Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/9b69ea-5d9a-49e1-bab2-52ffd4099973/1/jUL2VEifNoPpfzl8i0XLFFkwtrk.roa
File: jUL2VEifNoPpfzl8i0XLFFkwtrk.roa (raw, json)
Hash identifier: AVLg1yRtP7e2CNxz0WeUKkPSSzCVoUIyvRDSJf+W+Ro=
Subject key identifier: 8D:42:F6:54:48:9F:36:83:E9:7F:39:7C:8B:45:CB:14:59:30:B6:B9
Certificate issuer: /CN=6d5d7c4d54e4cd5cdda878c7bb7c61964a30244f
Certificate serial: 0183E5F67B323767AAF3B50FBFF8B1BB9E9D
Authority key identifier: 6D:5D:7C:4D:54:E4:CD:5C:DD:A8:78:C7:BB:7C:61:96:4A:30:24:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bV18TVTkzVzdqHjHu3xhlkowJE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/9b69ea-5d9a-49e1-bab2-52ffd4099973/1/jUL2VEifNoPpfzl8i0XLFFkwtrk.roa
Signing time: Mon 17 Oct 2022 12:41:19 +0000
ROA not before: Mon 17 Oct 2022 12:41:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8100
IP address blocks: 45.66.229.0/24 maxlen: 24
45.66.230.0/24 maxlen: 24
45.66.231.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:e5:f6:7b:32:37:67:aa:f3:b5:0f:bf:f8:b1:bb:9e:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d5d7c4d54e4cd5cdda878c7bb7c61964a30244f
Validity
Not Before: Oct 17 12:41:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8d42f654489f3683e97f397c8b45cb145930b6b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:e1:c2:ff:d6:1f:33:b6:11:f6:5a:ef:31:f1:
49:1a:ec:b7:4e:2b:b2:7b:73:9e:60:c7:b3:37:48:
b8:8d:c2:cd:05:6d:bc:96:3e:ed:4d:3b:dc:24:70:
ac:8f:df:de:e1:b3:f5:fa:52:c2:2c:97:65:66:78:
cc:a3:ae:b7:a8:94:b1:d3:8e:6d:ee:d3:eb:b8:5b:
c5:5a:f1:4b:d1:fe:20:53:aa:76:ee:c2:bb:6f:3a:
ba:37:c3:e6:80:44:53:26:f1:fb:94:73:77:a4:8d:
76:e6:ba:54:75:c3:15:12:a5:df:c9:aa:32:2c:44:
6c:c4:95:a3:53:ec:cb:cb:dc:63:12:1e:56:63:e1:
8f:dc:8e:22:7e:6c:c3:91:c8:05:02:be:b9:b8:19:
b7:d8:c1:56:7a:8e:4e:74:c1:d8:f2:59:61:2b:f9:
05:52:94:86:ec:57:9d:e1:eb:89:e8:44:4b:d2:a6:
a2:b7:54:da:8a:2f:b2:ed:40:dd:b5:f6:6c:86:8a:
10:66:2a:68:eb:ca:62:dd:27:79:6a:78:8f:ad:24:
90:40:7b:d4:31:bf:ed:6e:4d:d2:d9:02:0b:45:f2:
40:32:f8:54:a9:3c:4e:8a:16:93:56:55:52:c9:4d:
cc:6c:b7:b9:b2:cd:9d:6c:1b:b5:f2:c2:59:56:88:
09:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:42:F6:54:48:9F:36:83:E9:7F:39:7C:8B:45:CB:14:59:30:B6:B9
X509v3 Authority Key Identifier:
keyid:6D:5D:7C:4D:54:E4:CD:5C:DD:A8:78:C7:BB:7C:61:96:4A:30:24:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bV18TVTkzVzdqHjHu3xhlkowJE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/9b69ea-5d9a-49e1-bab2-52ffd4099973/1/jUL2VEifNoPpfzl8i0XLFFkwtrk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/9b69ea-5d9a-49e1-bab2-52ffd4099973/1/bV18TVTkzVzdqHjHu3xhlkowJE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.66.229.0-45.66.231.255
