Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/9b69ea-5d9a-49e1-bab2-52ffd4099973/1/vC1df8HjdTDRm7kO5Z1aiLPDyR8.roa
File: vC1df8HjdTDRm7kO5Z1aiLPDyR8.roa (raw, json)
Hash identifier: ikHs6d2WcdRZ4LLer++OwoSvMiNh859FXKUVa0gX63M=
Subject key identifier: BC:2D:5D:7F:C1:E3:75:30:D1:9B:B9:0E:E5:9D:5A:88:B3:C3:C9:1F
Certificate issuer: /CN=6d5d7c4d54e4cd5cdda878c7bb7c61964a30244f
Certificate serial: 018438590B07B71B464F4C1EF9EBE1111359
Authority key identifier: 6D:5D:7C:4D:54:E4:CD:5C:DD:A8:78:C7:BB:7C:61:96:4A:30:24:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bV18TVTkzVzdqHjHu3xhlkowJE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/9b69ea-5d9a-49e1-bab2-52ffd4099973/1/vC1df8HjdTDRm7kO5Z1aiLPDyR8.roa
Signing time: Wed 02 Nov 2022 12:37:50 +0000
ROA not before: Wed 02 Nov 2022 12:37:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8100
IP address blocks: 45.66.229.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:38:59:0b:07:b7:1b:46:4f:4c:1e:f9:eb:e1:11:13:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d5d7c4d54e4cd5cdda878c7bb7c61964a30244f
Validity
Not Before: Nov 2 12:37:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bc2d5d7fc1e37530d19bb90ee59d5a88b3c3c91f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:eb:21:f3:75:4c:15:99:fa:fa:88:1c:b2:88:
43:a9:8b:8e:89:a7:fb:8b:55:d3:50:b5:e5:d9:27:
9c:f5:d2:ca:69:04:4a:73:b5:a8:77:8a:2f:31:73:
85:0c:ae:f0:32:10:be:8b:4b:9e:0e:0b:b8:6a:ce:
47:d5:f5:a8:22:a8:61:ca:9c:a9:74:1b:f0:9c:6e:
b5:f5:b4:7d:eb:00:86:9c:6a:9f:0b:9b:99:c9:e2:
2c:bb:a5:53:21:53:38:06:5b:f3:39:52:21:a1:c1:
2c:06:dd:f2:32:a5:a7:a2:72:30:5b:cf:27:ba:15:
f3:65:ad:60:1c:5f:3f:9a:6b:7e:a8:37:23:93:1c:
8b:d5:44:8e:c3:53:15:65:1f:6b:a6:96:0d:15:92:
67:26:40:37:a2:50:46:24:5a:8e:d0:1e:59:63:9b:
b4:fe:38:1e:56:ac:c6:92:2e:bc:03:cc:a2:49:14:
d8:55:eb:03:84:42:28:33:44:1f:01:33:75:28:fa:
f1:9e:1b:34:f4:18:98:25:50:45:d2:3d:03:7e:8d:
f2:6a:37:83:0f:b5:6e:de:5b:3d:7d:2f:bd:9f:a8:
af:67:af:35:e4:6c:5a:dc:74:64:e4:08:e6:5a:00:
8f:ab:d8:27:29:88:22:5d:ab:42:72:35:f4:ce:d5:
93:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:2D:5D:7F:C1:E3:75:30:D1:9B:B9:0E:E5:9D:5A:88:B3:C3:C9:1F
X509v3 Authority Key Identifier:
keyid:6D:5D:7C:4D:54:E4:CD:5C:DD:A8:78:C7:BB:7C:61:96:4A:30:24:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bV18TVTkzVzdqHjHu3xhlkowJE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/9b69ea-5d9a-49e1-bab2-52ffd4099973/1/vC1df8HjdTDRm7kO5Z1aiLPDyR8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/9b69ea-5d9a-49e1-bab2-52ffd4099973/1/bV18TVTkzVzdqHjHu3xhlkowJE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.66.229.0/24
