Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/86c181-4f5c-45fc-baac-1f9a19c37e08/1/wJy2uGgcpX8SM5e4YTCDv7e3d3A.roa
File: wJy2uGgcpX8SM5e4YTCDv7e3d3A.roa (raw, json)
Hash identifier: KaAfQYSFgXUx9Of02l5lm5i3alD+nLOGIAZHm5xB1/g=
Subject key identifier: C0:9C:B6:B8:68:1C:A5:7F:12:33:97:B8:61:30:83:BF:B7:B7:77:70
Certificate issuer: /CN=45c491362b2e386197b9a0746124288bc0bcf031
Certificate serial: 0181F45666252863A098DA4D30AA08FDED0F
Authority key identifier: 45:C4:91:36:2B:2E:38:61:97:B9:A0:74:61:24:28:8B:C0:BC:F0:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RcSRNisuOGGXuaB0YSQoi8C88DE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/86c181-4f5c-45fc-baac-1f9a19c37e08/1/wJy2uGgcpX8SM5e4YTCDv7e3d3A.roa
Signing time: Tue 12 Jul 2022 21:35:11 +0000
ROA not before: Tue 12 Jul 2022 21:35:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 58061
IP address blocks: 45.8.89.0/24 maxlen: 24
2.56.243.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:f4:56:66:25:28:63:a0:98:da:4d:30:aa:08:fd:ed:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45c491362b2e386197b9a0746124288bc0bcf031
Validity
Not Before: Jul 12 21:35:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c09cb6b8681ca57f123397b8613083bfb7b77770
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:a6:30:df:6b:ec:95:03:f1:a6:a0:26:77:9b:
aa:7d:24:e9:d9:0b:51:68:44:54:e7:88:3e:0a:ff:
8e:97:a3:08:57:b8:9c:e2:60:e0:94:70:77:d0:3c:
19:50:05:58:cf:03:1c:86:af:2e:74:59:87:f6:8b:
30:33:93:94:07:59:d5:6f:0e:69:b0:29:36:3c:82:
12:de:3f:8a:a2:79:fd:e2:63:dd:f7:d5:0f:c8:98:
bd:29:9c:45:cc:00:57:51:1d:a3:71:0b:6a:77:6d:
7b:d0:17:2d:58:d8:58:97:d3:a4:02:01:c7:42:d6:
cc:ae:08:f1:86:77:a7:e4:fe:f5:b7:04:75:5f:09:
f1:05:a5:bb:71:90:1b:a4:48:8d:ba:47:20:3a:a9:
d7:05:87:51:68:59:d3:85:a3:d1:7b:44:8a:99:c6:
98:47:81:0b:4f:30:03:a8:aa:89:1e:b6:97:62:36:
49:9a:b6:80:67:26:3b:a9:85:89:ae:bd:f6:6a:17:
74:d8:1f:2d:3a:bf:95:f8:26:41:17:29:44:65:f0:
9c:68:0f:43:85:3b:3e:3b:8e:73:b7:2d:2f:ce:26:
49:ec:a6:2a:db:a4:92:74:4f:c8:3b:e1:e6:0d:3b:
a9:64:df:00:ca:c9:ac:d8:6b:30:91:7b:f2:91:15:
c6:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:9C:B6:B8:68:1C:A5:7F:12:33:97:B8:61:30:83:BF:B7:B7:77:70
X509v3 Authority Key Identifier:
keyid:45:C4:91:36:2B:2E:38:61:97:B9:A0:74:61:24:28:8B:C0:BC:F0:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RcSRNisuOGGXuaB0YSQoi8C88DE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/86c181-4f5c-45fc-baac-1f9a19c37e08/1/wJy2uGgcpX8SM5e4YTCDv7e3d3A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/86c181-4f5c-45fc-baac-1f9a19c37e08/1/RcSRNisuOGGXuaB0YSQoi8C88DE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.243.0/24
