Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/591926-3230-4796-b144-71e936c54022/1/xyrkTk4olzoS8i3f9wyRJqCs38s.roa
File: xyrkTk4olzoS8i3f9wyRJqCs38s.roa (raw, json)
Hash identifier: blxq5YTp4gVTeySQ0VwWRn98I1R5OFIR2E8tKlXAzE8=
Subject key identifier: C7:2A:E4:4E:4E:28:97:3A:12:F2:2D:DF:F7:0C:91:26:A0:AC:DF:CB
Certificate issuer: /CN=0baca699440e25dd65037928b7c96a009f5599d3
Certificate serial: 0182DE585DE3B2D8DD8108932B1DA0D90E21
Authority key identifier: 0B:AC:A6:99:44:0E:25:DD:65:03:79:28:B7:C9:6A:00:9F:55:99:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C6ymmUQOJd1lA3kot8lqAJ9VmdM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/591926-3230-4796-b144-71e936c54022/1/xyrkTk4olzoS8i3f9wyRJqCs38s.roa
Signing time: Sat 27 Aug 2022 08:08:29 +0000
ROA not before: Sat 27 Aug 2022 08:08:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 22773
IP address blocks: 45.88.24.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:de:58:5d:e3:b2:d8:dd:81:08:93:2b:1d:a0:d9:0e:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0baca699440e25dd65037928b7c96a009f5599d3
Validity
Not Before: Aug 27 08:08:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c72ae44e4e28973a12f22ddff70c9126a0acdfcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:be:01:81:18:41:8c:7d:30:c0:08:2c:0f:5c:
eb:80:9a:97:d1:bd:aa:92:6e:69:73:21:a0:f6:53:
65:82:30:55:28:fe:ce:af:c2:c8:b8:71:0e:fb:a1:
ff:9e:7f:61:a4:d5:95:26:99:c3:93:d2:42:f8:a9:
9d:d7:f6:fe:7f:83:af:3f:41:b7:9b:24:00:7f:11:
41:df:0e:ee:cb:27:61:4d:a3:89:58:e8:54:62:3b:
74:b3:20:ec:76:77:af:43:96:ef:0a:3c:be:cc:c9:
6c:3e:36:ab:ae:c2:67:bb:df:a5:6d:6c:33:e5:d7:
2a:43:0d:09:a0:cb:5d:f5:d4:3b:a9:46:11:a6:c9:
b3:f4:ea:b6:4a:76:89:d7:23:cf:63:d6:f3:84:3e:
ee:74:51:c1:c0:95:34:ee:4c:90:91:56:ff:d7:07:
8a:78:80:34:b1:81:da:e3:59:4a:c5:08:ed:97:7c:
44:05:c8:d0:ed:d4:5c:8d:62:36:cc:7e:df:ce:be:
7b:da:26:cb:cc:ed:86:9c:f5:05:c6:e1:e2:24:34:
dc:ec:a2:81:95:10:45:9c:2a:98:29:32:6f:62:6c:
e7:41:71:4a:73:cf:cf:78:ff:ec:2e:1a:44:9b:c2:
a8:07:af:fc:d7:1a:c3:ec:79:74:43:75:95:4f:0a:
03:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:2A:E4:4E:4E:28:97:3A:12:F2:2D:DF:F7:0C:91:26:A0:AC:DF:CB
X509v3 Authority Key Identifier:
keyid:0B:AC:A6:99:44:0E:25:DD:65:03:79:28:B7:C9:6A:00:9F:55:99:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C6ymmUQOJd1lA3kot8lqAJ9VmdM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/591926-3230-4796-b144-71e936c54022/1/xyrkTk4olzoS8i3f9wyRJqCs38s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/591926-3230-4796-b144-71e936c54022/1/C6ymmUQOJd1lA3kot8lqAJ9VmdM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.24.0/22