Signature Algorithm: sha256WithRSAEncryption
71:95:5f:a3:c5:11:f6:57:74:0e:8f:86:e2:9e:f2:d7:e2:d5:
d7:6c:b9:2e:25:c3:fe:8f:65:43:1f:5f:4e:e8:5f:a7:41:ea:
58:45:50:30:10:b8:21:3a:69:26:de:2e:a4:58:11:99:9b:19:
df:85:38:97:ee:c1:de:51:4e:f7:ce:9b:ac:42:df:ae:f2:18:
9e:73:0a:2b:65:a9:be:5e:bd:5f:52:61:f5:fb:eb:5f:cb:17:
62:5a:c5:e9:9d:d8:39:6b:02:87:e0:60:76:b0:7a:9c:1f:d5:
68:8d:ef:03:ac:05:b2:4f:1e:7f:77:31:1e:94:19:65:7b:c3:
67:c7:ff:1f:80:f7:2c:c4:5b:8e:61:ef:c4:7d:a4:82:3a:09:
f2:ca:7d:ec:8b:47:06:6a:69:dc:ef:3b:da:82:09:ad:98:5c:
c7:bc:ce:31:22:35:95:44:f2:5c:d8:6e:5f:92:a6:0d:d6:73:
27:fb:e7:6a:2d:d6:c5:1b:29:b9:fe:7c:ca:22:52:eb:3b:d1:
af:c2:22:a9:62:71:ba:01:12:e8:d2:c2:84:66:a4:a4:ee:c4:
d0:59:af:55:47:30:a6:10:83:35:0a:55:df:6d:3a:f2:a2:3e:
23:6e:da:de:ed:67:1b:88:58:2f:76:5d:73:c2:b9:47:88:1e:
01:1a:a2:d7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYQ4WQsHtxtGT0we+evhERNZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkNWQ3YzRkNTRlNGNkNWNkZGE4NzhjN2JiN2M2MTk2NGEz
MDI0NGYwHhcNMjIxMTAyMTIzNzUwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYzJkNWQ3ZmMxZTM3NTMwZDE5YmI5MGVlNTlkNWE4OGIzYzNjOTFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Osh83VMFZn6+ogcsohDqYuOiaf7
i1XTULXl2Sec9dLKaQRKc7Wod4ovMXOFDK7wMhC+i0ueDgu4as5H1fWoIqhhypyp
dBvwnG619bR96wCGnGqfC5uZyeIsu6VTIVM4BlvzOVIhocEsBt3yMqWnonIwW88n
uhXzZa1gHF8/mmt+qDcjkxyL1USOw1MVZR9rppYNFZJnJkA3olBGJFqO0B5ZY5u0
/jgeVqzGki68A8yiSRTYVesDhEIoM0QfATN1KPrxnhs09BiYJVBF0j0Dfo3yajeD
D7Vu3ls9fS+9n6ivZ6815Gxa3HRk5AjmWgCPq9gnKYgiXatCcjX0ztWTXQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLwtXX/B43Uw0Zu5DuWdWoizw8kfMB8GA1UdIwQY
MBaAFG1dfE1U5M1c3ah4x7t8YZZKMCRPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYlYxOFRWVGt6VnpkcUhqSHUzeGhsa293SkU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi85YjY5ZWEtNWQ5YS00OWUxLWJhYjIt
NTJmZmQ0MDk5OTczLzEvdkMxZGY4SGpkVERSbTdrTzVaMWFpTFBEeVI4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi85YjY5ZWEtNWQ5YS00OWUxLWJhYjItNTJmZmQ0MDk5OTcz
LzEvYlYxOFRWVGt6VnpkcUhqSHUzeGhsa293SkU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALULlMA0G
CSqGSIb3DQEBCwUAA4IBAQBxlV+jxRH2V3QOj4binvLX4tXXbLkuJcP+j2VDH19O
6F+nQepYRVAwELghOmkm3i6kWBGZmxnfhTiX7sHeUU73zpusQt+u8hiecworZam+
Xr1fUmH1++tfyxdiWsXpndg5awKH4GB2sHqcH9Voje8DrAWyTx5/dzEelBlle8Nn
x/8fgPcsxFuOYe/EfaSCOgnyyn3si0cGamnc7zvaggmtmFzHvM4xIjWVRPJc2G5f
kqYN1nMn++dqLdbFGym5/nzKIlLrO9GvwiKpYnG6ARLo0sKEZqSk7sTQWa9VRzCm
EIM1ClXfbTryoj4jbtre7WcbiFgvdl1zwrlHiB4BGqLX
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:05:27 2024 by rpki-client on console-ams.rpki-client.org