Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/86c181-4f5c-45fc-baac-1f9a19c37e08/1/4vZkujiN3PONIh0OV13w5InIAGs.roa
File: 4vZkujiN3PONIh0OV13w5InIAGs.roa (raw, json)
Hash identifier: qpUTdyIsy7hWlpvH3XpVErOaod+Nac+e7ArJBFJwGUY=
Subject key identifier: E2:F6:64:BA:38:8D:DC:F3:8D:22:1D:0E:57:5D:F0:E4:89:C8:00:6B
Certificate issuer: /CN=45c491362b2e386197b9a0746124288bc0bcf031
Certificate serial: 0286076F
Authority key identifier: 45:C4:91:36:2B:2E:38:61:97:B9:A0:74:61:24:28:8B:C0:BC:F0:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RcSRNisuOGGXuaB0YSQoi8C88DE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/86c181-4f5c-45fc-baac-1f9a19c37e08/1/4vZkujiN3PONIh0OV13w5InIAGs.roa
Signing time: Thu 05 May 2022 13:27:41 +0000
ROA not before: Thu 05 May 2022 13:27:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 58061
IP address blocks: 45.8.89.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42338159 (0x286076f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45c491362b2e386197b9a0746124288bc0bcf031
Validity
Not Before: May 5 13:27:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e2f664ba388ddcf38d221d0e575df0e489c8006b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:7b:a4:d6:c2:bf:d3:25:9c:4f:95:0f:ca:01:
9a:95:ed:17:80:04:9b:4e:64:90:8d:93:a0:e8:7e:
c0:41:9c:ed:26:f6:68:d1:c7:6a:da:b1:b2:f9:77:
6b:04:45:d2:bc:de:24:ef:4c:a1:3b:ff:9f:96:75:
48:aa:a0:b3:e1:fe:3f:00:df:d8:2e:a6:fa:8b:15:
f2:53:e5:ca:d7:d4:41:ef:54:f6:b5:6a:54:a8:c6:
3d:9c:d1:bf:a1:ad:0f:a5:ae:a9:bc:5d:16:9c:f1:
c1:11:be:32:ab:27:62:d4:bc:d0:33:0b:c8:6e:7a:
53:da:c2:46:cf:dc:ed:f9:79:c2:12:e4:e1:4b:89:
45:48:11:42:8e:0b:76:96:5d:71:ed:25:1e:da:e9:
54:43:3d:43:e2:37:ce:33:ab:72:21:2e:f4:03:47:
d0:da:95:e3:13:cf:58:6c:9a:6e:64:79:3c:1a:7b:
c1:85:9b:ac:58:28:5c:1c:73:0b:a4:9d:a0:70:d2:
46:33:e4:a9:19:8c:54:7f:60:ea:e1:e6:f2:60:a7:
c8:03:3f:fe:3f:8b:f3:b2:53:e5:c6:42:89:fb:d3:
a9:1d:45:2f:26:99:85:11:b6:38:6a:4e:5f:b9:24:
5a:fa:30:c1:69:a0:ea:be:0b:11:a7:c5:31:7f:74:
f8:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:F6:64:BA:38:8D:DC:F3:8D:22:1D:0E:57:5D:F0:E4:89:C8:00:6B
X509v3 Authority Key Identifier:
keyid:45:C4:91:36:2B:2E:38:61:97:B9:A0:74:61:24:28:8B:C0:BC:F0:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RcSRNisuOGGXuaB0YSQoi8C88DE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/86c181-4f5c-45fc-baac-1f9a19c37e08/1/4vZkujiN3PONIh0OV13w5InIAGs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/86c181-4f5c-45fc-baac-1f9a19c37e08/1/RcSRNisuOGGXuaB0YSQoi8C88DE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.89.0/24
