Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/DSKyjYfMgqj7lnTfBMBe-x12m5M.roa
File: DSKyjYfMgqj7lnTfBMBe-x12m5M.roa (raw, json)
Hash identifier: 9DmqR+K2+3bvOuATdB7L+TQPUZh80nARxsKk6ZsvWKs=
Subject key identifier: 0D:22:B2:8D:87:CC:82:A8:FB:96:74:DF:04:C0:5E:FB:1D:76:9B:93
Certificate issuer: /CN=a44c267fa754cd6509e9f807273123bee96c525d
Certificate serial: 098C17F8
Authority key identifier: A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/DSKyjYfMgqj7lnTfBMBe-x12m5M.roa
Signing time: Wed 26 Jan 2022 18:14:59 +0000
ROA not before: Wed 26 Jan 2022 18:14:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35913
IP address blocks: 45.158.58.0/24 maxlen: 24
2.56.248.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 160176120 (0x98c17f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a44c267fa754cd6509e9f807273123bee96c525d
Validity
Not Before: Jan 26 18:14:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0d22b28d87cc82a8fb9674df04c05efb1d769b93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:b4:69:ef:1b:f6:3a:ff:79:a8:1a:b2:a9:f3:
c4:a8:1e:bf:fa:e1:3b:0c:c5:76:e5:7c:b0:f9:71:
e2:df:40:24:e6:de:68:06:d4:d3:4a:3d:32:30:b0:
fd:65:4c:f2:6d:61:b0:d2:1b:c1:e8:2f:fb:7e:53:
33:07:73:24:37:40:fc:8e:5b:a9:31:a4:d2:6d:f6:
a2:1c:c4:19:6b:43:8d:5e:4f:aa:03:19:36:eb:7a:
58:3d:2a:63:3e:11:86:6d:af:72:35:18:10:a4:26:
88:af:6c:1a:7e:1c:a5:2e:86:db:91:7d:c8:b5:11:
21:8c:9f:16:14:f1:46:f0:25:54:f2:d1:da:81:9c:
c7:24:39:8c:f3:83:92:04:3a:af:5f:26:20:fc:b5:
4e:93:6d:e3:ed:b2:e1:21:c4:54:ab:d1:3e:b0:fe:
b8:2e:d4:2f:4f:89:2b:84:ec:05:7a:93:be:98:74:
9e:58:ee:63:d1:15:e3:06:40:3f:7a:39:71:84:ef:
09:51:c4:a2:a2:5c:09:38:66:44:ad:3f:92:51:52:
a0:8b:61:3a:9f:c2:17:e7:f8:65:63:be:2a:c2:1f:
21:21:11:c1:b0:ad:32:43:0e:7e:54:fa:53:25:7f:
2e:33:ee:5f:eb:46:d6:5d:e0:fe:a3:c1:f6:30:c3:
f6:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:22:B2:8D:87:CC:82:A8:FB:96:74:DF:04:C0:5E:FB:1D:76:9B:93
X509v3 Authority Key Identifier:
keyid:A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/DSKyjYfMgqj7lnTfBMBe-x12m5M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/pEwmf6dUzWUJ6fgHJzEjvulsUl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.248.0/22
45.158.58.0/24
Signature Algorithm: sha256WithRSAEncryption
97:a9:77:47:01:e2:fb:3d:46:e6:cc:d6:26:d6:49:ed:ad:6b:
ee:b8:db:ee:03:85:79:75:64:e9:be:a9:ac:ff:75:ca:2c:b3:
73:48:4e:a1:cb:91:fa:a0:70:2e:58:ce:0c:2e:e4:3b:f0:d2:
