Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/aTURkiM3sW5S0UIBKHMWN-xl39k.roa
File: aTURkiM3sW5S0UIBKHMWN-xl39k.roa (raw, json)
Hash identifier: 5DYDZFvBfx+qx/n/xuKxkIgW5oiKGKZqUt+odDdmapg=
Subject key identifier: 69:35:11:92:23:37:B1:6E:52:D1:42:01:28:73:16:37:EC:65:DF:D9
Certificate issuer: /CN=a44c267fa754cd6509e9f807273123bee96c525d
Certificate serial: 09515F54
Authority key identifier: A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/aTURkiM3sW5S0UIBKHMWN-xl39k.roa
Signing time: Sat 01 Jan 2022 12:04:05 +0000
ROA not before: Sat 01 Jan 2022 12:04:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 399746
IP address blocks: 45.158.57.0/24 maxlen: 24
45.158.56.0/24 maxlen: 24
45.158.59.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 156327764 (0x9515f54)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a44c267fa754cd6509e9f807273123bee96c525d
Validity
Not Before: Jan 1 12:04:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=693511922337b16e52d1420128731637ec65dfd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:3e:aa:a8:98:e5:7f:f4:7a:ef:f4:54:7c:54:
ce:61:40:7f:2b:63:bc:cd:0c:5a:4a:e4:29:36:87:
48:8d:4d:68:e6:d0:4f:03:30:ee:e2:4c:b2:64:55:
db:c3:34:5c:cf:af:46:7e:f0:ef:d6:da:70:f0:c4:
d8:66:9d:af:d2:20:0a:8b:10:a3:a2:8c:c9:6a:1c:
b5:ee:67:bc:96:94:7b:51:a0:8e:14:c1:2c:9f:52:
f4:c2:72:48:c7:51:c1:b3:47:6d:97:88:33:0b:d7:
86:ec:66:90:0f:c5:8a:4b:fb:38:3c:8f:54:17:ee:
d7:fa:bc:3d:df:33:25:b3:ea:a7:41:cb:63:db:49:
c8:53:2f:a6:2b:d7:12:ab:8f:5c:67:b8:48:a5:05:
c5:87:cb:f0:8b:f6:ab:0f:29:35:7d:b2:26:94:87:
7a:3d:1f:1e:7d:e0:b3:c9:80:a3:26:f9:c9:55:98:
b5:7e:70:c2:99:a1:ad:1c:0c:d5:4c:39:9a:2f:15:
06:01:8f:6c:f2:98:c6:af:ed:b0:e3:1e:56:a3:7f:
fb:f1:37:24:9d:31:7a:39:c6:dd:66:b1:1c:fd:c1:
2c:6a:33:f4:c8:42:35:43:e1:bb:04:96:79:9f:84:
db:52:90:7c:e7:36:97:22:66:bd:70:42:70:1f:30:
fa:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:35:11:92:23:37:B1:6E:52:D1:42:01:28:73:16:37:EC:65:DF:D9
X509v3 Authority Key Identifier:
keyid:A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/aTURkiM3sW5S0UIBKHMWN-xl39k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/pEwmf6dUzWUJ6fgHJzEjvulsUl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.158.56.0/23
45.158.59.0/24
Signature Algorithm: sha256WithRSAEncryption
bf:54:88:5d:91:01:81:ce:91:00:9b:7e:bc:18:f6:53:94:92:
ff:ec:86:70:0d:3a:8e:49:6e:98:e1:86:6a:a4:61:c1:fc:16:
15:17:91:da:3c:29:08:3b:59:fc:87:8b:a9:42:92:18:33:16:
2e:6a:3e:83:aa:b1:a7:bf:f0:2c:37:9e:5b:aa:5c:fa:21:b5:
a9:6b:e8:e3:75:2d:6b:ab:59:bb:da:d7:38:f9:b0:e7:67:c9:
76:f9:40:63:2a:0e:df:27:15:ea:ea:e8:b7:ce:83:52:6d:a7:
b4:eb:90:58:42:8f:0d:48:0b:fe:8e:1c:b8:7d:25:78:17:86:
70:3b:a9:58:39:79:0a:e1:b5:4f:c0:f0:d2:35:91:f6:73:1f:
e1:2a:92:51:df:17:27:b0:ce:85:bf:91:9a:a4:a8:97:4c:8f:
d9:f6:72:9e:1d:57:43:9f:7a:b6:24:d9:a4:e2:f4:5b:39:91:
94:dc:4d:14:63:70:30:28:de:43:83:31:ad:c0:5f:55:53:5b:
ef:a0:7e:1e:ea:c9:90:cb:8a:48:f2:d9:b8:c8:93:57:49:d9:
41:48:29:a1:fb:a0:71:16:a1:11:94:c7:3a:a8:0f:6a:94:7b:
ce:87:61:53:8f:4f:07:0b:32:70:2e:13:4b:a9:dd:81:e5:73:
25:55:e2:0c
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIECVFfVDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhh
NDRjMjY3ZmE3NTRjZDY1MDllOWY4MDcyNzMxMjNiZWU5NmM1MjVkMB4XDTIyMDEw
MTEyMDQwNVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNjkzNTExOTIyMzM3
YjE2ZTUyZDE0MjAxMjg3MzE2MzdlYzY1ZGZkOTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANI+qqiY5X/0eu/0VHxUzmFAfytjvM0MWkrkKTaHSI1NaObQ
TwMw7uJMsmRV28M0XM+vRn7w79bacPDE2Gadr9IgCosQo6KMyWocte5nvJaUe1Gg
jhTBLJ9S9MJySMdRwbNHbZeIMwvXhuxmkA/Fikv7ODyPVBfu1/q8Pd8zJbPqp0HL
Y9tJyFMvpivXEquPXGe4SKUFxYfL8Iv2qw8pNX2yJpSHej0fHn3gs8mAoyb5yVWY
tX5wwpmhrRwM1Uw5mi8VBgGPbPKYxq/tsOMeVqN/+/E3JJ0xejnG3WaxHP3BLGoz
9MhCNUPhuwSWeZ+E21KQfOc2lyJmvXBCcB8w+gECAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBRpNRGSIzexblLRQgEocxY37GXf2TAfBgNVHSMEGDAWgBSkTCZ/p1TNZQnp
+AcnMSO+6WxSXTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3BFd21mNmRVeldVSjZmZ0hKekVqdnVsc1VsMC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNTQvYWIyNmE1LTY3YjktNDY2Ny04NTViLTQ4YWYwODAwNGI1Zi8x
L2FUVVJraU0zc1c1UzBVSUJLSE1XTi14bDM5ay5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTQv
YWIyNmE1LTY3YjktNDY2Ny04NTViLTQ4YWYwODAwNGI1Zi8xL3BFd21mNmRVeldV
SjZmZ0hKekVqdnVsc1VsMC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAS2eOAMEAC2eOzANBgkqhkiG9w0B
AQsFAAOCAQEAv1SIXZEBgc6RAJt+vBj2U5SS/+yGcA06jklumOGGaqRhwfwWFReR
2jwpCDtZ/IeLqUKSGDMWLmo+g6qxp7/wLDeeW6pc+iG1qWvo43Uta6tZu9rXOPmw
52fJdvlAYyoO3ycV6urot86DUm2ntOuQWEKPDUgL/o4cuH0leBeGcDupWDl5CuG1
T8Dw0jWR9nMf4SqSUd8XJ7DOhb+RmqSol0yP2fZynh1XQ596tiTZpOL0WzmRlNxN
FGNwMCjeQ4MxrcBfVVNb76B+HurJkMuKSPLZuMiTV0nZQUgpofugcRahEZTHOqgP
apR7zodhU49PBwsycC4TS6ndgeVzJVXiDA==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:31 2023 by rpki-client on console-fra.rpki-client.org