Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/aba05f-83f9-46c3-841f-26e754b42e07/1/6NK1aiZzcb-xwSzldKzMLgybnog.roa
File: 6NK1aiZzcb-xwSzldKzMLgybnog.roa (raw, json)
Hash identifier: 9el0mFQlP6/k2S2ah2yBDKyGAL7D290HHBnY6FqYHlk=
Subject key identifier: E8:D2:B5:6A:26:73:71:BF:B1:C1:2C:E5:74:AC:CC:2E:0C:9B:9E:88
Certificate issuer: /CN=5ba1abf7df1e026646a9ef0a71e8769521bc9f81
Certificate serial: 0184AD7AB50B5DB47FD6F72BA1CCFA98BA28
Authority key identifier: 5B:A1:AB:F7:DF:1E:02:66:46:A9:EF:0A:71:E8:76:95:21:BC:9F:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W6Gr998eAmZGqe8Kceh2lSG8n4E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/aba05f-83f9-46c3-841f-26e754b42e07/1/6NK1aiZzcb-xwSzldKzMLgybnog.roa
Signing time: Fri 25 Nov 2022 06:30:10 +0000
ROA not before: Fri 25 Nov 2022 06:30:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209371
IP address blocks: 45.14.166.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:ad:7a:b5:0b:5d:b4:7f:d6:f7:2b:a1:cc:fa:98:ba:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ba1abf7df1e026646a9ef0a71e8769521bc9f81
Validity
Not Before: Nov 25 06:30:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e8d2b56a267371bfb1c12ce574accc2e0c9b9e88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:a1:2c:89:6b:fb:58:60:6c:37:33:e3:d7:3a:
1f:ad:ab:56:12:e3:6d:0e:3d:f9:57:08:f1:5e:ea:
76:0f:d4:79:f0:9c:07:70:c0:0a:0e:90:e2:98:be:
0f:1c:44:2a:1c:dd:8c:2a:b5:59:b7:fa:aa:a2:79:
47:1c:2c:bc:f4:f0:5c:2a:f9:1f:41:ae:7e:ce:c7:
a1:23:c5:1d:18:05:ea:e5:0b:39:35:64:66:95:c3:
13:22:c4:d6:7a:7a:bb:af:b1:77:36:0c:4a:2a:45:
2b:83:37:46:1d:27:e8:e2:61:2e:4e:79:4b:1f:84:
01:6c:c1:38:73:41:0e:6a:57:e1:55:33:1a:ba:ee:
ab:fe:e2:af:fc:7f:c2:5b:3e:56:16:b3:7a:fd:d5:
d2:c1:0c:b1:6c:0d:84:42:a4:5b:8a:d2:98:60:46:
33:29:bb:39:b2:8d:d2:8d:3a:9a:e7:22:f7:6f:fc:
96:89:f3:a2:c7:7f:6e:93:a0:16:2a:07:1b:0c:cf:
7b:0e:4a:95:a5:3e:ff:9e:86:53:0f:23:90:47:b9:
86:0e:2f:64:ff:38:b4:b1:ff:c4:8f:44:a6:18:2e:
fa:3d:d7:03:77:ce:ad:da:70:1f:90:9f:99:73:fe:
89:dc:6f:88:c4:ad:1f:b5:7e:98:09:76:cd:66:ec:
71:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:D2:B5:6A:26:73:71:BF:B1:C1:2C:E5:74:AC:CC:2E:0C:9B:9E:88
X509v3 Authority Key Identifier:
keyid:5B:A1:AB:F7:DF:1E:02:66:46:A9:EF:0A:71:E8:76:95:21:BC:9F:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W6Gr998eAmZGqe8Kceh2lSG8n4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/aba05f-83f9-46c3-841f-26e754b42e07/1/6NK1aiZzcb-xwSzldKzMLgybnog.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/aba05f-83f9-46c3-841f-26e754b42e07/1/W6Gr998eAmZGqe8Kceh2lSG8n4E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.14.166.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:ce:db:65:75:5a:7b:d8:a1:d3:78:2c:f1:73:be:ec:55:5f:
a4:62:ac:dd:08:a2:8a:a6:69:7e:14:b8:74:ab:5a:88:80:b9:
35:91:7b:94:4c:5e:a2:e4:b5:08:36:77:b0:76:f1:e2:5d:9d:
0b:3c:5d:98:68:92:8e:be:2c:8a:72:19:8e:e5:9e:2a:e7:ac:
c4:c7:84:d3:32:ce:35:88:30:aa:9a:c5:af:4e:ac:84:42:6c:
5b:6b:e5:18:ca:8b:3a:88:64:d4:10:33:ec:43:2b:5c:5d:d9:
a9:5a:ca:fe:ca:c1:f0:64:25:14:0f:1f:bc:c4:d1:f1:26:2f:
19:8f:65:29:c2:55:0a:64:f0:a1:f5:8c:08:a0:33:51:a8:38:
a7:85:3c:9a:db:ba:99:07:ea:3b:73:33:88:06:c5:9a:6f:be:
93:ec:41:c7:d7:0e:e9:2d:d8:b6:1d:05:c8:32:26:e0:b8:f9:
39:b5:d0:ef:6c:23:68:61:f0:62:6c:0d:77:1d:47:a9:30:61:
cc:b4:29:1c:2f:1f:c1:e4:92:e4:10:c4:0d:53:63:39:56:4b:
5a:35:2e:f9:05:4d:02:2e:96:89:1c:c8:d2:b0:a1:b3:3c:3d:
03:d3:44:fb:99:77:82:04:af:c4:ce:2b:2d:fe:12:6f:ba:47:
7a:39:90:dd
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYSterULXbR/1vcrocz6mLooMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViYTFhYmY3ZGYxZTAyNjY0NmE5ZWYwYTcxZTg3Njk1MjFi
YzlmODEwHhcNMjIxMTI1MDYzMDEwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlOGQyYjU2YTI2NzM3MWJmYjFjMTJjZTU3NGFjY2MyZTBjOWI5ZTg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgKEsiWv7WGBsNzPj1zofratWEuNt
Dj35VwjxXup2D9R58JwHcMAKDpDimL4PHEQqHN2MKrVZt/qqonlHHCy89PBcKvkf
Qa5+zsehI8UdGAXq5Qs5NWRmlcMTIsTWenq7r7F3NgxKKkUrgzdGHSfo4mEuTnlL
H4QBbME4c0EOalfhVTMauu6r/uKv/H/CWz5WFrN6/dXSwQyxbA2EQqRbitKYYEYz
Kbs5so3SjTqa5yL3b/yWifOix39uk6AWKgcbDM97DkqVpT7/noZTDyOQR7mGDi9k
/zi0sf/Ej0SmGC76PdcDd86t2nAfkJ+Zc/6J3G+IxK0ftX6YCXbNZuxxkwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOjStWomc3G/scEs5XSszC4Mm56IMB8GA1UdIwQY
MBaAFFuhq/ffHgJmRqnvCnHodpUhvJ+BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVzZHcjk5OGVBbVpHcWU4S2NlaDJsU0c4bjRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi9hYmEwNWYtODNmOS00NmMzLTg0MWYt
MjZlNzU0YjQyZTA3LzEvNk5LMWFpWnpjYi14d1N6bGRLek1MZ3libm9nLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi9hYmEwNWYtODNmOS00NmMzLTg0MWYtMjZlNzU0YjQyZTA3
LzEvVzZHcjk5OGVBbVpHcWU4S2NlaDJsU0c4bjRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALQ6mMA0G
CSqGSIb3DQEBCwUAA4IBAQANzttldVp72KHTeCzxc77sVV+kYqzdCKKKpml+FLh0
q1qIgLk1kXuUTF6i5LUINnewdvHiXZ0LPF2YaJKOviyKchmO5Z4q56zEx4TTMs41
iDCqmsWvTqyEQmxba+UYyos6iGTUEDPsQytcXdmpWsr+ysHwZCUUDx+8xNHxJi8Z
j2UpwlUKZPCh9YwIoDNRqDinhTya27qZB+o7czOIBsWab76T7EHH1w7pLdi2HQXI
MibguPk5tdDvbCNoYfBibA13HUepMGHMtCkcLx/B5JLkEMQNU2M5VktaNS75BU0C
LpaJHMjSsKGzPD0D00T7mXeCBK/Ezist/hJvukd6OZDd
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:53 2024 by rpki-client on console-ams.rpki-client.org