28:a2:60:25:c6:7d:c0:33:a8:7c:cb:02:90:53:4b:3c:4f:c6:
c4:65:f0:99:dc:e3:16:20:9a:7d:54:16:92:ce:38:cf:9b:94:
d5:0f:c1:b1:f5:31:70:ee:61:96:0a:0c:bc:71:84:dd:cb:68:
3d:56:dd:89:bd:95:f4:c6:15:82:e2:33:f4:e3:10:15:46:7e:
fa:c9:02:01:5d:84:0a:ca:4b:52:84:f0:57:5b:ce:8d:9e:73:
24:2b:31:1d:65:7d:2e:e0:4f:8b:7b:4c:42:06:a1:d8:f0:da:
57:71:ac:dc:27:fb:13:b3:90:31:f6:97:1a:86:11:fe:79:c0:
89:96:0a:c4:b8:08:b4:6d:5d:bf:cf:e8:3d:f9:20:82:77:ba:
fd:ff:1f:3d:97:35:15:3f:4e:b2:a4:86:03:c8:c1:c9:4d:46:
37:85:b7:1b:19:ec:8c:a9:b3:4a:e4:62:bf:ff:63:d0:fc:8c:
d7:d9:88:fa:2d:27:06:48:f1:aa:78:a3:18:18:a6:ef:65:46:
f7:b9:25:10
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIECYwX+DANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhh
NDRjMjY3ZmE3NTRjZDY1MDllOWY4MDcyNzMxMjNiZWU5NmM1MjVkMB4XDTIyMDEy
NjE4MTQ1OVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMGQyMmIyOGQ4N2Nj
ODJhOGZiOTY3NGRmMDRjMDVlZmIxZDc2OWI5MzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAPe0ae8b9jr/eagasqnzxKgev/rhOwzFduV8sPlx4t9AJObe
aAbU00o9MjCw/WVM8m1hsNIbwegv+35TMwdzJDdA/I5bqTGk0m32ohzEGWtDjV5P
qgMZNut6WD0qYz4Rhm2vcjUYEKQmiK9sGn4cpS6G25F9yLURIYyfFhTxRvAlVPLR
2oGcxyQ5jPODkgQ6r18mIPy1TpNt4+2y4SHEVKvRPrD+uC7UL0+JK4TsBXqTvph0
nljuY9EV4wZAP3o5cYTvCVHEoqJcCThmRK0/klFSoIthOp/CF+f4ZWO+KsIfISER
wbCtMkMOflT6UyV/LjPuX+tG1l3g/qPB9jDD9p0CAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBQNIrKNh8yCqPuWdN8EwF77HXabkzAfBgNVHSMEGDAWgBSkTCZ/p1TNZQnp
+AcnMSO+6WxSXTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3BFd21mNmRVeldVSjZmZ0hKekVqdnVsc1VsMC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNTQvYWIyNmE1LTY3YjktNDY2Ny04NTViLTQ4YWYwODAwNGI1Zi8x
L0RTS3lqWWZNZ3FqN2xuVGZCTUJlLXgxMm01TS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTQv
YWIyNmE1LTY3YjktNDY2Ny04NTViLTQ4YWYwODAwNGI1Zi8xL3BFd21mNmRVeldV
SjZmZ0hKekVqdnVsc1VsMC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAgI4+AMEAC2eOjANBgkqhkiG9w0B
AQsFAAOCAQEAl6l3RwHi+z1G5szWJtZJ7a1r7rjb7gOFeXVk6b6prP91yiyzc0hO
ocuR+qBwLljODC7kO/DSKKJgJcZ9wDOofMsCkFNLPE/GxGXwmdzjFiCafVQWks44
z5uU1Q/BsfUxcO5hlgoMvHGE3ctoPVbdib2V9MYVguIz9OMQFUZ++skCAV2ECspL
UoTwV1vOjZ5zJCsxHWV9LuBPi3tMQgah2PDaV3Gs3Cf7E7OQMfaXGoYR/nnAiZYK
xLgItG1dv8/oPfkggne6/f8fPZc1FT9OsqSGA8jByU1GN4W3GxnsjKmzSuRiv/9j
0PyM19mI+i0nBkjxqnijGBim72VG97klEA==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:31 2023 by rpki-client on console-fra.rpki-client.org