Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/9b69ea-5d9a-49e1-bab2-52ffd4099973/1/MAxGrVnZexZRLumZHmuxhIJNDGk.roa
File: MAxGrVnZexZRLumZHmuxhIJNDGk.roa (raw, json)
Hash identifier: 8JavjnnRCIkDp7LO/gXQ5luMIoqWcQQVeuhbk6QhgE4=
Subject key identifier: 30:0C:46:AD:59:D9:7B:16:51:2E:E9:99:1E:6B:B1:84:82:4D:0C:69
Certificate issuer: /CN=6d5d7c4d54e4cd5cdda878c7bb7c61964a30244f
Certificate serial: 0183C113C50DB03BDEF884406DF79076B4CE
Authority key identifier: 6D:5D:7C:4D:54:E4:CD:5C:DD:A8:78:C7:BB:7C:61:96:4A:30:24:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bV18TVTkzVzdqHjHu3xhlkowJE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/9b69ea-5d9a-49e1-bab2-52ffd4099973/1/MAxGrVnZexZRLumZHmuxhIJNDGk.roa
Signing time: Mon 10 Oct 2022 08:47:21 +0000
ROA not before: Mon 10 Oct 2022 08:47:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209371
IP address blocks: 45.66.228.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:c1:13:c5:0d:b0:3b:de:f8:84:40:6d:f7:90:76:b4:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d5d7c4d54e4cd5cdda878c7bb7c61964a30244f
Validity
Not Before: Oct 10 08:47:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=300c46ad59d97b16512ee9991e6bb184824d0c69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:1b:1b:4b:6c:86:40:9d:b4:3b:8e:5b:b7:63:
2a:a9:27:3f:b8:e1:54:c0:3b:dc:2d:74:78:09:0d:
5f:c0:23:b4:1f:9a:a0:36:76:ed:7a:86:42:83:26:
2b:a0:89:1f:ba:fd:6f:49:98:37:7b:78:9e:b9:bc:
d0:81:10:8e:e2:be:27:37:81:3e:62:95:db:77:6c:
44:66:3a:79:75:83:bf:07:15:63:c5:b3:c2:70:d8:
66:d1:81:dc:5c:55:16:97:c9:89:b1:a4:74:f8:50:
91:f3:b6:00:97:2d:95:4a:78:5a:e2:5b:8c:ff:58:
41:60:7c:85:a8:41:e9:31:b6:b0:b1:f3:c2:f1:80:
d2:19:c5:1a:e2:c1:53:6c:f0:47:65:52:39:cc:9f:
ae:99:6a:ab:2d:30:a3:04:b4:9b:1e:23:c9:49:cd:
64:08:27:d0:68:e7:7a:c4:6b:d1:b5:0f:6b:49:30:
68:e7:65:11:73:0c:69:6f:42:38:71:bb:80:13:c8:
a0:ae:e9:9a:cf:7f:7f:66:f4:be:f0:21:bb:8a:71:
2e:71:f0:0e:80:e5:d7:12:c7:e0:b4:27:9b:d5:cf:
07:cd:06:f8:3c:5b:21:7c:a0:31:b3:91:c1:96:76:
f6:94:04:41:e3:00:bc:87:b1:2b:1f:86:50:2a:29:
05:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:0C:46:AD:59:D9:7B:16:51:2E:E9:99:1E:6B:B1:84:82:4D:0C:69
X509v3 Authority Key Identifier:
keyid:6D:5D:7C:4D:54:E4:CD:5C:DD:A8:78:C7:BB:7C:61:96:4A:30:24:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bV18TVTkzVzdqHjHu3xhlkowJE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/9b69ea-5d9a-49e1-bab2-52ffd4099973/1/MAxGrVnZexZRLumZHmuxhIJNDGk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/9b69ea-5d9a-49e1-bab2-52ffd4099973/1/bV18TVTkzVzdqHjHu3xhlkowJE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.66.228.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:c4:b1:76:d1:e9:b9:18:1e:7a:6f:bf:00:7b:57:d7:6b:98:
58:9d:92:db:2c:0d:81:22:79:29:42:f3:44:dc:05:7d:f9:ba:
15:f6:24:45:f2:9e:2e:4f:1e:f3:d0:94:e1:68:0d:8c:96:19:
0d:9f:e6:29:5c:0a:75:0e:48:88:e3:2e:b6:30:35:66:19:8d:
6d:2e:23:7e:57:6a:f1:33:50:ab:15:a6:cb:8c:9c:e0:97:0a:
fb:dc:b9:82:ab:47:98:9e:5d:85:5a:f2:a4:36:59:ee:e4:3e:
14:09:f5:bd:b1:50:15:4f:10:60:01:ff:60:4e:86:f6:27:f4:
58:86:ea:60:82:c1:c8:ca:04:6f:77:ba:c4:51:55:9a:d2:52:
63:bf:ad:7b:48:1a:c1:59:be:24:a9:e0:62:f5:e8:bb:59:92:
d9:cc:12:94:12:b4:e2:31:6e:a1:31:8d:61:7c:60:12:f7:8b:
15:97:2e:8c:92:7c:cb:2f:29:53:a3:55:e6:a7:fe:de:0f:51:
f6:ce:70:d8:7a:ca:d5:08:b4:57:da:04:e2:7a:41:eb:c9:4c:
2b:5d:dc:73:fd:4d:44:9d:b6:9b:6d:a6:f4:48:a8:46:43:66:
6f:18:f7:4b:e3:f7:a0:fe:ee:52:3b:9b:f9:ec:75:15:82:3b:
c6:71:2c:0a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYPBE8UNsDve+IRAbfeQdrTOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkNWQ3YzRkNTRlNGNkNWNkZGE4NzhjN2JiN2M2MTk2NGEz
MDI0NGYwHhcNMjIxMDEwMDg0NzIxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMDBjNDZhZDU5ZDk3YjE2NTEyZWU5OTkxZTZiYjE4NDgyNGQwYzY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhxsbS2yGQJ20O45bt2MqqSc/uOFU
wDvcLXR4CQ1fwCO0H5qgNnbteoZCgyYroIkfuv1vSZg3e3ieubzQgRCO4r4nN4E+
YpXbd2xEZjp5dYO/BxVjxbPCcNhm0YHcXFUWl8mJsaR0+FCR87YAly2VSnha4luM
/1hBYHyFqEHpMbawsfPC8YDSGcUa4sFTbPBHZVI5zJ+umWqrLTCjBLSbHiPJSc1k
CCfQaOd6xGvRtQ9rSTBo52URcwxpb0I4cbuAE8igrumaz39/ZvS+8CG7inEucfAO
gOXXEsfgtCeb1c8HzQb4PFshfKAxs5HBlnb2lARB4wC8h7ErH4ZQKikFjQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDAMRq1Z2XsWUS7pmR5rsYSCTQxpMB8GA1UdIwQY
MBaAFG1dfE1U5M1c3ah4x7t8YZZKMCRPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYlYxOFRWVGt6VnpkcUhqSHUzeGhsa293SkU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi85YjY5ZWEtNWQ5YS00OWUxLWJhYjIt
NTJmZmQ0MDk5OTczLzEvTUF4R3JWblpleFpSTHVtWkhtdXhoSUpOREdrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi85YjY5ZWEtNWQ5YS00OWUxLWJhYjItNTJmZmQ0MDk5OTcz
LzEvYlYxOFRWVGt6VnpkcUhqSHUzeGhsa293SkU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALULkMA0G
CSqGSIb3DQEBCwUAA4IBAQCLxLF20em5GB56b78Ae1fXa5hYnZLbLA2BInkpQvNE
3AV9+boV9iRF8p4uTx7z0JThaA2MlhkNn+YpXAp1DkiI4y62MDVmGY1tLiN+V2rx
M1CrFabLjJzglwr73LmCq0eYnl2FWvKkNlnu5D4UCfW9sVAVTxBgAf9gTob2J/RY
hupggsHIygRvd7rEUVWa0lJjv617SBrBWb4kqeBi9ei7WZLZzBKUErTiMW6hMY1h
fGAS94sVly6MknzLLylTo1Xmp/7eD1H2znDYesrVCLRX2gTiekHryUwrXdxz/U1E
nbabbab0SKhGQ2ZvGPdL4/eg/u5SO5v57HUVgjvGcSwK
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:52 2023 by rpki-client on console-ams.rpki-client.org