Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/XNio1GvixcxjZXhv7dcJYgqAi24.roa
File: XNio1GvixcxjZXhv7dcJYgqAi24.roa (raw, json)
Hash identifier: VXENbUsIhji0MuqsEGjz05B7S9f3LQ+Pkhedy3IVRTo=
Subject key identifier: 5C:D8:A8:D4:6B:E2:C5:CC:63:65:78:6F:ED:D7:09:62:0A:80:8B:6E
Certificate issuer: /CN=a44c267fa754cd6509e9f807273123bee96c525d
Certificate serial: 0185291B08237CC8C2A8537BA01F8AD50374
Authority key identifier: A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/XNio1GvixcxjZXhv7dcJYgqAi24.roa
Signing time: Mon 19 Dec 2022 06:38:35 +0000
ROA not before: Mon 19 Dec 2022 06:38:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 6939
IP address blocks: 45.12.83.0/24 maxlen: 24
45.12.80.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:29:1b:08:23:7c:c8:c2:a8:53:7b:a0:1f:8a:d5:03:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a44c267fa754cd6509e9f807273123bee96c525d
Validity
Not Before: Dec 19 06:38:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5cd8a8d46be2c5cc6365786fedd709620a808b6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:90:77:e8:08:9d:90:c5:9f:0b:f6:30:d8:f5:
91:5f:80:20:37:3c:de:3d:6f:92:57:c4:60:8c:dc:
94:73:1f:b4:ab:4d:24:ad:5a:da:e7:5a:f5:5c:3e:
ea:38:32:65:4e:26:79:67:58:72:38:77:70:67:2c:
c4:d0:ce:5a:92:f6:63:15:15:90:11:42:90:60:0c:
75:e1:c2:e5:0f:18:c5:ac:0e:f8:11:77:3c:b4:29:
52:9a:70:68:1e:a0:5d:8b:e9:0a:43:59:09:d7:e5:
31:f4:a3:2d:a6:c8:4b:a7:89:86:91:e2:dd:f2:4e:
d2:27:ef:b3:04:45:ba:46:10:21:a7:18:1c:91:39:
aa:6e:d5:42:a0:48:4a:ee:f2:ca:5b:37:e1:74:da:
5a:9d:a7:65:67:09:c0:44:71:03:c0:64:99:4c:4c:
3c:40:5b:6e:39:98:79:82:5a:fd:d0:c1:4f:ed:09:
dd:10:ed:c8:65:d6:30:ef:dd:2a:14:5c:a9:c8:43:
01:3c:68:34:50:4b:38:00:bf:83:ee:e7:eb:29:f1:
45:2c:7c:31:36:b0:c4:07:e3:14:43:29:27:f2:21:
94:0d:2e:a2:75:c4:8d:4f:c6:4b:2e:cc:60:27:a0:
3d:8f:d4:30:22:d7:1c:8d:f6:d0:c3:ba:17:eb:00:
82:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:D8:A8:D4:6B:E2:C5:CC:63:65:78:6F:ED:D7:09:62:0A:80:8B:6E
X509v3 Authority Key Identifier:
keyid:A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/XNio1GvixcxjZXhv7dcJYgqAi24.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/pEwmf6dUzWUJ6fgHJzEjvulsUl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.12.80.0/24
45.12.83.0/24
Signature Algorithm: sha256WithRSAEncryption
99:5d:90:89:80:9f:d6:6e:41:d9:65:1a:ed:b5:f8:2f:52:1e:
45:f1:51:73:07:c7:b3:e1:fa:91:53:6a:3e:a6:ec:e1:36:bc:
