Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/73e13f-65a3-4226-b375-1af70662f603/1/yJVgkH3aZE7MWTgqnGLD925cFZg.roa
File: yJVgkH3aZE7MWTgqnGLD925cFZg.roa (raw, json)
Hash identifier: /MPrIl4O7d7SRlnHxCQCx9Wh/OSGtPImiSi223QQOvo=
Subject key identifier: C8:95:60:90:7D:DA:64:4E:CC:59:38:2A:9C:62:C3:F7:6E:5C:15:98
Certificate issuer: /CN=4079513d42e28341809f154baf2b514084f78efa
Certificate serial: 07441971
Authority key identifier: 40:79:51:3D:42:E2:83:41:80:9F:15:4B:AF:2B:51:40:84:F7:8E:FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QHlRPULig0GAnxVLrytRQIT3jvo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/73e13f-65a3-4226-b375-1af70662f603/1/yJVgkH3aZE7MWTgqnGLD925cFZg.roa
Signing time: Sat 01 Jan 2022 01:00:39 +0000
ROA not before: Sat 01 Jan 2022 01:00:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205199
IP address blocks: 45.134.120.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121903473 (0x7441971)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4079513d42e28341809f154baf2b514084f78efa
Validity
Not Before: Jan 1 01:00:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c89560907dda644ecc59382a9c62c3f76e5c1598
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:0a:99:0c:f8:c3:ca:f4:00:fc:b2:2a:de:67:
79:dc:a2:56:c8:31:f3:eb:aa:d4:87:f7:d5:14:c8:
40:11:42:49:b7:ee:29:7a:ed:7f:45:c1:e3:66:63:
08:64:60:a3:39:b9:2d:24:6e:fc:49:23:d5:4d:57:
b2:57:bc:a2:a9:a8:48:66:65:9c:c0:b3:0a:c8:fd:
21:24:63:9c:39:f9:e6:18:7b:e3:95:67:34:2f:ac:
0a:ec:78:a4:82:49:fc:0d:25:e9:8e:6a:da:fc:51:
34:54:5c:4b:df:48:ad:6a:80:8a:8b:c6:7b:9c:0c:
62:e7:4b:a7:e3:f4:f4:30:b1:62:ac:90:f3:85:9e:
3f:88:e0:4f:73:d0:f2:88:f0:ad:86:03:d1:65:2b:
68:f8:a6:f0:3b:cc:8e:7d:d5:17:6b:5a:7b:6e:69:
b4:61:c6:2f:06:4b:4f:14:05:36:4a:a7:1f:19:0a:
9c:ec:e0:b5:b8:c7:0d:13:f0:d0:38:dc:80:62:f3:
ae:fd:cf:8d:69:f2:f9:28:af:d3:8b:a8:6d:97:a7:
de:f6:69:0c:1b:32:af:d9:1f:64:c7:e4:57:32:ca:
7a:fa:ab:e8:0d:02:78:ac:db:a1:2d:66:25:2e:f5:
a4:c6:3e:ab:b5:d5:28:af:fc:2f:ff:37:28:c6:3e:
d7:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:95:60:90:7D:DA:64:4E:CC:59:38:2A:9C:62:C3:F7:6E:5C:15:98
X509v3 Authority Key Identifier:
keyid:40:79:51:3D:42:E2:83:41:80:9F:15:4B:AF:2B:51:40:84:F7:8E:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QHlRPULig0GAnxVLrytRQIT3jvo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/73e13f-65a3-4226-b375-1af70662f603/1/yJVgkH3aZE7MWTgqnGLD925cFZg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/73e13f-65a3-4226-b375-1af70662f603/1/QHlRPULig0GAnxVLrytRQIT3jvo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.134.120.0/22