Signature Algorithm: sha256WithRSAEncryption
52:7e:0a:64:a2:ce:0c:45:4b:ef:1d:e9:94:97:a0:b8:db:82:
ad:f4:a2:4d:34:da:a9:29:77:a2:48:d4:f2:35:5b:1b:06:e5:
33:26:44:be:c8:ed:62:71:39:0a:68:d2:93:47:56:df:56:41:
3b:b9:27:c8:ba:fe:c9:e1:df:3d:70:19:4c:1c:51:f5:8f:90:
13:b4:b9:7a:c8:a4:ef:e1:ed:10:b0:9f:b6:bb:f0:78:d0:ce:
88:6e:95:14:7d:98:c4:71:b1:1b:29:4b:7e:b5:80:71:24:31:
35:9b:f5:34:41:bf:f6:5f:dc:5f:db:17:06:ea:c9:2c:8d:19:
97:fa:ec:ca:c3:ac:10:68:2e:20:11:1c:cc:5f:f6:18:19:2d:
77:d7:42:ae:85:49:32:68:9f:27:ab:98:56:3c:40:8d:9b:86:
d5:53:22:3e:fb:27:bf:ad:0c:2d:14:c6:38:db:b2:94:a7:af:
29:c6:26:a4:41:d3:26:e0:ba:74:ae:1b:34:f6:7d:5b:42:00:
f3:b5:16:2b:a3:6b:26:d6:a3:ae:d6:1b:fb:d1:d2:74:b8:36:
07:cf:79:39:23:71:d3:02:88:bc:24:52:6b:9a:ba:6c:a9:fe:
94:21:1c:64:4f:31:5e:d0:78:af:e2:58:10:f7:96:a3:74:b9:
d8:23:b7:84
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAoYHbzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
NWM0OTEzNjJiMmUzODYxOTdiOWEwNzQ2MTI0Mjg4YmMwYmNmMDMxMB4XDTIyMDUw
NTEzMjc0MVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZTJmNjY0YmEzODhk
ZGNmMzhkMjIxZDBlNTc1ZGYwZTQ4OWM4MDA2YjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAL17pNbCv9MlnE+VD8oBmpXtF4AEm05kkI2ToOh+wEGc7Sb2
aNHHatqxsvl3awRF0rzeJO9MoTv/n5Z1SKqgs+H+PwDf2C6m+osV8lPlytfUQe9U
9rVqVKjGPZzRv6GtD6WuqbxdFpzxwRG+MqsnYtS80DMLyG56U9rCRs/c7fl5whLk
4UuJRUgRQo4LdpZdce0lHtrpVEM9Q+I3zjOrciEu9ANH0NqV4xPPWGyabmR5PBp7
wYWbrFgoXBxzC6SdoHDSRjPkqRmMVH9g6uHm8mCnyAM//j+L87JT5cZCifvTqR1F
LyaZhRG2OGpOX7kkWvowwWmg6r4LEafFMX90+LkCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTi9mS6OI3c840iHQ5XXfDkicgAazAfBgNVHSMEGDAWgBRFxJE2Ky44YZe5
oHRhJCiLwLzwMTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1JjU1JOaXN1T0dHWHVhQjBZU1FvaThDODhERS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMjcvODZjMTgxLTRmNWMtNDVmYy1iYWFjLTFmOWExOWMzN2UwOC8x
LzR2Wmt1amlOM1BPTkloME9WMTN3NUluSUFHcy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjcv
ODZjMTgxLTRmNWMtNDVmYy1iYWFjLTFmOWExOWMzN2UwOC8xL1JjU1JOaXN1T0dH
WHVhQjBZU1FvaThDODhERS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC0IWTANBgkqhkiG9w0BAQsFAAOC
AQEAUn4KZKLODEVL7x3plJeguNuCrfSiTTTaqSl3okjU8jVbGwblMyZEvsjtYnE5
CmjSk0dW31ZBO7knyLr+yeHfPXAZTBxR9Y+QE7S5esik7+HtELCftrvweNDOiG6V
FH2YxHGxGylLfrWAcSQxNZv1NEG/9l/cX9sXBurJLI0Zl/rsysOsEGguIBEczF/2
GBktd9dCroVJMmifJ6uYVjxAjZuG1VMiPvsnv60MLRTGONuylKevKcYmpEHTJuC6
dK4bNPZ9W0IA87UWK6NrJtajrtYb+9HSdLg2B895OSNx0wKIvCRSa5q6bKn+lCEc
ZE8xXtB4r+JYEPeWo3S52CO3hA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:59:08 2024 by rpki-client on console-ams.rpki-client.org