Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/7PSYRhpvIz5jsnrnTzFrklM7-OE.roa
File: 7PSYRhpvIz5jsnrnTzFrklM7-OE.roa (raw, json)
Hash identifier: zr+H1g2VST/eGD3awAgh3F00RJuxDnD/ZUelsVAi0MM=
Subject key identifier: EC:F4:98:46:1A:6F:23:3E:63:B2:7A:E7:4F:31:6B:92:53:3B:F8:E1
Certificate issuer: /CN=a44c267fa754cd6509e9f807273123bee96c525d
Certificate serial: 01828A58A69398252D9CC452F7B37F6F0459
Authority key identifier: A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/7PSYRhpvIz5jsnrnTzFrklM7-OE.roa
Signing time: Thu 11 Aug 2022 00:40:41 +0000
ROA not before: Thu 11 Aug 2022 00:40:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 45.12.80.0/22 maxlen: 24
45.137.97.0/24 maxlen: 24
85.209.220.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:8a:58:a6:93:98:25:2d:9c:c4:52:f7:b3:7f:6f:04:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a44c267fa754cd6509e9f807273123bee96c525d
Validity
Not Before: Aug 11 00:40:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ecf498461a6f233e63b27ae74f316b92533bf8e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:1f:eb:e0:73:48:1d:46:63:50:9e:f2:6e:88:
16:31:3c:36:a3:6c:c2:93:44:4c:8f:a1:c8:2e:0c:
dd:85:b8:54:f4:db:bd:ad:d1:cc:57:3f:c3:fc:42:
be:5f:9a:0d:2c:a0:90:3e:07:96:4a:fd:3f:69:9d:
b8:b5:e8:d5:0b:4a:86:1e:e4:f7:58:7f:9a:10:3a:
87:42:50:83:00:27:3a:9d:72:d3:ca:d1:95:c2:20:
83:4e:c8:f2:83:2b:5a:52:25:83:25:d9:c9:4b:67:
aa:45:a2:14:c2:6e:16:e5:26:15:99:ba:a4:e6:1d:
77:3d:f3:1a:ee:7c:85:4f:53:80:66:97:01:34:11:
46:15:8d:bc:47:53:cf:54:e2:f9:24:86:85:af:39:
a2:9f:be:fb:4e:33:4d:e6:89:ef:f4:a4:e8:4d:3b:
f7:b3:d0:16:0b:53:15:8c:f9:19:2b:cf:ae:f7:b6:
4c:98:4b:e2:11:6b:ad:a2:7a:e6:4e:56:91:ec:e5:
33:42:53:af:a5:a2:c4:c2:43:35:0c:83:55:5e:06:
f6:df:48:61:21:20:20:06:f7:32:19:e2:ca:d7:e8:
9c:5f:5a:01:2e:d9:57:41:a0:ae:43:92:db:83:aa:
53:3d:0c:f9:ab:e5:71:fd:1f:18:e5:9b:df:75:9d:
85:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:F4:98:46:1A:6F:23:3E:63:B2:7A:E7:4F:31:6B:92:53:3B:F8:E1
X509v3 Authority Key Identifier:
keyid:A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/7PSYRhpvIz5jsnrnTzFrklM7-OE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/pEwmf6dUzWUJ6fgHJzEjvulsUl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.12.80.0/22
45.137.97.0/24
85.209.220.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:55:82:cf:fe:c2:96:e4:27:02:22:5d:9b:93:16:4e:f5:bd:
f2:13:86:22:f4:ae:76:6d:4d:54:ed:1f:22:71:0c:fc:ed:e2:
63:97:72:62:40:9c:18:99:0a:54:2c:5d:a4:08:6e:c3:d5:eb:
e3:62:35:fa:76:e4:a3:5c:ae:9d:4f:0c:84:c8:11:90:ab:0c:
a4:03:58:ed:72:b8:61:46:2c:37:fa:53:cd:d2:74:0b:24:4b:
46:0f:c7:8d:17:ed:fc:27:53:a4:4d:60:78:9f:7c:37:9e:3d:
39:7e:2b:3d:91:a5:f2:1d:b7:f6:5b:34:15:43:d2:af:6e:31:
2b:7f:bb:2d:76:ef:da:79:26:c7:09:0d:32:f6:44:eb:2e:9f:
e9:20:72:88:08:a2:92:1e:e7:b1:c8:eb:81:31:50:0b:91:4d:
d1:fa:36:fb:80:99:02:6a:7e:af:82:00:0b:25:b3:93:6a:31:
01:17:00:73:bf:89:e6:9d:1f:cc:02:c0:2d:82:28:0a:d3:88:
0d:ad:ee:48:c1:60:41:6b:ae:8b:93:98:5f:cd:91:24:a2:44:
d8:31:72:66:80:e0:e5:f6:5a:e3:64:5f:d5:63:65:a5:16:fe:
26:a7:09:b7:4e:2c:09:07:ba:d1:af:9f:11:e8:18:29:75:76:
a3:08:02:bf
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYKKWKaTmCUtnMRS97N/bwRZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0NGMyNjdmYTc1NGNkNjUwOWU5ZjgwNzI3MzEyM2JlZTk2
YzUyNWQwHhcNMjIwODExMDA0MDQxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlY2Y0OTg0NjFhNmYyMzNlNjNiMjdhZTc0ZjMxNmI5MjUzM2JmOGUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqR/r4HNIHUZjUJ7ybogWMTw2o2zC
k0RMj6HILgzdhbhU9Nu9rdHMVz/D/EK+X5oNLKCQPgeWSv0/aZ24tejVC0qGHuT3
WH+aEDqHQlCDACc6nXLTytGVwiCDTsjygytaUiWDJdnJS2eqRaIUwm4W5SYVmbqk
5h13PfMa7nyFT1OAZpcBNBFGFY28R1PPVOL5JIaFrzmin777TjNN5onv9KToTTv3
s9AWC1MVjPkZK8+u97ZMmEviEWutonrmTlaR7OUzQlOvpaLEwkM1DINVXgb230hh
ISAgBvcyGeLK1+icX1oBLtlXQaCuQ5Lbg6pTPQz5q+Vx/R8Y5ZvfdZ2FEQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFOz0mEYabyM+Y7J6508xa5JTO/jhMB8GA1UdIwQY
MBaAFKRMJn+nVM1lCen4BycxI77pbFJdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcEV3bWY2ZFV6V1VKNmZnSEp6RWp2dWxzVWwwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9hYjI2YTUtNjdiOS00NjY3LTg1NWIt
NDhhZjA4MDA0YjVmLzEvN1BTWVJocHZJejVqc25yblR6RnJrbE03LU9FLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC9hYjI2YTUtNjdiOS00NjY3LTg1NWItNDhhZjA4MDA0YjVm
LzEvcEV3bWY2ZFV6V1VKNmZnSEp6RWp2dWxzVWwwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCLQxQAwQA
LYlhAwQAVdHcMA0GCSqGSIb3DQEBCwUAA4IBAQAMVYLP/sKW5CcCIl2bkxZO9b3y
E4Yi9K52bU1U7R8icQz87eJjl3JiQJwYmQpULF2kCG7D1evjYjX6duSjXK6dTwyE
yBGQqwykA1jtcrhhRiw3+lPN0nQLJEtGD8eNF+38J1OkTWB4n3w3nj05fis9kaXy
Hbf2WzQVQ9KvbjErf7stdu/aeSbHCQ0y9kTrLp/pIHKICKKSHuexyOuBMVALkU3R
+jb7gJkCan6vggALJbOTajEBFwBzv4nmnR/MAsAtgigK04gNre5IwWBBa66Lk5hf
zZEkokTYMXJmgODl9lrjZF/VY2WlFv4mpwm3TiwJB7rRr58R6BgpdXajCAK/
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:31 2023 by rpki-client on console-fra.rpki-client.org