Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/743cb4-44d3-4ab1-ac78-add86c095bfe/1/00F8-axoKU5ZzEexS6MovhGA7G8.roa
File: 00F8-axoKU5ZzEexS6MovhGA7G8.roa (raw, json)
Hash identifier: Adp/4SpBCfAB05zS+6Sk2ugGe9f1NFXxmXm/V4IP6lU=
Subject key identifier: D3:41:7C:F9:AC:68:29:4E:59:CC:47:B1:4B:A3:28:BE:11:80:EC:6F
Certificate issuer: /CN=289661d289b03a6e2b0551f853a5dc8f1968f6ad
Certificate serial: 0183B6F96853E62817612023174B642EA21E
Authority key identifier: 28:96:61:D2:89:B0:3A:6E:2B:05:51:F8:53:A5:DC:8F:19:68:F6:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KJZh0omwOm4rBVH4U6Xcjxlo9q0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/743cb4-44d3-4ab1-ac78-add86c095bfe/1/00F8-axoKU5ZzEexS6MovhGA7G8.roa
Signing time: Sat 08 Oct 2022 09:42:21 +0000
ROA not before: Sat 08 Oct 2022 09:42:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206065
IP address blocks: 45.140.228.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:b6:f9:68:53:e6:28:17:61:20:23:17:4b:64:2e:a2:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=289661d289b03a6e2b0551f853a5dc8f1968f6ad
Validity
Not Before: Oct 8 09:42:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d3417cf9ac68294e59cc47b14ba328be1180ec6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:07:b0:a7:b0:42:6f:da:ca:70:d0:50:07:99:
d8:bd:13:5c:9c:f2:fd:4e:e6:b9:33:8b:da:a2:a0:
70:98:db:1d:c6:a0:0b:bb:37:6c:64:a1:30:9a:df:
41:ee:0b:f8:5a:ea:dc:0d:99:b9:27:28:5a:72:27:
05:9c:a5:61:7c:4a:c4:01:18:4d:d5:af:a7:42:ad:
f4:20:bf:9f:9f:c1:d6:f8:2d:20:51:c1:15:d9:90:
3b:a9:2c:70:65:89:f8:71:ee:2d:7e:5d:2b:77:02:
ba:c7:c9:14:b2:bb:cb:b2:a6:a8:ef:cc:6e:67:24:
02:23:6a:95:c5:ba:de:7c:65:32:5e:d1:48:f0:41:
0e:c6:1f:2b:c7:90:6d:b4:a1:f7:e9:f9:af:56:74:
c4:55:f0:d7:dc:1b:97:c6:d6:2f:56:31:c6:3f:ba:
a6:6e:87:98:9d:23:d5:16:e9:26:b4:73:7f:03:45:
52:87:d7:64:39:2b:bf:9e:b6:79:9b:55:7d:bd:55:
b1:a2:14:31:17:c0:16:c1:3b:08:b4:35:80:f9:72:
8b:c7:27:5b:f4:c5:fb:55:4d:57:27:ee:25:31:ff:
6a:7d:8b:5e:e0:c9:49:70:dd:50:8b:09:38:56:df:
3e:84:ea:0b:be:7e:78:83:fd:6b:73:27:1e:35:bb:
e3:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:41:7C:F9:AC:68:29:4E:59:CC:47:B1:4B:A3:28:BE:11:80:EC:6F
X509v3 Authority Key Identifier:
keyid:28:96:61:D2:89:B0:3A:6E:2B:05:51:F8:53:A5:DC:8F:19:68:F6:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KJZh0omwOm4rBVH4U6Xcjxlo9q0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/743cb4-44d3-4ab1-ac78-add86c095bfe/1/00F8-axoKU5ZzEexS6MovhGA7G8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/743cb4-44d3-4ab1-ac78-add86c095bfe/1/KJZh0omwOm4rBVH4U6Xcjxlo9q0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.228.0/22
