Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/d78506-02d3-4ba5-bb94-a536f9b977ec/1/VU1rt7rDVYHlPrP2CziOwEFVO78.roa
File: VU1rt7rDVYHlPrP2CziOwEFVO78.roa (raw, json)
Hash identifier: f77uF8584PsyARZS3FxZfMWhiVJr8J6QqcHgbTC0gh8=
Subject key identifier: 55:4D:6B:B7:BA:C3:55:81:E5:3E:B3:F6:0B:38:8E:C0:41:55:3B:BF
Certificate issuer: /CN=3b822b20cea391e8c91e74808496bb50cfc897be
Certificate serial: 9EF7
Authority key identifier: 3B:82:2B:20:CE:A3:91:E8:C9:1E:74:80:84:96:BB:50:CF:C8:97:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O4IrIM6jkejJHnSAhJa7UM_Il74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/d78506-02d3-4ba5-bb94-a536f9b977ec/1/VU1rt7rDVYHlPrP2CziOwEFVO78.roa
Signing time: Tue 29 Mar 2022 15:22:29 +0000
ROA not before: Tue 29 Mar 2022 15:22:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34959
IP address blocks: 45.139.24.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40695 (0x9ef7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b822b20cea391e8c91e74808496bb50cfc897be
Validity
Not Before: Mar 29 15:22:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=554d6bb7bac35581e53eb3f60b388ec041553bbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:92:89:51:b0:85:41:5e:8c:3b:d4:9e:9f:a8:
81:ce:c7:fe:09:b1:b7:8d:9e:fc:52:7e:f6:a3:f9:
70:43:67:ee:1d:e5:9a:7f:7d:c5:cb:fc:f5:3f:cd:
f9:5b:b2:85:7f:03:42:02:44:95:35:38:d4:a4:f7:
54:8a:5f:fc:48:07:b6:59:19:da:d7:c0:5d:de:2c:
48:a1:b8:a8:9e:61:df:33:69:12:dd:22:61:5c:15:
df:48:b0:ac:52:52:46:a5:de:e5:c9:f5:cc:21:71:
c9:db:0f:90:3c:97:bb:67:8f:28:85:82:72:9e:4a:
cb:09:f8:4f:e3:2b:47:02:0a:e8:5b:18:49:a2:2d:
30:a2:26:63:8b:8a:c2:84:e2:74:44:aa:ac:66:12:
49:28:46:c7:ba:18:e0:32:7b:69:b1:ed:00:e9:b9:
0e:17:9d:53:b4:bf:67:c0:bc:db:bb:c4:ac:53:09:
4c:54:e4:41:ec:dd:4e:aa:ea:bb:2a:a4:7c:23:34:
3d:06:a5:5e:06:70:6b:2b:fd:59:03:18:ef:4d:de:
76:3b:8d:a2:70:85:9c:53:c0:57:93:34:f6:c0:43:
63:1b:30:11:f0:5c:cf:32:f3:9d:eb:92:80:13:96:
92:dd:a2:bc:a6:9b:98:a8:db:03:21:5b:46:01:c7:
f2:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:4D:6B:B7:BA:C3:55:81:E5:3E:B3:F6:0B:38:8E:C0:41:55:3B:BF
X509v3 Authority Key Identifier:
keyid:3B:82:2B:20:CE:A3:91:E8:C9:1E:74:80:84:96:BB:50:CF:C8:97:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O4IrIM6jkejJHnSAhJa7UM_Il74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/d78506-02d3-4ba5-bb94-a536f9b977ec/1/VU1rt7rDVYHlPrP2CziOwEFVO78.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/d78506-02d3-4ba5-bb94-a536f9b977ec/1/O4IrIM6jkejJHnSAhJa7UM_Il74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.139.24.0/22