Signature Algorithm: sha256WithRSAEncryption
66:c6:9a:a3:30:4b:db:d3:7e:cb:da:0c:76:fb:b9:f4:3b:72:
cb:1f:87:e0:76:f7:45:60:31:55:24:a0:fe:2f:40:36:2a:ac:
e6:32:f1:3d:b5:04:12:cd:c6:a6:22:ae:f7:29:bf:1d:bf:79:
db:d4:b8:4d:f2:1e:cd:db:50:de:e0:97:89:c0:69:c3:1e:4c:
53:8e:91:5b:44:2a:6f:4a:86:95:eb:4f:ce:c6:50:f6:da:cf:
51:10:ca:a4:6b:78:e6:b1:2d:1b:43:0c:e9:3b:dd:10:63:6a:
41:49:e8:2c:f1:aa:73:24:d4:52:f9:ec:c4:b8:ae:31:75:d4:
25:a4:12:cc:9b:2b:06:cd:8f:30:60:19:ea:04:ce:00:de:4d:
93:e6:31:1c:0f:02:3c:53:04:a9:c0:ce:0f:4c:a1:04:52:f5:
04:19:9e:26:45:85:a3:1a:55:27:2b:68:cd:ec:ce:a1:24:a9:
ff:35:7e:08:3d:0c:e7:0e:89:16:fe:30:0a:83:d5:fb:15:34:
77:45:25:30:10:47:1e:f9:80:bc:36:1e:22:92:58:ee:39:b0:
73:e1:8b:7b:51:45:cd:69:4d:b4:53:b9:30:e2:52:da:cc:da:
17:e1:e9:91:bb:b3:4c:ac:17:8d:65:ab:c1:2c:14:7e:71:7e:
10:70:1a:ca
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEB0QZcTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
MDc5NTEzZDQyZTI4MzQxODA5ZjE1NGJhZjJiNTE0MDg0Zjc4ZWZhMB4XDTIyMDEw
MTAxMDAzOVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYzg5NTYwOTA3ZGRh
NjQ0ZWNjNTkzODJhOWM2MmMzZjc2ZTVjMTU5ODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAL8KmQz4w8r0APyyKt5nedyiVsgx8+uq1If31RTIQBFCSbfu
KXrtf0XB42ZjCGRgozm5LSRu/Ekj1U1Xsle8oqmoSGZlnMCzCsj9ISRjnDn55hh7
45VnNC+sCux4pIJJ/A0l6Y5q2vxRNFRcS99IrWqAiovGe5wMYudLp+P09DCxYqyQ
84WeP4jgT3PQ8ojwrYYD0WUraPim8DvMjn3VF2tae25ptGHGLwZLTxQFNkqnHxkK
nOzgtbjHDRPw0DjcgGLzrv3PjWny+Siv04uobZen3vZpDBsyr9kfZMfkVzLKevqr
6A0CeKzboS1mJS71pMY+q7XVKK/8L/83KMY+1/MCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTIlWCQfdpkTsxZOCqcYsP3blwVmDAfBgNVHSMEGDAWgBRAeVE9QuKDQYCf
FUuvK1FAhPeO+jAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1FIbFJQVUxpZzBHQW54VkxyeXRSUUlUM2p2by5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNGUvNzNlMTNmLTY1YTMtNDIyNi1iMzc1LTFhZjcwNjYyZjYwMy8x
L3lKVmdrSDNhWkU3TVdUZ3FuR0xEOTI1Y0ZaZy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGUv
NzNlMTNmLTY1YTMtNDIyNi1iMzc1LTFhZjcwNjYyZjYwMy8xL1FIbFJQVUxpZzBH
QW54VkxyeXRSUUlUM2p2by5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAi2GeDANBgkqhkiG9w0BAQsFAAOC
AQEAZsaaozBL29N+y9oMdvu59Dtyyx+H4Hb3RWAxVSSg/i9ANiqs5jLxPbUEEs3G
piKu9ym/Hb9529S4TfIezdtQ3uCXicBpwx5MU46RW0Qqb0qGletPzsZQ9trPURDK
pGt45rEtG0MM6TvdEGNqQUnoLPGqcyTUUvnsxLiuMXXUJaQSzJsrBs2PMGAZ6gTO
AN5Nk+YxHA8CPFMEqcDOD0yhBFL1BBmeJkWFoxpVJytozezOoSSp/zV+CD0M5w6J
Fv4wCoPV+xU0d0UlMBBHHvmAvDYeIpJY7jmwc+GLe1FFzWlNtFO5MOJS2szaF+Hp
kbuzTKwXjWWrwSwUfnF+EHAayg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:13 2024 by rpki-client on console-ams.rpki-client.org