c6:8b:08:96:a6:0c:f8:2f:91:e6:19:04:f8:1c:6e:c1:91:c4:
74:dd:39:99:0c:47:e5:0b:64:96:0f:c8:cc:22:a3:35:82:4e:
8d:ab:13:e1:22:75:9b:10:0d:b5:7f:c1:7d:5a:0f:4d:a5:b2:
de:16:40:b7:db:fb:75:0f:46:59:4f:cf:f0:95:43:d6:3a:ee:
de:88:45:dd:e0:bd:01:6b:14:17:56:19:07:43:74:c3:15:dd:
92:8d:f9:c5:38:32:8e:eb:ec:01:8c:f2:1b:a4:33:3b:f2:85:
dc:ae:b5:42:d9:57:18:87:67:86:b8:d7:cf:32:76:7d:89:54:
2a:ac:2a:6d:8a:f4:04:60:26:4b:c3:25:a0:59:59:59:96:42:
36:72:a7:91:22:c1:92:85:1c:97:5f:ed:b1:57:a9:9d:1f:89:
b3:c0:a0:e0:70:a4:ff:99:14:56:56:70:11:e3:27:22:d9:b6:
c8:11:23:74:dd:6d:91:e4:d0:73:71:69:3c:15:aa:63:9e:2f:
38:dd:cc:55:0f:a8:3d:6a:49:ea:e4:ce:e0:0c:17:f0:57:c1:
f8:60:61:ad
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYUpGwgjfMjCqFN7oB+K1QN0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0NGMyNjdmYTc1NGNkNjUwOWU5ZjgwNzI3MzEyM2JlZTk2
YzUyNWQwHhcNMjIxMjE5MDYzODM1WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1Y2Q4YThkNDZiZTJjNWNjNjM2NTc4NmZlZGQ3MDk2MjBhODA4YjZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvZB36AidkMWfC/Yw2PWRX4AgNzze
PW+SV8RgjNyUcx+0q00krVra51r1XD7qODJlTiZ5Z1hyOHdwZyzE0M5akvZjFRWQ
EUKQYAx14cLlDxjFrA74EXc8tClSmnBoHqBdi+kKQ1kJ1+Ux9KMtpshLp4mGkeLd
8k7SJ++zBEW6RhAhpxgckTmqbtVCoEhK7vLKWzfhdNpanadlZwnARHEDwGSZTEw8
QFtuOZh5glr90MFP7QndEO3IZdYw790qFFypyEMBPGg0UEs4AL+D7ufrKfFFLHwx
NrDEB+MUQykn8iGUDS6idcSNT8ZLLsxgJ6A9j9QwItccjfbQw7oX6wCCOQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFFzYqNRr4sXMY2V4b+3XCWIKgItuMB8GA1UdIwQY
MBaAFKRMJn+nVM1lCen4BycxI77pbFJdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcEV3bWY2ZFV6V1VKNmZnSEp6RWp2dWxzVWwwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9hYjI2YTUtNjdiOS00NjY3LTg1NWIt
NDhhZjA4MDA0YjVmLzEvWE5pbzFHdml4Y3hqWlhodjdkY0pZZ3FBaTI0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC9hYjI2YTUtNjdiOS00NjY3LTg1NWItNDhhZjA4MDA0YjVm
LzEvcEV3bWY2ZFV6V1VKNmZnSEp6RWp2dWxzVWwwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALQxQAwQA
LQxTMA0GCSqGSIb3DQEBCwUAA4IBAQCZXZCJgJ/WbkHZZRrttfgvUh5F8VFzB8ez
4fqRU2o+puzhNrzGiwiWpgz4L5HmGQT4HG7BkcR03TmZDEflC2SWD8jMIqM1gk6N
qxPhInWbEA21f8F9Wg9NpbLeFkC32/t1D0ZZT8/wlUPWOu7eiEXd4L0BaxQXVhkH
Q3TDFd2SjfnFODKO6+wBjPIbpDM78oXcrrVC2VcYh2eGuNfPMnZ9iVQqrCptivQE
YCZLwyWgWVlZlkI2cqeRIsGShRyXX+2xV6mdH4mzwKDgcKT/mRRWVnAR4yci2bbI
ESN03W2R5NBzcWk8Fapjni843cxVD6g9aknq5M7gDBfwV8H4YGGt
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:14 2023 by rpki-client on console-ams.rpki-client.org