Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/ZUbys6qAdhNBlEuBhvWFnrRyicc.roa
File: ZUbys6qAdhNBlEuBhvWFnrRyicc.roa (raw, json)
Hash identifier: uX4QOWkVzlS+QaXswXNrHrJZ9rcY+eBCp3cOuoXG850=
Subject key identifier: 65:46:F2:B3:AA:80:76:13:41:94:4B:81:86:F5:85:9E:B4:72:89:C7
Certificate issuer: /CN=a44c267fa754cd6509e9f807273123bee96c525d
Certificate serial: 09F18C44
Authority key identifier: A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/ZUbys6qAdhNBlEuBhvWFnrRyicc.roa
Signing time: Thu 03 Mar 2022 05:23:00 +0000
ROA not before: Thu 03 Mar 2022 05:23:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209242
IP address blocks: 45.158.56.0/24 maxlen: 24
45.137.99.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 166825028 (0x9f18c44)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a44c267fa754cd6509e9f807273123bee96c525d
Validity
Not Before: Mar 3 05:23:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6546f2b3aa80761341944b8186f5859eb47289c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:4f:3a:dd:a7:e7:3f:bb:84:3b:42:d1:e7:06:
4d:77:29:39:e1:27:01:90:26:05:b6:a9:4d:4f:5c:
a0:00:9f:30:14:45:1b:59:90:82:75:3f:84:39:c1:
d9:5e:6d:fe:fc:a7:33:b7:12:29:80:8c:bd:00:40:
04:cf:44:f1:3d:88:79:00:57:19:66:22:f8:46:90:
75:17:86:a5:57:38:f8:0a:d9:1c:18:84:77:47:28:
11:0c:7d:c1:0c:ba:cb:10:22:6c:fc:46:aa:d6:22:
c3:e7:9e:2f:cf:77:ad:72:ad:f2:38:d6:05:cf:42:
d9:b1:80:60:8d:16:55:38:af:b2:28:6d:50:38:63:
0b:6d:72:f2:c0:b0:8f:73:a7:5c:ec:00:7d:fc:9d:
d3:0d:05:16:5b:30:6b:ea:0e:98:45:bc:c9:cb:ba:
e5:77:0f:69:35:68:5a:10:ef:64:8a:95:fa:f8:61:
2f:b9:49:b5:67:c6:c6:ee:20:db:04:d7:9e:6b:8c:
8f:a4:95:72:44:d0:7a:c0:f2:23:65:c3:7f:de:08:
96:b2:c5:7a:28:0f:27:78:dc:e2:72:cc:83:13:22:
de:1d:5b:71:1e:61:5f:d0:d4:f1:56:b6:f4:f4:46:
d3:e3:88:c7:25:72:a9:b3:1c:4f:93:d6:2b:cf:20:
19:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:46:F2:B3:AA:80:76:13:41:94:4B:81:86:F5:85:9E:B4:72:89:C7
X509v3 Authority Key Identifier:
keyid:A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/ZUbys6qAdhNBlEuBhvWFnrRyicc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/pEwmf6dUzWUJ6fgHJzEjvulsUl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.137.99.0/24
45.158.56.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:2e:03:35:74:92:fe:d4:3f:d8:43:04:f7:7e:a8:6a:15:d6:
81:dc:dd:c8:a8:64:86:74:e2:8c:42:16:8f:c5:35:be:bb:ca:
03:7a:3f:5e:6e:28:16:9b:85:bb:75:39:39:6c:a5:8d:7f:c6:
d8:93:d0:c5:41:11:53:53:9a:2a:7a:55:5c:8c:6f:52:13:2a:
9c:d0:3f:51:fd:1f:53:6e:e4:5e:ab:f8:80:4d:d7:48:1d:33:
58:55:98:7c:6c:01:c2:88:fb:a8:42:f6:51:d1:dd:02:af:64:
d0:e1:bb:41:4c:cc:0c:b6:59:16:de:8b:37:c7:b9:bf:8a:06:
4a:30:ca:fd:35:ab:7f:de:a5:be:b2:35:ca:99:28:bd:98:14:
10:5e:08:97:d3:7c:8b:6d:6b:86:b0:f9:16:21:9d:22:9c:87:
8b:31:13:b3:01:e2:18:2e:fb:30:fe:f7:a1:96:bb:96:82:90:
a2:dc:45:23:c9:6f:fb:7d:01:d9:54:28:75:b8:af:20:f2:3d:
91:c7:13:e2:76:a6:8c:5c:41:61:f1:a9:f0:24:1c:e5:12:21:
ae:4b:91:5d:69:3e:48:67:22:f0:21:07:03:a7:a8:fa:91:54:
fa:eb:16:0c:e2:8e:f7:e1:c9:98:38:7f:5b:06:08:ac:1b:5b:
e5:b7:29:38
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIECfGMRDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhh
NDRjMjY3ZmE3NTRjZDY1MDllOWY4MDcyNzMxMjNiZWU5NmM1MjVkMB4XDTIyMDMw
MzA1MjMwMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNjU0NmYyYjNhYTgw
NzYxMzQxOTQ0YjgxODZmNTg1OWViNDcyODljNzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANhPOt2n5z+7hDtC0ecGTXcpOeEnAZAmBbapTU9coACfMBRF
G1mQgnU/hDnB2V5t/vynM7cSKYCMvQBABM9E8T2IeQBXGWYi+EaQdReGpVc4+ArZ
HBiEd0coEQx9wQy6yxAibPxGqtYiw+eeL893rXKt8jjWBc9C2bGAYI0WVTivsiht
UDhjC21y8sCwj3OnXOwAffyd0w0FFlswa+oOmEW8ycu65XcPaTVoWhDvZIqV+vhh
L7lJtWfGxu4g2wTXnmuMj6SVckTQesDyI2XDf94IlrLFeigPJ3jc4nLMgxMi3h1b
cR5hX9DU8Va29PRG0+OIxyVyqbMcT5PWK88gGaUCAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBRlRvKzqoB2E0GUS4GG9YWetHKJxzAfBgNVHSMEGDAWgBSkTCZ/p1TNZQnp
+AcnMSO+6WxSXTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3BFd21mNmRVeldVSjZmZ0hKekVqdnVsc1VsMC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNTQvYWIyNmE1LTY3YjktNDY2Ny04NTViLTQ4YWYwODAwNGI1Zi8x
L1pVYnlzNnFBZGhOQmxFdUJodldGbnJSeWljYy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTQv
YWIyNmE1LTY3YjktNDY2Ny04NTViLTQ4YWYwODAwNGI1Zi8xL3BFd21mNmRVeldV
SjZmZ0hKekVqdnVsc1VsMC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAC2JYwMEAC2eODANBgkqhkiG9w0B
AQsFAAOCAQEADC4DNXSS/tQ/2EME936oahXWgdzdyKhkhnTijEIWj8U1vrvKA3o/
Xm4oFpuFu3U5OWyljX/G2JPQxUERU1OaKnpVXIxvUhMqnNA/Uf0fU27kXqv4gE3X
SB0zWFWYfGwBwoj7qEL2UdHdAq9k0OG7QUzMDLZZFt6LN8e5v4oGSjDK/TWrf96l
vrI1ypkovZgUEF4Il9N8i21rhrD5FiGdIpyHizETswHiGC77MP73oZa7loKQotxF
I8lv+30B2VQodbivIPI9kccT4namjFxBYfGp8CQc5RIhrkuRXWk+SGci8CEHA6eo
+pFU+usWDOKO9+HJmDh/WwYIrBtb5bcpOA==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:14 2023 by rpki-client on console-ams.rpki-client.org