45.8.89.0/24
Signature Algorithm: sha256WithRSAEncryption
98:45:c0:3f:2e:24:37:60:7d:96:1d:68:4a:2f:d4:d6:6e:61:
53:7a:9b:b5:95:5c:01:94:aa:55:b7:3b:d2:c6:00:fe:73:a2:
b5:b2:f4:9f:69:22:d4:9f:e8:37:5f:8d:bf:49:04:a0:6e:6b:
df:5b:d4:86:69:27:05:66:2b:c1:d4:66:c4:0a:3a:f8:68:80:
32:d1:31:bd:ca:bb:a5:da:46:52:cb:a6:13:9d:4c:0e:be:30:
d6:a4:61:e4:7c:23:e2:3c:8f:11:7d:81:00:5b:59:f6:a0:12:
eb:58:2c:7e:3c:11:c4:d5:cb:60:dd:73:66:b9:70:a6:a9:5c:
d3:c5:2d:9c:46:e6:e5:3c:8d:99:ac:4e:67:1b:cd:d1:22:f6:
b2:33:4b:f1:0a:9f:0c:22:88:ce:57:17:f2:83:50:99:71:60:
84:9c:b5:4b:15:ba:ab:8c:01:37:1b:03:ef:97:6f:0e:bf:f6:
a9:2b:b4:77:f6:63:15:11:25:1c:81:1e:e2:07:02:08:8b:60:
de:7a:e8:70:68:8c:7c:1e:4c:a5:c7:27:4d:1a:e0:5a:19:1e:
6f:6a:33:82:db:5b:f2:83:4e:d5:c0:22:4b:aa:cd:bb:81:1d:
62:68:5d:03:5c:2d:c1:6f:2c:39:c7:81:e5:b8:2d:5f:6c:3e:
cb:c5:2a:21
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYH0VmYlKGOgmNpNMKoI/e0PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1YzQ5MTM2MmIyZTM4NjE5N2I5YTA3NDYxMjQyODhiYzBi
Y2YwMzEwHhcNMjIwNzEyMjEzNTExWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMDljYjZiODY4MWNhNTdmMTIzMzk3Yjg2MTMwODNiZmI3Yjc3NzcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh6Yw32vslQPxpqAmd5uqfSTp2QtR
aERU54g+Cv+Ol6MIV7ic4mDglHB30DwZUAVYzwMchq8udFmH9oswM5OUB1nVbw5p
sCk2PIIS3j+Konn94mPd99UPyJi9KZxFzABXUR2jcQtqd2170BctWNhYl9OkAgHH
QtbMrgjxhnen5P71twR1XwnxBaW7cZAbpEiNukcgOqnXBYdRaFnThaPRe0SKmcaY
R4ELTzADqKqJHraXYjZJmraAZyY7qYWJrr32ahd02B8tOr+V+CZBFylEZfCcaA9D
hTs+O45zty0vziZJ7KYq26SSdE/IO+HmDTupZN8Aysms2GswkXvykRXGpQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFMCctrhoHKV/EjOXuGEwg7+3t3dwMB8GA1UdIwQY
MBaAFEXEkTYrLjhhl7mgdGEkKIvAvPAxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUmNTUk5pc3VPR0dYdWFCMFlTUW9pOEM4OERFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy84NmMxODEtNGY1Yy00NWZjLWJhYWMt
MWY5YTE5YzM3ZTA4LzEvd0p5MnVHZ2NwWDhTTTVlNFlUQ0R2N2UzZDNBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy84NmMxODEtNGY1Yy00NWZjLWJhYWMtMWY5YTE5YzM3ZTA4
LzEvUmNTUk5pc3VPR0dYdWFCMFlTUW9pOEM4OERFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAAjjzAwQA
LQhZMA0GCSqGSIb3DQEBCwUAA4IBAQCYRcA/LiQ3YH2WHWhKL9TWbmFTepu1lVwB
lKpVtzvSxgD+c6K1svSfaSLUn+g3X42/SQSgbmvfW9SGaScFZivB1GbECjr4aIAy
0TG9yrul2kZSy6YTnUwOvjDWpGHkfCPiPI8RfYEAW1n2oBLrWCx+PBHE1ctg3XNm
uXCmqVzTxS2cRublPI2ZrE5nG83RIvayM0vxCp8MIojOVxfyg1CZcWCEnLVLFbqr
jAE3GwPvl28Ov/apK7R39mMVESUcgR7iBwIIi2DeeuhwaIx8HkylxydNGuBaGR5v
ajOC21vyg07VwCJLqs27gR1iaF0DXC3Bbyw5x4HluC1fbD7LxSoh
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:58 2024 by rpki-client on console-fra.rpki-client.org