDKBWfzF5sroKSdwuX4B1BWU2doMB8GA1UdIwQY
MBaAFN+DzBfya8apfETYokNqlccqlL/xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMzRQTUZfSnJ4cWw4Uk5paVEycVZ4eXFVdl9FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi84NDA2ODMtNTE5Yy00YTRkLWFlNDYt
MDY5YWQzZDZlNWIwLzEvc01vRlpfTVhteXVncEozQzVmZ0hVRlpUWjJnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi84NDA2ODMtNTE5Yy00YTRkLWFlNDYtMDY5YWQzZDZlNWIw
LzEvMzRQTUZfSnJ4cWw4Uk5paVEycVZ4eXFVdl9FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLZ8gMA0G
CSqGSIb3DQEBCwUAA4IBAQATniq7mbk6ozxvfwRa/tP4Nh5fNQoZLEc3EI4D+Gjh
dp8k8xmvnCb4QD9ITAZxTstc2mlCdh3q5vrhxns2m8OWlAq7HnotzXHguimUn4Zb
J5POhgUQLINP/ySWXGvZwWaBM93uEU9umMDgEIMYhH5LYs8RpLxLYPyy65XZ2gWg
mqOeapXpS/US+oZYM8wv++BIwJF1nljHA0wLstTzXEYG8BivjccdbkhugTD/ChWm
tiyIpi2prhuDXk1R/Yw3BLSzYLkpjanTOMOIc99q8nuYTWo0wzIFfsR+EI7z3/r7
nCCd7quxJjuqj40BR9q1jMewZo7SDZ6fGfOo0kh4NUgX
-----END CERTIFICATE-----
Generated at Wed Jun 26 15:26:58 2024 by rpki-client on console-fra.rpki-client.org