Signature Algorithm: sha256WithRSAEncryption
a6:ab:73:b9:81:7d:10:23:d6:49:aa:39:e1:5c:b5:fd:a4:ff:
b9:22:f9:a2:60:14:9f:a1:59:21:c0:a6:4e:18:33:34:95:bc:
97:62:ff:05:1d:b7:41:49:39:fe:12:2f:66:85:96:47:10:ec:
a1:b9:48:d5:14:05:fe:f7:cd:db:8b:2e:22:01:18:29:04:9c:
56:bc:38:52:7f:60:29:b9:a0:3d:aa:27:74:be:8d:0e:0f:5a:
e5:7a:4a:94:20:00:a0:03:5b:ed:3b:fe:6a:b0:cf:f2:b1:d0:
db:32:18:a1:40:10:42:93:92:ed:c6:2d:30:13:32:71:f6:29:
3d:59:3c:a4:b4:60:00:83:bb:19:e0:b0:cf:c2:d6:15:51:b1:
e1:cd:61:8b:cd:2b:f3:a9:14:c3:b3:05:c7:12:70:44:b6:16:
8f:17:c7:74:f8:65:0f:10:72:ae:69:66:e9:0d:18:0d:24:bd:
37:b1:09:0f:9a:e8:a6:10:75:26:cd:f5:5d:b0:52:ba:d8:e5:
34:b9:c8:d2:42:4a:cf:e6:da:62:ee:57:c7:2f:9e:64:81:90:
81:f9:89:79:3d:ca:63:b4:74:35:04:62:7d:f4:39:fc:b4:4c:
ed:31:80:2a:b1:7c:ef:e6:dc:6c:ef:ca:26:af:31:60:01:fe:
84:31:f8:92
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYO2+WhT5igXYSAjF0tkLqIeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4OTY2MWQyODliMDNhNmUyYjA1NTFmODUzYTVkYzhmMTk2
OGY2YWQwHhcNMjIxMDA4MDk0MjIxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMzQxN2NmOWFjNjgyOTRlNTljYzQ3YjE0YmEzMjhiZTExODBlYzZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlgewp7BCb9rKcNBQB5nYvRNcnPL9
Tua5M4vaoqBwmNsdxqALuzdsZKEwmt9B7gv4WurcDZm5JyhacicFnKVhfErEARhN
1a+nQq30IL+fn8HW+C0gUcEV2ZA7qSxwZYn4ce4tfl0rdwK6x8kUsrvLsqao78xu
ZyQCI2qVxbrefGUyXtFI8EEOxh8rx5BttKH36fmvVnTEVfDX3BuXxtYvVjHGP7qm
boeYnSPVFukmtHN/A0VSh9dkOSu/nrZ5m1V9vVWxohQxF8AWwTsItDWA+XKLxydb
9MX7VU1XJ+4lMf9qfYte4MlJcN1Qiwk4Vt8+hOoLvn54g/1rcyceNbvj/QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNNBfPmsaClOWcxHsUujKL4RgOxvMB8GA1UdIwQY
MBaAFCiWYdKJsDpuKwVR+FOl3I8ZaPatMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS0paaDBvbXdPbTRyQlZINFU2WGNqeGxvOXEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy83NDNjYjQtNDRkMy00YWIxLWFjNzgt
YWRkODZjMDk1YmZlLzEvMDBGOC1heG9LVTVaekVleFM2TW92aEdBN0c4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy83NDNjYjQtNDRkMy00YWIxLWFjNzgtYWRkODZjMDk1YmZl
LzEvS0paaDBvbXdPbTRyQlZINFU2WGNqeGxvOXEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLYzkMA0G
CSqGSIb3DQEBCwUAA4IBAQCmq3O5gX0QI9ZJqjnhXLX9pP+5IvmiYBSfoVkhwKZO
GDM0lbyXYv8FHbdBSTn+Ei9mhZZHEOyhuUjVFAX+983biy4iARgpBJxWvDhSf2Ap
uaA9qid0vo0OD1rlekqUIACgA1vtO/5qsM/ysdDbMhihQBBCk5Ltxi0wEzJx9ik9
WTyktGAAg7sZ4LDPwtYVUbHhzWGLzSvzqRTDswXHEnBEthaPF8d0+GUPEHKuaWbp
DRgNJL03sQkPmuimEHUmzfVdsFK62OU0ucjSQkrP5tpi7lfHL55kgZCB+Yl5Pcpj
tHQ1BGJ99Dn8tEztMYAqsXzv5txs78omrzFgAf6EMfiS
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:59:07 2024 by rpki-client on console-ams.rpki-client.org