Signature Algorithm: sha256WithRSAEncryption
78:bd:f9:53:86:92:90:53:3a:12:3d:a8:26:6e:f6:99:11:93:
36:d1:d2:be:37:52:46:8b:e1:f3:08:35:0d:1d:2d:36:43:41:
8a:fa:bf:0b:01:f1:08:22:50:60:08:73:e4:27:ca:1c:b3:b9:
f6:4b:f6:da:05:01:75:5c:bd:62:99:98:e6:16:1e:97:f2:46:
d4:eb:1c:9a:a2:d1:2f:e3:3b:f5:de:45:1f:09:32:b0:0d:2a:
ed:74:1e:11:1f:0e:9e:30:79:cd:1f:f2:8a:8f:f1:1c:1f:73:
27:99:9a:09:12:e6:46:6e:45:60:8e:04:18:cd:1b:79:57:54:
96:b8:ca:b2:d1:b6:0c:be:72:a9:33:27:39:ac:6e:7a:36:52:
16:b1:7a:89:ad:93:a5:bf:9c:5c:a2:78:d6:09:40:8e:b3:9a:
b1:47:8c:9c:7b:01:62:96:c6:e6:65:98:1e:60:2c:6a:80:ba:
fd:66:0c:14:b0:49:4f:94:54:09:79:8b:03:18:6d:8e:71:de:
d5:f5:bf:73:38:91:f4:9f:c9:80:68:61:7f:23:31:d9:58:f4:
60:aa:8c:bd:60:c9:d2:84:a5:8a:52:03:a0:50:90:c8:96:25:
8c:3d:d4:a0:92:f8:c4:2b:0b:6d:35:67:75:13:53:8d:8e:1a:
91:dd:c3:23
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYLeWF3jstjdgQiTKx2g2Q4hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiYWNhNjk5NDQwZTI1ZGQ2NTAzNzkyOGI3Yzk2YTAwOWY1
NTk5ZDMwHhcNMjIwODI3MDgwODI5WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNzJhZTQ0ZTRlMjg5NzNhMTJmMjJkZGZmNzBjOTEyNmEwYWNkZmNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw74BgRhBjH0wwAgsD1zrgJqX0b2q
km5pcyGg9lNlgjBVKP7Or8LIuHEO+6H/nn9hpNWVJpnDk9JC+Kmd1/b+f4OvP0G3
myQAfxFB3w7uyydhTaOJWOhUYjt0syDsdnevQ5bvCjy+zMlsPjarrsJnu9+lbWwz
5dcqQw0JoMtd9dQ7qUYRpsmz9Oq2SnaJ1yPPY9bzhD7udFHBwJU07kyQkVb/1weK
eIA0sYHa41lKxQjtl3xEBcjQ7dRcjWI2zH7fzr572ibLzO2GnPUFxuHiJDTc7KKB
lRBFnCqYKTJvYmznQXFKc8/PeP/sLhpEm8KoB6/81xrD7Hl0Q3WVTwoDBQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMcq5E5OKJc6EvIt3/cMkSagrN/LMB8GA1UdIwQY
MBaAFAuspplEDiXdZQN5KLfJagCfVZnTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzZ5bW1VUU9KZDFsQTNrb3Q4bHFBSjlWbWRNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS81OTE5MjYtMzIzMC00Nzk2LWIxNDQt
NzFlOTM2YzU0MDIyLzEveHlya1RrNG9sem9TOGkzZjl3eVJKcUNzMzhzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS81OTE5MjYtMzIzMC00Nzk2LWIxNDQtNzFlOTM2YzU0MDIy
LzEvQzZ5bW1VUU9KZDFsQTNrb3Q4bHFBSjlWbWRNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLVgYMA0G
CSqGSIb3DQEBCwUAA4IBAQB4vflThpKQUzoSPagmbvaZEZM20dK+N1JGi+HzCDUN
HS02Q0GK+r8LAfEIIlBgCHPkJ8ocs7n2S/baBQF1XL1imZjmFh6X8kbU6xyaotEv
4zv13kUfCTKwDSrtdB4RHw6eMHnNH/KKj/EcH3MnmZoJEuZGbkVgjgQYzRt5V1SW
uMqy0bYMvnKpMyc5rG56NlIWsXqJrZOlv5xconjWCUCOs5qxR4ycewFilsbmZZge
YCxqgLr9ZgwUsElPlFQJeYsDGG2Ocd7V9b9zOJH0n8mAaGF/IzHZWPRgqoy9YMnS
hKWKUgOgUJDIliWMPdSgkvjEKwttNWd1E1ONjhqR3cMj
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:58 2023 by rpki-client on console-ams.rpki-client.org