Signature Algorithm: sha256WithRSAEncryption
0f:92:0b:e7:3e:9a:52:af:50:da:ee:08:bd:ab:d4:08:24:ae:
e4:f9:58:ea:60:02:33:72:15:c2:b1:7b:0b:1d:80:ef:e3:00:
05:06:ae:cb:8c:d7:f9:cb:e5:ba:e2:f3:7f:55:77:9e:96:a9:
25:7f:18:5e:56:ff:cf:7b:d9:fc:e8:8e:97:aa:0d:49:61:85:
67:70:79:02:2c:b8:1f:07:b3:9d:ac:f8:99:5c:53:49:69:e7:
39:a0:59:47:e5:85:7d:83:44:08:19:23:45:57:ff:6f:df:dd:
a0:23:9a:5a:cc:c6:17:fa:ff:ed:b6:d7:48:86:87:cc:f4:c4:
f8:80:9f:e9:4b:08:85:5e:b2:48:79:49:5a:a9:a3:e6:e9:b8:
08:42:b6:91:54:8e:18:0a:48:e8:c6:50:a2:20:0c:81:23:8a:
d3:fd:3d:3a:c1:f2:ae:6c:52:e0:37:f4:da:ce:eb:c8:36:2d:
49:87:b8:c5:2e:82:08:d0:86:11:60:f5:1f:a9:87:fa:7c:c3:
8a:e6:e3:e1:65:5e:12:4f:df:92:71:a8:f1:0a:07:52:b8:8d:
6e:40:2b:a7:e8:49:ac:1b:0f:2d:3c:40:d5:50:9b:d0:71:a5:
09:3c:10:4d:86:16:ca:39:fb:45:67:3d:88:04:3e:ac:55:ae:
1f:48:c3:69
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAYPl9nsyN2eq87UPv/ixu56dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkNWQ3YzRkNTRlNGNkNWNkZGE4NzhjN2JiN2M2MTk2NGEz
MDI0NGYwHhcNMjIxMDE3MTI0MTE5WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZDQyZjY1NDQ4OWYzNjgzZTk3ZjM5N2M4YjQ1Y2IxNDU5MzBiNmI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgOHC/9YfM7YR9lrvMfFJGuy3Tiuy
e3OeYMezN0i4jcLNBW28lj7tTTvcJHCsj9/e4bP1+lLCLJdlZnjMo663qJSx045t
7tPruFvFWvFL0f4gU6p27sK7bzq6N8PmgERTJvH7lHN3pI125rpUdcMVEqXfyaoy
LERsxJWjU+zLy9xjEh5WY+GP3I4ifmzDkcgFAr65uBm32MFWeo5OdMHY8llhK/kF
UpSG7Fed4euJ6ERL0qait1Taii+y7UDdtfZshooQZipo68pi3Sd5aniPrSSQQHvU
Mb/tbk3S2QILRfJAMvhUqTxOihaTVlVSyU3MbLe5ss2dbBu18sJZVogJSwIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFI1C9lRInzaD6X85fItFyxRZMLa5MB8GA1UdIwQY
MBaAFG1dfE1U5M1c3ah4x7t8YZZKMCRPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYlYxOFRWVGt6VnpkcUhqSHUzeGhsa293SkU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi85YjY5ZWEtNWQ5YS00OWUxLWJhYjIt
NTJmZmQ0MDk5OTczLzEvalVMMlZFaWZOb1BwZnpsOGkwWExGRmt3dHJrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi85YjY5ZWEtNWQ5YS00OWUxLWJhYjItNTJmZmQ0MDk5OTcz
LzEvYlYxOFRWVGt6VnpkcUhqSHUzeGhsa293SkU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAAtQuUD
BAMtQuAwDQYJKoZIhvcNAQELBQADggEBAA+SC+c+mlKvUNruCL2r1AgkruT5WOpg
AjNyFcKxewsdgO/jAAUGrsuM1/nL5bri839Vd56WqSV/GF5W/8972fzojpeqDUlh
hWdweQIsuB8Hs52s+JlcU0lp5zmgWUflhX2DRAgZI0VX/2/f3aAjmlrMxhf6/+22
10iGh8z0xPiAn+lLCIVeskh5SVqpo+bpuAhCtpFUjhgKSOjGUKIgDIEjitP9PTrB
8q5sUuA39NrO68g2LUmHuMUuggjQhhFg9R+ph/p8w4rm4+FlXhJP35JxqPEKB1K4
jW5AK6foSawbDy08QNVQm9BxpQk8EE2GFso5+0VnPYgEPqxVrh9Iw2k=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:06 2024 by rpki-client on console-fra.rpki-client.org