Signature Algorithm: sha256WithRSAEncryption
49:ca:06:55:fe:bb:2a:59:6c:3c:14:6b:ae:d2:20:25:8b:0d:
6e:c4:e7:c3:76:1a:81:ff:7e:6f:25:c3:41:e4:e1:f1:73:c3:
d9:b6:21:3d:94:a9:72:8b:c9:c9:9a:c7:65:f0:fb:74:06:a8:
02:00:1e:9f:49:45:77:01:53:b1:7b:81:83:7d:6c:b1:d9:27:
e7:4f:82:ab:9d:8a:50:48:4a:85:37:6b:31:e4:47:27:d0:bf:
5e:47:44:3d:ab:00:02:7c:83:b4:ea:c8:34:e1:dc:a1:b2:08:
56:a4:05:c6:c7:ef:07:53:4d:5d:6e:33:51:94:81:7b:24:aa:
c5:b4:76:be:80:08:1a:4a:14:61:fc:14:1a:d0:a4:a4:63:c0:
80:af:4b:25:f8:00:79:bf:3d:be:c4:1b:19:62:9b:8e:ac:3f:
ee:c5:2e:ff:70:ec:bf:2a:7c:2b:67:e4:99:b2:fa:70:a4:1e:
0a:a6:f1:aa:11:07:17:ee:d4:f0:05:1c:58:e8:85:29:15:6f:
48:d0:d5:e4:fe:36:e6:dd:3a:37:ab:76:5e:7c:b8:be:55:25:
cd:a8:df:4c:a6:ee:b1:a6:60:b5:24:b9:36:4d:61:69:a1:cc:
3f:76:72:a7:ac:cb:d2:05:80:69:e8:04:2a:10:40:e4:2e:3b:
1f:b3:3f:7b
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgIDAJ73MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDNi
ODIyYjIwY2VhMzkxZThjOTFlNzQ4MDg0OTZiYjUwY2ZjODk3YmUwHhcNMjIwMzI5
MTUyMjI5WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyg1NTRkNmJiN2JhYzM1
NTgxZTUzZWIzZjYwYjM4OGVjMDQxNTUzYmJmMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEApJKJUbCFQV6MO9Sen6iBzsf+CbG3jZ78Un72o/lwQ2fuHeWa
f33Fy/z1P835W7KFfwNCAkSVNTjUpPdUil/8SAe2WRna18Bd3ixIobionmHfM2kS
3SJhXBXfSLCsUlJGpd7lyfXMIXHJ2w+QPJe7Z48ohYJynkrLCfhP4ytHAgroWxhJ
oi0woiZji4rChOJ0RKqsZhJJKEbHuhjgMntpse0A6bkOF51TtL9nwLzbu8SsUwlM
VORB7N1Oquq7KqR8IzQ9BqVeBnBrK/1ZAxjvTd52O42icIWcU8BXkzT2wENjGzAR
8FzPMvOd65KAE5aS3aK8ppuYqNsDIVtGAcfyZwIDAQABo4ICCTCCAgUwHQYDVR0O
BBYEFFVNa7e6w1WB5T6z9gs4jsBBVTu/MB8GA1UdIwQYMBaAFDuCKyDOo5HoyR50
gISWu1DPyJe+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
TzRJcklNNmprZWpKSG5TQWhKYTdVTV9JbDc0LmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC8zYy9kNzg1MDYtMDJkMy00YmE1LWJiOTQtYTUzNmY5Yjk3N2VjLzEv
VlUxcnQ3ckRWWUhsUHJQMkN6aU93RUZWTzc4LnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9k
Nzg1MDYtMDJkMy00YmE1LWJiOTQtYTUzNmY5Yjk3N2VjLzEvTzRJcklNNmprZWpK
SG5TQWhKYTdVTV9JbDc0LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLYsYMA0GCSqGSIb3DQEBCwUAA4IB
AQBJygZV/rsqWWw8FGuu0iAliw1uxOfDdhqB/35vJcNB5OHxc8PZtiE9lKlyi8nJ
msdl8Pt0BqgCAB6fSUV3AVOxe4GDfWyx2SfnT4KrnYpQSEqFN2sx5Ecn0L9eR0Q9
qwACfIO06sg04dyhsghWpAXGx+8HU01dbjNRlIF7JKrFtHa+gAgaShRh/BQa0KSk
Y8CAr0sl+AB5vz2+xBsZYpuOrD/uxS7/cOy/KnwrZ+SZsvpwpB4KpvGqEQcX7tTw
BRxY6IUpFW9I0NXk/jbm3To3q3ZefLi+VSXNqN9Mpu6xpmC1JLk2TWFpocw/dnKn
rMvSBYBp6AQqEEDkLjsfsz97
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:20 2024 by rpki-client on console-fra.rpki-client.org